Forbidden
"; - exit; - } - } - - public static function providers(): void { - Auth::requireRole('super'); - View::render('admin/providers', [ - 'title' => 'Providers', - 'user' => Auth::user(), - 'providers' => Provider::all(true), - ]); - } - - public static function providerEdit(array $params): void { - Auth::requireRole('super'); - $id = (int)($params['id'] ?? 0); - $prov = $id ? Provider::findById($id) : null; - View::render('admin/provider_edit', [ - 'title' => $id ? 'Edit Provider' : 'Add Provider', - 'user' => Auth::user(), - 'prov' => $prov, - ]); - } - - public static function providerSave(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $id = (int)($_POST['id'] ?? 0); - $name = trim((string)($_POST['full_name'] ?? '')); - $ptype = (string)($_POST['provider_type'] ?? 'chiro'); - $ptype = in_array($ptype, ['chiro','massage'], true) ? $ptype : 'chiro'; - $active = isset($_POST['active']) ? 1 : 0; - - // Provider PTO bank (hours, decimal). Stored as minutes. - $ptoBankHours = (string)($_POST['pto_bank_hours'] ?? ''); - $ptoBankHours = trim($ptoBankHours); - $ptoBankMin = 0; - if ($ptoBankHours !== '') { - $h = (float)$ptoBankHours; - if ($h < 0) $h = 0; - // keep quarter-hour granularity - $ptoBankMin = (int)round($h * 60); - } - - if ($name === '') { - flash_set('error','Provider name is required.'); - redirect('/admin/providers'); - } - - if ($id) { - Provider::update($id, ['full_name'=>$name,'provider_type'=>$ptype,'active'=>$active,'pto_bank_minutes'=>$ptoBankMin]); - } else { - Provider::create(['full_name'=>$name,'provider_type'=>$ptype,'active'=>$active,'pto_bank_minutes'=>$ptoBankMin]); - } - - flash_set('ok','Saved.'); - redirect('/admin/providers'); - } - - public static function appointmentTypes(): void { - Auth::requireRole('super'); - - $editId = (int)($_GET['edit_id'] ?? 0); - $editType = $editId > 0 ? AppointmentType::findById($editId) : null; - - View::render('admin/appointment_types', [ - 'title' => 'Appointment Types', - 'user' => Auth::user(), - 'types_chiro' => AppointmentType::listByProviderType('chiro', true), - 'types_massage' => AppointmentType::listByProviderType('massage', true), - 'editType' => $editType, - ]); -} - - public static function appointmentTypeSave(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $id = (int)($_POST['id'] ?? 0); - $ptype = (string)($_POST['provider_type'] ?? 'chiro'); - $ptype = in_array($ptype, ['chiro','massage'], true) ? $ptype : 'chiro'; - $name = trim((string)($_POST['name'] ?? '')); - $sort = (int)($_POST['sort_order'] ?? 0); - $active = isset($_POST['active']) ? 1 : 0; - - // Provider PTO bank (hours, decimal). Stored as minutes. - $ptoBankHours = (string)($_POST['pto_bank_hours'] ?? ''); - $ptoBankHours = trim($ptoBankHours); - $ptoBankMin = 0; - if ($ptoBankHours !== '') { - $h = (float)$ptoBankHours; - if ($h < 0) $h = 0; - // keep quarter-hour granularity - $ptoBankMin = (int)round($h * 60); - } - - if ($name === '') { - flash_set('error','Type name is required.'); - redirect('/admin/appointment-types'); - } - - if ($id) { - AppointmentType::update($id, ['provider_type'=>$ptype,'name'=>$name,'sort_order'=>$sort,'active'=>$active]); - } else { - AppointmentType::create(['provider_type'=>$ptype,'name'=>$name,'sort_order'=>$sort,'active'=>$active]); - } - - flash_set('ok','Saved.'); - redirect('/admin/appointment-types'); - } - - public static function appointmentTypeToggle(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $id = (int)($_POST['id'] ?? 0); - $active = (int)($_POST['active'] ?? 0) === 1 ? 1 : 0; - AppointmentType::setActive($id, $active); - flash_set('ok','Updated.'); - redirect('/admin/appointment-types'); - } - - -public static function appointmentTypeDelete(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $id = (int)($_POST['id'] ?? 0); - if ($id <= 0) { - flash_set('error','Invalid appointment type.'); - redirect('/admin/appointment-types'); - } - - if (!AppointmentType::canDelete($id)) { - flash_set('error','This appointment type is already in use (rates or production). Deactivate it instead of deleting.'); - redirect('/admin/appointment-types'); - } - - AppointmentType::delete($id); - flash_set('ok','Deleted.'); - redirect('/admin/appointment-types'); -} - - public static function providerRates(array $params): void { - Auth::requireRole('super'); - $providerId = (int)($params['id'] ?? 0); - $prov = Provider::findById($providerId); - if (!$prov) { http_response_code(404); echo "Provider not found."; return; } - - $types = AppointmentType::listByProviderType((string)$prov['provider_type'], false); - $rates = ProviderRate::listForProvider($providerId); - - View::render('admin/provider_rates', [ - 'title' => 'Provider Rates', - 'user' => Auth::user(), - 'prov' => $prov, - 'types' => $types, - 'rates' => $rates, - ]); - } - - public static function providerRateAdd(array $params): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - $providerId = (int)($params['id'] ?? 0); - $prov = Provider::findById($providerId); - if (!$prov) { flash_set('error','Provider not found.'); redirect('/admin/providers'); } - - $typeId = (int)($_POST['appointment_type_id'] ?? 0); - $rate = (float)($_POST['rate'] ?? 0); - $effFrom = (string)($_POST['effective_from'] ?? date('Y-m-d')); - $effTo = trim((string)($_POST['effective_to'] ?? '')); - $effTo = $effTo !== '' ? $effTo : null; - - if ($typeId <= 0) { flash_set('error','Select an appointment type.'); redirect('/admin/providers/' . $providerId . '/rates'); } - - ProviderRate::addRate($providerId, $typeId, $rate, $effFrom, $effTo); - flash_set('ok','Rate added (previous open rate auto-closed).'); - redirect('/admin/providers/' . $providerId . '/rates'); - } - - public static function providerRateEnd(array $params): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - $providerId = (int)($params['id'] ?? 0); - $rateId = (int)($_POST['rate_id'] ?? 0); - $effTo = trim((string)($_POST['effective_to'] ?? '')); - $effTo = $effTo !== '' ? $effTo : null; - ProviderRate::setEffectiveTo($rateId, $effTo); - flash_set('ok','Rate updated.'); - redirect('/admin/providers/' . $providerId . '/rates'); - } - - -public static function providerRateUpdate(array $params): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $providerId = (int)($params['id'] ?? 0); - $rateId = (int)($_POST['rate_id'] ?? 0); - $rate = (float)($_POST['rate'] ?? 0); - - if ($providerId <= 0 || $rateId <= 0) { - flash_set('error','Invalid rate.'); - redirect('/admin/providers/' . $providerId . '/rates'); - } - - if ($rate < 0) $rate = 0; - ProviderRate::updateRate($rateId, $rate); - - flash_set('ok','Rate updated.'); - redirect('/admin/providers/' . $providerId . '/rates'); -} - -public static function providerRateDelete(array $params): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $providerId = (int)($params['id'] ?? 0); - $rateId = (int)($_POST['rate_id'] ?? 0); - - if ($providerId <= 0 || $rateId <= 0) { - flash_set('error','Invalid rate.'); - redirect('/admin/providers/' . $providerId . '/rates'); - } - - ProviderRate::deleteRate($rateId); - - flash_set('ok','Rate deleted.'); - redirect('/admin/providers/' . $providerId . '/rates'); -} - - public static function production(): void { - Auth::requireRole('super'); - $pp = self::getPayPeriodFromRequest(); - $periods = self::recentPeriodsWithSelected($pp, 8); - - $status = ProviderProduction::statusForPayPeriod((int)$pp['id']); - - View::render('admin/provider_production', [ - 'title' => 'Provider Production', - 'user' => Auth::user(), - 'payPeriod' => $pp, - 'periods' => $periods, - 'status' => $status, - ]); - } - - public static function productionEdit(array $params): void { - Auth::requireLogin(); - - $providerId = (int)($params['id'] ?? 0); - self::requireProviderAccess($providerId); - $prov = Provider::findById($providerId); - if (!$prov) { http_response_code(404); echo "Provider not found."; return; } - - $pp = self::getPayPeriodFromRequest(); - $periods = self::recentPeriodsWithSelected($pp, 8); - - ProviderProduction::ensureRows($providerId, (int)$pp['id']); - $rows = ProviderProduction::rowsForProviderPeriod($providerId, (int)$pp['id']); - - // Resolve effective rates as-of pay period end date (used for preview if rate_used not set) - $asOf = (string)$pp['end_date']; - foreach ($rows as &$r) { - $eff = ProviderRate::effectiveRate($providerId, (int)$r['appointment_type_id'], $asOf); - $r['effective_rate'] = $eff !== null ? $eff : 0.00; - } - unset($r); - - - // Provider PTO for this pay period (admin-entered) - ProviderPto::ensureRow($providerId, (int)$pp['id']); - $ptoMinutes = ProviderPto::minutesForProviderPeriod($providerId, (int)$pp['id']); - $ptoBank = (int)($prov['pto_bank_minutes'] ?? 0); - $year = (int)substr((string)$pp['start_date'], 0, 4); - // YTD should be "as of" the selected pay period end date so future entries don't affect remaining. - $ptoUsedYtd = ProviderPto::sumUsedYtdThroughDate($providerId, $year, (string)$pp['end_date']); - $ptoAvail = max(0, $ptoBank - $ptoUsedYtd); - $ptoUsedExclCurrent = max(0, $ptoUsedYtd - $ptoMinutes); - View::render('admin/provider_production_edit', [ - 'title' => 'Edit Provider Production', - 'user' => Auth::user(), - 'prov' => $prov, - 'payPeriod' => $pp, - 'periods' => $periods, - 'rows' => $rows, - 'pto_bank' => $ptoBank, - 'pto_used_ytd' => $ptoUsedYtd, - 'pto_available' => $ptoAvail, - 'pto_minutes' => $ptoMinutes, - 'pto_used_excl_current' => $ptoUsedExclCurrent, - 'isSuper' => (Auth::user() && Auth::user()['role'] === 'super'), - 'backUrl' => '/timecards?pp=' . (string)$pp['id'], - ]); - } - - public static function productionSave(): void { - Auth::requireLogin(); - Csrf::check($_POST['_csrf'] ?? null); - - $providerId = (int)($_POST['provider_id'] ?? 0); - self::requireProviderAccess($providerId); - $ppId = (int)($_POST['pay_period_id'] ?? 0); - $_SESSION['selected_pay_period_id'] = $ppId; - $pp = PayPeriod::findById($ppId); - if (!$pp) { flash_set('error','Invalid pay period.'); redirect('/timecards'); } - - ProviderProduction::ensureRows($providerId, $ppId); - $rows = ProviderProduction::rowsForProviderPeriod($providerId, $ppId); - // If locked, do not save - $locked = false; - foreach ($rows as $r) { if (!empty($r['locked_at'])) { $locked = true; break; } } - if ($locked) { - flash_set('error','This provider production card is locked.'); - redirect('/provider-production/' . $providerId . '?pp=' . $ppId); - } - - $counts = $_POST['counts'] ?? []; - ProviderProduction::saveCounts($providerId, $ppId, $counts); - - if (Auth::user()['role'] === 'super') { - // Provider PTO (hours) for this pay period (admin-entered) - $ptoHours = trim((string)($_POST['pto_hours'] ?? '')); - $ptoMin = 0; - if ($ptoHours !== '') { - $h = (float)$ptoHours; - if ($h < 0) $h = 0; - $ptoMin = (int)round($h * 60); - } - - // Clamp to available bank if this provider accrues PTO - $prov = Provider::findById($providerId); - $ptoBank = (int)($prov['pto_bank_minutes'] ?? 0); - if ($ptoBank > 0) { - $year = (int)substr((string)$pp['start_date'], 0, 4); - // Compute YTD used through this pay period end date (ignore PTO entered on later pay periods). - $usedYtd = ProviderPto::sumUsedYtdThroughDate($providerId, $year, (string)$pp['end_date']); - $current = ProviderPto::minutesForProviderPeriod($providerId, $ppId); - $usedExcl = max(0, $usedYtd - $current); - $maxForPeriod = max(0, $ptoBank - $usedExcl); - if ($ptoMin > $maxForPeriod) $ptoMin = $maxForPeriod; - } - - ProviderPto::saveMinutes($providerId, $ppId, $ptoMin); - } - - flash_set('ok','Saved.'); - redirect('/provider-production/' . $providerId . '?pp=' . $ppId); - } - - public static function productionLock(): void { - Auth::requireLogin(); - Csrf::check($_POST['_csrf'] ?? null); - - $providerId = (int)($_POST['provider_id'] ?? 0); - self::requireProviderAccess($providerId); - $ppId = (int)($_POST['pay_period_id'] ?? 0); - $_SESSION['selected_pay_period_id'] = $ppId; - $pp = PayPeriod::findById($ppId); - if (!$pp) { flash_set('error','Invalid pay period.'); redirect('/timecards'); } - - ProviderProduction::ensureRows($providerId, $ppId); - ProviderProduction::lockProviderPeriod($providerId, $ppId, (int)Auth::user()['id'], (string)$pp['end_date']); - - ProviderPto::lockProviderPeriod($providerId, $ppId, (int)Auth::user()['id']); - - flash_set('ok','Locked.'); - redirect('/provider-production/' . $providerId . '?pp=' . $ppId); - } - - public static function productionUnlock(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $providerId = (int)($_POST['provider_id'] ?? 0); - $ppId = (int)($_POST['pay_period_id'] ?? 0); - $_SESSION['selected_pay_period_id'] = $ppId; - ProviderProduction::unlockProviderPeriod($providerId, $ppId); - - ProviderPto::unlockProviderPeriod($providerId, $ppId); - - flash_set('ok','Unlocked.'); - redirect('/provider-production/' . $providerId . '?pp=' . $ppId); - } -} +format('Y-m-d') === $value; + } + + + private static function getPayPeriodFromRequest(): array { + return \selected_pay_period((int)($_GET["pp"] ?? 0)); + } + + private static function recentPeriodsWithSelected(array $selected, int $limit = 8): array { + return \recent_pay_periods_with_selected($selected, $limit); + } + + private static function canAccessProvider(int $providerId): bool { + Auth::requireLogin(); + $u = Auth::user(); + return $u && $u['role'] === 'super'; + } + + private static function requireProviderAccess(int $providerId): void { + if (!self::canAccessProvider($providerId)) { + http_response_code(403); + echo "Forbidden
