getPathname(), strlen($root) + 1));
if (preg_match($skip, $rel) && !preg_match('#^(backups|uploads|plugins)/(\.htaccess|README\.md)$#', $rel)) continue;
if ($f->isDir()) { @mkdir($tmp . '/' . $rel, 0755, true); continue; }
@mkdir(dirname($tmp . '/' . $rel), 0755, true);
copy($f->getPathname(), $tmp . '/' . $rel);
}
@mkdir($tmp . '/uploads');
@mkdir($tmp . '/config');
file_put_contents($tmp . '/config/config.php', ' bin2hex(random_bytes(32)),
'db' => ['driver' => 'sqlite', 'sqlite_path' => $tmp . '/database/deskhub.sqlite'],
'site' => ['name' => 'Test', 'url' => 'http://127.0.0.1', 'admin_email' => 'a@test.de', 'timezone' => 'Europe/Berlin'],
'uploads' => ['max_size_bytes' => 10485760, 'allowed_extensions' => ['png'], 'path' => $tmp . '/uploads'],
], true) . ';');
require_once $root . '/includes/db.php';
require_once $root . '/database/migrate.php';
$pdo = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
$pdo->exec('PRAGMA foreign_keys = ON');
$pdo->exec(convert_schema_to_sqlite((string) file_get_contents($root . '/database/schema.sql')));
run_migrations($pdo, true);
$now = date('Y-m-d H:i:s');
$pw = password_hash('Sehr-Sicher-1234', PASSWORD_DEFAULT);
// Abteilungen A (Standard aus dem Schema), B, C
$pdo->exec('DELETE FROM staff');
$deptA = (int) $pdo->query('SELECT id FROM departments ORDER BY id LIMIT 1')->fetchColumn();
$pdo->exec("INSERT INTO departments (name, email, is_default) VALUES ('Zielabteilung B', 'b@example.org', 0)"); $deptB = (int) $pdo->lastInsertId();
$pdo->exec("INSERT INTO departments (name, email, is_default) VALUES ('Fremdabteilung C', 'c@example.org', 0)"); $deptC = (int) $pdo->lastInsertId();
$deptAName = (string) $pdo->query("SELECT name FROM departments WHERE id = {$deptA}")->fetchColumn();
// Mitarbeiter: Admin, Agent nur A, Agent A+B ohne "Tickets übertragen"
$insStaff = $pdo->prepare("INSERT INTO staff (name, email, password_hash, role, role_id, department_id, is_active, created_at) VALUES (?,?,?,?,?,?,1,?)");
$insStaff->execute(['Admin', 'admin@test.de', $pw, 'admin', null, $deptA, $now]);
$insStaff->execute(['Nur A', 'a@test.de', $pw, 'agent', null, $deptA, $now]); $agentOnlyA = (int) $pdo->lastInsertId();
$pdo->prepare("INSERT INTO roles (name, permissions, created_at) VALUES ('Ohne Übertragen', ?, ?)")->execute([json_encode(['reply_ticket' => true, 'post_note' => true, 'transfer_ticket' => false]), $now]);
$roleNoTransfer = (int) $pdo->lastInsertId();
$insStaff->execute(['A und B', 'ab@test.de', $pw, 'agent', $roleNoTransfer, $deptA, $now]); $agentAB = (int) $pdo->lastInsertId();
$pdo->prepare("INSERT INTO staff_department (staff_id, department_id) VALUES (?, ?)")->execute([$agentAB, $deptB]);
// Tickets: 3 in A, 1 in C
$prio = (int) $pdo->query('SELECT id FROM priorities ORDER BY id LIMIT 1')->fetchColumn();
$insT = $pdo->prepare("INSERT INTO tickets (ticket_number, subject, status, priority_id, department_id, requester_name, requester_email, source, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?)");
$ids = [];
foreach ([['T-A1', $deptA], ['T-A2', $deptA], ['T-A3', $deptA], ['T-C1', $deptC]] as [$num, $dept]) {
$insT->execute([$num, "Betreff {$num}", 'open', $prio, $dept, 'Kunde', 'k@example.org', 'web', $now, $now]);
