From 29d7b6320066e295ad570a2f3d7316909ea5fba3 Mon Sep 17 00:00:00 2001
From: Vladimir <weborsha@gmail.com>
Date: Fri, 22 May 2026 21:28:20 +0300
Subject: [PATCH] Deal first

---
 deal/index.php | 169 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 169 insertions(+)
 create mode 100644 deal/index.php

diff --git a/deal/index.php b/deal/index.php
new file mode 100644
index 0000000..9c7411e
--- /dev/null
+++ b/deal/index.php
@@ -0,0 +1,169 @@
+<?php
+
+// CORS заголовки
+header("Access-Control-Allow-Origin: *");
+header("Access-Control-Allow-Credentials: true");
+header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
+header("Access-Control-Allow-Headers: Accept, Content-Type, X-Requested-With, Authorization");
+
+if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+    http_response_code(204);
+    exit;
+}
+
+function logMessage($message)
+{
+    $logFile = __DIR__ . '/proxy.log';
+    $date = date('Y-m-d H:i:s');
+    file_put_contents($logFile, "[$date] $message\n", FILE_APPEND);
+}
+
+$path = isset($_GET['path']) ? $_GET['path'] : '';
+unset($_GET['path']);
+$query_params = http_build_query($_GET);
+
+$api_url = "https://llar.joyworkdev.ru/api/" . ltrim($path, '/');
+if (!empty($query_params)) {
+    $api_url .= '?' . $query_params;
+}
+
+$contentType = isset($_SERVER['CONTENT_TYPE']) ? $_SERVER['CONTENT_TYPE'] : '';
+$isMultipart = strpos($contentType, 'multipart/form-data') !== false;
+
+$headers = [
+    'Accept: application/json',
+];
+
+$sessionIdFromCookie = isset($_COOKIE['PHPSESSID']) ? $_COOKIE['PHPSESSID'] : null;
+
+if ($sessionIdFromCookie) {
+    $headers[] = "Cookie: PHPSESSID=$sessionIdFromCookie";
+}
+
+if (!empty($_SERVER['HTTP_X_SESSION_ID'])) {
+    $headers[] = 'X-Session-ID: ' . $_SERVER['HTTP_X_SESSION_ID'];
+}
+
+// Basic Auth для dev.joywork.ru
+//$headers[] = 'Authorization: Basic YWRtaW5sb2dpbjphZG1pbnBhc3N3b3Jk'; // adminlogin:adminpassword
+//$headers[] = 'Content-Type: application/json';
+
+$originalContentType = isset($_SERVER['HTTP_CONTENT_TYPE']) ? $_SERVER['HTTP_CONTENT_TYPE'] : isset($_SERVER['CONTENT_TYPE']) ? $_SERVER['CONTENT_TYPE'] : '';
+logMessage("Incoming Content-Type: '$originalContentType'");
+
+// Передаём Content-Type, который пришёл от клиента (Vue)
+if ($originalContentType) {
+    $headers[] = 'Content-Type: ' . $originalContentType;
+} else {
+    logMessage("WARNING: Incoming Content-Type was not detected.");
+}
+
+logMessage("Forwarding Content-Type: " . ($originalContentType ?: 'NOT SET'));
+
+// Для multipart это бинарные данные, но мы передаём их как есть.