"; + exit; + } + } + + public static function providers(): void { + Auth::requireRole('super'); + View::render('admin/providers', [ + 'title' => 'Providers', + 'user' => Auth::user(), + 'providers' => Provider::all(true), + ]); + } + + public static function providerEdit(array $params): void { + Auth::requireRole('super'); + $id = (int)($params['id'] ?? 0); + $prov = $id ? Provider::findById($id) : null; + View::render('admin/provider_edit', [ + 'title' => $id ? 'Edit Provider' : 'Add Provider', + 'user' => Auth::user(), + 'prov' => $prov, + ]); + } + + public static function providerSave(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $id = (int)($_POST['id'] ?? 0); + $name = trim((string)($_POST['full_name'] ?? '')); + $ptype = (string)($_POST['provider_type'] ?? 'chiro'); + $ptype = in_array($ptype, ['chiro','massage'], true) ? $ptype : 'chiro'; + $active = isset($_POST['active']) ? 1 : 0; + + // Provider PTO bank (hours, decimal). Stored as minutes. + $ptoBankHours = (string)($_POST['pto_bank_hours'] ?? ''); + $ptoBankHours = trim($ptoBankHours); + $ptoBankMin = 0; + if ($ptoBankHours !== '') { + $h = (float)$ptoBankHours; + if ($h < 0) $h = 0; + // keep quarter-hour granularity + $ptoBankMin = (int)round($h * 60); + } + + if ($name === '' || strlen($name) > 190) { + flash_set('error','Provider name is required.'); + redirect('/admin/providers'); + } + + if ($id) { + Provider::update($id, ['full_name'=>$name,'provider_type'=>$ptype,'active'=>$active,'pto_bank_minutes'=>$ptoBankMin]); + } else { + Provider::create(['full_name'=>$name,'provider_type'=>$ptype,'active'=>$active,'pto_bank_minutes'=>$ptoBankMin]); + } + + flash_set('ok','Saved.'); + redirect('/admin/providers'); + } + + public static function appointmentTypes(): void { + Auth::requireRole('super'); + + $editId = (int)($_GET['edit_id'] ?? 0); + $editType = $editId > 0 ? AppointmentType::findById($editId) : null; + + View::render('admin/appointment_types', [ + 'title' => 'Appointment Types', + 'user' => Auth::user(), + 'types_chiro' => AppointmentType::listByProviderType('chiro', true), + 'types_massage' => AppointmentType::listByProviderType('massage', true), + 'editType' => $editType, + ]); +} + + public static function appointmentTypeSave(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $id = (int)($_POST['id'] ?? 0); + $ptype = (string)($_POST['provider_type'] ?? 'chiro'); + $ptype = in_array($ptype, ['chiro','massage'], true) ? $ptype : 'chiro'; + $name = trim((string)($_POST['name'] ?? '')); + $sort = (int)($_POST['sort_order'] ?? 0); + $active = isset($_POST['active']) ? 1 : 0; + + // Provider PTO bank (hours, decimal). Stored as minutes. + $ptoBankHours = (string)($_POST['pto_bank_hours'] ?? ''); + $ptoBankHours = trim($ptoBankHours); + $ptoBankMin = 0; + if ($ptoBankHours !== '') { + $h = (float)$ptoBankHours; + if ($h < 0) $h = 0; + // keep quarter-hour granularity + $ptoBankMin = (int)round($h * 60); + } + + if ($name === '' || strlen($name) > 190) { + flash_set('error','Type name is required.'); + redirect('/admin/appointment-types'); + } + + if ($id) { + AppointmentType::update($id, ['provider_type'=>$ptype,'name'=>$name,'sort_order'=>$sort,'active'=>$active]); + } else { + AppointmentType::create(['provider_type'=>$ptype,'name'=>$name,'sort_order'=>$sort,'active'=>$active]); + } + + flash_set('ok','Saved.'); + redirect('/admin/appointment-types'); + } + + public static function appointmentTypeToggle(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $id = (int)($_POST['id'] ?? 0); + $active = (int)($_POST['active'] ?? 0) === 1 ? 1 : 0; + AppointmentType::setActive($id, $active); + flash_set('ok','Updated.'); + redirect('/admin/appointment-types'); + } + + +public static function appointmentTypeDelete(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $id = (int)($_POST['id'] ?? 0); + if ($id <= 0) { + flash_set('error','Invalid appointment type.'); + redirect('/admin/appointment-types'); + } + + if (!AppointmentType::canDelete($id)) { + flash_set('error','This appointment type is already in use (rates or production). Deactivate it instead of deleting.'); + redirect('/admin/appointment-types'); + } + + AppointmentType::delete($id); + flash_set('ok','Deleted.'); + redirect('/admin/appointment-types'); +} + + public static function providerRates(array $params): void { + Auth::requireRole('super'); + $providerId = (int)($params['id'] ?? 0); + $prov = Provider::findById($providerId); + if (!$prov) { http_response_code(404); echo "Provider not found."; return; } + + $types = AppointmentType::listByProviderType((string)$prov['provider_type'], false); + $rates = ProviderRate::listForProvider($providerId); + + View::render('admin/provider_rates', [ + 'title' => 'Provider Rates', + 'user' => Auth::user(), + 'prov' => $prov, + 'types' => $types, + 'rates' => $rates, + ]); + } + + public static function providerRateAdd(array $params): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + $providerId = (int)($params['id'] ?? 0); + $prov = Provider::findById($providerId); + if (!$prov) { flash_set('error','Provider not found.'); redirect('/admin/providers'); } + + $typeId = (int)($_POST['appointment_type_id'] ?? 0); + $rate = (float)($_POST['rate'] ?? 0); + $effFrom = (string)($_POST['effective_from'] ?? date('Y-m-d')); + $effTo = trim((string)($_POST['effective_to'] ?? '')); + $effTo = $effTo !== '' ? $effTo : null; + + $type = AppointmentType::findById($typeId); + if (!$type || (string)$type['provider_type'] !== (string)$prov['provider_type']) { + flash_set('error','Select an appointment type for this provider.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + if (!is_finite($rate) || $rate < 0 || $rate > 1000000) { + flash_set('error','Enter a valid rate.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + if (!self::validDate($effFrom) || ($effTo !== null && (!self::validDate($effTo) || $effTo < $effFrom))) { + flash_set('error','Enter a valid effective date range.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + + ProviderRate::addRate($providerId, $typeId, $rate, $effFrom, $effTo); + flash_set('ok','Rate added (previous open rate auto-closed).'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + + public static function providerRateEnd(array $params): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + $providerId = (int)($params['id'] ?? 0); + $rateId = (int)($_POST['rate_id'] ?? 0); + $effTo = trim((string)($_POST['effective_to'] ?? '')); + $effTo = $effTo !== '' ? $effTo : null; + if (!ProviderRate::belongsToProvider($rateId, $providerId) || ($effTo !== null && !self::validDate($effTo))) { + flash_set('error','Invalid rate or end date.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + ProviderRate::setEffectiveTo($rateId, $effTo); + flash_set('ok','Rate updated.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + + +public static function providerRateUpdate(array $params): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $providerId = (int)($params['id'] ?? 0); + $rateId = (int)($_POST['rate_id'] ?? 0); + $rate = (float)($_POST['rate'] ?? 0); + + if ($providerId <= 0 || $rateId <= 0 || !ProviderRate::belongsToProvider($rateId, $providerId)) { + flash_set('error','Invalid rate.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + + if (!is_finite($rate) || $rate < 0 || $rate > 1000000) { + flash_set('error','Enter a valid rate.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + ProviderRate::updateRate($rateId, $rate); + + flash_set('ok','Rate updated.'); + redirect('/admin/providers/' . $providerId . '/rates'); +} + +public static function providerRateDelete(array $params): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $providerId = (int)($params['id'] ?? 0); + $rateId = (int)($_POST['rate_id'] ?? 0); + + if ($providerId <= 0 || $rateId <= 0 || !ProviderRate::belongsToProvider($rateId, $providerId)) { + flash_set('error','Invalid rate.'); + redirect('/admin/providers/' . $providerId . '/rates'); + } + + ProviderRate::deleteRate($rateId); + + flash_set('ok','Rate deleted.'); + redirect('/admin/providers/' . $providerId . '/rates'); +} + + public static function production(): void { + Auth::requireRole('super'); + $pp = self::getPayPeriodFromRequest(); + $periods = self::recentPeriodsWithSelected($pp, 8); + + $status = ProviderProduction::statusForPayPeriod((int)$pp['id']); + + View::render('admin/provider_production', [ + 'title' => 'Provider Production', + 'user' => Auth::user(), + 'payPeriod' => $pp, + 'periods' => $periods, + 'status' => $status, + ]); + } + + public static function productionEdit(array $params): void { + Auth::requireLogin(); + + $providerId = (int)($params['id'] ?? 0); + self::requireProviderAccess($providerId); + $prov = Provider::findById($providerId); + if (!$prov) { http_response_code(404); echo "Provider not found."; return; } + + $pp = self::getPayPeriodFromRequest(); + $periods = self::recentPeriodsWithSelected($pp, 8); + + ProviderProduction::ensureRows($providerId, (int)$pp['id']); + $rows = ProviderProduction::rowsForProviderPeriod($providerId, (int)$pp['id']); + + // Resolve effective rates as-of pay period end date (used for preview if rate_used not set) + $asOf = (string)$pp['end_date']; + foreach ($rows as &$r) { + $eff = ProviderRate::effectiveRate($providerId, (int)$r['appointment_type_id'], $asOf); + $r['effective_rate'] = $eff !== null ? $eff : 0.00; + } + unset($r); + + + // Provider PTO for this pay period (admin-entered) + ProviderPto::ensureRow($providerId, (int)$pp['id']); + $ptoMinutes = ProviderPto::minutesForProviderPeriod($providerId, (int)$pp['id']); + $ptoBank = (int)($prov['pto_bank_minutes'] ?? 0); + $year = (int)substr((string)$pp['start_date'], 0, 4); + // YTD should be "as of" the selected pay period end date so future entries don't affect remaining. + $ptoUsedYtd = ProviderPto::sumUsedYtdThroughDate($providerId, $year, (string)$pp['end_date']); + $ptoAvail = max(0, $ptoBank - $ptoUsedYtd); + $ptoUsedExclCurrent = max(0, $ptoUsedYtd - $ptoMinutes); + View::render('admin/provider_production_edit', [ + 'title' => 'Edit Provider Production', + 'user' => Auth::user(), + 'prov' => $prov, + 'payPeriod' => $pp, + 'periods' => $periods, + 'rows' => $rows, + 'pto_bank' => $ptoBank, + 'pto_used_ytd' => $ptoUsedYtd, + 'pto_available' => $ptoAvail, + 'pto_minutes' => $ptoMinutes, + 'pto_used_excl_current' => $ptoUsedExclCurrent, + 'isSuper' => (Auth::user() && Auth::user()['role'] === 'super'), + 'backUrl' => '/timecards?pp=' . (string)$pp['id'], + ]); + } + + public static function productionSave(): void { + Auth::requireLogin(); + Csrf::check($_POST['_csrf'] ?? null); + + $providerId = (int)($_POST['provider_id'] ?? 0); + self::requireProviderAccess($providerId); + $ppId = (int)($_POST['pay_period_id'] ?? 0); + $_SESSION['selected_pay_period_id'] = $ppId; + $pp = PayPeriod::findById($ppId); + if (!$pp) { flash_set('error','Invalid pay period.'); redirect('/timecards'); } + + ProviderProduction::ensureRows($providerId, $ppId); + $rows = ProviderProduction::rowsForProviderPeriod($providerId, $ppId); + // If locked, do not save + $locked = false; + foreach ($rows as $r) { if (!empty($r['locked_at'])) { $locked = true; break; } } + if ($locked) { + flash_set('error','This provider production card is locked.'); + redirect('/provider-production/' . $providerId . '?pp=' . $ppId); + } + + $counts = $_POST['counts'] ?? []; + ProviderProduction::saveCounts($providerId, $ppId, $counts); + + if (Auth::user()['role'] === 'super') { + // Provider PTO (hours) for this pay period (admin-entered) + $ptoHours = trim((string)($_POST['pto_hours'] ?? '')); + $ptoMin = 0; + if ($ptoHours !== '') { + $h = (float)$ptoHours; + if ($h < 0) $h = 0; + $ptoMin = (int)round($h * 60); + } + + // Clamp to available bank if this provider accrues PTO + $prov = Provider::findById($providerId); + $ptoBank = (int)($prov['pto_bank_minutes'] ?? 0); + if ($ptoBank > 0) { + $year = (int)substr((string)$pp['start_date'], 0, 4); + // Compute YTD used through this pay period end date (ignore PTO entered on later pay periods). + $usedYtd = ProviderPto::sumUsedYtdThroughDate($providerId, $year, (string)$pp['end_date']); + $current = ProviderPto::minutesForProviderPeriod($providerId, $ppId); + $usedExcl = max(0, $usedYtd - $current); + $maxForPeriod = max(0, $ptoBank - $usedExcl); + if ($ptoMin > $maxForPeriod) $ptoMin = $maxForPeriod; + } + + ProviderPto::saveMinutes($providerId, $ppId, $ptoMin); + } + + flash_set('ok','Saved.'); + redirect('/provider-production/' . $providerId . '?pp=' . $ppId); + } + + public static function productionLock(): void { + Auth::requireLogin(); + Csrf::check($_POST['_csrf'] ?? null); + + $providerId = (int)($_POST['provider_id'] ?? 0); + self::requireProviderAccess($providerId); + $ppId = (int)($_POST['pay_period_id'] ?? 0); + $_SESSION['selected_pay_period_id'] = $ppId; + $pp = PayPeriod::findById($ppId); + if (!$pp) { flash_set('error','Invalid pay period.'); redirect('/timecards'); } + + ProviderProduction::ensureRows($providerId, $ppId); + ProviderProduction::lockProviderPeriod($providerId, $ppId, (int)Auth::user()['id'], (string)$pp['end_date']); + + ProviderPto::lockProviderPeriod($providerId, $ppId, (int)Auth::user()['id']); + + flash_set('ok','Locked.'); + redirect('/provider-production/' . $providerId . '?pp=' . $ppId); + } + + public static function productionUnlock(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $providerId = (int)($_POST['provider_id'] ?? 0); + $ppId = (int)($_POST['pay_period_id'] ?? 0); + $_SESSION['selected_pay_period_id'] = $ppId; + ProviderProduction::unlockProviderPeriod($providerId, $ppId); + + ProviderPto::unlockProviderPeriod($providerId, $ppId); + + flash_set('ok','Unlocked.'); + redirect('/provider-production/' . $providerId . '?pp=' . $ppId); + } +} diff --git a/app/Controllers/SettingsController.php b/app/Controllers/SettingsController.php index 9e1d93b..6a87b9f 100644 --- a/app/Controllers/SettingsController.php +++ b/app/Controllers/SettingsController.php @@ -1,124 +1,139 @@ -diff($today)->format('%r%a'); - $idx = (int)floor($diffDays / $len); - if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; - $start = $anchor->modify('+' . ($idx*$len) . ' days'); - $end = $start->modify('+' . ($len-1) . ' days'); - $sv = (int)$state['current_settings_version_id']; - return PayPeriod::ensure($start->format('Y-m-d'), $end->format('Y-m-d'), $sv); - } - - public static function settings(): void { - Auth::requireRole('super'); - $state = Settings::appState(); - $cur = Settings::currentSettingsVersion(); - View::render('admin/settings', [ - 'title' => 'Settings', - 'user' => Auth::user(), - 'state' => $state, - 'current' => $cur, - ]); - } - - public static function save(): void { - Auth::requireRole('super'); - Csrf::check($_POST['_csrf'] ?? null); - - $actor = (int)Auth::user()['id']; - $state = Settings::appState(); - $current = Settings::currentSettingsVersion(); - $cfg = $current['config']; - - $inc = max(1, (int)($_POST['time_increment_minutes'] ?? ($cfg['time_increment_minutes'] ?? 15))); - $mode = in_array($_POST['rounding_mode'] ?? '', ['nearest','down','up'], true) ? $_POST['rounding_mode'] : ($cfg['rounding_mode'] ?? 'nearest'); - - $daysToShow = $_POST['days_to_show'] ?? []; - $daysToShow = array_values(array_filter(array_map('intval', (array)$daysToShow), fn($n)=>$n>=1 && $n<=7)); - if (!$daysToShow) $daysToShow = $cfg['days_to_show'] ?? [1,2,3,4,5,6]; - - // allowed minutes derived from increment - $allowed = []; - for ($m=0; $m<60; $m+=$inc) $allowed[] = $m; - - $newCfg = $cfg; - $newCfg['time_increment_minutes'] = $inc; - $newCfg['allowed_minutes'] = $allowed; - $newCfg['rounding_mode'] = $mode; - $newCfg['days_to_show'] = $daysToShow; - - // App state items - $companyName = trim((string)($_POST['company_name'] ?? $state['company_name'])); - $companyEmail = trim((string)($_POST['company_email'] ?? $state['company_email'])); - $anchor = trim((string)($_POST['pay_period_anchor_date'] ?? $state['pay_period_anchor_date'])); - $length = max(7, (int)($_POST['pay_period_length_days'] ?? $state['pay_period_length_days'])); - - $scope = ($_POST['apply_scope'] ?? 'next') === 'immediate' ? 'immediate' : 'next'; - $reround = isset($_POST['reround_existing']) && $scope === 'immediate'; - - $newVersionId = Settings::createSettingsVersion($actor, $newCfg); - - // Update app_state defaults for next periods - Settings::setCurrentSettingsVersion($newVersionId); - Settings::updateAppState([ - 'company_name' => $companyName, - 'company_email' => $companyEmail, - 'pay_period_anchor_date' => $anchor, - 'pay_period_length_days' => $length, - ]); - - if ($scope === 'immediate') { - $pp = self::getCurrentPayPeriod(); - // Only if the pay period is not globally locked - if (empty($pp['locked_at'])) { - PayPeriod::setSettingsVersion((int)$pp['id'], $newVersionId); - - if ($reround) { - // Reround all time_entries in this pay period that belong to unlocked timecards - $sql = "SELECT te.