<?php
/* Mobile-Upload-Page für Fotos zu einem Dolibarr-Objekt (Auftrag/Rechnung/Angebot).
 * KEIN Dolibarr-Login nötig — Authentifizierung über Token in der URL.
 * Fotos landen direkt im Dolibarr-Standard-Ordner des Objekts (z.B. commande/{ref}/).
 *
 * GET: token
 * POST: token, file (multipart)
 */

if (!defined('NOLOGIN'))     define('NOLOGIN', '1');
if (!defined('NOCSRFCHECK')) define('NOCSRFCHECK', '1');
if (!defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL', '1');
if (!defined('NOREQUIREMENU'))  define('NOREQUIREMENU', '1');
if (!defined('NOREQUIREHTML'))  define('NOREQUIREHTML', '1');
if (!defined('NOREQUIREAJAX'))  define('NOREQUIREAJAX', '1');

$res = 0;
if (!$res && !empty($_SERVER["CONTEXT_DOCUMENT_ROOT"])) $res = @include $_SERVER["CONTEXT_DOCUMENT_ROOT"]."/main.inc.php";
$tmp = empty($_SERVER['SCRIPT_FILENAME']) ? '' : $_SERVER['SCRIPT_FILENAME']; $tmp2 = realpath(__FILE__); $i = strlen($tmp) - 1; $j = strlen($tmp2) - 1;
while ($i > 0 && $j > 0 && isset($tmp[$i]) && isset($tmp2[$j]) && $tmp[$i] == $tmp2[$j]) { $i--; $j--; }
if (!$res && $i > 0 && file_exists(substr($tmp, 0, ($i + 1))."/main.inc.php")) $res = @include substr($tmp, 0, ($i + 1))."/main.inc.php";
if (!$res && $i > 0 && file_exists(dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php")) $res = @include dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php";
if (!$res && file_exists("../main.inc.php")) $res = @include "../main.inc.php";
if (!$res && file_exists("../../main.inc.php")) $res = @include "../../main.inc.php";
if (!$res) die("Include of main fails");

require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
require_once __DIR__.'/class/upload_token.class.php';

$token = (string) ($_REQUEST['token'] ?? '');
$tok = BerichtUploadToken::fetchValid($db, $token);

// POST = Datei-Upload
if ($_SERVER['REQUEST_METHOD'] === 'POST' && !empty($_FILES['file']['tmp_name'])) {
    header('Content-Type: application/json; charset=utf-8');
    if (!$tok) {
        http_response_code(403);
        echo json_encode(array('success' => false, 'error' => 'Token ungültig oder abgelaufen'));
        exit;
    }

    // Upload-Ziel über Token ermitteln (Dolibarr-Standard-Ordner)
    $upload_dir = $tok->getUploadDir();
    if (!$upload_dir) {
        http_response_code(404);
        echo json_encode(array('success' => false, 'error' => 'Objekt nicht gefunden'));
        exit;
    }

    $orig = dol_sanitizeFileName($_FILES['file']['name']);
    $ext = strtolower(pathinfo($orig, PATHINFO_EXTENSION));
    $allowed = array('jpg', 'jpeg', 'png');
    if (!in_array($ext, $allowed)) {
        echo json_encode(array('success' => false, 'error' => 'Nur JPG/PNG erlaubt'));
        exit;
    }

    if (!is_dir($upload_dir)) dol_mkdir($upload_dir);

    $filename = 'foto_'.dol_print_date(dol_now(), '%Y%m%d_%H%M%S').'_'.uniqid().'.'.$ext;
    $target = $upload_dir.'/'.$filename;
    if (!move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
        echo json_encode(array('success' => false, 'error' => 'Upload fehlgeschlagen'));
        exit;
    }

    $tok->incrementCount();
    echo json_encode(array('success' => true, 'filename' => $filename));
    exit;
}

