bericht/mobile_upload.php
Eduard Wisch 04fdd87ffd
All checks were successful
Deploy bericht / deploy (push) Successful in 2s
Kamera-View: Mehrere Fotos ohne Kamera-Neustart
Eigene Kamera-View mit getUserMedia() statt nativer Kamera-App:
- Vollbild-Overlay mit Live-Stream
- Auslöser, Vorschau, Speichern/Verwerfen
- Kamera bleibt nach Speichern offen
- Front/Back-Wechsel
- Session-Counter

[deploy]

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-13 09:18:50 +02:00

648 lines
19 KiB
PHP

<?php
/* Mobile-Upload-Page für Fotos zu einem Dolibarr-Objekt (Auftrag/Rechnung/Angebot).
* KEIN Dolibarr-Login nötig — Authentifizierung über Token in der URL.
* Fotos landen direkt im Dolibarr-Standard-Ordner des Objekts (z.B. commande/{ref}/).
*
* GET: token
* POST: token, file (multipart)
*/
if (!defined('NOLOGIN')) define('NOLOGIN', '1');
if (!defined('NOCSRFCHECK')) define('NOCSRFCHECK', '1');
if (!defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL', '1');
if (!defined('NOREQUIREMENU')) define('NOREQUIREMENU', '1');
if (!defined('NOREQUIREHTML')) define('NOREQUIREHTML', '1');
if (!defined('NOREQUIREAJAX')) define('NOREQUIREAJAX', '1');
$res = 0;
if (!$res && !empty($_SERVER["CONTEXT_DOCUMENT_ROOT"])) $res = @include $_SERVER["CONTEXT_DOCUMENT_ROOT"]."/main.inc.php";
$tmp = empty($_SERVER['SCRIPT_FILENAME']) ? '' : $_SERVER['SCRIPT_FILENAME']; $tmp2 = realpath(__FILE__); $i = strlen($tmp) - 1; $j = strlen($tmp2) - 1;
while ($i > 0 && $j > 0 && isset($tmp[$i]) && isset($tmp2[$j]) && $tmp[$i] == $tmp2[$j]) { $i--; $j--; }
if (!$res && $i > 0 && file_exists(substr($tmp, 0, ($i + 1))."/main.inc.php")) $res = @include substr($tmp, 0, ($i + 1))."/main.inc.php";
if (!$res && $i > 0 && file_exists(dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php")) $res = @include dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php";
if (!$res && file_exists("../main.inc.php")) $res = @include "../main.inc.php";
if (!$res && file_exists("../../main.inc.php")) $res = @include "../../main.inc.php";
if (!$res) die("Include of main fails");
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
require_once __DIR__.'/class/upload_token.class.php';
$token = (string) ($_REQUEST['token'] ?? '');
$tok = BerichtUploadToken::fetchValid($db, $token);
// POST = Datei-Upload
if ($_SERVER['REQUEST_METHOD'] === 'POST' && !empty($_FILES['file']['tmp_name'])) {
header('Content-Type: application/json; charset=utf-8');
if (!$tok) {
http_response_code(403);
echo json_encode(array('success' => false, 'error' => 'Token ungültig oder abgelaufen'));
exit;
}
// Upload-Ziel über Token ermitteln (Dolibarr-Standard-Ordner)
$upload_dir = $tok->getUploadDir();
if (!$upload_dir) {
http_response_code(404);
echo json_encode(array('success' => false, 'error' => 'Objekt nicht gefunden'));
exit;
}
$orig = dol_sanitizeFileName($_FILES['file']['name']);
$ext = strtolower(pathinfo($orig, PATHINFO_EXTENSION));
$allowed = array('jpg', 'jpeg', 'png');
if (!in_array($ext, $allowed)) {
echo json_encode(array('success' => false, 'error' => 'Nur JPG/PNG erlaubt'));
exit;
}
if (!is_dir($upload_dir)) dol_mkdir($upload_dir);
$filename = 'foto_'.dol_print_date(dol_now(), '%Y%m%d_%H%M%S').'_'.uniqid().'.'.$ext;
$target = $upload_dir.'/'.$filename;
if (!move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
echo json_encode(array('success' => false, 'error' => 'Upload fehlgeschlagen'));
exit;
}
$tok->incrementCount();
echo json_encode(array('success' => true, 'filename' => $filename));
exit;