* FROM time_entries te - JOIN timecards tc ON tc.user_id=te.user_id AND tc.pay_period_id=te.pay_period_id - WHERE te.pay_period_id=? AND (tc.locked_at IS NULL)"; - $st = DB::pdo()->prepare($sql); - $st->execute([(int)$pp['id']]); - $rows = $st->fetchAll(); - foreach ($rows as $r) { - $tin = $r['time_in'] ? TimeService::roundTime(substr($r['time_in'],0,5), $newCfg) : null; - $tout = $r['time_out'] ? TimeService::roundTime(substr($r['time_out'],0,5), $newCfg) : null; - DB::pdo()->prepare("UPDATE time_entries SET time_in=?, time_out=?, updated_at=NOW() WHERE id=?") - ->execute([$tin, $tout, (int)$r['id']]); - } - } - } - } - - // Audit - DB::pdo()->prepare("INSERT INTO audit_log(actor_user_id,action,entity,entity_id,payload_json,created_at) - VALUES(?,?,?,?,?,NOW())")->execute([ - $actor, 'settings_saved', 'settings_versions', $newVersionId, - json_encode(['apply_scope'=>$scope,'reround_existing'=>$reround], JSON_UNESCAPED_SLASHES) - ]); - - flash_set('ok', 'Settings saved.'); - redirect('/admin/settings'); - } -} +diff($today)->format('%r%a'); + $idx = (int)floor($diffDays / $len); + if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; + $start = $anchor->modify('+' . ($idx*$len) . ' days'); + $end = $start->modify('+' . ($len-1) . ' days'); + $sv = (int)$state['current_settings_version_id']; + return PayPeriod::ensure($start->format('Y-m-d'), $end->format('Y-m-d'), $sv); + } + + public static function settings(): void { + Auth::requireRole('super'); + $state = Settings::appState(); + $cur = Settings::currentSettingsVersion(); + View::render('admin/settings', [ + 'title' => 'Settings', + 'user' => Auth::user(), + 'state' => $state, + 'current' => $cur, + ]); + } + + public static function save(): void { + Auth::requireRole('super'); + Csrf::check($_POST['_csrf'] ?? null); + + $actor = (int)Auth::user()['id']; + $state = Settings::appState(); + $current = Settings::currentSettingsVersion(); + $cfg = $current['config']; + + $inc = (int)($_POST['time_increment_minutes'] ?? ($cfg['time_increment_minutes'] ?? 15)); + if (!in_array($inc, [5,10,15,20,30], true)) $inc = 15; + $mode = in_array($_POST['rounding_mode'] ?? '', ['nearest','down','up'], true) ? $_POST['rounding_mode'] : ($cfg['rounding_mode'] ?? 'nearest'); + + $daysToShow = $_POST['days_to_show'] ?? []; + $daysToShow = array_values(array_filter(array_map('intval', (array)$daysToShow), fn($n)=>$n>=1 && $n<=7)); + if (!$daysToShow) $daysToShow = $cfg['days_to_show'] ?? [1,2,3,4,5,6]; + + // allowed minutes derived from increment + $allowed = []; + for ($m=0; $m<60; $m+=$inc) $allowed[] = $m; + + $newCfg = $cfg; + $newCfg['time_increment_minutes'] = $inc; + $newCfg['allowed_minutes'] = $allowed; + $newCfg['rounding_mode'] = $mode; + $newCfg['days_to_show'] = $daysToShow; + + // App state items + $companyName = trim((string)($_POST['company_name'] ?? $state['company_name'])); + $companyEmail = trim((string)($_POST['company_email'] ?? $state['company_email'])); + $anchor = trim((string)($_POST['pay_period_anchor_date'] ?? $state['pay_period_anchor_date'])); + $length = max(7, min(31, (int)($_POST['pay_period_length_days'] ?? $state['pay_period_length_days']))); + + $anchorDate = \DateTimeImmutable::createFromFormat('!Y-m-d', $anchor); + if ($companyName === '' || strlen($companyName) > 190) { + flash_set('error', 'Company name is required and must be 190 characters or fewer.'); + redirect('/admin/settings'); + } + if ($companyEmail !== '' && (!filter_var($companyEmail, FILTER_VALIDATE_EMAIL) || strlen($companyEmail) > 190)) { + flash_set('error', 'Enter a valid report email address.'); + redirect('/admin/settings'); + } + if (!$anchorDate || $anchorDate->format('Y-m-d') !== $anchor) { + flash_set('error', 'Enter a valid pay-period anchor date.'); + redirect('/admin/settings'); + } + + $scope = ($_POST['apply_scope'] ?? 'next') === 'immediate' ? 'immediate' : 'next'; + $reround = isset($_POST['reround_existing']) && $scope === 'immediate'; + + $newVersionId = Settings::createSettingsVersion($actor, $newCfg); + + // Update app_state defaults for next periods + Settings::setCurrentSettingsVersion($newVersionId); + Settings::updateAppState([ + 'company_name' => $companyName, + 'company_email' => $companyEmail, + 'pay_period_anchor_date' => $anchor, + 'pay_period_length_days' => $length, + ]); + + if ($scope === 'immediate') { + $pp = self::getCurrentPayPeriod(); + // Only if the pay period is not globally locked + if (empty($pp['locked_at'])) { + PayPeriod::setSettingsVersion((int)$pp['id'], $newVersionId); + + if ($reround) { + // Reround all time_entries in this pay period that belong to unlocked timecards + $sql = "SELECT te.* FROM time_entries te + JOIN timecards tc ON tc.user_id=te.user_id AND tc.pay_period_id=te.pay_period_id + WHERE te.pay_period_id=? AND (tc.locked_at IS NULL)"; + $st = DB::pdo()->prepare($sql); + $st->execute([(int)$pp['id']]); + $rows = $st->fetchAll(); + foreach ($rows as $r) { + $tin = $r['time_in'] ? TimeService::roundTime(substr($r['time_in'],0,5), $newCfg) : null; + $tout = $r['time_out'] ? TimeService::roundTime(substr($r['time_out'],0,5), $newCfg) : null; + DB::pdo()->prepare("UPDATE time_entries SET time_in=?, time_out=?, updated_at=NOW() WHERE id=?") + ->execute([$tin, $tout, (int)$r['id']]); + } + } + } + } + + // Audit + DB::pdo()->prepare("INSERT INTO audit_log(actor_user_id,action,entity,entity_id,payload_json,created_at) + VALUES(?,?,?,?,?,NOW())")->execute([ + $actor, 'settings_saved', 'settings_versions', $newVersionId, + json_encode(['apply_scope'=>$scope,'reround_existing'=>$reround], JSON_UNESCAPED_SLASHES) + ]); + + flash_set('ok', 'Settings saved.'); + redirect('/admin/settings'); + } +} diff --git a/app/Core/Auth.php b/app/Core/Auth.php index 988c651..5a978a3 100644 --- a/app/Core/Auth.php +++ b/app/Core/Auth.php @@ -1,52 +1,67 @@ -403Forbidden
"; - exit; - } - } - - public static function login(string $email, string $password): bool { - $u = User::findByEmail($email); - if (!$u || (int)$u['active'] !== 1) return false; - if (!password_verify($password, $u['password_hash'])) return false; - $_SESSION['user_id'] = (int)$u['id']; - return true; - } - - public static function logout(): void { - $_SESSION = []; - if (ini_get("session.use_cookies")) { - $params = session_get_cookie_params(); - setcookie(session_name(), '', time() - 42000, - $params["path"], $params["domain"], $params["secure"], $params["httponly"] - ); - } - session_destroy(); - } -} +403Forbidden
"; + exit; + } + } + + public static function login(string $email, string $password): bool { + $u = User::findByEmail($email); + if (!$u || (int)$u['active'] !== 1 || !password_verify($password, $u['password_hash'])) { + return false; + } + + session_regenerate_id(true); + $_SESSION['user_id'] = (int)$u['id']; + unset($_SESSION['selected_pay_period_id']); + Csrf::rotate(); + + if (password_needs_rehash((string)$u['password_hash'], PASSWORD_DEFAULT)) { + User::setPassword((int)$u['id'], password_hash($password, PASSWORD_DEFAULT)); + } + + return true; + } + + public static function homePath(): string { + $u = self::user(); + return $u && $u['role'] === 'super' ? '/timecards' : '/timecard'; + } + + public static function logout(): void { + $_SESSION = []; + if (ini_get("session.use_cookies")) { + $params = session_get_cookie_params(); + setcookie(session_name(), '', time() - 42000, + $params["path"], $params["domain"], $params["secure"], $params["httponly"] + ); + } + session_destroy(); + } +} diff --git a/app/Core/Config.php b/app/Core/Config.php index 5ad0815..5857be1 100644 --- a/app/Core/Config.php +++ b/app/Core/Config.php @@ -1,17 +1,17 @@ -419Invalid CSRF token. Please refresh and try again.
"; - exit; - } - } -} +419Invalid CSRF token. Please refresh and try again.
"; + exit; + } + } +} diff --git a/app/Core/DB.php b/app/Core/DB.php index 3b8c609..60155cd 100644 --- a/app/Core/DB.php +++ b/app/Core/DB.php @@ -1,34 +1,35 @@ - PDO::ERRMODE_EXCEPTION, - PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, - ]); - return self::$pdo; - } - - public static function tx(callable $fn) { - $pdo = self::pdo(); - try { - $pdo->beginTransaction(); - $res = $fn($pdo); - $pdo->commit(); - return $res; - } catch (\Throwable $e) { - if ($pdo->inTransaction()) $pdo->rollBack(); - throw $e; - } - } -} + PDO::ERRMODE_EXCEPTION, + PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, + PDO::ATTR_EMULATE_PREPARES => false, + ]); + return self::$pdo; + } + + public static function tx(callable $fn) { + $pdo = self::pdo(); + try { + $pdo->beginTransaction(); + $res = $fn($pdo); + $pdo->commit(); + return $res; + } catch (\Throwable $e) { + if ($pdo->inTransaction()) $pdo->rollBack(); + throw $e; + } + } +} diff --git a/app/Core/Router.php b/app/Core/Router.php index dd38249..aa7ad98 100644 --- a/app/Core/Router.php +++ b/app/Core/Router.php @@ -1,32 +1,32 @@ -add('GET', $path, $handler); } - public function post(string $path, callable $handler): void { $this->add('POST', $path, $handler); } - - private function add(string $method, string $path, callable $handler): void { - $pattern = preg_replace('#\{([a-zA-Z_][a-zA-Z0-9_]*)\}#', '(?P<$1>[^/]+)', $path); - $pattern = '#^' . $pattern . '$#'; - $this->routes[] = [$method, $pattern, $handler]; - } - - public function dispatch(string $method, string $uri): void { - $path = parse_url($uri, PHP_URL_PATH) ?: '/'; - foreach ($this->routes as [$m, $pattern, $handler]) { - if ($m !== $method) continue; - if (preg_match($pattern, $path, $matches)) { - $params = []; - foreach ($matches as $k => $v) if (!is_int($k)) $params[$k] = $v; - $handler($params); - return; - } - } - http_response_code(404); - echo "Not found
"; - } -} +add('GET', $path, $handler); } + public function post(string $path, callable $handler): void { $this->add('POST', $path, $handler); } + + private function add(string $method, string $path, callable $handler): void { + $pattern = preg_replace('#\{([a-zA-Z_][a-zA-Z0-9_]*)\}#', '(?P<$1>[^/]+)', $path); + $pattern = '#^' . $pattern . '$#'; + $this->routes[] = [$method, $pattern, $handler]; + } + + public function dispatch(string $method, string $uri): void { + $path = parse_url($uri, PHP_URL_PATH) ?: '/'; + foreach ($this->routes as [$m, $pattern, $handler]) { + if ($m !== $method) continue; + if (preg_match($pattern, $path, $matches)) { + $params = []; + foreach ($matches as $k => $v) if (!is_int($k)) $params[$k] = $v; + $handler($params); + return; + } + } + http_response_code(404); + echo "Not found
"; + } +} diff --git a/app/Core/View.php b/app/Core/View.php index 50ac491..cdf8517 100644 --- a/app/Core/View.php +++ b/app/Core/View.php @@ -1,13 +1,13 @@ -prepare("SELECT * FROM appointment_types WHERE id=? LIMIT 1"); - $st->execute([$id]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function listByProviderType(string $providerType, bool $includeInactive = true): array { - $sql = "SELECT * FROM appointment_types WHERE provider_type=?"; - if (!$includeInactive) $sql .= " AND active=1"; - $sql .= " ORDER BY sort_order ASC, name ASC"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerType]); - return $st->fetchAll(); - } - - public static function all(bool $includeInactive = true): array { - $sql = "SELECT * FROM appointment_types"; - if (!$includeInactive) $sql .= " WHERE active=1"; - $sql .= " ORDER BY provider_type ASC, sort_order ASC, name ASC"; - return DB::pdo()->query($sql)->fetchAll(); - } - - public static function create(array $data): int { - $st = DB::pdo()->prepare("INSERT INTO appointment_types(provider_type,name,active,sort_order,created_at,updated_at) - VALUES(?,?,?,?,NOW(),NOW())"); - $st->execute([ - $data['provider_type'], - $data['name'], - $data['active'] ?? 1, - $data['sort_order'] ?? 0, - ]); - return (int)DB::pdo()->lastInsertId(); - } - - public static function update(int $id, array $data): void { - $fields = []; - $vals = []; - foreach (['provider_type','name','active','sort_order'] as $k) { - if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } - } - if (!$fields) return; - $vals[] = $id; - $sql = "UPDATE appointment_types SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; - DB::pdo()->prepare($sql)->execute($vals); - } - - public static function setActive(int $id, int $active): void { - DB::pdo()->prepare("UPDATE appointment_types SET active=?, updated_at=NOW() WHERE id=?")->execute([$active, $id]); - } - - -public static function canDelete(int $id): bool { - $pdo = DB::pdo(); - $st = $pdo->prepare("SELECT COUNT(*) c FROM provider_rates WHERE appointment_type_id=?"); - $st->execute([$id]); - $c1 = (int)($st->fetch()['c'] ?? 0); - - $st = $pdo->prepare("SELECT COUNT(*) c FROM provider_production WHERE appointment_type_id=?"); - $st->execute([$id]); - $c2 = (int)($st->fetch()['c'] ?? 0); - - return ($c1 + $c2) === 0; -} - -public static function delete(int $id): void { - DB::pdo()->prepare("DELETE FROM appointment_types WHERE id=?")->execute([$id]); -} -} +prepare("SELECT * FROM appointment_types WHERE id=? LIMIT 1"); + $st->execute([$id]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function listByProviderType(string $providerType, bool $includeInactive = true): array { + $sql = "SELECT * FROM appointment_types WHERE provider_type=?"; + if (!$includeInactive) $sql .= " AND active=1"; + $sql .= " ORDER BY sort_order ASC, name ASC"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerType]); + return $st->fetchAll(); + } + + public static function all(bool $includeInactive = true): array { + $sql = "SELECT * FROM appointment_types"; + if (!$includeInactive) $sql .= " WHERE active=1"; + $sql .= " ORDER BY provider_type ASC, sort_order ASC, name ASC"; + return DB::pdo()->query($sql)->fetchAll(); + } + + public static function create(array $data): int { + $st = DB::pdo()->prepare("INSERT INTO appointment_types(provider_type,name,active,sort_order,created_at,updated_at) + VALUES(?,?,?,?,NOW(),NOW())"); + $st->execute([ + $data['provider_type'], + $data['name'], + $data['active'] ?? 1, + $data['sort_order'] ?? 0, + ]); + return (int)DB::pdo()->lastInsertId(); + } + + public static function update(int $id, array $data): void { + $fields = []; + $vals = []; + foreach (['provider_type','name','active','sort_order'] as $k) { + if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } + } + if (!$fields) return; + $vals[] = $id; + $sql = "UPDATE appointment_types SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; + DB::pdo()->prepare($sql)->execute($vals); + } + + public static function setActive(int $id, int $active): void { + DB::pdo()->prepare("UPDATE appointment_types SET active=?, updated_at=NOW() WHERE id=?")->execute([$active, $id]); + } + + +public static function canDelete(int $id): bool { + $pdo = DB::pdo(); + $st = $pdo->prepare("SELECT COUNT(*) c FROM provider_rates WHERE appointment_type_id=?"); + $st->execute([$id]); + $c1 = (int)($st->fetch()['c'] ?? 0); + + $st = $pdo->prepare("SELECT COUNT(*) c FROM provider_production WHERE appointment_type_id=?"); + $st->execute([$id]); + $c2 = (int)($st->fetch()['c'] ?? 0); + + return ($c1 + $c2) === 0; +} + +public static function delete(int $id): void { + DB::pdo()->prepare("DELETE FROM appointment_types WHERE id=?")