Files
Backend/WEBROOT/api/js/handler/ZeiterfassungAjaxHandler.php
T

90 lines
3.0 KiB
PHP

<?php
session_start();
include_once(__DIR__ . '/../../../controller/DatabaseController.php');
header('Content-Type: application/json');
error_reporting(E_ALL);
ini_set('display_errors', '0');
$daten = json_decode(file_get_contents('php://input'), true) ?? [];
$action = $daten['action'] ?? '';
$erlaubteGruende = ['Abbau', 'Aufbau', 'Anderes'];
function istBerechtigt(): bool {
$username = $_SESSION['username'] ?? '';
return strtolower($username) === 'bruno';
}
try {
switch ($action) {
case 'get_stats': {
include_once(__DIR__ . '/../../../controller/DatabaseConnect.php');
$conn = db_connect();
$minuten_berichte = 0;
$res1 = $conn->query("SELECT SUM(OVERTIME) AS summe FROM Firmenberichte");
if ($row = $res1->fetch_object()) { $minuten_berichte = intval($row->summe); }
$minuten_abbau = 0;
$res2 = $conn->query("SELECT SUM(MINUTEN) AS summe FROM Ueberstunden WHERE GRUND = 'Abbau'");
if ($row = $res2->fetch_object()) { $minuten_abbau = intval($row->summe); }
$minuten_aufbau = 0;
$res3 = $conn->query("SELECT SUM(MINUTEN) AS summe FROM Ueberstunden WHERE GRUND = 'Aufbau'");
if ($row = $res3->fetch_object()) { $minuten_aufbau = intval($row->summe); }
$gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
echo json_encode([
'success' => true,
'gesamtMinuten' => $gesamt_minuten,
'istBerechtigt' => istBerechtigt(),
]);
break;
}
case 'add_overtime': {
if (!istBerechtigt()) {
http_response_code(403);
echo json_encode(['error' => 'Keine Berechtigung für diese Aktion']);
exit;
}
$datum = trim($daten['datum'] ?? '');
$minuten = $daten['minuten'] ?? null;
$grund = trim($daten['grund'] ?? '');
if ($datum === '' || !is_numeric($minuten) || $grund === '') {
throw new InvalidArgumentException('Bitte alle Pflichtfelder korrekt ausfüllen.');
}
if (!in_array($grund, $erlaubteGruende, true)) {
throw new InvalidArgumentException('Ungültiger Grund.');
}
DatabaseInsert(
"Ueberstunden",
"DATUM, MINUTEN, GRUND",
$datum,
intval($minuten),
$grund
);
echo json_encode(['success' => true, 'message' => 'Eintrag erfolgreich gespeichert!']);
break;
}
default:
throw new InvalidArgumentException("Unbekannte Aktion: $action");
}
} catch (InvalidArgumentException $e) {
http_response_code(400);
echo json_encode(['error' => $e->getMessage()]);
} catch (Throwable $e) {
http_response_code(500);
error_log($e->getMessage());
echo json_encode(['error' => 'Serverfehler']);
}