}
// GET = Mobile-Upload-Seite anzeigen
if (!$tok) {
http_response_code(403);
?>
<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<title>Foto Upload — Token ungültig</title>
<style>
body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; background:#1a1a1f; color:#fff; padding: 40px 20px; text-align:center; }
h1 { color: #d9534f; }
</style>
</head><body>
<h1>Token ungültig</h1>
<p>Dieser Upload-Link ist abgelaufen oder ungültig.</p>
<p>Bitte im Editor einen neuen QR-Code generieren.</p>
</body></html>
<?php
exit;
}
// Parent-Objekt laden für Anzeige
$parent = $tok->fetchParentObject();
$parent_ref = $parent ? $parent->ref : '???';
$valid_min = max(1, round(($tok->expires_at - dol_now()) / 60));
?>
<!doctype html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no">
<meta name="theme-color" content="#1a1a1f">
<title>Foto Upload — <?php print htmlspecialchars($parent_ref); ?></title>
<style>
* { box-sizing: border-box; -webkit-tap-highlight-color: transparent; }
body {
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
background: #1a1a1f;
color: #f0f0f0;
margin: 0;
padding: 16px;
min-height: 100vh;
-webkit-font-smoothing: antialiased;
}
.header {
text-align: center;
padding: 16px 0 24px;
border-bottom: 1px solid #333;
}
.header h1 { margin: 0 0 4px; font-size: 18px; color: #f0f0f0; }
.header .ref { color: #7aa2f7; font-size: 14px; }
.header .info { font-size: 11px; opacity: 0.6; margin-top: 8px; }
.action-buttons {
display: flex;
flex-direction: column;
gap: 12px;
margin: 24px 0;
}
.btn {
display: block;
width: 100%;
padding: 18px 24px;
font-size: 17px;
font-weight: 600;
border-radius: 12px;
border: none;
cursor: pointer;
background: #337ab7;
color: #fff;
text-align: center;
-webkit-appearance: none;
transition: transform 0.1s, background 0.15s;
}
.btn:active { transform: scale(0.97); background: #2868a0; }
.btn-secondary {
background: #2a2a30;
border: 1px solid #555;
}
.btn-secondary:active { background: #3a3a40; }
.hidden-input { display: none; }
.uploaded-list {
margin-top: 24px;
padding-top: 16px;
border-top: 1px solid #333;
}
.uploaded-list h2 { font-size: 14px; opacity: 0.7; margin: 0 0 12px; text-transform: uppercase; }
.uploaded-item {
display: flex;
align-items: center;
gap: 8px;
padding: 8px 0;
border-bottom: 1px solid #2a2a30;
font-size: 13px;
}
.uploaded-item .check { color: #5cb85c; }
.uploaded-item .name { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.uploading {
padding: 12px;
background: #2a2a30;
border-radius: 6px;
margin: 12px 0;
text-align: center;
color: #7aa2f7;
}
.toast {
position: fixed;
top: 16px;
left: 16px;
right: 16px;
background: #5cb85c;
color: #fff;
padding: 14px 16px;
border-radius: 8px;
text-align: center;
z-index: 2000;
box-shadow: 0 4px 16px rgba(0,0,0,0.4);
animation: slideDown 0.2s;
}
.toast.error { background: #d9534f; }
@keyframes slideDown { from { opacity: 0; transform: translateY(-20px); } to { opacity: 1; } }
/* Kamera-View Styles */
.camera-view {
position: fixed;
inset: 0;
background: #000;
z-index: 1000;
display: flex;
flex-direction: column;
}
.camera-view.hidden { display: none; }
#camera-stream {
flex: 1;
width: 100%;
height: 100%;
object-fit: cover;
}
#camera-canvas {
display: none;
}
.camera-controls {
position: absolute;
bottom: 0;
left: 0;
right: 0;
padding: 24px 20px 40px;
display: flex;
justify-content: space-between;
align-items: center;
background: linear-gradient(transparent, rgba(0,0,0,0.7));
}
.camera-btn-close,
.camera-btn-switch {
width: 50px;
height: 50px;