+$contentLength = isset($_SERVER['CONTENT_LENGTH']) ? $_SERVER['CONTENT_LENGTH'] : 0;
+$input_data = file_get_contents('php://input');
+logMessage("Input data length: " . strlen($input_data));
+
+//if ($isMultipart) {
+//    $name = isset($_POST['name']) ? $_POST['name'] : null;
+//    $target_id = (int)(isset($_POST['target_id']) ? $_POST['target_id'] : 0);
+//    $target_type = (int)(isset($_POST['target_type']) ? $_POST['target_type'] : 0);
+//    $parent = (int)(isset($_POST['parent']) ? $_POST['parent'] : 0);
+//
+//    logMessage("Multipart upload started. name=$name, target_id=$target_id, target_type=$target_type, parent=$parent");
+//
+//    if (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK) {
+//        $file = $_FILES['file'];
+//        logMessage("File received: " . $file['name'] . " (size: " . $file['size'] . " bytes)");
+//
+//        $fileName = $file['name'];
+//        $filePath = 'documents/' . $fileName;
+//        $fullPath = $_SERVER['DOCUMENT_ROOT'] . '/' . $filePath;
+//
+//        if (move_uploaded_file($file['tmp_name'], $fullPath)) {
+//            logMessage("File moved successfully to $fullPath");
+//
+//            $mysqli = new mysqli("localhost", "user", "password", "database");
+//            if (!$mysqli->connect_error) {
+//                logMessage("DB connected successfully");
+//
+//                $stmt = $mysqli->prepare("INSERT INTO documents (target_id, target_type, parent, name, file) VALUES (?, ?, ?, ?, ?)");
+//                $user_id = (int)(isset($_SESSION['id']) ? $_SESSION['id'] : 0);
+//                $stmt->bind_param("iiiis", $target_id, $target_type, $parent, $name, $filePath);
+//                $stmt->execute();
+//                $documentId = $stmt->insert_id;
+//                $stmt->close();
+//
+//                logMessage("Document inserted with ID=$documentId");
+//
+//                $api_url = "http://llar.joyworkdev.ru/api/documents/storeFromLegacy";
+//                $postData = json_encode([
+//                    'document_id' => $documentId,
+//                    'name' => $name,
+//                    'file' => $filePath,
+//                    'target_id' => $target_id,
+//                    'target_type' => $target_type,
+//                ]);
+//
+//                $ch = curl_init();
+//                curl_setopt_array($ch, [
+//                    CURLOPT_URL => $api_url,
+//                    CURLOPT_RETURNTRANSFER => true,
+//                    CURLOPT_CUSTOMREQUEST => 'POST',
+//                    CURLOPT_POSTFIELDS => $postData,
+//                    CURLOPT_HTTPHEADER => $headers,
+//                    CURLOPT_HEADER => false,
+//                ]);
+//
+//                $response = curl_exec($ch);
+//                $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+//                curl_close($ch);
+//
+//                logMessage("API response code=$httpCode, response=" . substr($response, 0, 200));
+//
+//                http_response_code($httpCode);
+//                echo $response;
+//                exit;
+//            } else {
+//                logMessage("DB connection failed: " . $mysqli->connect_error);
+//                http_response_code(500);
+//                echo json_encode(['error' => 'DB connection failed']);
+//                exit;
+//            }
+//        } else {
+//            logMessage("Failed to move uploaded file");
+//            http_response_code(500);
+//            echo json_encode(['error' => 'Failed to save file']);
+//            exit;
+//        }
+//    } else {
+//        logMessage("File upload error: " . (isset($_FILES['file']['error']) ? $_FILES['file']['error'] : 'no file'));
+//        http_response_code(422);
+//        echo json_encode(['error' => 'File upload error']);
+//        exit;
+//    }
+//}
+
+$ch = curl_init();
+
+curl_setopt_array($ch, [
+    CURLOPT_URL => $api_url,
+    CURLOPT_RETURNTRANSFER => true,
+    CURLOPT_CUSTOMREQUEST => $_SERVER['REQUEST_METHOD'],
+    CURLOPT_POSTFIELDS => $input_data,
+    CURLOPT_HTTPHEADER => $headers,
+    CURLOPT_HEADER => false,
+]);
+
+$response = curl_exec($ch);
+$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$curlError = curl_error($ch);
+if ($curlError) {
+    logMessage("cURL Error: " . $curlError);
+}
+
+curl_close($ch);
+
+http_response_code($httpCode);
+echo $response;
\ No newline at end of file