// GET = Mobile-Upload-Seite anzeigen
if (!$tok) {
    http_response_code(403);
    ?>
    <!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
    <title>Foto Upload — Token ungültig</title>
    <style>
    body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; background:#1a1a1f; color:#fff; padding: 40px 20px; text-align:center; }
    h1 { color: #d9534f; }
    </style>
    </head><body>
    <h1>Token ungültig</h1>
    <p>Dieser Upload-Link ist abgelaufen oder ungültig.</p>
    <p>Bitte im Editor einen neuen QR-Code generieren.</p>
    </body></html>
    <?php
    exit;
}

// Parent-Objekt laden für Anzeige
$parent = $tok->fetchParentObject();
$parent_ref = $parent ? $parent->ref : '???';
$valid_min = max(1, round(($tok->expires_at - dol_now()) / 60));

?>
<!doctype html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no">
<meta name="theme-color" content="#1a1a1f">
<title>Foto Upload — <?php print htmlspecialchars($parent_ref); ?></title>
<style>
* { box-sizing: border-box; -webkit-tap-highlight-color: transparent; }
body {
    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
    background: #1a1a1f;
    color: #f0f0f0;
    margin: 0;
    padding: 16px;
    min-height: 100vh;
    -webkit-font-smoothing: antialiased;
}
.header {
    text-align: center;
    padding: 16px 0 24px;
    border-bottom: 1px solid #333;
}
.header h1 { margin: 0 0 4px; font-size: 18px; color: #f0f0f0; }
.header .ref { color: #7aa2f7; font-size: 14px; }
.header .info { font-size: 11px; opacity: 0.6; margin-top: 8px; }

.action-buttons {
    display: flex;
    flex-direction: column;
    gap: 12px;
    margin: 24px 0;
}
.btn {
    display: block;
    width: 100%;
    padding: 18px 24px;
    font-size: 17px;
    font-weight: 600;
    border-radius: 12px;
    border: none;
    cursor: pointer;
    background: #337ab7;
    color: #fff;
    text-align: center;
    -webkit-appearance: none;
    transition: transform 0.1s, background 0.15s;
}
.btn:active { transform: scale(0.97); background: #2868a0; }
.btn-secondary {
    background: #2a2a30;
    border: 1px solid #555;
}
.btn-secondary:active { background: #3a3a40; }

.hidden-input { display: none; }

.uploaded-list {
    margin-top: 24px;
    padding-top: 16px;
    border-top: 1px solid #333;
}
.uploaded-list h2 { font-size: 14px; opacity: 0.7; margin: 0 0 12px; text-transform: uppercase; }
.uploaded-item {
    display: flex;
    align-items: center;
    gap: 8px;
    padding: 8px 0;
    border-bottom: 1px solid #2a2a30;
    font-size: 13px;
}
.uploaded-item .check { color: #5cb85c; }
.uploaded-item .name { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }

.uploading {
    padding: 12px;
    background: #2a2a30;
    border-radius: 6px;
    margin: 12px 0;
    text-align: center;
    color: #7aa2f7;
}

.toast {
    position: fixed;
    top: 16px;
    left: 16px;
    right: 16px;
    background: #5cb85c;
    color: #fff;
    padding: 14px 16px;
    border-radius: 8px;
    text-align: center;
    z-index: 2000;
    box-shadow: 0 4px 16px rgba(0,0,0,0.4);
    animation: slideDown 0.2s;
}
.toast.error { background: #d9534f; }
@keyframes slideDown { from { opacity: 0; transform: translateY(-20px); } to { opacity: 1; } }

/* Kamera-View Styles */
.camera-view {
    position: fixed;
    inset: 0;
    background: #000;
    z-index: 1000;
    display: flex;
    flex-direction: column;
}
.camera-view.hidden { display: none; }

#camera-stream {
    flex: 1;
    width: 100%;
    height: 100%;
    object-fit: cover;
}
#camera-canvas {
    display: none;
}

.camera-controls {
    position: absolute;
    bottom: 0;
    left: 0;
    right: 0;
    padding: 24px 20px 40px;
    display: flex;
    justify-content: space-between;
    align-items: center;
    background: linear-gradient(transparent, rgba(0,0,0,0.7));
}