->execute([$id]); +} +} diff --git a/app/Models/PayPeriod.php b/app/Models/PayPeriod.php index 26c4a9b..593d947 100644 --- a/app/Models/PayPeriod.php +++ b/app/Models/PayPeriod.php @@ -1,46 +1,46 @@ -prepare("SELECT * FROM pay_periods WHERE start_date=? AND end_date=? LIMIT 1"); - $st->execute([$start, $end]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function findById(int $id): ?array { - $st = DB::pdo()->prepare("SELECT * FROM pay_periods WHERE id=? LIMIT 1"); - $st->execute([$id]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function ensure(string $start, string $end, int $settingsVersionId): array { - $existing = self::findByDates($start, $end); - if ($existing) return $existing; - $st = DB::pdo()->prepare("INSERT INTO pay_periods(start_date,end_date,settings_version_id,created_at) VALUES(?,?,?,NOW())"); - $st->execute([$start, $end, $settingsVersionId]); - return self::findById((int)DB::pdo()->lastInsertId()); - } - - public static function listRecent(int $limit = 10): array { - $st = DB::pdo()->prepare("SELECT * FROM pay_periods ORDER BY start_date DESC LIMIT ?"); - $st->bindValue(1, $limit, \PDO::PARAM_INT); - $st->execute(); - return $st->fetchAll(); - } - - public static function setSettingsVersion(int $payPeriodId, int $settingsVersionId): void { - DB::pdo()->prepare("UPDATE pay_periods SET settings_version_id=? WHERE id=? AND locked_at IS NULL")->execute([$settingsVersionId, $payPeriodId]); - } - - public static function lock(int $payPeriodId, int $lockedBy): void { - DB::pdo()->prepare("UPDATE pay_periods SET locked_at=NOW(), locked_by=? WHERE id=? AND locked_at IS NULL")->execute([$lockedBy, $payPeriodId]); - } -} +prepare("SELECT * FROM pay_periods WHERE start_date=? AND end_date=? LIMIT 1"); + $st->execute([$start, $end]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function findById(int $id): ?array { + $st = DB::pdo()->prepare("SELECT * FROM pay_periods WHERE id=? LIMIT 1"); + $st->execute([$id]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function ensure(string $start, string $end, int $settingsVersionId): array { + $existing = self::findByDates($start, $end); + if ($existing) return $existing; + $st = DB::pdo()->prepare("INSERT INTO pay_periods(start_date,end_date,settings_version_id,created_at) VALUES(?,?,?,NOW())"); + $st->execute([$start, $end, $settingsVersionId]); + return self::findById((int)DB::pdo()->lastInsertId()); + } + + public static function listRecent(int $limit = 10): array { + $st = DB::pdo()->prepare("SELECT * FROM pay_periods ORDER BY start_date DESC LIMIT ?"); + $st->bindValue(1, $limit, \PDO::PARAM_INT); + $st->execute(); + return $st->fetchAll(); + } + + public static function setSettingsVersion(int $payPeriodId, int $settingsVersionId): void { + DB::pdo()->prepare("UPDATE pay_periods SET settings_version_id=? WHERE id=? AND locked_at IS NULL")->execute([$settingsVersionId, $payPeriodId]); + } + + public static function lock(int $payPeriodId, int $lockedBy): void { + DB::pdo()->prepare("UPDATE pay_periods SET locked_at=NOW(), locked_by=? WHERE id=? AND locked_at IS NULL")->execute([$lockedBy, $payPeriodId]); + } +} diff --git a/app/Models/Provider.php b/app/Models/Provider.php index 4a9c89c..e322f9d 100644 --- a/app/Models/Provider.php +++ b/app/Models/Provider.php @@ -1,55 +1,55 @@ -prepare("SELECT * FROM providers WHERE id=? LIMIT 1"); - $st->execute([$id]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function all(bool $includeInactive = true): array { - $sql = "SELECT * FROM providers"; - if (!$includeInactive) $sql .= " WHERE active=1"; - $sql .= " ORDER BY active DESC, provider_type ASC, full_name ASC"; - return DB::pdo()->query($sql)->fetchAll(); - } - - public static function activeMatchingFullName(string $fullName): array { - $name = strtolower(trim($fullName)); - if ($name === '') return []; - $st = DB::pdo()->prepare("SELECT * FROM providers WHERE active=1 AND LOWER(TRIM(full_name))=? ORDER BY provider_type ASC, full_name ASC"); - $st->execute([$name]); - return $st->fetchAll(); - } - - public static function create(array $data): int { - $st = DB::pdo()->prepare("INSERT INTO providers(provider_type,full_name,active,pto_bank_minutes,created_at,updated_at) - VALUES(?,?,?, ?,NOW(),NOW())"); - $st->execute([ - $data['provider_type'], - $data['full_name'], - $data['active'] ?? 1, - $data['pto_bank_minutes'] ?? 0, - ]); - return (int)DB::pdo()->lastInsertId(); - } - - public static function update(int $id, array $data): void { - $fields = []; - $vals = []; - foreach (['provider_type','full_name','active','pto_bank_minutes'] as $k) { - if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } - } - if (!$fields) return; - $vals[] = $id; - $sql = "UPDATE providers SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; - DB::pdo()->prepare($sql)->execute($vals); - } -} +prepare("SELECT * FROM providers WHERE id=? LIMIT 1"); + $st->execute([$id]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function all(bool $includeInactive = true): array { + $sql = "SELECT * FROM providers"; + if (!$includeInactive) $sql .= " WHERE active=1"; + $sql .= " ORDER BY active DESC, provider_type ASC, full_name ASC"; + return DB::pdo()->query($sql)->fetchAll(); + } + + public static function activeMatchingFullName(string $fullName): array { + $name = strtolower(trim($fullName)); + if ($name === '') return []; + $st = DB::pdo()->prepare("SELECT * FROM providers WHERE active=1 AND LOWER(TRIM(full_name))=? ORDER BY provider_type ASC, full_name ASC"); + $st->execute([$name]); + return $st->fetchAll(); + } + + public static function create(array $data): int { + $st = DB::pdo()->prepare("INSERT INTO providers(provider_type,full_name,active,pto_bank_minutes,created_at,updated_at) + VALUES(?,?,?, ?,NOW(),NOW())"); + $st->execute([ + $data['provider_type'], + $data['full_name'], + $data['active'] ?? 1, + $data['pto_bank_minutes'] ?? 0, + ]); + return (int)DB::pdo()->lastInsertId(); + } + + public static function update(int $id, array $data): void { + $fields = []; + $vals = []; + foreach (['provider_type','full_name','active','pto_bank_minutes'] as $k) { + if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } + } + if (!$fields) return; + $vals[] = $id; + $sql = "UPDATE providers SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; + DB::pdo()->prepare($sql)->execute($vals); + } +} diff --git a/app/Models/ProviderProduction.php b/app/Models/ProviderProduction.php index 7785179..891f430 100644 --- a/app/Models/ProviderProduction.php +++ b/app/Models/ProviderProduction.php @@ -1,90 +1,90 @@ -prepare($sql)->execute([$providerId, $payPeriodId, (int)$t['id']]); - } - } - - public static function rowsForProviderPeriod(int $providerId, int $payPeriodId): array { - $sql = "SELECT pp.*, at.name as type_name, at.sort_order - FROM provider_production pp - JOIN appointment_types at ON at.id=pp.appointment_type_id - WHERE pp.provider_id=? AND pp.pay_period_id=? - ORDER BY at.sort_order ASC, at.name ASC"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerId, $payPeriodId]); - return $st->fetchAll(); - } - - public static function statusForPayPeriod(int $payPeriodId): array { - $sql = "SELECT p.id as provider_id, p.full_name, p.provider_type, p.active, - MAX(pp.submitted_at) as submitted_at, - MAX(pp.locked_at) as locked_at - FROM providers p - LEFT JOIN provider_production pp ON pp.provider_id=p.id AND pp.pay_period_id=? - GROUP BY p.id, p.full_name, p.provider_type, p.active - ORDER BY p.active DESC, p.provider_type ASC, p.full_name ASC"; - $st = DB::pdo()->prepare($sql); - $st->execute([$payPeriodId]); - return $st->fetchAll(); - } - - public static function saveCounts(int $providerId, int $payPeriodId, array $counts): void { - foreach ($counts as $appointmentTypeId => $count) { - $c = (int)$count; - if ($c < 0) $c = 0; - DB::pdo()->prepare("UPDATE provider_production SET count=?, updated_at=NOW() - WHERE provider_id=? AND pay_period_id=? AND appointment_type_id=?") - ->execute([$c, $providerId, $payPeriodId, (int)$appointmentTypeId]); - } - } - - public static function lockProviderPeriod(int $providerId, int $payPeriodId, int $lockedBy, string $asOfYmd): void { - $rows = self::rowsForProviderPeriod($providerId, $payPeriodId); - foreach ($rows as $r) { - $rateUsed = $r['rate_used']; - if ($rateUsed === null) { - $eff = ProviderRate::effectiveRate($providerId, (int)$r['appointment_type_id'], $asOfYmd); - $rateUsed = $eff !== null ? $eff : 0.00; - DB::pdo()->prepare("UPDATE provider_production SET rate_used=?, updated_at=NOW() WHERE id=?") - ->execute([$rateUsed, (int)$r['id']]); - } - } - DB::pdo()->prepare("UPDATE provider_production - SET submitted_at=COALESCE(submitted_at,NOW()), - locked_at=COALESCE(locked_at,NOW()), - locked_by=COALESCE(locked_by,?), - updated_at=NOW() - WHERE provider_id=? AND pay_period_id=?") - ->execute([$lockedBy, $providerId, $payPeriodId]); - } - - public static function unlockProviderPeriod(int $providerId, int $payPeriodId): void { - DB::pdo()->prepare("UPDATE provider_production SET locked_at=NULL, locked_by=NULL, updated_at=NOW() - WHERE provider_id=? AND pay_period_id=?") - ->execute([$providerId, $payPeriodId]); - } - - public static function lockAllForPayPeriod(int $payPeriodId, int $lockedBy, string $asOfYmd): void { - $providers = DB::pdo()->query("SELECT id FROM providers WHERE active=1")->fetchAll(); - foreach ($providers as $p) { - $pid = (int)$p['id']; - self::ensureRows($pid, $payPeriodId); - self::lockProviderPeriod($pid, $payPeriodId, $lockedBy, $asOfYmd); - } - } -} +prepare($sql)->execute([$providerId, $payPeriodId, (int)$t['id']]); + } + } + + public static function rowsForProviderPeriod(int $providerId, int $payPeriodId): array { + $sql = "SELECT pp.*, at.name as type_name, at.sort_order + FROM provider_production pp + JOIN appointment_types at ON at.id=pp.appointment_type_id + WHERE pp.provider_id=? AND pp.pay_period_id=? + ORDER BY at.sort_order ASC, at.name ASC"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerId, $payPeriodId]); + return $st->fetchAll(); + } + + public static function statusForPayPeriod(int $payPeriodId): array { + $sql = "SELECT p.id as provider_id, p.full_name, p.provider_type, p.active, + MAX(pp.submitted_at) as submitted_at, + MAX(pp.locked_at) as locked_at + FROM providers p + LEFT JOIN provider_production pp ON pp.provider_id=p.id AND pp.pay_period_id=? + GROUP BY p.id, p.full_name, p.provider_type, p.active + ORDER BY p.active DESC, p.provider_type ASC, p.full_name ASC"; + $st = DB::pdo()->prepare($sql); + $st->execute([$payPeriodId]); + return $st->fetchAll(); + } + + public static function saveCounts(int $providerId, int $payPeriodId, array $counts): void { + foreach ($counts as $appointmentTypeId => $count) { + $c = (int)$count; + $c = max(0, min(1000000, $c)); + DB::pdo()->prepare("UPDATE provider_production SET count=?, updated_at=NOW() + WHERE provider_id=? AND pay_period_id=? AND appointment_type_id=?") + ->execute([$c, $providerId, $payPeriodId, (int)$appointmentTypeId]); + } + } + + public static function lockProviderPeriod(int $providerId, int $payPeriodId, int $lockedBy, string $asOfYmd): void { + $rows = self::rowsForProviderPeriod($providerId, $payPeriodId); + foreach ($rows as $r) { + $rateUsed = $r['rate_used']; + if ($rateUsed === null) { + $eff = ProviderRate::effectiveRate($providerId, (int)$r['appointment_type_id'], $asOfYmd); + $rateUsed = $eff !== null ? $eff : 0.00; + DB::pdo()->prepare("UPDATE provider_production SET rate_used=?, updated_at=NOW() WHERE id=?") + ->execute([$rateUsed, (int)$r['id']]); + } + } + DB::pdo()->prepare("UPDATE provider_production + SET submitted_at=COALESCE(submitted_at,NOW()), + locked_at=COALESCE(locked_at,NOW()), + locked_by=COALESCE(locked_by,?), + updated_at=NOW() + WHERE provider_id=? AND pay_period_id=?") + ->execute([$lockedBy, $providerId, $payPeriodId]); + } + + public static function unlockProviderPeriod(int $providerId, int $payPeriodId): void { + DB::pdo()->prepare("UPDATE provider_production SET locked_at=NULL, locked_by=NULL, updated_at=NOW() + WHERE provider_id=? AND pay_period_id=?") + ->execute([$providerId, $payPeriodId]); + } + + public static function lockAllForPayPeriod(int $payPeriodId, int $lockedBy, string $asOfYmd): void { + $providers = DB::pdo()->query("SELECT id FROM providers WHERE active=1")->fetchAll(); + foreach ($providers as $p) { + $pid = (int)$p['id']; + self::ensureRows($pid, $payPeriodId); + self::lockProviderPeriod($pid, $payPeriodId, $lockedBy, $asOfYmd); + } + } +} diff --git a/app/Models/ProviderPto.php b/app/Models/ProviderPto.php index 4c0feef..a34b278 100644 --- a/app/Models/ProviderPto.php +++ b/app/Models/ProviderPto.php @@ -1,92 +1,92 @@ -prepare($sql)->execute([$providerId, $payPeriodId]); - } - - public static function findForProviderPeriod(int $providerId, int $payPeriodId): ?array { - $st = DB::pdo()->prepare("SELECT * FROM provider_pto WHERE provider_id=? AND pay_period_id=? LIMIT 1"); - $st->execute([$providerId, $payPeriodId]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function minutesForProviderPeriod(int $providerId, int $payPeriodId): int { - $st = DB::pdo()->prepare("SELECT COALESCE(pto_minutes,0) as m FROM provider_pto WHERE provider_id=? AND pay_period_id=? LIMIT 1"); - $st->execute([$providerId, $payPeriodId]); - $row = $st->fetch(); - return (int)($row['m'] ?? 0); - } - - public static function saveMinutes(int $providerId, int $payPeriodId, int $minutes): void { - if ($minutes < 0) $minutes = 0; - self::ensureRow($providerId, $payPeriodId); - DB::pdo()->prepare("UPDATE provider_pto SET pto_minutes=?, updated_at=NOW() WHERE provider_id=? AND pay_period_id=?") - ->execute([$minutes, $providerId, $payPeriodId]); - } - - public static function sumUsedYtd(int $providerId, int $year): int { - $sql = "SELECT COALESCE(SUM(ppto.pto_minutes),0) as m - FROM provider_pto ppto - JOIN pay_periods pp ON pp.id=ppto.pay_period_id - WHERE ppto.provider_id=? AND YEAR(pp.start_date)=?"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerId, $year]); - $row = $st->fetch(); - return (int)($row['m'] ?? 0); - } - - /** - * Sum PTO used for a provider for a given year, but only through a specific pay period end date. - * - * This prevents "future" PTO (entered on open timecards for later pay periods) from affecting - * historical reports and bank/remaining calculations. - */ - public static function sumUsedYtdThroughDate(int $providerId, int $year, string $throughEndDate): int { - $sql = "SELECT COALESCE(SUM(ppto.pto_minutes),0) as m - FROM provider_pto ppto - JOIN pay_periods pp ON pp.id=ppto.pay_period_id - WHERE ppto.provider_id=? - AND YEAR(pp.start_date)=? - AND pp.end_date <= ?"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerId, $year, $throughEndDate]); - $row = $st->fetch(); - return (int)($row['m'] ?? 0); - } - - public static function lockProviderPeriod(int $providerId, int $payPeriodId, int $lockedBy): void { - self::ensureRow($providerId, $payPeriodId); - DB::pdo()->prepare("UPDATE provider_pto - SET submitted_at=COALESCE(submitted_at,NOW()), - locked_at=COALESCE(locked_at,NOW()), - locked_by=COALESCE(locked_by,?), - updated_at=NOW() - WHERE provider_id=? AND pay_period_id=?") - ->execute([$lockedBy, $providerId, $payPeriodId]); - } - - public static function unlockProviderPeriod(int $providerId, int $payPeriodId): void { - DB::pdo()->prepare("UPDATE provider_pto SET locked_at=NULL, locked_by=NULL, updated_at=NOW() - WHERE provider_id=? AND pay_period_id=?") - ->execute([$providerId, $payPeriodId]); - } - - public static function lockAllForPayPeriod(int $payPeriodId, int $lockedBy): void { - $providers = DB::pdo()->query("SELECT id FROM providers WHERE active=1")->fetchAll(); - foreach ($providers as $p) { - $pid = (int)$p['id']; - self::ensureRow($pid, $payPeriodId); - self::lockProviderPeriod($pid, $payPeriodId, $lockedBy); - } - } -} +prepare($sql)->execute([$providerId, $payPeriodId]); + } + + public static function findForProviderPeriod(int $providerId, int $payPeriodId): ?array { + $st = DB::pdo()->prepare("SELECT * FROM provider_pto WHERE provider_id=? AND pay_period_id=? LIMIT 1"); + $st->execute([$providerId, $payPeriodId]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function minutesForProviderPeriod(int $providerId, int $payPeriodId): int { + $st = DB::pdo()->prepare("SELECT COALESCE(pto_minutes,0) as m FROM provider_pto WHERE provider_id=? AND pay_period_id=? LIMIT 1"); + $st->execute([$providerId, $payPeriodId]); + $row = $st->fetch(); + return (int)($row['m'] ?? 0); + } + + public static function saveMinutes(int $providerId, int $payPeriodId, int $minutes): void { + if ($minutes < 0) $minutes = 0; + self::ensureRow($providerId, $payPeriodId); + DB::pdo()->prepare("UPDATE provider_pto SET pto_minutes=?, updated_at=NOW() WHERE provider_id=? AND pay_period_id=?") + ->execute([$minutes, $providerId, $payPeriodId]); + } + + public static function sumUsedYtd(int $providerId, int $year): int { + $sql = "SELECT COALESCE(SUM(ppto.pto_minutes),0) as m + FROM provider_pto ppto + JOIN pay_periods pp ON pp.id=ppto.pay_period_id + WHERE ppto.provider_id=? AND YEAR(pp.start_date)=?"