b39d328af1
- PHP ops_reassign.php : action `close` (single) + `batch_close` (N tickets en 1 connexion → efficace) ; close = status=closed + date_closed + closed_by=acteur Authentik + réouverture enfants waiting_for + log. - Hub : closeTicketLegacy + batchCloseLegacy + routes POST close-ticket / batch-close (marque Dispatch Job Completed). - Ops : bouton « Fermer ce ticket » (fil du panneau) ; « Fermer (N) » sur la sélection (fermeture en lot) ; tri ASC/DESC du panneau (toggle, surtout pour la date). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
107 lines
6.5 KiB
PHP
107 lines
6.5 KiB
PHP
<?php
|
|
/**
|
|
* ops_reassign.php — Pont d'écriture Ops → legacy osTicket (gestionclient).
|
|
* Déployé SUR facturation.targo.ca (hôte de l'app) → la connexion DB hérite des droits d'ÉCRITURE
|
|
* de l'app (aucun GRANT à modifier ; le user du hub @10.100.5.61 reste SELECT-only).
|
|
*
|
|
* Actions (POST, x-www-form-urlencoded ou JSON), header `X-Ops-Token: <token>` OBLIGATOIRE :
|
|
* action=reassign ticket_id, staff_id, [assist_ids=CSV] → assign_to + participant(assistants) + followed_by + ticket_msg
|
|
* action=close ticket_id → status=closed + date_closed + closed_by + réouverture enfants + ticket_msg
|
|
*
|
|
* FIDÈLE à ticket_view.php : format participant `-id-;-id-`, followers JSON, log CHANGE LOG, respect du lock_name,
|
|
* dates en epoch (time()), réouverture des tickets enfants `waiting_for` à la fermeture.
|
|
*
|
|
* ⚠️ Secrets (TOKEN + creds DB) : remplis UNIQUEMENT dans la copie serveur, jamais committés. Ici = placeholders.
|
|
*/
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
|
|
// ─── à remplir sur le serveur (hors repo) ───
|
|
$OPS_TOKEN = '__OPS_TOKEN__';
|
|
$DB_HOST = '10.100.80.100';
|
|
$DB_USER = '__DB_USER__';
|
|
$DB_PASS = '__DB_PASS__';
|
|
$DB_NAME = 'gestionclient';
|
|
$OPS_STAFF = 3301; // auteur des entrées ticket_msg (Tech Targo)
|
|
|
|
function out($a, $code = 200) { http_response_code($code); echo json_encode($a, JSON_UNESCAPED_UNICODE); exit; }
|
|
|
|
// ─── auth ───
|
|
$tok = $_SERVER['HTTP_X_OPS_TOKEN'] ?? ($_POST['token'] ?? '');
|
|
if (!is_string($tok) || !hash_equals($OPS_TOKEN, $tok)) out(['ok' => false, 'error' => 'forbidden'], 403);
|
|
|
|
$action = $_POST['action'] ?? 'reassign';
|
|
// Auteur réel = staff legacy du répartiteur Ops (mappé depuis son email Authentik côté hub) ; repli = Tech Targo.
|
|
$actor = (int)($_POST['actor_staff_id'] ?? 0);
|
|
|
|
// ─── connexion (droits write hérités de l'hôte app) ───
|
|
$db = @new mysqli($DB_HOST, $DB_USER, $DB_PASS, $DB_NAME);
|
|
if ($db->connect_errno) out(['ok' => false, 'error' => 'db_connect: ' . $db->connect_error], 500);
|
|
$db->set_charset('utf8');
|
|
$now = time();
|
|
$logStaff = $actor > 0 ? $actor : $OPS_STAFF;
|
|
|
|
function ops_log($db, $ticket, $staff, $msg) {
|
|
$m = $db->real_escape_string('<hr><p>CHANGE LOG (Ops):</p><p>' . $msg . '</p>');
|
|
$db->query("INSERT INTO ticket_msg (ticket_id, staff_id, msg, date_orig, public) VALUES ($ticket, $staff, '$m', " . time() . ", 0)");
|
|
}
|
|
|
|
// ─── FERMETURE EN LOT : 1 connexion, N tickets (efficace — évite N allers-retours HTTPS + mysqli) ───
|
|
if ($action === 'batch_close') {
|
|
$ids = array_values(array_unique(array_filter(array_map('intval', explode(',', (string)($_POST['ticket_ids'] ?? ''))))));
|
|
$closed = 0; $skipped = 0; $lockedN = 0; $results = [];
|
|
foreach ($ids as $tid) {
|
|
$r = $db->query("SELECT status, lock_name FROM ticket WHERE id = $tid LIMIT 1"); $row = $r ? $r->fetch_assoc() : null;
|
|
if (!$row || $row['status'] === 'closed') { $skipped++; $results[] = ['t' => $tid, 'skip' => true]; continue; }
|
|