.camera-btn-close,
.camera-btn-switch {
    width: 50px;
    height: 50px;
    border-radius: 50%;
    border: none;
    background: rgba(255,255,255,0.2);
    color: #fff;
    font-size: 22px;
    cursor: pointer;
    display: flex;
    align-items: center;
    justify-content: center;
}
.camera-btn-close:active,
.camera-btn-switch:active {
    background: rgba(255,255,255,0.4);
}

.camera-shutter {
    width: 72px;
    height: 72px;
    border-radius: 50%;
    border: 4px solid #fff;
    background: rgba(255,255,255,0.3);
    cursor: pointer;
    position: relative;
}
.camera-shutter::after {
    content: '';
    position: absolute;
    inset: 6px;
    border-radius: 50%;
    background: #fff;
    transition: transform 0.1s;
}
.camera-shutter:active::after {
    transform: scale(0.9);
}

.camera-counter {
    position: absolute;
    top: 16px;
    right: 16px;
    background: rgba(0,0,0,0.5);
    color: #5cb85c;
    padding: 8px 14px;
    border-radius: 20px;
    font-size: 14px;
    font-weight: 600;
}

/* Foto-Vorschau */
.photo-preview {
    position: absolute;
    inset: 0;
    background: #000;
    display: flex;
    flex-direction: column;
}
.photo-preview.hidden { display: none; }

.photo-preview img {
    flex: 1;
    width: 100%;
    height: 100%;
    object-fit: contain;
}

.preview-buttons {
    display: flex;
    gap: 12px;
    padding: 20px;
    background: rgba(0,0,0,0.8);
}

.btn-discard,
.btn-save {
    flex: 1;
    padding: 16px;
    font-size: 16px;
    font-weight: 600;
    border-radius: 10px;
    border: none;
    cursor: pointer;
}
.btn-discard {
    background: #444;
    color: #fff;
}
.btn-discard:active { background: #555; }
.btn-save {
    background: #5cb85c;
    color: #fff;
}
.btn-save:active { background: #4cae4c; }
</style>
</head>
<body>

<div class="header">
    <h1>Foto Upload</h1>
    <div class="ref"><?php print htmlspecialchars($parent_ref); ?></div>
    <div class="info">Token gültig noch <?php print $valid_min; ?> Min · <?php print $tok->max_uploads - $tok->uploads_count; ?> Uploads übrig</div>
</div>

<div class="action-buttons">
    <button class="btn" id="open-camera-btn">Foto aufnehmen</button>

    <label class="btn btn-secondary" for="gallery-input">Aus Galerie wählen</label>
    <input type="file" id="gallery-input" class="hidden-input" accept="image/*" multiple>
</div>

<!-- Kamera-View Overlay -->
<div id="camera-view" class="camera-view hidden">
    <video id="camera-stream" autoplay playsinline muted></video>
    <canvas id="camera-canvas"></canvas>

    <!-- Kamera-Controls -->
    <div class="camera-controls">
        <button id="camera-close" class="camera-btn-close">✕</button>
        <button id="camera-shutter" class="camera-shutter"></button>
        <button id="camera-switch" class="camera-btn-switch">⟳</button>
    </div>

    <!-- Upload-Counter -->
    <div id="camera-counter" class="camera-counter">0 Fotos</div>

    <!-- Vorschau nach Foto -->
    <div id="photo-preview" class="photo-preview hidden">
        <img id="preview-image" src="">
        <div class="preview-buttons">
            <button id="preview-discard" class="btn-discard">✕ Verwerfen</button>
            <button id="preview-save" class="btn-save">✓ Speichern</button>
        </div>
    </div>
</div>

<div id="uploading-area"></div>

<div class="uploaded-list">
    <h2>Hochgeladen <span id="uploaded-count">(0)</span></h2>
    <div id="uploaded-list"></div>
</div>

<script>
const TOKEN = <?php print json_encode($token); ?>;
const URL_UPLOAD = window.location.pathname + '?token=' + encodeURIComponent(TOKEN);
let uploadedCount = 0;

// DOM-Elemente
const galleryInput = document.getElementById('gallery-input');
const uploadingArea = document.getElementById('uploading-area');
const uploadedList = document.getElementById('uploaded-list');
const uploadedCountEl = document.getElementById('uploaded-count');