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerId, $year]); + $row = $st->fetch(); + return (int)($row['m'] ?? 0); + } + + /** + * Sum PTO used for a provider for a given year, but only through a specific pay period end date. + * + * This prevents "future" PTO (entered on open timecards for later pay periods) from affecting + * historical reports and bank/remaining calculations. + */ + public static function sumUsedYtdThroughDate(int $providerId, int $year, string $throughEndDate): int { + $sql = "SELECT COALESCE(SUM(ppto.pto_minutes),0) as m + FROM provider_pto ppto + JOIN pay_periods pp ON pp.id=ppto.pay_period_id + WHERE ppto.provider_id=? + AND YEAR(pp.start_date)=? + AND pp.end_date <= ?"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerId, $year, $throughEndDate]); + $row = $st->fetch(); + return (int)($row['m'] ?? 0); + } + + public static function lockProviderPeriod(int $providerId, int $payPeriodId, int $lockedBy): void { + self::ensureRow($providerId, $payPeriodId); + DB::pdo()->prepare("UPDATE provider_pto + SET submitted_at=COALESCE(submitted_at,NOW()), + locked_at=COALESCE(locked_at,NOW()), + locked_by=COALESCE(locked_by,?), + updated_at=NOW() + WHERE provider_id=? AND pay_period_id=?") + ->execute([$lockedBy, $providerId, $payPeriodId]); + } + + public static function unlockProviderPeriod(int $providerId, int $payPeriodId): void { + DB::pdo()->prepare("UPDATE provider_pto SET locked_at=NULL, locked_by=NULL, updated_at=NOW() + WHERE provider_id=? AND pay_period_id=?") + ->execute([$providerId, $payPeriodId]); + } + + public static function lockAllForPayPeriod(int $payPeriodId, int $lockedBy): void { + $providers = DB::pdo()->query("SELECT id FROM providers WHERE active=1")->fetchAll(); + foreach ($providers as $p) { + $pid = (int)$p['id']; + self::ensureRow($pid, $payPeriodId); + self::lockProviderPeriod($pid, $payPeriodId, $lockedBy); + } + } +} diff --git a/app/Models/ProviderRate.php b/app/Models/ProviderRate.php index b0d80b0..c04e1a0 100644 --- a/app/Models/ProviderRate.php +++ b/app/Models/ProviderRate.php @@ -1,67 +1,73 @@ -= ?) - ORDER BY effective_from DESC - LIMIT 1"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerId, $appointmentTypeId, $asOfYmd, $asOfYmd]); - $row = $st->fetch(); - if (!$row) return null; - return (float)$row['rate']; - } - - public static function listForProvider(int $providerId): array { - $sql = "SELECT pr.*, at.name as type_name, at.provider_type - FROM provider_rates pr - JOIN appointment_types at ON at.id=pr.appointment_type_id - WHERE pr.provider_id=? - ORDER BY at.sort_order ASC, at.name ASC, pr.effective_from DESC"; - $st = DB::pdo()->prepare($sql); - $st->execute([$providerId]); - return $st->fetchAll(); - } - - public static function addRate(int $providerId, int $appointmentTypeId, float $rate, string $effectiveFrom, ?string $effectiveTo): void { - // Auto-close any open-ended rate that overlaps the new effectiveFrom (same provider+type) - DB::tx(function($pdo) use ($providerId,$appointmentTypeId,$rate,$effectiveFrom,$effectiveTo) { - $dayBefore = (new \DateTimeImmutable($effectiveFrom))->modify('-1 day')->format('Y-m-d'); - - // Close open-ended rows that start before the new effective date - $pdo->prepare("UPDATE provider_rates - SET effective_to=?, updated_at=NOW() - WHERE provider_id=? AND appointment_type_id=? - AND effective_to IS NULL - AND effective_from < ?") - ->execute([$dayBefore, $providerId, $appointmentTypeId, $effectiveFrom]); - - // Insert new row - $pdo->prepare("INSERT INTO provider_rates(provider_id,appointment_type_id,rate,effective_from,effective_to,created_at,updated_at) - VALUES(?,?,?,?,?,NOW(),NOW())") - ->execute([$providerId, $appointmentTypeId, $rate, $effectiveFrom, $effectiveTo]); - }); - } - - public static function setEffectiveTo(int $id, ?string $effectiveTo): void { - DB::pdo()->prepare("UPDATE provider_rates SET effective_to=?, updated_at=NOW() WHERE id=?")->execute([$effectiveTo, $id]); - } - - -public static function updateRate(int $id, float $rate): void { - DB::pdo()->prepare("UPDATE provider_rates SET rate=?, updated_at=NOW() WHERE id=?")->execute([$rate, $id]); -} - -public static function deleteRate(int $id): void { - DB::pdo()->prepare("DELETE FROM provider_rates WHERE id=?")->execute([$id]); -} -} +prepare("SELECT 1 FROM provider_rates WHERE id=? AND provider_id=? LIMIT 1"); + $st->execute([$id, $providerId]); + return (bool)$st->fetchColumn(); + } + + public static function effectiveRate(int $providerId, int $appointmentTypeId, string $asOfYmd): ?float { + $sql = "SELECT rate FROM provider_rates + WHERE provider_id=? AND appointment_type_id=? + AND effective_from <= ? + AND (effective_to IS NULL OR effective_to >= ?) + ORDER BY effective_from DESC + LIMIT 1"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerId, $appointmentTypeId, $asOfYmd, $asOfYmd]); + $row = $st->fetch(); + if (!$row) return null; + return (float)$row['rate']; + } + + public static function listForProvider(int $providerId): array { + $sql = "SELECT pr.*, at.name as type_name, at.provider_type + FROM provider_rates pr + JOIN appointment_types at ON at.id=pr.appointment_type_id + WHERE pr.provider_id=? + ORDER BY at.sort_order ASC, at.name ASC, pr.effective_from DESC"; + $st = DB::pdo()->prepare($sql); + $st->execute([$providerId]); + return $st->fetchAll(); + } + + public static function addRate(int $providerId, int $appointmentTypeId, float $rate, string $effectiveFrom, ?string $effectiveTo): void { + // Auto-close any open-ended rate that overlaps the new effectiveFrom (same provider+type) + DB::tx(function($pdo) use ($providerId,$appointmentTypeId,$rate,$effectiveFrom,$effectiveTo) { + $dayBefore = (new \DateTimeImmutable($effectiveFrom))->modify('-1 day')->format('Y-m-d'); + + // Close open-ended rows that start before the new effective date + $pdo->prepare("UPDATE provider_rates + SET effective_to=?, updated_at=NOW() + WHERE provider_id=? AND appointment_type_id=? + AND effective_to IS NULL + AND effective_from < ?") + ->execute([$dayBefore, $providerId, $appointmentTypeId, $effectiveFrom]); + + // Insert new row + $pdo->prepare("INSERT INTO provider_rates(provider_id,appointment_type_id,rate,effective_from,effective_to,created_at,updated_at) + VALUES(?,?,?,?,?,NOW(),NOW())") + ->execute([$providerId, $appointmentTypeId, $rate, $effectiveFrom, $effectiveTo]); + }); + } + + public static function setEffectiveTo(int $id, ?string $effectiveTo): void { + DB::pdo()->prepare("UPDATE provider_rates SET effective_to=?, updated_at=NOW() WHERE id=?")->execute([$effectiveTo, $id]); + } + + +public static function updateRate(int $id, float $rate): void { + DB::pdo()->prepare("UPDATE provider_rates SET rate=?, updated_at=NOW() WHERE id=?")->execute([$rate, $id]); +} + +public static function deleteRate(int $id): void { + DB::pdo()->prepare("DELETE FROM provider_rates WHERE id=?")->execute([$id]); +} +} diff --git a/app/Models/Settings.php b/app/Models/Settings.php index fede6e2..e446c1f 100644 --- a/app/Models/Settings.php +++ b/app/Models/Settings.php @@ -1,50 +1,50 @@ -query("SELECT * FROM app_state WHERE id=1")->fetch(); - if (!$row) throw new \RuntimeException("Missing app_state row. Run installer."); - return $row; - } - - public static function currentSettingsVersion(): array { - $state = self::appState(); - $id = (int)$state['current_settings_version_id']; - return self::settingsVersion($id); - } - - public static function settingsVersion(int $id): array { - $st = DB::pdo()->prepare("SELECT * FROM settings_versions WHERE id=?"); - $st->execute([$id]); - $row = $st->fetch(); - if (!$row) throw new \RuntimeException("Settings version not found: $id"); - $row['config'] = json_decode($row['config_json'], true) ?: []; - return $row; - } - - public static function createSettingsVersion(int $createdBy, array $config): int { - $st = DB::pdo()->prepare("INSERT INTO settings_versions(created_by,created_at,config_json) VALUES(?,NOW(),?)"); - $st->execute([$createdBy, json_encode($config, JSON_UNESCAPED_SLASHES)]); - return (int)DB::pdo()->lastInsertId(); - } - - public static function setCurrentSettingsVersion(int $id): void { - DB::pdo()->prepare("UPDATE app_state SET current_settings_version_id=? WHERE id=1")->execute([$id]); - } - - public static function updateAppState(array $data): void { - $fields = []; - $vals = []; - foreach (['company_name','company_email','pay_period_anchor_date','pay_period_length_days'] as $k) { - if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } - } - if (!$fields) return; - $sql = "UPDATE app_state SET " . implode(',', $fields) . " WHERE id=1"; - DB::pdo()->prepare($sql)->execute($vals); - } -} +query("SELECT * FROM app_state WHERE id=1")->fetch(); + if (!$row) throw new \RuntimeException("Missing app_state row. Run installer."); + return $row; + } + + public static function currentSettingsVersion(): array { + $state = self::appState(); + $id = (int)$state['current_settings_version_id']; + return self::settingsVersion($id); + } + + public static function settingsVersion(int $id): array { + $st = DB::pdo()->prepare("SELECT * FROM settings_versions WHERE id=?"); + $st->execute([$id]); + $row = $st->fetch(); + if (!$row) throw new \RuntimeException("Settings version not found: $id"); + $row['config'] = json_decode($row['config_json'], true) ?: []; + return $row; + } + + public static function createSettingsVersion(int $createdBy, array $config): int { + $st = DB::pdo()->prepare("INSERT INTO settings_versions(created_by,created_at,config_json) VALUES(?,NOW(),?)"); + $st->execute([$createdBy, json_encode($config, JSON_UNESCAPED_SLASHES)]); + return (int)DB::pdo()->lastInsertId(); + } + + public static function setCurrentSettingsVersion(int $id): void { + DB::pdo()->prepare("UPDATE app_state SET current_settings_version_id=? WHERE id=1")->execute([$id]); + } + + public static function updateAppState(array $data): void { + $fields = []; + $vals = []; + foreach (['company_name','company_email','pay_period_anchor_date','pay_period_length_days'] as $k) { + if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } + } + if (!$fields) return; + $sql = "UPDATE app_state SET " . implode(',', $fields) . " WHERE id=1"; + DB::pdo()->prepare($sql)->execute($vals); + } +} diff --git a/app/Models/TimeEntry.php b/app/Models/TimeEntry.php index 782587c..dec7f85 100644 --- a/app/Models/TimeEntry.php +++ b/app/Models/TimeEntry.php @@ -1,28 +1,28 @@ -prepare("SELECT * FROM time_entries WHERE user_id=? AND pay_period_id=?"); - $st->execute([$userId, $payPeriodId]); - $rows = $st->fetchAll(); - $map = []; - foreach ($rows as $r) $map[$r['work_date']] = $r; - return $map; - } - - public static function upsert(int $userId, int $payPeriodId, string $workDate, ?string $timeIn, ?string $timeOut): void { - $sql = "INSERT INTO time_entries(user_id,pay_period_id,work_date,time_in,time_out,created_at,updated_at) - VALUES(?,?,?,?,?,NOW(),NOW()) - ON DUPLICATE KEY UPDATE time_in=VALUES(time_in), time_out=VALUES(time_out), updated_at=NOW()"; - DB::pdo()->prepare($sql)->execute([$userId, $payPeriodId, $workDate, $timeIn, $timeOut]); - } - - public static function deleteForDate(int $userId, int $payPeriodId, string $workDate): void { - DB::pdo()->prepare("DELETE FROM time_entries WHERE user_id=? AND pay_period_id=? AND work_date=?")->execute([$userId,$payPeriodId,$workDate]); - } -} +prepare("SELECT * FROM time_entries WHERE user_id=? AND pay_period_id=?"); + $st->execute([$userId, $payPeriodId]); + $rows = $st->fetchAll(); + $map = []; + foreach ($rows as $r) $map[$r['work_date']] = $r; + return $map; + } + + public static function upsert(int $userId, int $payPeriodId, string $workDate, ?string $timeIn, ?string $timeOut): void { + $sql = "INSERT INTO time_entries(user_id,pay_period_id,work_date,time_in,time_out,created_at,updated_at) + VALUES(?,?,?,?,?,NOW(),NOW()) + ON DUPLICATE KEY UPDATE time_in=VALUES(time_in), time_out=VALUES(time_out), updated_at=NOW()"; + DB::pdo()->prepare($sql)->execute([$userId, $payPeriodId, $workDate, $timeIn, $timeOut]); + } + + public static function deleteForDate(int $userId, int $payPeriodId, string $workDate): void { + DB::pdo()->prepare("DELETE FROM time_entries WHERE user_id=? AND pay_period_id=? AND work_date=?")->execute([$userId,$payPeriodId,$workDate]); + } +} diff --git a/app/Models/Timecard.php b/app/Models/Timecard.php index a48f514..d83d08e 100644 --- a/app/Models/Timecard.php +++ b/app/Models/Timecard.php @@ -1,77 +1,89 @@ -prepare("SELECT * FROM timecards WHERE user_id=? AND pay_period_id=? LIMIT 1"); - $st->execute([$userId, $payPeriodId]); - $row = $st->fetch(); - if ($row) return $row; - DB::pdo()->prepare("INSERT INTO timecards(user_id,pay_period_id,pto_minutes,weight_loss_units,nursing_encounters,created_at,updated_at) VALUES(?,?,0,0,0,NOW(),NOW())") - ->execute([$userId, $payPeriodId]); - $st->execute([$userId, $payPeriodId]); - return $st->fetch(); - } - - public static function update(int $userId, int $payPeriodId, array $data): void { - $fields = []; - $vals = []; - foreach (['pto_minutes','weight_loss_units','nursing_encounters','submitted_at','locked_at','locked_by'] as $k) { - if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } - } - if (!$fields) return; - $vals[] = $userId; $vals[] = $payPeriodId; - $sql = "UPDATE timecards SET " . implode(',', $fields) . ", updated_at=NOW() WHERE user_id=? AND pay_period_id=?"; - DB::pdo()->prepare($sql)->execute($vals); - } - - public static function setSubmitted(int $userId, int $payPeriodId): void { - DB::pdo()->prepare("UPDATE timecards SET submitted_at=NOW(), updated_at=NOW() WHERE user_id=? AND pay_period_id=? AND locked_at IS NULL") - ->execute([$userId, $payPeriodId]); - } - - /** - * Admin helper: ensure submitted_at is set even if the card is already locked. - * We only fill it when missing so we don't overwrite an employee's original submit time. - */ - public static function markSubmittedIfNull(int $userId, int $payPeriodId): void { - DB::pdo()->prepare( - "UPDATE timecards SET submitted_at = COALESCE(submitted_at, NOW()), updated_at=NOW() WHERE user_id=? AND pay_period_id=?" - )->execute([$userId, $payPeriodId]); - } - - public static function setLocked(int $userId, int $payPeriodId, int $lockedBy): void { - DB::pdo()->prepare("UPDATE timecards SET locked_at=NOW(), locked_by=?, updated_at=NOW() WHERE user_id=? AND pay_period_id=? AND locked_at IS NULL") - ->execute([$lockedBy, $userId, $payPeriodId]); - } - - public static function setUnlocked(int $userId, int $payPeriodId): void { - DB::pdo()->prepare("UPDATE timecards SET locked_at=NULL, locked_by=NULL, updated_at=NOW() WHERE user_id=? AND pay_period_id=?") - ->execute([$userId, $payPeriodId]); - } - - public static function statusForPayPeriod(int $payPeriodId): array { - $sql = "SELECT u.id as user_id, u.full_name, u.email, u.role, u.active, - tc.submitted_at, tc.locked_at - FROM users u - LEFT JOIN timecards tc ON tc.user_id=u.id AND tc.pay_period_id=? - ORDER BY u.role DESC, u.full_name ASC"; - $st = DB::pdo()->prepare($sql); - $st->execute([$payPeriodId]); - return $st->fetchAll(); - } - - public static function sumPtoUsedYtd(int $userId, int $year): int { - $sql = "SELECT COALESCE(SUM(tc.pto_minutes),0) as m - FROM timecards tc - JOIN pay_periods pp ON pp.id=tc.pay_period_id - WHERE tc.user_id=? AND YEAR(pp.start_date)=?"; - $st = DB::pdo()->prepare($sql); - $st->execute([$userId, $year]); - return (int)($st->fetch()['m'] ?? 