added submission history, data insights, download all functionality

2026-06-01 12:54:56 +02:00
parent 9a6fa22d84
commit bee7b74e53
19 changed files with 1863 additions and 110 deletions
--- a/handlers/analytics.php
+++ b/handlers/analytics.php
@ -0,0 +1,53 @@
+<?php
+
+$tokenRec = require_valid_token_web();
+require_role(['admin', 'supervisor'], $tokenRec);
+
+require_once __DIR__ . '/../lib/analytics.php';
+
+switch ($method) {
+
+case 'GET':
+    [$pdo, $tmpDb, $lockFp] = qdb_open(false);
+    try {
+        if (!empty($_GET['overview'])) {
+            $data = qdb_analytics_overview($pdo, $tokenRec);
+            qdb_discard($tmpDb, $lockFp);
+            json_success($data);
+        }
+
+        if (!empty($_GET['staleClients'])) {
+            $clients = qdb_analytics_stale_clients($pdo, $tokenRec);
+            qdb_discard($tmpDb, $lockFp);
+            json_success(['clients' => $clients]);
+        }
+
+        qdb_discard($tmpDb, $lockFp);
+        json_error('BAD_REQUEST', 'Unknown query', 400);
+    } catch (Throwable $e) {
+        qdb_discard($tmpDb, $lockFp);
+        error_log('analytics GET: ' . $e->getMessage());
+        json_error('SERVER_ERROR', 'Server error', 500);
+    }
+    break;
+
+case 'PUT':
+    $body = read_json_body();
+    $clientCode = trim((string)($body['clientCode'] ?? ''));
+    $note = (string)($body['note'] ?? '');
+
+    [$pdo, $tmpDb, $lockFp] = qdb_open(true);
+    try {
+        qdb_analytics_set_followup_note($pdo, $tokenRec, $clientCode, $note);
+        qdb_save($tmpDb, $lockFp);
+        json_success(['clientCode' => $clientCode, 'note' => $note]);
+    } catch (Throwable $e) {
+        qdb_discard($tmpDb, $lockFp);
+        error_log('analytics PUT: ' . $e->getMessage());
+        json_error('SERVER_ERROR', 'Server error', 500);
+    }
+    break;
+
+default:
+    json_error('METHOD_NOT_ALLOWED', 'Method not allowed', 405);
+}