// Kamera-Elemente
const openCameraBtn = document.getElementById('open-camera-btn');
const cameraView = document.getElementById('camera-view');
const cameraStream = document.getElementById('camera-stream');
const cameraCanvas = document.getElementById('camera-canvas');
const cameraClose = document.getElementById('camera-close');
const cameraShutter = document.getElementById('camera-shutter');
const cameraSwitch = document.getElementById('camera-switch');
const cameraCounter = document.getElementById('camera-counter');
const photoPreview = document.getElementById('photo-preview');
const previewImage = document.getElementById('preview-image');
const previewDiscard = document.getElementById('preview-discard');
const previewSave = document.getElementById('preview-save');

// Kamera-Status
let mediaStream = null;
let currentFacingMode = 'environment'; // 'environment' = Rückkamera, 'user' = Frontkamera
let currentPhotoBlob = null;
let cameraSessionCount = 0;

// Galerie-Input Handler
galleryInput.addEventListener('change', async () => {
    if (!galleryInput.files || !galleryInput.files.length) return;
    for (const file of galleryInput.files) {
        await uploadFile(file);
    }
    galleryInput.value = '';
});

// === KAMERA-FUNKTIONEN ===

// Kamera öffnen
openCameraBtn.addEventListener('click', openCameraView);

async function openCameraView() {
    try {
        const constraints = {
            video: {
                facingMode: currentFacingMode,
                width: { ideal: 1920 },
                height: { ideal: 1080 }
            },
            audio: false
        };
        mediaStream = await navigator.mediaDevices.getUserMedia(constraints);
        cameraStream.srcObject = mediaStream;
        cameraView.classList.remove('hidden');
        cameraSessionCount = 0;
        updateCameraCounter();
        document.body.style.overflow = 'hidden';
    } catch (err) {
        console.error('Kamera-Fehler:', err);
        toast('Kamera nicht verfügbar: ' + err.message, true);
    }
}

// Kamera schließen
cameraClose.addEventListener('click', closeCameraView);

function closeCameraView() {
    if (mediaStream) {
        mediaStream.getTracks().forEach(track => track.stop());
        mediaStream = null;
    }
    cameraStream.srcObject = null;
    cameraView.classList.add('hidden');
    photoPreview.classList.add('hidden');
    document.body.style.overflow = '';
}

// Foto aufnehmen
cameraShutter.addEventListener('click', takePhoto);

function takePhoto() {
    if (!mediaStream) return;

    const video = cameraStream;
    const canvas = cameraCanvas;

    // Canvas auf Video-Größe setzen
    canvas.width = video.videoWidth;
    canvas.height = video.videoHeight;

    // Video-Frame auf Canvas zeichnen
    const ctx = canvas.getContext('2d');
    ctx.drawImage(video, 0, 0);

    // Canvas zu Blob konvertieren
    canvas.toBlob((blob) => {
        if (blob) {
            currentPhotoBlob = blob;
            showPreview(blob);
        }
    }, 'image/jpeg', 0.85);
}

// Vorschau anzeigen
function showPreview(blob) {
    const url = URL.createObjectURL(blob);
    previewImage.onload = () => URL.revokeObjectURL(url);
    previewImage.src = url;
    photoPreview.classList.remove('hidden');
}

// Foto verwerfen
previewDiscard.addEventListener('click', discardPhoto);

function discardPhoto() {
    currentPhotoBlob = null;
    photoPreview.classList.add('hidden');
}

// Foto speichern und Kamera offen lassen
previewSave.addEventListener('click', savePhoto);

async function savePhoto() {
    if (!currentPhotoBlob) return;

    // Vorschau schließen, zurück zur Kamera
    photoPreview.classList.add('hidden');

    // Upload im Hintergrund
    const blob = currentPhotoBlob;
    currentPhotoBlob = null;

    const fname = 'foto_' + Date.now() + '.jpg';
    const fd = new FormData();
    fd.append('token', TOKEN);
    fd.append('file', blob, fname);

    try {
        const r = await fetch(URL_UPLOAD, { method: 'POST', body: fd });
        const data = await r.json();
        if (data.success) {
            uploadedCount++;
            cameraSessionCount++;
            uploadedCountEl.textContent = '(' + uploadedCount + ')';
            updateCameraCounter();

