<?php

require_once __DIR__ . '/inc/layout.php';

require_once __DIR__ . '/inc/report.php';

header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');

header('Pragma: no-cache');

header('Expires: 0');

require_login();

$error = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

    check_csrf();

    $action = (string)($_POST['action'] ?? '');

    if ($action === 'email') {

        $to    = trim((string)($_POST['report_email'] ?? ''));

        $daily = isset($_POST['report_daily']);

        $hour  = max(0, min(23, (int)($_POST['report_hour'] ?? 7)));

        $send  = ($_POST['do'] ?? '') === 'send';

        if ($to !== '' && !filter_var($to, FILTER_VALIDATE_EMAIL)) {

            $error = 'That email address does not look valid.';

        } elseif (($daily || $send) && $to === '') {

            $error = 'Enter an email address first.';

        } else {

            setting_set('report_email', $to);

            setting_set('report_daily', $daily ? '1' : '0');

            setting_set('report_hour', (string)$hour);

            if ($send) {

                $ok = send_report_email($to, $err);

                setting_set('report_last_status', ($ok ? "Sent to $to" : 'FAILED: ' . $err) . ' — ' . date('Y-m-d H:i'));

                flash($ok ? "Report sent to $to." : "Sending failed: $err");

            } else {

                flash('Report settings saved.');

            }

            header('Location: report.php');

            exit;

        }

    }

    if ($action === 'import') {

        $f = $_FILES['csv'] ?? null;

        if (!$f || $f['error'] === UPLOAD_ERR_NO_FILE) {

            $error = 'Choose a CSV file first.';

        } elseif ($f['error'] !== UPLOAD_ERR_OK) {

            $error = 'Upload failed (error ' . (int)$f['error'] . ') — the file may exceed the server upload limit.';

        } elseif (!is_uploaded_file($f['tmp_name'])) {

            $error = 'Upload failed.';

        } else {

            try {

                [$ins, $upd, $skip] = import_csv($f['tmp_name'], isset($_POST['update_existing']));

                $msg = "Imported $ins new spool" . ($ins === 1 ? '' : 's');

                if ($upd) {

                    $msg .= ", updated $upd";

                }

                if ($skip) {

                    $msg .= ", skipped $skip row" . ($skip === 1 ? '' : 's') . ' (missing type or bad weights)';

                }

                flash($msg . '.');

                header('Location: index.php?sort=added');

                exit;

            } catch (RuntimeException $ex) {

                $error = $ex->getMessage();

            }

        }

    }

}

$to    = (string)($_POST['report_email'] ?? setting_get('report_email', ''));

$daily = $_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'email'

       ? isset($_POST['report_daily'])

       : setting_get('report_daily') === '1';

$hour  = max(0, min(23, (int)($_POST['report_hour'] ?? setting_get('report_hour', '7'))));

$status = setting_get('report_last_status');

$scheme  = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';

$base    = rtrim(str_replace('\\', '/', dirname($_SERVER['SCRIPT_NAME'])), '/');

$cronUrl = $scheme . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost') . $base . '/cron.php?token=' . cron_token();

page_header('Report & CSV');

?>

<h1>Email report</h1>

<?php if ($error): ?>

<p class="error"><?= e($error) ?></p>

<?php endif; ?>

<form method="post">

  <?= csrf_field() ?>

  <input type="hidden" name="action" value="email">

  <label for="report_email">Send the report to</label>

  <input type="email" id="report_email" name="report_email" value="<?= e($to) ?>" placeholder="you@example.com" autocomplete="email">

  <label class="check"><input type="checkbox" name="report_daily" <?= $daily ? 'checked' : '' ?>> Email the report every morning</label>

  <label for="report_hour">Morning send time (server time)</label>

  <select id="report_hour" name="report_hour">

    <?php for ($h = 0; $h < 24; $h++): ?>

    <option value="<?= $h ?>" <?= $h === $hour ? 'selected' : '' ?>><?= $h ?>:00</option>

    <?php endfor; ?>

  </select>

  <div class="actions">

    <button name="do" value="save">Save settings</button>

    <button name="do" value="send" class="secondary">Save &amp; send now</button>

  </div>

  <?php if ($status): ?>

  <p class="muted">Last report: <?= e($status) ?></p>

  <?php endif; ?>

  <p class="muted">The report lists every spool (lowest first) with the full inventory attached as CSV.

    The morning email goes out on the first visit to the site after the chosen hour; for delivery at

    exactly that time, point a cron job or uptime monitor at:<br>

    <code style="overflow-wrap:anywhere"><?= e($cronUrl) ?></code></p>

</form>

<h1>CSV export</h1>

<p class="muted">Download the whole inventory as a spreadsheet-friendly CSV — also handy as a backup.</p>

<div class="actions">

  <a class="btn" href="export.php">Download CSV</a>

</div>

<h1>CSV import</h1>

<form method="post" enctype="multipart/form-data">

  <?= csrf_field() ?>

  <input type="hidden" name="action" value="import">

  <label for="csvFile">CSV file</label>

  <input type="file" id="csvFile" name="csv" accept=".csv,text/csv,text/plain" required>

  <label class="check"><input type="checkbox" name="update_existing" checked> Update existing spools when a row's id matches (untick to add everything as new)</label>

  <div class="actions">

    <button>Import CSV</button>

  </div>

  <p class="muted">The first row must be a header row. Files from the export above round-trip as-is;

    at minimum a <strong>type</strong> column is required — weights that are missing are assumed

    to be full spools. A database backup is taken before every import.</p>

</form>

<?php

page_footer();