plateforme-tfjm2/server_files/controllers/syntheses.php

<?php

if (!isset($_SESSION["team"]))
	require_once "server_files/403.php";

/**
 * @var Team $team
 * @var Tournament $tournament
 */
$team = $_SESSION["team"];
$tournament = Tournament::fromId($team->isSelectedForFinal() ? $FINAL->getId() : $team->getTournamentId());

if (isset($_POST["send_synthese"])) {
	$error_message = saveSynthese();
}

/** @noinspection SqlAggregates */
$syntheses_req = $DB->prepare("SELECT `file_id`, `dest`, COUNT(`dest`) AS `version` FROM `syntheses` WHERE `team` = ? AND `tournament` = ? GROUP BY `dest` ORDER BY `dest`, `uploaded_at` DESC;");
$syntheses_req->execute([$team->getId(), $tournament->getId()]);

function saveSynthese() {
    global $LOCAL_PATH, $DB, $team, $tournament;

    $dest = strtoupper(htmlspecialchars($_POST["dest"]));

    if (!isset($dest) || ($dest != "OPPOSANT" && $dest != "RAPPORTEUR"))
        return "Le destinataire est invalide.";

    $file = $_FILES["synthese"];

    if ($file["size"] > 5000000 || $file["error"])
        return "Une erreur est survenue. Merci de vérifier que le fichier pèse moins que 5 Mo.";

    if (finfo_file(finfo_open(FILEINFO_MIME_TYPE), $file["tmp_name"]) != 'application/pdf')
        return "Le fichier doit être au destmat PDF.";

    if (!is_dir("$LOCAL_PATH/files") && !mkdir("$LOCAL_PATH/files"))
        return "Les droits sont insuffisants. Veuillez contacter l'administrateur du serveur.";

    $alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";

    do {
        $id = "";
        for ($i = 0; $i < 64; ++$i) {
            $id .= $alphabet[rand(0, strlen($alphabet) - 1)];
        }
    }
    while (file_exists("$LOCAL_PATH/files/$id"));

    if (!rename($file["tmp_name"], "$LOCAL_PATH/files/$id"))
        return "Une erreur est survenue lors de l'envoi du fichier.";

    $req = $DB->prepare("INSERT INTO `syntheses`(`file_id`, `team`, `tournament`, `dest`) VALUES (?, ?, ?, ?);");
    $req->execute([$id, $team->getId(), $tournament->getId(), $dest]);

    return false;
}

require_once "server_files/views/syntheses.php";