            // Item zur Liste hinzufügen
            const item = document.createElement('div');
            item.className = 'uploaded-item';
            item.innerHTML = '<span class="check">✓</span><span class="name">' + escapeHtml(data.filename) + '</span>';
            uploadedList.prepend(item);

            toast('Foto gespeichert');
        } else {
            toast('Fehler: ' + (data.error || 'unbekannt'), true);
        }
    } catch (e) {
        toast('Netzwerkfehler', true);
    }
}

// Kamera wechseln (Front/Back)
cameraSwitch.addEventListener('click', switchCamera);

async function switchCamera() {
    currentFacingMode = currentFacingMode === 'environment' ? 'user' : 'environment';

    // Alten Stream stoppen
    if (mediaStream) {
        mediaStream.getTracks().forEach(track => track.stop());
    }

    // Neuen Stream starten
    try {
        const constraints = {
            video: {
                facingMode: currentFacingMode,
                width: { ideal: 1920 },
                height: { ideal: 1080 }
            },
            audio: false
        };
        mediaStream = await navigator.mediaDevices.getUserMedia(constraints);
        cameraStream.srcObject = mediaStream;
    } catch (err) {
        console.error('Kamera-Wechsel fehlgeschlagen:', err);
        toast('Kamera-Wechsel fehlgeschlagen', true);
        // Zurück zur anderen Kamera
        currentFacingMode = currentFacingMode === 'environment' ? 'user' : 'environment';
    }
}

function updateCameraCounter() {
    const text = cameraSessionCount === 1 ? '1 Foto' : cameraSessionCount + ' Fotos';
    cameraCounter.textContent = text;
}

// === UPLOAD-FUNKTIONEN ===

async function uploadFile(file) {
    const blob = await resizeImage(file, 2000);
    const fname = file.name || 'photo.jpg';

    const status = document.createElement('div');
    status.className = 'uploading';
    status.textContent = fname + ' wird hochgeladen…';
    uploadingArea.appendChild(status);

    const fd = new FormData();
    fd.append('token', TOKEN);
    fd.append('file', blob, fname);

    try {
        const r = await fetch(URL_UPLOAD, { method: 'POST', body: fd });
        const data = await r.json();
        status.remove();
        if (data.success) {
            uploadedCount++;
            uploadedCountEl.textContent = '(' + uploadedCount + ')';
            const item = document.createElement('div');
            item.className = 'uploaded-item';
            item.innerHTML = '<span class="check">✓</span><span class="name">' + escapeHtml(data.filename) + '</span>';
            uploadedList.prepend(item);
            toast('Hochgeladen: ' + fname);
        } else {
            toast('Fehler: ' + (data.error || 'unbekannt'), true);
        }
    } catch (e) {
        status.remove();
        toast('Netzwerkfehler', true);
    }
}

async function resizeImage(file, maxSide) {
    return new Promise((resolve) => {
        const img = new Image();
        const url = URL.createObjectURL(file);
        img.onload = () => {
            URL.revokeObjectURL(url);
            const scale = Math.min(1, maxSide / Math.max(img.width, img.height));
            if (scale === 1) {
                resolve(file);
                return;
            }
            const c = document.createElement('canvas');
            c.width  = Math.round(img.width * scale);
            c.height = Math.round(img.height * scale);
            c.getContext('2d').drawImage(img, 0, 0, c.width, c.height);
            c.toBlob((blob) => resolve(blob || file), 'image/jpeg', 0.85);
        };
        img.onerror = () => { URL.revokeObjectURL(url); resolve(file); };
        img.src = url;
    });
}

function toast(msg, isError) {
    const t = document.createElement('div');
    t.className = 'toast' + (isError ? ' error' : '');
    t.textContent = msg;
    document.body.appendChild(t);
    setTimeout(() => t.remove(), 2500);
}

function escapeHtml(s) {
    return String(s).replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
}
</script>

</body>
</html>