border-radius: 50%;
border: none;
background: rgba(255,255,255,0.2);
color: #fff;
font-size: 22px;
cursor: pointer;
display: flex;
align-items: center;
justify-content: center;
}
.camera-btn-close:active,
.camera-btn-switch:active {
background: rgba(255,255,255,0.4);
}
.camera-shutter {
width: 72px;
height: 72px;
border-radius: 50%;
border: 4px solid #fff;
background: rgba(255,255,255,0.3);
cursor: pointer;
position: relative;
}
.camera-shutter::after {
content: '';
position: absolute;
inset: 6px;
border-radius: 50%;
background: #fff;
transition: transform 0.1s;
}
.camera-shutter:active::after {
transform: scale(0.9);
}
.camera-counter {
position: absolute;
top: 16px;
right: 16px;
background: rgba(0,0,0,0.5);
color: #5cb85c;
padding: 8px 14px;
border-radius: 20px;
font-size: 14px;
font-weight: 600;
}
/* Foto-Vorschau */
.photo-preview {
position: absolute;
inset: 0;
background: #000;
display: flex;
flex-direction: column;
}
.photo-preview.hidden { display: none; }
.photo-preview img {
flex: 1;
width: 100%;
height: 100%;
object-fit: contain;
}
.preview-buttons {
display: flex;
gap: 12px;
padding: 20px;
background: rgba(0,0,0,0.8);
}
.btn-discard,
.btn-save {
flex: 1;
padding: 16px;
font-size: 16px;
font-weight: 600;
border-radius: 10px;
border: none;
cursor: pointer;
}
.btn-discard {
background: #444;
color: #fff;
}
.btn-discard:active { background: #555; }
.btn-save {
background: #5cb85c;
color: #fff;
}
.btn-save:active { background: #4cae4c; }
</style>
</head>
<body>
<div class="header">
<h1>Foto Upload</h1>
<div class="ref"><?php print htmlspecialchars($parent_ref); ?></div>
<div class="info">Token gültig noch <?php print $valid_min; ?> Min · <?php print $tok->max_uploads - $tok->uploads_count; ?> Uploads übrig</div>
</div>
<div class="action-buttons">
<button class="btn" id="open-camera-btn">Foto aufnehmen</button>
<label class="btn btn-secondary" for="gallery-input">Aus Galerie wählen</label>
<input type="file" id="gallery-input" class="hidden-input" accept="image/*" multiple>
</div>
<!-- Kamera-View Overlay -->
<div id="camera-view" class="camera-view hidden">
<video id="camera-stream" autoplay playsinline muted></video>
<canvas id="camera-canvas"></canvas>
<!-- Kamera-Controls -->
<div class="camera-controls">
<button id="camera-close" class="camera-btn-close">✕</button>
<button id="camera-shutter" class="camera-shutter"></button>
<button id="camera-switch" class="camera-btn-switch">⟳</button>
</div>
<!-- Upload-Counter -->
<div id="camera-counter" class="camera-counter">0 Fotos</div>
<!-- Vorschau nach Foto -->
<div id="photo-preview" class="photo-preview hidden">
<img id="preview-image" src="">
<div class="preview-buttons">
<button id="preview-discard" class="btn-discard">✕ Verwerfen</button>
<button id="preview-save" class="btn-save">✓ Speichern</button>
</div>
</div>
</div>
<div id="uploading-area"></div>
<div class="uploaded-list">
<h2>Hochgeladen <span id="uploaded-count">(0)</span></h2>
<div id="uploaded-list"></div>
</div>
<script>
const TOKEN = <?php print json_encode($token); ?>;
const URL_UPLOAD = window.location.pathname + '?token=' + encodeURIComponent(TOKEN);
let uploadedCount = 0;
// DOM-Elemente
const galleryInput = document.getElementById('gallery-input');
const uploadingArea = document.getElementById('uploading-area');
const uploadedList = document.getElementById('uploaded-list');
const uploadedCountEl = document.getElementById('uploaded-count');
// Kamera-Elemente
const openCameraBtn = document.getElementById('open-camera-btn');