0); - } -} +prepare("SELECT * FROM timecards WHERE user_id=? AND pay_period_id=? LIMIT 1"); + $st->execute([$userId, $payPeriodId]); + $row = $st->fetch(); + if ($row) return $row; + DB::pdo()->prepare("INSERT INTO timecards(user_id,pay_period_id,pto_minutes,weight_loss_units,nursing_encounters,created_at,updated_at) VALUES(?,?,0,0,0,NOW(),NOW())") + ->execute([$userId, $payPeriodId]); + $st->execute([$userId, $payPeriodId]); + return $st->fetch(); + } + + public static function update(int $userId, int $payPeriodId, array $data): void { + $fields = []; + $vals = []; + foreach (['pto_minutes','weight_loss_units','nursing_encounters','submitted_at','locked_at','locked_by'] as $k) { + if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = $data[$k]; } + } + if (!$fields) return; + $vals[] = $userId; $vals[] = $payPeriodId; + $sql = "UPDATE timecards SET " . implode(',', $fields) . ", updated_at=NOW() WHERE user_id=? AND pay_period_id=?"; + DB::pdo()->prepare($sql)->execute($vals); + } + + public static function setSubmitted(int $userId, int $payPeriodId): void { + DB::pdo()->prepare("UPDATE timecards SET submitted_at=NOW(), updated_at=NOW() WHERE user_id=? AND pay_period_id=? AND locked_at IS NULL") + ->execute([$userId, $payPeriodId]); + } + + /** + * Admin helper: ensure submitted_at is set even if the card is already locked. + * We only fill it when missing so we don't overwrite an employee's original submit time. + */ + public static function markSubmittedIfNull(int $userId, int $payPeriodId): void { + DB::pdo()->prepare( + "UPDATE timecards SET submitted_at = COALESCE(submitted_at, NOW()), updated_at=NOW() WHERE user_id=? AND pay_period_id=?" + )->execute([$userId, $payPeriodId]); + } + + public static function setLocked(int $userId, int $payPeriodId, int $lockedBy): void { + DB::pdo()->prepare("UPDATE timecards SET locked_at=NOW(), locked_by=?, updated_at=NOW() WHERE user_id=? AND pay_period_id=? AND locked_at IS NULL") + ->execute([$lockedBy, $userId, $payPeriodId]); + } + + public static function setUnlocked(int $userId, int $payPeriodId): void { + DB::pdo()->prepare("UPDATE timecards SET locked_at=NULL, locked_by=NULL, updated_at=NOW() WHERE user_id=? AND pay_period_id=?") + ->execute([$userId, $payPeriodId]); + } + + public static function statusForPayPeriod(int $payPeriodId): array { + $sql = "SELECT u.id as user_id, u.full_name, u.email, u.role, u.active, + tc.submitted_at, tc.locked_at + FROM users u + LEFT JOIN timecards tc ON tc.user_id=u.id AND tc.pay_period_id=? + ORDER BY u.role DESC, u.full_name ASC"; + $st = DB::pdo()->prepare($sql); + $st->execute([$payPeriodId]); + return $st->fetchAll(); + } + + public static function sumPtoUsedYtd(int $userId, int $year): int { + $sql = "SELECT COALESCE(SUM(tc.pto_minutes),0) as m + FROM timecards tc + JOIN pay_periods pp ON pp.id=tc.pay_period_id + WHERE tc.user_id=? AND YEAR(pp.start_date)=?"; + $st = DB::pdo()->prepare($sql); + $st->execute([$userId, $year]); + return (int)($st->fetch()['m'] ?? 0); + } + + public static function sumPtoUsedYtdThroughDate(int $userId, int $year, string $throughEndDate): int { + $sql = "SELECT COALESCE(SUM(tc.pto_minutes),0) as m + FROM timecards tc + JOIN pay_periods pp ON pp.id=tc.pay_period_id + WHERE tc.user_id=? + AND YEAR(pp.start_date)=? + AND pp.end_date <= ?"; + $st = DB::pdo()->prepare($sql); + $st->execute([$userId, $year, $throughEndDate]); + return (int)($st->fetch()['m'] ?? 0); + } +} diff --git a/app/Models/User.php b/app/Models/User.php index 698ca91..09ae1cb 100644 --- a/app/Models/User.php +++ b/app/Models/User.php @@ -1,62 +1,62 @@ -prepare("SELECT * FROM users WHERE id=? LIMIT 1"); - $st->execute([$id]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function findByEmail(string $email): ?array { - $st = DB::pdo()->prepare("SELECT * FROM users WHERE email=? LIMIT 1"); - $st->execute([strtolower(trim($email))]); - $row = $st->fetch(); - return $row ?: null; - } - - public static function all(): array { - return DB::pdo()->query("SELECT * FROM users ORDER BY role DESC, full_name ASC")->fetchAll(); - } - - public static function create(array $data): int { - $st = DB::pdo()->prepare("INSERT INTO users(full_name,email,password_hash,role,active,weight_loss_consultant,nursing_encounters_enabled,pto_bank_minutes,created_at,updated_at) - VALUES(?,?,?,?,?,?,?,?,NOW(),NOW())"); - $st->execute([ - $data['full_name'], - strtolower(trim($data['email'])), - $data['password_hash'], - $data['role'] ?? 'employee', - $data['active'] ?? 1, - $data['weight_loss_consultant'] ?? 0, - $data['nursing_encounters_enabled'] ?? 0, - $data['pto_bank_minutes'] ?? 0, - ]); - return (int)DB::pdo()->lastInsertId(); - } - - public static function update(int $id, array $data): void { - $fields = []; - $vals = []; - foreach (['full_name','email','role','active','weight_loss_consultant','nursing_encounters_enabled','pto_bank_minutes'] as $k) { - if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = ($k==='email'? strtolower(trim((string)$data[$k])) : $data[$k]); } - } - if (!$fields) return; - $vals[] = $id; - $sql = "UPDATE users SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; - DB::pdo()->prepare($sql)->execute($vals); - } - - public static function setPassword(int $id, string $password_hash): void { - DB::pdo()->prepare("UPDATE users SET password_hash=?, updated_at=NOW() WHERE id=?")->execute([$password_hash, $id]); - } - - public static function deleteHard(int $id): void { - DB::pdo()->prepare("DELETE FROM users WHERE id=?")->execute([$id]); - } -} +prepare("SELECT * FROM users WHERE id=? LIMIT 1"); + $st->execute([$id]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function findByEmail(string $email): ?array { + $st = DB::pdo()->prepare("SELECT * FROM users WHERE email=? LIMIT 1"); + $st->execute([strtolower(trim($email))]); + $row = $st->fetch(); + return $row ?: null; + } + + public static function all(): array { + return DB::pdo()->query("SELECT * FROM users ORDER BY role DESC, full_name ASC")->fetchAll(); + } + + public static function create(array $data): int { + $st = DB::pdo()->prepare("INSERT INTO users(full_name,email,password_hash,role,active,weight_loss_consultant,nursing_encounters_enabled,pto_bank_minutes,created_at,updated_at) + VALUES(?,?,?,?,?,?,?,?,NOW(),NOW())"); + $st->execute([ + $data['full_name'], + strtolower(trim($data['email'])), + $data['password_hash'], + $data['role'] ?? 'employee', + $data['active'] ?? 1, + $data['weight_loss_consultant'] ?? 0, + $data['nursing_encounters_enabled'] ?? 0, + $data['pto_bank_minutes'] ?? 0, + ]); + return (int)DB::pdo()->lastInsertId(); + } + + public static function update(int $id, array $data): void { + $fields = []; + $vals = []; + foreach (['full_name','email','role','active','weight_loss_consultant','nursing_encounters_enabled','pto_bank_minutes'] as $k) { + if (array_key_exists($k, $data)) { $fields[] = "$k=?"; $vals[] = ($k==='email'? strtolower(trim((string)$data[$k])) : $data[$k]); } + } + if (!$fields) return; + $vals[] = $id; + $sql = "UPDATE users SET " . implode(',', $fields) . ", updated_at=NOW() WHERE id=?"; + DB::pdo()->prepare($sql)->execute($vals); + } + + public static function setPassword(int $id, string $password_hash): void { + DB::pdo()->prepare("UPDATE users SET password_hash=?, updated_at=NOW() WHERE id=?")->execute([$password_hash, $id]); + } + + public static function deleteHard(int $id): void { + DB::pdo()->prepare("DELETE FROM users WHERE id=?")->execute([$id]); + } +} diff --git a/app/Services/LoginThrottle.php b/app/Services/LoginThrottle.php new file mode 100644 index 0000000..a1d846b --- /dev/null +++ b/app/Services/LoginThrottle.php @@ -0,0 +1,57 @@ += $cutoff; + })); + } + + private static function store(array $timestamps): void { + $dir = self::directory(); + if (!is_dir($dir)) @mkdir($dir, 0755, true); + if (!is_dir($dir) || !is_writable($dir)) return; + + @file_put_contents(self::filePath(), json_encode(array_values($timestamps)), LOCK_EX); + } + + public static function tooManyAttempts(): bool { + $failures = self::recentFailures(); + self::store($failures); + return count($failures) >= self::MAX_FAILURES; + } + + public static function recordFailure(): void { + $failures = self::recentFailures(); + $failures[] = time(); + self::store($failures); + } + + public static function clear(): void { + $path = self::filePath(); + if (is_file($path)) @unlink($path); + } +} diff --git a/app/Services/MailerService.php b/app/Services/MailerService.php index 0e7e966..26a2b1c 100644 --- a/app/Services/MailerService.php +++ b/app/Services/MailerService.php @@ -1,32 +1,32 @@ -format('m/d/Y') : $ymd; - } - - /** - * Times are stored as HH:MM or HH:MM:SS (24h). Display as h:mm AM/PM. - */ - private static function fmtTime(?string $t): string { - if (!$t) return ''; - $t = trim($t); - if ($t === '') return ''; - // Already formatted (e.g., "6:30 AM") - if (preg_match('/\b(AM|PM)\b/i', $t)) return $t; - $hhmm = substr($t, 0, 5); - $dt = \DateTimeImmutable::createFromFormat('H:i', $hhmm); - return $dt ? $dt->format('g:i A') : $hhmm; - } - - private static function hoursDecimal(int $minutes): string { - // Keep 2 decimals for payroll friendliness, e.g. 67.75 - return number_format($minutes / 60, 2, '.', ''); - } - - private static function pdfEscape(string $s): string { - return str_replace(['\\', '(', ')', "\r"], ['\\\\', '\(', '\)', ''], $s); - } - - private static function makePdf(array $linesByPage): string { - // Minimal PDF 1.4 generator with Helvetica Type1 - $objects = []; - $offsets = []; - - $addObj = function(string $obj) use (&$objects) { - $objects[] = $obj; - return count($objects); - }; - - // Use a monospaced font so columns line up (spaces align). - $fontObjNum = $addObj("<< /Type /Font /Subtype /Type1 /BaseFont /Courier >>"); - - $pageKids = []; - $contentsObjNums = []; - foreach ($linesByPage as $pageLines) { - $text = "BT\n/F1 10 Tf\n72 760 Td\n12 TL\n"; - foreach ($pageLines as $i => $line) { - if ($i === 0) { - $text .= "(" . self::pdfEscape($line) . ") Tj\n"; - } else { - $text .= "T*\n(" . self::pdfEscape($line) . ") Tj\n"; - } - } - $text .= "ET\n"; - $stream = "<< /Length " . strlen($text) . " >>\nstream\n" . $text . "endstream"; - $contentsObjNums[] = $addObj($stream); - } - - $pagesObjNum = 0; // placeholder - // Create page objects - foreach ($linesByPage as $idx => $_) { - $contentNum = $contentsObjNums[$idx]; - $pageObj = "<< /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] /Resources << /Font << /F1 {$fontObjNum} 0 R >> >> /Contents {$contentNum} 0 R >>"; - $pageKids[] = $addObj($pageObj); - } - - // Pages object (must be object 2 for the hard-coded Parent above) - // We'll insert as object #2 by building final list carefully. - // Easiest: rebuild objects with fixed numbering. - // We'll rebuild now: - - $rebuilt = []; - $rebuilt[] = null; // index 0 unused - $rebuilt[] = "<< /Type /Catalog /Pages 2 0 R >>"; // 1 - // 2 pages object - $kidsRefs = implode(' ', array_map(fn($n) => "{$n} 0 R", range(4, 3 + count($linesByPage)))); - $rebuilt[] = "<< /Type /Pages /Count " . count($linesByPage) . " /Kids [ {$kidsRefs} ] >>"; // 2 - // 3 font - // 3 font (monospace) - $rebuilt[] = "<< /Type /Font /Subtype /Type1 /BaseFont /Courier >>"; // 3 - - // Page objects start at 4 - $pageCount = count($linesByPage); - for ($i=0; $i<$pageCount; $i++){ - $contentObjNum = 4 + $pageCount + $i; // contents start after all pages - $rebuilt[] = "<< /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] /Resources << /Font << /F1 3 0 R >> >> /Contents {$contentObjNum} 0 R >>"; - } - - // Contents objects - foreach ($linesByPage as $pageLines) { - $text = "BT\n/F1 10 Tf\n72 760 Td\n12 TL\n"; - foreach ($pageLines as $i => $line) { - if ($i === 0) $text .= "(" . self::pdfEscape($line) . ") Tj\n"; - else $text .= "T*\n(" . self::pdfEscape($line) . ") Tj\n"; - } - $text .= "ET\n"; - $rebuilt[] = "<< /Length " . strlen($text) . " >>\nstream\n" . $text . "endstream"; - } - - // Build PDF with xref - $pdf = "%PDF-1.4\n"; - $xref = "xref\n0 " . count($rebuilt) . "\n"; - $xref .= "0000000000 65535 f \n"; - $offset = strlen($pdf); - for ($i=1; $i| Employee | -Submitted | -Locked | -- | |
|---|---|---|---|---|
| - | - | - YesNo - | -- YesNo - | -- View/Edit - | -
| Employee | +Submitted | +Locked | ++ | |
|---|---|---|---|---|
| + | + | + YesNo + | ++ YesNo + | ++ View/Edit + | +
| Name | Role | Active | PTO Bank | - | |
|---|---|---|---|---|---|
| - | - | - | Yes' : 'No' ?> | -- | Edit | -
| Name | Role | Active | PTO Bank | + | |
|---|---|---|---|---|---|
| + | + | + | Yes' : 'No' ?> | ++ | Edit | +
| Provider | Type | Submitted | Locked | |
|---|---|---|---|---|
| - | - | Yes' : 'No' ?> | -Yes' : 'No' ?> | -- View/Edit - | -
| Provider | Type | Submitted | Locked | |
|---|---|---|---|---|
| + | + | Yes' : 'No' ?> | +Yes' : 'No' ?> | ++ View/Edit + | +
| Type | Rate | Effective From | Effective To | |
|---|---|---|---|---|
| - | - | - | - |
-
-
-
-
-
-
-
- |
-
| Type | Rate | Effective From | Effective To | |
|---|---|---|---|---|
| + | + | + | + |
+
+
+
+
+
+
+
+ |
+
| Pay Period | -Created | -Filename | -Emailed To | -Status | -- |
|---|---|---|---|---|---|
| No reports found. | |||||
| → | -- | - | - | - | - Download - Timecards - | -
| Pay Period | +Created | +Filename | +Emailed To | +Status | ++ |
|---|---|---|---|---|---|
| No reports found. | |||||
| → | ++ | + | + | + | + Download + Timecards + | +
| Employee | Submitted | Locked | |
|---|---|---|---|
| - | Yes' : 'No' ?> | -Yes' : 'No' ?> | -- - View/Edit - - View only - - | -
| Provider | Type | Submitted | Locked | |
|---|---|---|---|---|
| - | - | Yes' : 'No' ?> | -Yes' : 'No' ?> | -- - View/Edit - - View only - - | -
| Employee | Submitted | Locked | |
|---|---|---|---|
| + | Yes' : 'No' ?> | +Yes' : 'No' ?> | ++ + View/Edit + + View only + + | +
| Provider | Type | Submitted | Locked | |
|---|---|---|---|---|
| + | + | Yes' : 'No' ?> | +Yes' : 'No' ?> | ++ + View/Edit + + View only + + | +
" - . htmlspecialchars((string)$e, ENT_QUOTES, 'UTF-8') - . ""; - } - - echo ""; - echo "
" . htmlspecialchars($publicMessage, ENT_QUOTES, 'UTF-8') . "
"; - echo "Request ID: " . htmlspecialchars($rid, ENT_QUOTES, 'UTF-8') . "
"; - echo "Log file: " . htmlspecialchars($phpLog, ENT_QUOTES, 'UTF-8') - . ($logWritable ? "" : " (not writable — fix permissions on storage/logs)") . "
