fitme3070.pt/views/admin/memberships/leads.php

<?php
require __DIR__ . '/../../../config/db.php';
require __DIR__ . '/../../../config/functions.php';
$user = require_admin();

$statuses = membership_lead_statuses();
$filter   = (string) ($_GET['status'] ?? '');
if (!isset($statuses[$filter])) $filter = '';
$self = base_url('views/admin/memberships/leads.php' . ($filter !== '' ? '?status=' . $filter : ''));

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    csrf_check();
    if (isset($_POST['delete'])) {
        db_membership_lead_delete($pdo, (int) $_POST['delete']);
        session()->setFlashdata('success', 'Pedido apagado — fica na lixeira 30 dias.');
    } elseif (isset($_POST['save'])) {
        $id = (int) $_POST['save'];
        db_membership_lead_update($pdo, $id, (string) ($_POST['status'][$id] ?? ''), trim((string) ($_POST['notes'][$id] ?? '')));
        session()->setFlashdata('success', 'Pedido atualizado.');
    }
    header('Location: ' . $self);
    exit;
}

$leads = db_membership_leads_list($pdo, $filter);

// CSV export of the current filter (Excel-friendly: UTF-8 BOM + ';').
if (isset($_GET['csv'])) {
    audit('export.membership_leads', [
        'target_type' => 'membership_lead', 'target_label' => 'CSV (' . count($leads) . ' registos)',
        'summary' => 'Exportação CSV de pedidos de inscrição' . ($filter !== '' ? ' — estado: ' . $filter : ''),
    ]);
    header('Content-Type: text/csv; charset=utf-8');
    header('Content-Disposition: attachment; filename="pedidos-inscricao-' . date('Y-m-d') . '.csv"');
    $out = fopen('php://output', 'w');
    fwrite($out, "\xEF\xBB\xBF");
    fputcsv($out, ['Data', 'Mensalidade', 'Nome', 'Telemóvel', 'E-mail', 'Mensagem', 'Estado', 'Notas', 'Consentimento'], ';', '"', '');
    foreach ($leads as $l) {
        fputcsv($out, [$l['created_at'], $l['membership_name'], $l['name'], $l['phone'], $l['email'], $l['message'],
                       $statuses[$l['status']] ?? $l['status'], (string) $l['admin_notes'], $l['consent'] ? 'sim' : 'não'], ';', '"', '');
    }
    exit;
}

$badge = ['novo' => 'bg-danger', 'contactado' => 'bg-info text-dark', 'inscrito' => 'bg-success', 'descartado' => 'bg-secondary'];
$page_title = 'Pedidos de inscrição';
include __DIR__ . '/../../../includes/header.php';
?>
<div class="container">
    <div class="d-flex justify-content-between align-items-center flex-wrap gap-2 mb-3">
        <h1 class="h3 mb-0">Pedidos de inscrição</h1>
        <div class="d-flex gap-2">
            <a class="btn btn-outline-secondary" href="<?= $self . ($filter !== '' ? '&' : '?') ?>csv=1"><i class="bi bi-filetype-csv me-1"></i>Exportar CSV</a>
            <a class="btn btn-outline-secondary" href="<?= base_url('views/admin/memberships/index.php') ?>"><i class="bi bi-arrow-left me-1"></i>Mensalidades</a>
        </div>
    </div>
    <p class="text-muted small">Pedidos enviados pelo botão de inscrição dos cartões de mensalidade. Cada pedido também é enviado por e-mail para o endereço dos Contactos.</p>

    <ul class="nav nav-pills mb-3">
        <li class="nav-item"><a class="nav-link<?= $filter === '' ? ' active' : '' ?>" href="?">Todos</a></li>
        <?php foreach ($statuses as $k => $label): ?>
        <li class="nav-item"><a class="nav-link<?= $filter === $k ? ' active' : '' ?>" href="?status=<?= $k ?>"><?= $label ?></a></li>
        <?php endforeach; ?>
    </ul>

    <form method="POST" class="card shadow-sm"><div class="card-body p-0">
        <?= csrf_field() ?>
        <div class="table-responsive">
        <table class="table align-middle mb-0">
            <thead class="table-light"><tr>
                <th>Data</th><th>Mensalidade</th><th>Contacto</th><th>Mensagem</th><th style="min-width:220px">Estado / notas</th><th></th>
            </tr></thead>
            <tbody>
            <?php if (!$leads): ?>
                <tr><td colspan="6" class="text-center text-muted py-4">Sem pedidos.</td></tr>
            <?php else: foreach ($leads as $l): $id = (int) $l['id']; ?>
                <tr>
                    <td class="small text-nowrap"><?= htmlspecialchars(date('d/m/Y H:i', strtotime($l['created_at']))) ?></td>
                    <td><?= htmlspecialchars($l['membership_name'] !== '' ? $l['membership_name'] : '—') ?></td>
                    <td class="small">
                        <strong><?= htmlspecialchars($l['name']) ?></strong>
                        <?php if ($l['phone'] !== ''): ?><div><a href="tel:<?= htmlspecialchars(preg_replace('/\s+/', '', $l['phone'])) ?>"><?= htmlspecialchars($l['phone']) ?></a></div><?php endif; ?>
                        <?php if ($l['email'] !== ''): ?><div><a href="mailto:<?= htmlspecialchars($l['email']) ?>"><?= htmlspecialchars($l['email']) ?></a></div><?php endif; ?>
                        <?php if ($l['consent']): ?><span class="badge bg-success mt-1" title="<?= htmlspecialchars($l['consent_text'] . ' · IP ' . $l['ip']) ?>">RGPD <i class="bi bi-check-lg"></i></span><?php endif; ?>
                    </td>
                    <td class="small" style="max-width:260px;"><?= $l['message'] !== '' ? nl2br(htmlspecialchars($l['message'])) : '<span class="text-muted">—</span>' ?></td>
                    <td>
                        <div class="d-flex gap-1 mb-1">
                            <select class="form-select form-select-sm" name="status[<?= $id ?>]">
                                <?php foreach ($statuses as $k => $label): ?>
                                <option value="<?= $k ?>" <?= $l['status'] === $k ? 'selected' : '' ?>><?= $label ?></option>
                                <?php endforeach; ?>
                            </select>
                            <span class="badge <?= $badge[$l['status']] ?? 'bg-secondary' ?> align-self-center"><?= htmlspecialchars($statuses[$l['status']] ?? $l['status']) ?></span>
                        </div>
                        <textarea class="form-control form-control-sm" name="notes[<?= $id ?>]" rows="2" placeholder="Notas internas"><?= htmlspecialchars((string) $l['admin_notes']) ?></textarea>
                    </td>
                    <td class="text-nowrap">
                        <button class="btn btn-sm btn-outline-primary" name="save" value="<?= $id ?>" title="Guardar"><i class="bi bi-check-lg"></i></button>
                        <button class="btn btn-sm btn-outline-danger" name="delete" value="<?= $id ?>" title="Apagar" onclick="return confirm('Apagar este pedido?')"><i class="bi bi-trash"></i></button>
                    </td>
                </tr>
            <?php endforeach; endif; ?>
            </tbody>
        </table>
        </div>
    </div></form>
</div>
<?php include __DIR__ . '/../../../includes/footer.php';