const cameraView = document.getElementById('camera-view');
const cameraStream = document.getElementById('camera-stream');
const cameraCanvas = document.getElementById('camera-canvas');
const cameraClose = document.getElementById('camera-close');
const cameraShutter = document.getElementById('camera-shutter');
const cameraSwitch = document.getElementById('camera-switch');
const cameraCounter = document.getElementById('camera-counter');
const photoPreview = document.getElementById('photo-preview');
const previewImage = document.getElementById('preview-image');
const previewDiscard = document.getElementById('preview-discard');
const previewSave = document.getElementById('preview-save');
// Kamera-Status
let mediaStream = null;
let currentFacingMode = 'environment'; // 'environment' = Rückkamera, 'user' = Frontkamera
let currentPhotoBlob = null;
let cameraSessionCount = 0;
// Galerie-Input Handler
galleryInput.addEventListener('change', async () => {
if (!galleryInput.files || !galleryInput.files.length) return;
for (const file of galleryInput.files) {
await uploadFile(file);
}
galleryInput.value = '';
});
// === KAMERA-FUNKTIONEN ===
// Kamera öffnen
openCameraBtn.addEventListener('click', openCameraView);
async function openCameraView() {
try {
const constraints = {
video: {
facingMode: currentFacingMode,
width: { ideal: 1920 },
height: { ideal: 1080 }
},
audio: false
};
mediaStream = await navigator.mediaDevices.getUserMedia(constraints);
cameraStream.srcObject = mediaStream;
cameraView.classList.remove('hidden');
cameraSessionCount = 0;
updateCameraCounter();
document.body.style.overflow = 'hidden';
} catch (err) {
console.error('Kamera-Fehler:', err);
toast('Kamera nicht verfügbar: ' + err.message, true);
}
}
// Kamera schließen
cameraClose.addEventListener('click', closeCameraView);
function closeCameraView() {
if (mediaStream) {
mediaStream.getTracks().forEach(track => track.stop());
mediaStream = null;
}
cameraStream.srcObject = null;
cameraView.classList.add('hidden');
photoPreview.classList.add('hidden');
document.body.style.overflow = '';
}
// Foto aufnehmen
cameraShutter.addEventListener('click', takePhoto);
function takePhoto() {
if (!mediaStream) return;
const video = cameraStream;
const canvas = cameraCanvas;
// Canvas auf Video-Größe setzen
canvas.width = video.videoWidth;
canvas.height = video.videoHeight;
// Video-Frame auf Canvas zeichnen
const ctx = canvas.getContext('2d');
ctx.drawImage(video, 0, 0);
// Canvas zu Blob konvertieren
canvas.toBlob((blob) => {
if (blob) {
currentPhotoBlob = blob;
showPreview(blob);
}
}, 'image/jpeg', 0.85);
}
// Vorschau anzeigen
function showPreview(blob) {
const url = URL.createObjectURL(blob);
previewImage.onload = () => URL.revokeObjectURL(url);
previewImage.src = url;
photoPreview.classList.remove('hidden');
}
// Foto verwerfen
previewDiscard.addEventListener('click', discardPhoto);
function discardPhoto() {
currentPhotoBlob = null;
photoPreview.classList.add('hidden');
}
// Foto speichern und Kamera offen lassen
previewSave.addEventListener('click', savePhoto);
async function savePhoto() {
if (!currentPhotoBlob) return;
// Vorschau schließen, zurück zur Kamera
photoPreview.classList.add('hidden');
// Upload im Hintergrund
const blob = currentPhotoBlob;
currentPhotoBlob = null;
const fname = 'foto_' + Date.now() + '.jpg';
const fd = new FormData();
fd.append('token', TOKEN);
fd.append('file', blob, fname);
try {
const r = await fetch(URL_UPLOAD, { method: 'POST', body: fd });