"; - echo $details; - echo ""; -}; - -set_exception_handler(function(Throwable $e) use (&$handling, $renderErrorPage) { - if ($handling) return; - $handling = true; - - // IMPORTANT: log as string (PHP 8.2-safe) - error_log("[" . APP_REQUEST_ID . "] " . (string)$e); - - $renderErrorPage('Unhandled exception', $e); -}); - -set_error_handler(function(int $severity, string $message, string $file, int $line) { - if (!(error_reporting() & $severity)) return false; - - error_log("[" . APP_REQUEST_ID . "] PHP {$severity}: {$message} in {$file}:{$line}"); - - // In debug, convert warnings/notices into exceptions to surface stack traces - if (!empty($GLOBALS['APP_DEBUG_RUNTIME'])) { - throw new ErrorException($message, 0, $severity, $file, $line); - } - - // In production, swallow (already logged) - return true; -}); - -register_shutdown_function(function() use ($renderErrorPage) { - $err = error_get_last(); - if (!$err) return; - - $fatalTypes = [E_ERROR, E_PARSE, E_CORE_ERROR, E_COMPILE_ERROR, E_USER_ERROR]; - if (!in_array($err['type'], $fatalTypes, true)) return; - - error_log("[" . APP_REQUEST_ID . "] FATAL {$err['type']}: {$err['message']} in {$err['file']}:{$err['line']}"); - $renderErrorPage('Fatal error (see log for details)'); -}); - -/** - * Autoloader - */ -spl_autoload_register(function($class){ - $prefix = 'App\\'; - $baseDir = __DIR__ . '/'; - if (strncmp($prefix, $class, strlen($prefix)) !== 0) return; - $rel = substr($class, strlen($prefix)); - $file = $baseDir . str_replace('\\', '/', $rel) . '.php'; - if (file_exists($file)) require $file; -}); - -/** - * Load config AFTER handlers are active (so missing/bad config logs properly) - */ -Config::load(__DIR__ . '/config.php'); - -$cfg = Config::get(); -$GLOBALS['APP_DEBUG_RUNTIME'] = !empty($GLOBALS['APP_DEBUG_RUNTIME']) || (bool)($cfg['app']['debug'] ?? false); -if (!defined('APP_DEBUG')) define('APP_DEBUG', (bool)$GLOBALS['APP_DEBUG_RUNTIME']); - -date_default_timezone_set($cfg['app']['timezone'] ?? 'America/New_York'); - -/** - * Session hardening (shared-hosting safe) - */ -// --- Session setup (critical for CSRF on subfolder installs) --- -$cfg = Config::get(); -$baseUrl = (string)($cfg['app']['base_url'] ?? ''); -$cookiePath = '/'; - -if ($baseUrl !== '') { - $u = parse_url($baseUrl); - if (!empty($u['path'])) { - $cookiePath = rtrim($u['path'], '/') . '/'; - } -} - -// Store sessions inside the app (more reliable on shared hosting) -$sessionDir = dirname(__DIR__) . '/storage/sessions'; -if (!is_dir($sessionDir)) { @mkdir($sessionDir, 0755, true); } -if (is_dir($sessionDir) && is_writable($sessionDir)) { - ini_set('session.save_path', $sessionDir); -} - -// Avoid collisions with other PHP apps on the same domain -session_name('TIMECLKSESSID'); - -ini_set('session.cookie_path', $cookiePath); -ini_set('session.cookie_httponly', '1'); -ini_set('session.use_strict_mode', '1'); -ini_set('session.cookie_samesite', 'Lax'); -if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { - ini_set('session.cookie_secure', '1'); -} - -session_start(); - +Details" + . "" + . htmlspecialchars((string)$e, ENT_QUOTES, 'UTF-8') + . ""; + } + + echo ""; + echo "
" . htmlspecialchars($publicMessage, ENT_QUOTES, 'UTF-8') . "
"; + echo "Request ID: " . htmlspecialchars($rid, ENT_QUOTES, 'UTF-8') . "
"; + if ($debug) { + echo "Log file: " . htmlspecialchars($phpLog, ENT_QUOTES, 'UTF-8') + . ($logWritable ? "" : " (not writable — fix permissions on storage/logs)") . "
"; + } + echo $details; + echo ""; +}; + +set_exception_handler(function(Throwable $e) use (&$handling, $renderErrorPage) { + if ($handling) return; + $handling = true; + + // IMPORTANT: log as string (PHP 8.2-safe) + error_log("[" . APP_REQUEST_ID . "] " . (string)$e); + + $renderErrorPage('Unhandled exception', $e); +}); + +set_error_handler(function(int $severity, string $message, string $file, int $line) { + if (!(error_reporting() & $severity)) return false; + + error_log("[" . APP_REQUEST_ID . "] PHP {$severity}: {$message} in {$file}:{$line}"); + + // In debug, convert warnings/notices into exceptions to surface stack traces + if (!empty($GLOBALS['APP_DEBUG_RUNTIME'])) { + throw new ErrorException($message, 0, $severity, $file, $line); + } + + // In production, swallow (already logged) + return true; +}); + +register_shutdown_function(function() use ($renderErrorPage) { + $err = error_get_last(); + if (!$err) return; + + $fatalTypes = [E_ERROR, E_PARSE, E_CORE_ERROR, E_COMPILE_ERROR, E_USER_ERROR]; + if (!in_array($err['type'], $fatalTypes, true)) return; + + error_log("[" . APP_REQUEST_ID . "] FATAL {$err['type']}: {$err['message']} in {$err['file']}:{$err['line']}"); + $renderErrorPage('Fatal error (see log for details)'); +}); + +/** + * Autoloader + */ +spl_autoload_register(function($class){ + $prefix = 'App\\'; + $baseDir = __DIR__ . '/'; + if (strncmp($prefix, $class, strlen($prefix)) !== 0) return; + $rel = substr($class, strlen($prefix)); + $file = $baseDir . str_replace('\\', '/', $rel) . '.php'; + if (file_exists($file)) require $file; +}); + +/** + * Load config AFTER handlers are active (so missing/bad config logs properly) + */ +Config::load(__DIR__ . '/config.php'); + +$cfg = Config::get(); +$GLOBALS['APP_DEBUG_RUNTIME'] = !empty($GLOBALS['APP_DEBUG_RUNTIME']) || (bool)($cfg['app']['debug'] ?? false); +if (!defined('APP_DEBUG')) define('APP_DEBUG', (bool)$GLOBALS['APP_DEBUG_RUNTIME']); + +date_default_timezone_set($cfg['app']['timezone'] ?? 'America/New_York'); + +/** + * Session hardening (shared-hosting safe) + */ +// --- Session setup (critical for CSRF on subfolder installs) --- +$cfg = Config::get(); +$baseUrl = (string)($cfg['app']['base_url'] ?? ''); +$cookiePath = '/'; + +if ($baseUrl !== '') { + $u = parse_url($baseUrl); + if (!empty($u['path'])) { + $cookiePath = rtrim($u['path'], '/') . '/'; + } +} + +// Store sessions inside the app (more reliable on shared hosting) +$sessionDir = dirname(__DIR__) . '/storage/sessions'; +if (!is_dir($sessionDir)) { @mkdir($sessionDir, 0755, true); } +if (is_dir($sessionDir) && is_writable($sessionDir)) { + ini_set('session.save_path', $sessionDir); +} + +// Avoid collisions with other PHP apps on the same domain +session_name('TIMECLKSESSID'); + +ini_set('session.cookie_path', $cookiePath); +ini_set('session.cookie_httponly', '1'); +ini_set('session.use_only_cookies', '1'); +ini_set('session.use_strict_mode', '1'); +ini_set('session.cookie_samesite', 'Lax'); +if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { + ini_set('session.cookie_secure', '1'); +} + +session_start(); + diff --git a/app/config.sample.php b/app/config.sample.php index 2cfd463..c90645b 100644 --- a/app/config.sample.php +++ b/app/config.sample.php @@ -1,19 +1,19 @@ - [ - 'base_url' => '', // e.g. https://example.com/timeclock-pro - 'timezone' => 'America/New_York', - 'debug' => false, // Or create storage/DEBUG_ON to enable debugging - // 'base_url' can be left empty; the app will infer the subfolder automatically. - - ], - 'db' => [ - 'host' => 'localhost', - 'name' => 'timeclock', - 'user' => 'timeclock_user', - 'pass' => 'CHANGE_ME', - 'charset' => 'utf8mb4', - ], -]; + [ + 'base_url' => '', // e.g. https://example.com/timeclock-pro + 'timezone' => 'UTC', + 'debug' => false, // Or create storage/DEBUG_ON to enable debugging + // 'base_url' can be left empty; the app will infer the subfolder automatically. + + ], + 'db' => [ + 'host' => 'localhost', + 'name' => 'timeclock', + 'user' => 'timeclock_user', + 'pass' => 'CHANGE_ME', + 'charset' => 'utf8mb4', + ], +]; diff --git a/app/helpers.php b/app/helpers.php index f406b45..eaf437b 100644 --- a/app/helpers.php +++ b/app/helpers.php @@ -1,245 +1,245 @@ - date('c'), - 'rid' => request_id(), - 'level' => strtoupper($level), - 'msg' => $message, - 'ctx' => $context, - ]; - - $line = json_encode($entry, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) . "\n"; - @file_put_contents($file, $line, FILE_APPEND | LOCK_EX); -} - -function now(): string { return (new DateTimeImmutable('now'))->format('Y-m-d H:i:s'); } - -function minutes_to_hhmm(int $minutes): string { - $sign = $minutes < 0 ? '-' : ''; - $minutes = abs($minutes); - $h = intdiv($minutes, 60); - $m = $minutes % 60; - return sprintf('%s%02d:%02d', $sign, $h, $m); -} - -function minutes_to_hours_decimal(int $minutes, int $precision = 2): string { - $sign = $minutes < 0 ? '-' : ''; - $minutes = abs($minutes); - $hours = $minutes / 60; - return $sign . number_format($hours, $precision, '.', ''); -} - - -/** - * Format a YYYY-MM-DD date string as MM/DD/YYYY for display. - * If parsing fails, returns the original string. - */ -function fmt_date(?string $date): string { - $date = trim((string)$date); - if ($date === '') return ''; - $date = substr($date, 0, 10); - - $cfg = \App\Core\Config::get(); - $tzName = (string)($cfg['app']['timezone'] ?? 'UTC'); - - try { - $tz = new \DateTimeZone($tzName); - } catch (\Throwable $e) { - $tz = new \DateTimeZone('UTC'); - } - - try { - $dt = \DateTimeImmutable::createFromFormat('Y-m-d', $date, $tz); - if ($dt instanceof \DateTimeImmutable) { - return $dt->format('m/d/Y'); - } - $dt2 = new \DateTimeImmutable($date, $tz); - return $dt2->format('m/d/Y'); - } catch (\Throwable $e) { - return $date; - } -} - -/** - * Format a datetime (YYYY-MM-DD HH:MM:SS) as MM/DD/YYYY h:mm AM/PM for display. - * If parsing fails, returns the original string. - */ -function fmt_datetime(?string $dt, bool $includeTime = true): string { - $dt = trim((string)$dt); - if ($dt === '') return ''; - - $cfg = \App\Core\Config::get(); - $tzName = (string)($cfg['app']['timezone'] ?? 'UTC'); - - try { - $tz = new \DateTimeZone($tzName); - } catch (\Throwable $e) { - $tz = new \DateTimeZone('UTC'); - } - - try { - $dti = new \DateTimeImmutable($dt, $tz); - return $dti->format($includeTime ? 'm/d/Y g:i A' : 'm/d/Y'); - } catch (\Throwable $e) { - return $dt; - } -} - -function hhmm_to_minutes(string $hhmm): int { - if (!preg_match('/^(\d{1,3}):(\d{2})$/', $hhmm, $m)) return 0; - return ((int)$m[1]) * 60 + (int)$m[2]; -} - -function flash_set(string $key, string $msg): void { - $_SESSION['_flash'][$key] = $msg; -} -function flash_get(string $key): ?string { - $msg = $_SESSION['_flash'][$key] ?? null; - if ($msg !== null) unset($_SESSION['_flash'][$key]); - return $msg; -} - -/** - * Compute and ensure the pay period that contains today's date. - */ -function current_pay_period(): array { - $state = \App\Models\Settings::appState(); - $anchor = new \DateTimeImmutable($state['pay_period_anchor_date']); - $len = (int)$state['pay_period_length_days']; - - $today = new \DateTimeImmutable('today'); - $diffDays = (int)$anchor->diff($today)->format('%r%a'); - $idx = (int)floor($diffDays / $len); - if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; - - $start = $anchor->modify('+' . ($idx * $len) . ' days'); - $end = $start->modify('+' . ($len - 1) . ' days'); - - $sv = (int)$state['current_settings_version_id']; - return \App\Models\PayPeriod::ensure($start->format('Y-m-d'), $end->format('Y-m-d'), $sv); -} - -/** - * Resolve the selected working pay period. - * ?pp=ID updates the session selection. No ?pp=ID uses the current session selection. - * A fresh login/no session selection defaults to the current pay period. - */ -function selected_pay_period(?int $requestedId = null): array { - $requestedId = $requestedId ?? (int)($_GET['pp'] ?? 0); - - if ($requestedId > 0) { - $pp = \App\Models\PayPeriod::findById($requestedId); - if ($pp) { - $_SESSION['selected_pay_period_id'] = (int)$pp['id']; - return $pp; - } - } - - $savedId = (int)($_SESSION['selected_pay_period_id'] ?? 0); - if ($savedId > 0) { - $pp = \App\Models\PayPeriod::findById($savedId); - if ($pp) return $pp; - } - - $pp = current_pay_period(); - $_SESSION['selected_pay_period_id'] = (int)$pp['id']; - return $pp; -} - -function recent_pay_periods_with_selected(array $selected, int $limit = 8): array { - $periods = \App\Models\PayPeriod::listRecent($limit); - $has = false; - foreach ($periods as $p) { - if ((int)$p['id'] === (int)$selected['id']) { $has = true; break; } - } - if (!$has) array_unshift($periods, $selected); - return $periods; -} + date('c'), + 'rid' => request_id(), + 'level' => strtoupper($level), + 'msg' => $message, + 'ctx' => $context, + ]; + + $line = json_encode($entry, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) . "\n"; + @file_put_contents($file, $line, FILE_APPEND | LOCK_EX); +} + +function now(): string { return (new DateTimeImmutable('now'))->format('Y-m-d H:i:s'); } + +function minutes_to_hhmm(int $minutes): string { + $sign = $minutes < 0 ? '-' : ''; + $minutes = abs($minutes); + $h = intdiv($minutes, 60); + $m = $minutes % 60; + return sprintf('%s%02d:%02d', $sign, $h, $m); +} + +function minutes_to_hours_decimal(int $minutes, int $precision = 2): string { + $sign = $minutes < 0 ? '-' : ''; + $minutes = abs($minutes); + $hours = $minutes / 60; + return $sign . number_format($hours, $precision, '.', ''); +} + + +/** + * Format a YYYY-MM-DD date string as MM/DD/YYYY for display. + * If parsing fails, returns the original string. + */ +function fmt_date(?string $date): string { + $date = trim((string)$date); + if ($date === '') return ''; + $date = substr($date, 0, 10); + + $cfg = \App\Core\Config::get(); + $tzName = (string)($cfg['app']['timezone'] ?? 'UTC'); + + try { + $tz = new \DateTimeZone($tzName); + } catch (\Throwable $e) { + $tz = new \DateTimeZone('UTC'); + } + + try { + $dt = \DateTimeImmutable::createFromFormat('Y-m-d', $date, $tz); + if ($dt instanceof \DateTimeImmutable) { + return $dt->format('m/d/Y'); + } + $dt2 = new \DateTimeImmutable($date, $tz); + return $dt2->format('m/d/Y'); + } catch (\Throwable $e) { + return $date; + } +} + +/** + * Format a datetime (YYYY-MM-DD HH:MM:SS) as MM/DD/YYYY h:mm AM/PM for display. + * If parsing fails, returns the original string. + */ +function fmt_datetime(?string $dt, bool $includeTime = true): string { + $dt = trim((string)$dt); + if ($dt === '') return ''; + + $cfg = \App\Core\Config::get(); + $tzName = (string)($cfg['app']['timezone'] ?? 'UTC'); + + try { + $tz = new \DateTimeZone($tzName); + } catch (\Throwable $e) { + $tz = new \DateTimeZone('UTC'); + } + + try { + $dti = new \DateTimeImmutable($dt, $tz); + return $dti->format($includeTime ? 'm/d/Y g:i A' : 'm/d/Y'); + } catch (\Throwable $e) { + return $dt; + } +} + +function hhmm_to_minutes(string $hhmm): int { + if (!preg_match('/^(\d{1,3}):(\d{2})$/', $hhmm, $m)) return 0; + return ((int)$m[1]) * 60 + (int)$m[2]; +} + +function flash_set(string $key, string $msg): void { + $_SESSION['_flash'][$key] = $msg; +} +function flash_get(string $key): ?string { + $msg = $_SESSION['_flash'][$key] ?? null; + if ($msg !== null) unset($_SESSION['_flash'][$key]); + return $msg; +} + +/** + * Compute and ensure the pay period that contains today's date. + */ +function current_pay_period(): array { + $state = \App\Models\Settings::appState(); + $anchor = new \DateTimeImmutable($state['pay_period_anchor_date']); + $len = (int)$state['pay_period_length_days']; + + $today = new \DateTimeImmutable('today'); + $diffDays = (int)$anchor->diff($today)->format('%r%a'); + $idx = (int)floor($diffDays / $len); + if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; + + $start = $anchor->modify('+' . ($idx * $len) . ' days'); + $end = $start->modify('+' . ($len - 1) . ' days'); + + $sv = (int)$state['current_settings_version_id']; + return \App\Models\PayPeriod::ensure($start->format('Y-m-d'), $end->format('Y-m-d'), $sv); +} + +/** + * Resolve the selected working pay period. + * ?pp=ID updates the session selection. No ?pp=ID uses the current session selection. + * A fresh login/no session selection defaults to the current pay period. + */ +function selected_pay_period(?int $requestedId = null): array { + $requestedId = $requestedId ?? (int)($_GET['pp'] ?? 0); + + if ($requestedId > 0) { + $pp = \App\Models\PayPeriod::findById($requestedId); + if ($pp) { + $_SESSION['selected_pay_period_id'] = (int)$pp['id']; + return $pp; + } + } + + $savedId = (int)($_SESSION['selected_pay_period_id'] ?? 0); + if ($savedId > 0) { + $pp = \App\Models\PayPeriod::findById($savedId); + if ($pp) return $pp; + } + + $pp = current_pay_period(); + $_SESSION['selected_pay_period_id'] = (int)$pp['id']; + return $pp; +} + +function recent_pay_periods_with_selected(array $selected, int $limit = 8): array { + $periods = \App\Models\PayPeriod::listRecent($limit); + $has = false; + foreach ($periods as $p) { + if ((int)$p['id'] === (int)$selected['id']) { $has = true; break; } + } + if (!$has) array_unshift($periods, $selected); + return $periods; +} diff --git a/bin/create-admin.php b/bin/create-admin.php new file mode 100644 index 0000000..7a319da --- /dev/null +++ b/bin/create-admin.php @@ -0,0 +1,59 @@ + 190) { + fwrite(STDERR, "Enter an administrator name between 1 and 190 characters.\n"); + exit(1); +} +if (!filter_var($email, FILTER_VALIDATE_EMAIL) || strlen($email) > 190) { + fwrite(STDERR, "Enter a valid administrator email address.\n"); + exit(1); +} +if (strlen($password) < 12) { + fwrite(STDERR, "The administrator password must contain at least 12 characters.\n"); + exit(1); +} +if (User::findByEmail($email)) { + fwrite(STDERR, "A user with that email address already exists.