js css

2026-06-07 21:14:30 +03:00
parent 76bf5d8191
commit 66e931e0d6
14 changed files with 1079 additions and 12 deletions
@@ -0,0 +1,154 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controllers;
+
+use App\Core\Database;
+use App\Repositories\SettingRepository;
+use Throwable;
+
+final class WishlistRequestController
+{
+    public function store(): void
+    {
+        $customerName = trim((string) ($_POST['customer_name'] ?? ''));
+        $phone = trim((string) ($_POST['phone'] ?? ''));
+        $email = trim((string) ($_POST['email'] ?? ''));
+        $requestText = trim((string) ($_POST['request_text'] ?? ''));
+
+        if ($customerName === '' || $requestText === '' || ($phone === '' && $email === '')) {
+            $this->redirect('error');
+        }
+
+        try {
+            $uploadedFiles = $this->storeUploadedFiles();
+            $fullRequestText = $this->buildRequestText($requestText, $uploadedFiles);
+
+            $statement = Database::pdo()->prepare(
+                'INSERT INTO price_requests
+                    (customer_name, phone, email, company_name, request_text, file_path, status, client_ip, user_agent)
+                 VALUES
+                    (:customer_name, :phone, :email, :company_name, :request_text, :file_path, :status, :client_ip, :user_agent)'
+            );
+
+            $statement->execute([
+                'customer_name' => $customerName,
+                'phone' => $phone !== '' ? $phone : null,
+                'email' => $email !== '' ? $email : null,
+                'company_name' => 'Запрос позиции',
+                'request_text' => $fullRequestText,
+                'file_path' => $uploadedFiles[0] ?? null,
+                'status' => 'new',
+                'client_ip' => $_SERVER['REMOTE_ADDR'] ?? null,
+                'user_agent' => substr((string) ($_SERVER['HTTP_USER_AGENT'] ?? ''), 0, 255),
+            ]);
+
+            $requestId = (int) Database::pdo()->lastInsertId();
+            $this->sendNotification($requestId, $customerName, $phone, $email, $fullRequestText);
+        } catch (Throwable $exception) {
+            $this->redirect('error');
+        }
+
+        $this->redirect('sent');
+    }
+
+    /**
+     * @return array<int, string>
+     */
+    private function storeUploadedFiles(): array
+    {
+        if (!isset($_FILES['wishlist_files']) || !is_array($_FILES['wishlist_files']['name'])) {
+            return [];
+        }
+
+        $stored = [];
+        $uploadDir = base_path('storage/wishlist_requests/' . date('Y/m'));
+
+        if (!is_dir($uploadDir)) {
+            mkdir($uploadDir, 0775, true);
+        }
+
+        foreach ($_FILES['wishlist_files']['name'] as $index => $originalName) {
+            $error = (int) ($_FILES['wishlist_files']['error'][$index] ?? UPLOAD_ERR_NO_FILE);
+
+            if ($error === UPLOAD_ERR_NO_FILE || $error !== UPLOAD_ERR_OK) {
+                continue;
+            }
+
+            $tmpName = (string) ($_FILES['wishlist_files']['tmp_name'][$index] ?? '');
+            if ($tmpName === '' || !is_uploaded_file($tmpName)) {
+                continue;
+            }
+
+            $extension = strtolower(pathinfo((string) $originalName, PATHINFO_EXTENSION));
+            $safeExtension = preg_replace('/[^a-z0-9]/', '', $extension) ?: 'file';
+            $fileName = date('Ymd-His') . '-' . bin2hex(random_bytes(4)) . '.' . $safeExtension;
+            $targetPath = $uploadDir . '/' . $fileName;
+
+            if (move_uploaded_file($tmpName, $targetPath)) {
+                $stored[] = str_replace('\\', '/', substr($targetPath, strlen(base_path()) + 1));
+            }
+        }
+
+        return $stored;
+    }
+
+    /**
+     * @param array<int, string> $uploadedFiles
+     */
+    private function buildRequestText(string $requestText, array $uploadedFiles): string
+    {
+        $lines = [
+            'Тип заявки: поиск позиции / виш-лист.',
+            '',
+            'Что нужно найти:',
+            $requestText,
+        ];
+
+        if ($uploadedFiles !== []) {
+            $lines[] = '';
+            $lines[] = 'Файлы:';
+            foreach ($uploadedFiles as $path) {
+                $lines[] = '- ' . $path;
+            }
+        }
+
+        return implode("\n", $lines);
+    }
+
+    private function sendNotification(int $requestId, string $customerName, string $phone, string $email, string $requestText): void
+    {
+        $settings = (new SettingRepository())->allKeyed();
+        $to = trim((string) (($settings['price_request_email'] ?? '') ?: ($settings['admin_email'] ?? '') ?: 'zakaz@rybstock.ru'));
+
+        if ($to === '') {
+            return;
+        }
+
+        $subject = 'Запрос позиции #' . $requestId . ' - ' . $customerName;
+        $body = implode("\n", [
+            'Новый запрос на поиск позиции.',
+            '',
+            'Номер заявки: ' . $requestId,
+            'Имя: ' . $customerName,
+            'Телефон: ' . ($phone !== '' ? $phone : 'не указан'),
+            'Email: ' . ($email !== '' ? $email : 'не указан'),
+            '',
+            $requestText,
+        ]);
+
+        $headers = [
+            'Content-Type: text/plain; charset=UTF-8',
+            'From: Рыбсток <no-reply@rybstock.ru>',
+        ];
+
+        @mail($to, $subject, $body, implode("\r\n", $headers));
+    }
+
+    private function redirect(string $status): never
+    {
+        header('Location: /?wishlist_request=' . rawurlencode($status) . '#wishlist-request', true, 303);
+        exit;
+    }
+}