const data = await r.json();
if (data.success) {
uploadedCount++;
cameraSessionCount++;
uploadedCountEl.textContent = '(' + uploadedCount + ')';
updateCameraCounter();
// Item zur Liste hinzufügen
const item = document.createElement('div');
item.className = 'uploaded-item';
item.innerHTML = '<span class="check">✓</span><span class="name">' + escapeHtml(data.filename) + '</span>';
uploadedList.prepend(item);
toast('Foto gespeichert');
} else {
toast('Fehler: ' + (data.error || 'unbekannt'), true);
}
} catch (e) {
toast('Netzwerkfehler', true);
}
}
// Kamera wechseln (Front/Back)
cameraSwitch.addEventListener('click', switchCamera);
async function switchCamera() {
currentFacingMode = currentFacingMode === 'environment' ? 'user' : 'environment';
// Alten Stream stoppen
if (mediaStream) {
mediaStream.getTracks().forEach(track => track.stop());
}
// Neuen Stream starten
try {
const constraints = {
video: {
facingMode: currentFacingMode,
width: { ideal: 1920 },
height: { ideal: 1080 }
},
audio: false
};
mediaStream = await navigator.mediaDevices.getUserMedia(constraints);
cameraStream.srcObject = mediaStream;
} catch (err) {
console.error('Kamera-Wechsel fehlgeschlagen:', err);
toast('Kamera-Wechsel fehlgeschlagen', true);
// Zurück zur anderen Kamera
currentFacingMode = currentFacingMode === 'environment' ? 'user' : 'environment';
}
}
function updateCameraCounter() {
const text = cameraSessionCount === 1 ? '1 Foto' : cameraSessionCount + ' Fotos';
cameraCounter.textContent = text;
}
// === UPLOAD-FUNKTIONEN ===
async function uploadFile(file) {
const blob = await resizeImage(file, 2000);
const fname = file.name || 'photo.jpg';
const status = document.createElement('div');
status.className = 'uploading';
status.textContent = fname + ' wird hochgeladen…';
uploadingArea.appendChild(status);
const fd = new FormData();
fd.append('token', TOKEN);
fd.append('file', blob, fname);
try {
const r = await fetch(URL_UPLOAD, { method: 'POST', body: fd });
const data = await r.json();
status.remove();
if (data.success) {
uploadedCount++;
uploadedCountEl.textContent = '(' + uploadedCount + ')';
const item = document.createElement('div');
item.className = 'uploaded-item';
item.innerHTML = '<span class="check">✓</span><span class="name">' + escapeHtml(data.filename) + '</span>';
uploadedList.prepend(item);
toast('Hochgeladen: ' + fname);
} else {
toast('Fehler: ' + (data.error || 'unbekannt'), true);
}
} catch (e) {
status.remove();
toast('Netzwerkfehler', true);
}
}
async function resizeImage(file, maxSide) {
return new Promise((resolve) => {
const img = new Image();
const url = URL.createObjectURL(file);
img.onload = () => {
URL.revokeObjectURL(url);
const scale = Math.min(1, maxSide / Math.max(img.width, img.height));
if (scale === 1) {
resolve(file);
return;
}
const c = document.createElement('canvas');
c.width = Math.round(img.width * scale);
c.height = Math.round(img.height * scale);
c.getContext('2d').drawImage(img, 0, 0, c.width, c.height);
c.toBlob((blob) => resolve(blob || file), 'image/jpeg', 0.85);
};
img.onerror = () => { URL.revokeObjectURL(url); resolve(file); };
img.src = url;
});
}
function toast(msg, isError) {
const t = document.createElement('div');
t.className = 'toast' + (isError ? ' error' : '');
t.textContent = msg;
document.body.appendChild(t);
setTimeout(() => t.remove(), 2500);
}
function escapeHtml(s) {
return String(s).replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
}
</script>
</body>
</html>