\n"); + exit(1); +} + +User::create([ + 'full_name' => $name, + 'email' => $email, + 'password_hash' => password_hash($password, PASSWORD_DEFAULT), + 'role' => 'super', + 'active' => 1, + 'weight_loss_consultant' => 0, + 'nursing_encounters_enabled' => 0, + 'pto_bank_minutes' => 0, +]); + +fwrite(STDOUT, "Administrator created successfully.\n"); diff --git a/cron/ensure_pay_period.php b/cron/ensure_pay_period.php index e0e01b9..2ee61f5 100644 --- a/cron/ensure_pay_period.php +++ b/cron/ensure_pay_period.php @@ -1,29 +1,29 @@ -diff($today)->format('%r%a'); -$idx = (int)floor($diffDays / $len); -if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; - -$currentStart = $anchor->modify('+' . ($idx*$len) . ' days'); -$nextStart = $currentStart->modify('+' . $len . ' days'); -$nextEnd = $nextStart->modify('+' . ($len-1) . ' days'); - -$sv = (int)$state['current_settings_version_id']; -PayPeriod::ensure($nextStart->format('Y-m-d'), $nextEnd->format('Y-m-d'), $sv); - -echo "OK: ensured next pay period " . $nextStart->format('Y-m-d') . " through " . $nextEnd->format('Y-m-d') . PHP_EOL; +diff($today)->format('%r%a'); +$idx = (int)floor($diffDays / $len); +if ($diffDays < 0) $idx = (int)ceil($diffDays / $len) - 1; + +$currentStart = $anchor->modify('+' . ($idx*$len) . ' days'); +$nextStart = $currentStart->modify('+' . $len . ' days'); +$nextEnd = $nextStart->modify('+' . ($len-1) . ' days'); + +$sv = (int)$state['current_settings_version_id']; +PayPeriod::ensure($nextStart->format('Y-m-d'), $nextEnd->format('Y-m-d'), $sv); + +echo "OK: ensured next pay period " . $nextStart->format('Y-m-d') . " through " . $nextEnd->format('Y-m-d') . PHP_EOL; diff --git a/database/migrations/2026-01-12_add_provider_pto.sql b/database/migrations/2026-01-12_add_provider_pto.sql index c820252..7f3c487 100644 --- a/database/migrations/2026-01-12_add_provider_pto.sql +++ b/database/migrations/2026-01-12_add_provider_pto.sql @@ -1,19 +1,19 @@ --- Provider PTO bank + per-pay-period PTO usage --- Providers who do not accrue PTO can leave pto_bank_minutes = 0. - -ALTER TABLE providers - ADD COLUMN pto_bank_minutes INT NOT NULL DEFAULT 0 AFTER active; - -CREATE TABLE IF NOT EXISTS provider_pto ( - provider_id INT NOT NULL, - pay_period_id INT NOT NULL, - pto_minutes INT NOT NULL DEFAULT 0, - submitted_at DATETIME NULL, - locked_at DATETIME NULL, - locked_by INT NULL, - created_at DATETIME NOT NULL, - updated_at DATETIME NOT NULL, - PRIMARY KEY (provider_id, pay_period_id), - KEY idx_provider_pto_period (pay_period_id), - KEY idx_provider_pto_provider (provider_id) -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; +-- Provider PTO bank + per-pay-period PTO usage +-- Providers who do not accrue PTO can leave pto_bank_minutes = 0. + +ALTER TABLE providers + ADD COLUMN pto_bank_minutes INT NOT NULL DEFAULT 0 AFTER active; + +CREATE TABLE IF NOT EXISTS provider_pto ( + provider_id INT NOT NULL, + pay_period_id INT NOT NULL, + pto_minutes INT NOT NULL DEFAULT 0, + submitted_at DATETIME NULL, + locked_at DATETIME NULL, + locked_by INT NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + PRIMARY KEY (provider_id, pay_period_id), + KEY idx_provider_pto_period (pay_period_id), + KEY idx_provider_pto_provider (provider_id) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; diff --git a/database/migrations/2026-01-12_add_weight_loss_consultant.sql b/database/migrations/2026-01-12_add_weight_loss_consultant.sql index e0c6e0f..9deea0b 100644 --- a/database/migrations/2026-01-12_add_weight_loss_consultant.sql +++ b/database/migrations/2026-01-12_add_weight_loss_consultant.sql @@ -1,6 +1,6 @@ --- Add Weight Loss Consultant flag and per-pay-period sales count -ALTER TABLE users - ADD COLUMN weight_loss_consultant TINYINT(1) NOT NULL DEFAULT 0 AFTER active; - -ALTER TABLE timecards - ADD COLUMN weight_loss_units INT NOT NULL DEFAULT 0 AFTER pto_minutes; +-- Add Weight Loss Consultant flag and per-pay-period sales count +ALTER TABLE users + ADD COLUMN weight_loss_consultant TINYINT(1) NOT NULL DEFAULT 0 AFTER active; + +ALTER TABLE timecards + ADD COLUMN weight_loss_units INT NOT NULL DEFAULT 0 AFTER pto_minutes; diff --git a/database/migrations/2026-03-27_add_nursing_encounters.sql b/database/migrations/2026-03-27_add_nursing_encounters.sql index 4a246b0..9f387f7 100644 --- a/database/migrations/2026-03-27_add_nursing_encounters.sql +++ b/database/migrations/2026-03-27_add_nursing_encounters.sql @@ -1,7 +1,7 @@ --- Add reusable Nursing Encounters employee flag + per-pay-period count -ALTER TABLE users - ADD COLUMN nursing_encounters_enabled TINYINT(1) NOT NULL DEFAULT 0 AFTER weight_loss_consultant; - +-- Add reusable Nursing Encounters employee flag + per-pay-period count +ALTER TABLE users + ADD COLUMN nursing_encounters_enabled TINYINT(1) NOT NULL DEFAULT 0 AFTER weight_loss_consultant; + ALTER TABLE timecards ADD COLUMN nursing_encounters INT NOT NULL DEFAULT 0 AFTER weight_loss_units; diff --git a/database/schema.sql b/database/schema.sql index 8d5aed7..cc454fa 100644 --- a/database/schema.sql +++ b/database/schema.sql @@ -1,100 +1,179 @@ --- TimeClock Pro schema (MySQL/MariaDB) --- Safe to run on a fresh database. - -SET sql_mode = 'STRICT_ALL_TABLES'; - -CREATE TABLE IF NOT EXISTS users ( - id INT AUTO_INCREMENT PRIMARY KEY, - full_name VARCHAR(190) NOT NULL, - email VARCHAR(190) NOT NULL UNIQUE, - password_hash VARCHAR(255) NOT NULL, - role ENUM('employee','super') NOT NULL DEFAULT 'employee', - active TINYINT(1) NOT NULL DEFAULT 1, - weight_loss_consultant TINYINT(1) NOT NULL DEFAULT 0, - nursing_encounters_enabled TINYINT(1) NOT NULL DEFAULT 0, - pto_bank_minutes INT NOT NULL DEFAULT 0, - created_at DATETIME NOT NULL, - updated_at DATETIME NOT NULL -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS settings_versions ( - id INT AUTO_INCREMENT PRIMARY KEY, - created_by INT NOT NULL DEFAULT 0, - created_at DATETIME NOT NULL, - config_json JSON NOT NULL -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS app_state ( - id INT PRIMARY KEY, - current_settings_version_id INT NOT NULL, - company_name VARCHAR(190) NOT NULL DEFAULT 'TimeClock', - company_email VARCHAR(190) NOT NULL DEFAULT '', - pay_period_anchor_date DATE NOT NULL, - pay_period_length_days INT NOT NULL DEFAULT 14, - CONSTRAINT fk_app_state_settings FOREIGN KEY (current_settings_version_id) REFERENCES settings_versions(id) -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS pay_periods ( - id INT AUTO_INCREMENT PRIMARY KEY, - start_date DATE NOT NULL, - end_date DATE NOT NULL, - settings_version_id INT NOT NULL, - locked_at DATETIME NULL, - locked_by INT NULL, - created_at DATETIME NOT NULL, - UNIQUE KEY uniq_period (start_date, end_date), - CONSTRAINT fk_payperiod_settings FOREIGN KEY (settings_version_id) REFERENCES settings_versions(id) -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS timecards ( - id INT AUTO_INCREMENT PRIMARY KEY, - user_id INT NOT NULL, - pay_period_id INT NOT NULL, - pto_minutes INT NOT NULL DEFAULT 0, - weight_loss_units INT NOT NULL DEFAULT 0, - nursing_encounters INT NOT NULL DEFAULT 0, - submitted_at DATETIME NULL, - locked_at DATETIME NULL, - locked_by INT NULL, - created_at DATETIME NOT NULL, - updated_at DATETIME NOT NULL, - UNIQUE KEY uniq_timecard (user_id, pay_period_id), - CONSTRAINT fk_timecards_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE, - CONSTRAINT fk_timecards_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS time_entries ( - id INT AUTO_INCREMENT PRIMARY KEY, - user_id INT NOT NULL, - pay_period_id INT NOT NULL, - work_date DATE NOT NULL, - time_in TIME NULL, - time_out TIME NULL, - created_at DATETIME NOT NULL, - updated_at DATETIME NOT NULL, - UNIQUE KEY uniq_entry (user_id, pay_period_id, work_date), - CONSTRAINT fk_entries_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE, - CONSTRAINT fk_entries_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS audit_log ( - id INT AUTO_INCREMENT PRIMARY KEY, - actor_user_id INT NOT NULL, - action VARCHAR(120) NOT NULL, - entity VARCHAR(120) NOT NULL, - entity_id INT NULL, - payload_json JSON NULL, - created_at DATETIME NOT NULL, - INDEX idx_actor_created (actor_user_id, created_at) -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; - -CREATE TABLE IF NOT EXISTS reports ( - id INT AUTO_INCREMENT PRIMARY KEY, - pay_period_id INT NOT NULL, - filename VARCHAR(255) NOT NULL, - filepath VARCHAR(255) NOT NULL, - created_at DATETIME NOT NULL, - emailed_to VARCHAR(190) NOT NULL, - email_status VARCHAR(32) NOT NULL DEFAULT 'unknown', - CONSTRAINT fk_reports_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE -) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; +-- TimeClock Pro schema (MySQL/MariaDB) +-- Intended for a fresh database. Existing installations should use migrations. + +SET sql_mode = 'STRICT_ALL_TABLES'; + +CREATE TABLE IF NOT EXISTS users ( + id INT AUTO_INCREMENT PRIMARY KEY, + full_name VARCHAR(190) NOT NULL, + email VARCHAR(190) NOT NULL UNIQUE, + password_hash VARCHAR(255) NOT NULL, + role ENUM('employee','super') NOT NULL DEFAULT 'employee', + active TINYINT(1) NOT NULL DEFAULT 1, + weight_loss_consultant TINYINT(1) NOT NULL DEFAULT 0, + nursing_encounters_enabled TINYINT(1) NOT NULL DEFAULT 0, + pto_bank_minutes INT NOT NULL DEFAULT 0, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS settings_versions ( + id INT AUTO_INCREMENT PRIMARY KEY, + created_by INT NOT NULL DEFAULT 0, + created_at DATETIME NOT NULL, + config_json JSON NOT NULL +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS app_state ( + id INT PRIMARY KEY, + current_settings_version_id INT NOT NULL, + company_name VARCHAR(190) NOT NULL DEFAULT 'TimeClock Pro', + company_email VARCHAR(190) NOT NULL DEFAULT '', + pay_period_anchor_date DATE NOT NULL, + pay_period_length_days INT NOT NULL DEFAULT 14, + CONSTRAINT fk_app_state_settings FOREIGN KEY (current_settings_version_id) REFERENCES settings_versions(id) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS pay_periods ( + id INT AUTO_INCREMENT PRIMARY KEY, + start_date DATE NOT NULL, + end_date DATE NOT NULL, + settings_version_id INT NOT NULL, + locked_at DATETIME NULL, + locked_by INT NULL, + created_at DATETIME NOT NULL, + UNIQUE KEY uniq_period (start_date, end_date), + CONSTRAINT fk_payperiod_settings FOREIGN KEY (settings_version_id) REFERENCES settings_versions(id) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS timecards ( + id INT AUTO_INCREMENT PRIMARY KEY, + user_id INT NOT NULL, + pay_period_id INT NOT NULL, + pto_minutes INT NOT NULL DEFAULT 0, + weight_loss_units INT NOT NULL DEFAULT 0, + nursing_encounters INT NOT NULL DEFAULT 0, + submitted_at DATETIME NULL, + locked_at DATETIME NULL, + locked_by INT NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + UNIQUE KEY uniq_timecard (user_id, pay_period_id), + CONSTRAINT fk_timecards_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE, + CONSTRAINT fk_timecards_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS time_entries ( + id INT AUTO_INCREMENT PRIMARY KEY, + user_id INT NOT NULL, + pay_period_id INT NOT NULL, + work_date DATE NOT NULL, + time_in TIME NULL, + time_out TIME NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + UNIQUE KEY uniq_entry (user_id, pay_period_id, work_date), + CONSTRAINT fk_entries_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE, + CONSTRAINT fk_entries_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS providers ( + id INT AUTO_INCREMENT PRIMARY KEY, + provider_type ENUM('chiro','massage') NOT NULL DEFAULT 'chiro', + full_name VARCHAR(190) NOT NULL, + active TINYINT(1) NOT NULL DEFAULT 1, + pto_bank_minutes INT NOT NULL DEFAULT 0, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + INDEX idx_providers_active_type (active, provider_type) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS appointment_types ( + id INT AUTO_INCREMENT PRIMARY KEY, + provider_type ENUM('chiro','massage') NOT NULL DEFAULT 'chiro', + name VARCHAR(190) NOT NULL, + active TINYINT(1) NOT NULL DEFAULT 1, + sort_order INT NOT NULL DEFAULT 0, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + INDEX idx_appointment_type (provider_type, active, sort_order) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS provider_rates ( + id INT AUTO_INCREMENT PRIMARY KEY, + provider_id INT NOT NULL, + appointment_type_id INT NOT NULL, + rate DECIMAL(10,2) NOT NULL DEFAULT 0.00, + effective_from DATE NOT NULL, + effective_to DATE NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + INDEX idx_provider_rate_lookup (provider_id, appointment_type_id, effective_from, effective_to), + CONSTRAINT fk_provider_rates_provider FOREIGN KEY (provider_id) REFERENCES providers(id) ON DELETE CASCADE, + CONSTRAINT fk_provider_rates_type FOREIGN KEY (appointment_type_id) REFERENCES appointment_types(id) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS provider_production ( + id INT AUTO_INCREMENT PRIMARY KEY, + provider_id INT NOT NULL, + pay_period_id INT NOT NULL, + appointment_type_id INT NOT NULL, + `count` INT NOT NULL DEFAULT 0, + rate_used DECIMAL(10,2) NULL, + submitted_at DATETIME NULL, + locked_at DATETIME NULL, + locked_by INT NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + UNIQUE KEY uniq_provider_production (provider_id, pay_period_id, appointment_type_id), + INDEX idx_provider_production_period (pay_period_id), + CONSTRAINT fk_production_provider FOREIGN KEY (provider_id) REFERENCES providers(id) ON DELETE CASCADE, + CONSTRAINT fk_production_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE, + CONSTRAINT fk_production_type FOREIGN KEY (appointment_type_id) REFERENCES appointment_types(id) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS provider_pto ( + provider_id INT NOT NULL, + pay_period_id INT NOT NULL, + pto_minutes INT NOT NULL DEFAULT 0, + submitted_at DATETIME NULL, + locked_at DATETIME NULL, + locked_by INT NULL, + created_at DATETIME NOT NULL, + updated_at DATETIME NOT NULL, + PRIMARY KEY (provider_id, pay_period_id), + INDEX idx_provider_pto_period (pay_period_id), + CONSTRAINT fk_provider_pto_provider FOREIGN KEY (provider_id) REFERENCES providers(id) ON DELETE CASCADE, + CONSTRAINT fk_provider_pto_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS audit_log ( + id INT AUTO_INCREMENT PRIMARY KEY, + actor_user_id INT NOT NULL, + action VARCHAR(120) NOT NULL, + entity VARCHAR(120) NOT NULL, + entity_id INT NULL, + payload_json JSON NULL, + created_at DATETIME NOT NULL, + INDEX idx_actor_created (actor_user_id, created_at) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +CREATE TABLE IF NOT EXISTS reports ( + id INT AUTO_INCREMENT PRIMARY KEY, + pay_period_id INT NOT NULL, + filename VARCHAR(255) NOT NULL, + filepath VARCHAR(255) NOT NULL, + created_at DATETIME NOT NULL, + emailed_to VARCHAR(190) NOT NULL, + email_status VARCHAR(32) NOT NULL DEFAULT 'unknown', + CONSTRAINT fk_reports_period FOREIGN KEY (pay_period_id) REFERENCES pay_periods(id) ON DELETE CASCADE +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; + +INSERT IGNORE INTO settings_versions (id, created_by, created_at, config_json) +VALUES (1, 0, NOW(), '{"time_increment_minutes":15,"allowed_minutes":[0,15,30,45],"rounding_mode":"nearest","days_to_show":[1,2,3,4,5,6],"time_start_hour":5,"time_end_hour":20}'); + +INSERT IGNORE INTO app_state + (id, current_settings_version_id, company_name, company_email, pay_period_anchor_date, pay_period_length_days) +VALUES + (1, 1, 'TimeClock Pro', '', DATE_SUB(CURDATE(), INTERVAL WEEKDAY(CURDATE()) DAY), 14); + diff --git a/public/.htaccess b/public/.htaccess index a357e5f..c4daa01 100644 --- a/public/.htaccess +++ b/public/.htaccess @@ -1,17 +1,17 @@ -