if (trim((string)$row['lock_name']) !== '') { $lockedN++; $results[] = ['t' => $tid, 'locked' => $row['lock_name']]; continue; }
|
|
$db->query("UPDATE ticket SET status='closed', date_closed=$now, closed_by=$logStaff, last_update=$now WHERE id=$tid AND status<>'closed'");
|
|
$db->query("UPDATE ticket SET status='open', last_update=$now WHERE waiting_for=$tid AND status<>'closed'");
|
|
ops_log($db, $tid, $logStaff, 'Ticket fermé via Ops (lot).');
|
|
$closed++; $results[] = ['t' => $tid, 'ok' => true];
|
|
}
|
|
out(['ok' => true, 'action' => 'batch_close', 'closed' => $closed, 'skipped' => $skipped, 'locked' => $lockedN, 'results' => $results]);
|
|
}
|
|
|
|
// ─── actions sur 1 ticket ───
|
|
$ticket = (int)($_POST['ticket_id'] ?? 0);
|
|
if ($ticket <= 0) out(['ok' => false, 'error' => 'ticket_id requis'], 400);
|
|
$res = $db->query("SELECT id, status, assign_to, lock_name, followed_by FROM ticket WHERE id = $ticket LIMIT 1");
|
|
$t = $res ? $res->fetch_assoc() : null;
|
|
if (!$t) out(['ok' => false, 'error' => 'ticket introuvable'], 404);
|
|
if ($t['status'] === 'closed') out(['ok' => false, 'error' => 'ticket déjà fermé', 'status' => 'closed']);
|
|
// LOCK : un staff édite le ticket dans le legacy → on NE clobbe PAS (le répartiteur réessaie)
|
|
if (trim((string)$t['lock_name']) !== '') out(['ok' => false, 'error' => 'verrouillé', 'locked_by' => $t['lock_name']]);
|
|
|
|
if ($action === 'close') {
|
|
$db->query("UPDATE ticket SET status='closed', date_closed=$now, closed_by=$logStaff, last_update=$now WHERE id=$ticket AND status<>'closed'");
|
|
$aff = $db->affected_rows;
|
|
// réouvre les tickets enfants en attente de celui-ci (fidèle au legacy)
|
|
$db->query("UPDATE ticket SET status='open', last_update=$now WHERE waiting_for=$ticket AND status<>'closed'");
|
|
ops_log($db, $ticket, $logStaff, 'Ticket fermé via Ops.');
|
|
out(['ok' => true, 'action' => 'close', 'affected' => $aff]);
|
|
}
|
|
|
|
// ─── reassign (+ assistants) ───
|
|
$staff = (int)($_POST['staff_id'] ?? 0);
|
|
if ($staff <= 0) out(['ok' => false, 'error' => 'staff_id requis'], 400);
|
|
$chk = $db->query("SELECT id, first_name, last_name FROM staff WHERE id=$staff AND status=1");
|
|
$s = $chk ? $chk->fetch_assoc() : null;
|
|
if (!$s) out(['ok' => false, 'error' => 'staff inactif ou introuvable', 'staff_id' => $staff]);
|
|
|
|
// assistants : CSV d'ids → participant `-id-;-id-` + ajout aux followers (followed_by JSON) — FIDÈLE à ticket_view.php
|
|
$assistCsv = trim((string)($_POST['assist_ids'] ?? ''));
|
|
$assistIds = $assistCsv === '' ? [] : array_values(array_unique(array_filter(array_map('intval', explode(',', $assistCsv)))));
|
|
$participant = '';
|
|
foreach ($assistIds as $a) { $participant .= ($participant === '' ? '' : ';') . "-$a-"; }
|
|
$aFollow = json_decode($t['followed_by'] !== '' && $t['followed_by'] !== null ? $t['followed_by'] : '{}', true);
|
|
if (!is_array($aFollow)) $aFollow = [];
|
|
foreach ($assistIds as $a) { if (!array_key_exists((string)$a, $aFollow)) $aFollow[(string)$a] = ['child' => 0]; }
|
|
$jsonFollow = $db->real_escape_string(json_encode((object)$aFollow));
|
|
$participantEsc = $db->real_escape_string($participant);
|
|
|
|
$db->query("UPDATE ticket SET assign_to=$staff, participant='$participantEsc', followed_by='$jsonFollow', last_update=$now WHERE id=$ticket AND status<>'closed'");
|
|
$aff = $db->affected_rows;
|
|
$who = trim(($s['first_name'] ?? '') . ' ' . ($s['last_name'] ?? ''));
|
|
$log = "Réassigné à #$staff ($who) via Ops." . ($assistIds ? ' Assistants : ' . implode(', ', $assistIds) . '.' : '');
|
|
ops_log($db, $ticket, $logStaff, $log);
|
|
out(['ok' => true, 'action' => 'reassign', 'affected' => $aff, 'staff' => $staff, 'assistants' => $assistIds]);
|