$ids[$num] = (int) $pdo->lastInsertId();
}
$pdo->prepare("INSERT INTO ticket_threads (ticket_id, author_type, message, is_internal_note, created_at) VALUES (?, 'customer', 'Hilfe', 0, ?)")->execute([$ids['T-A1'], $now]);
// Vorlagen: 2 für A, 1 für B, 1 für alle
$insC = $pdo->prepare("INSERT INTO canned_responses (title, body, department_id, created_at) VALUES (?,?,?,?)");
$insC->execute(['Vorlage nur A eins', 'Text A1', $deptA, $now]);
$insC->execute(['Vorlage nur A zwei', 'Text A2', $deptA, $now]);
$insC->execute(['Vorlage nur B', 'Text B', $deptB, $now]);
$insC->execute(['Vorlage für alle', 'Text alle', null, $now]);
$pdo = null;
$failures = [];
$total = 0;
$check = function (bool $ok, string $what) use (&$failures, &$total): void {
$total++;
if (!$ok) $failures[] = $what;
};
$port = random_int(27000, 27999);
$log = tempnam(sys_get_temp_dir(), 'deptlog');
$proc = proc_open([PHP_BINARY, '-S', "127.0.0.1:$port", '-t', $tmp], [['pipe', 'r'], ['file', $log, 'w'], ['file', $log, 'a']], $pipes, $tmp);
$req = function (string $method, string $path, array $data, string $jar) use ($port): array {
$ch = curl_init("http://127.0.0.1:$port$path");
curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => false, CURLOPT_TIMEOUT => 60, CURLOPT_COOKIEJAR => $jar, CURLOPT_COOKIEFILE => $jar]);
if ($method === 'POST') { curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data)); }
$b = (string) curl_exec($ch);
$s = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
curl_close($ch);
return [$s, $b];
};
$csrf = fn(string $h) => preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $h, $m) ? $m[1] : '';
$login = function (string $mail) use ($req, $csrf): string {
$jar = tempnam(sys_get_temp_dir(), 'deptjar');
[, $l] = $req('GET', '/staff/login.php', [], $jar);
$req('POST', '/staff/login.php', ['csrf_token' => $csrf($l), 'email' => $mail, 'password' => 'Sehr-Sicher-1234'], $jar);
return $jar;
};
$db = fn() => new PDO('sqlite:' . $GLOBALS['tmp'] . '/database/deskhub.sqlite', null, null, [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC]);
$deptOf = fn(string $num) => (int) $db()->query("SELECT department_id FROM tickets WHERE ticket_number = '{$num}'")->fetchColumn();
$bulk = function (string $jar, array $nums, $targetDept) use ($req, $csrf, $ids): string {
[, $page] = $req('GET', '/staff/tickets.php?tab=all', [], $jar);
[, $body] = $req('POST', '/staff/tickets.php?tab=all', ['csrf_token' => $csrf($page), 'bulk_action' => 'department', 'bulk_department_id' => (string) $targetDept,
'ticket_ids' => array_map(fn($n) => (string) $ids[$n], $nums)], $jar);
// Meldungen stehen als Hinweis-Kästen oben auf der Seite nach der Weiterleitung (Antwort auf den POST oder die folgende Seite)
[, $after] = $req('GET', '/staff/tickets.php?tab=all', [], $jar);
$flashes = [];
foreach ([$body, $after] as $html) {
if (preg_match_all('#]*>(.*?)
#s', $html, $fm)) {
foreach ($fm[1] as $one) $flashes[] = trim((string) preg_replace('/\s+/', ' ', html_entity_decode(strip_tags($one), ENT_QUOTES)));
}
}
return implode(' | ', $flashes);
};
try {
for ($i = 0; $i < 50; $i++) { if (@fsockopen('127.0.0.1', $port)) break; usleep(100000); }
$admin = $login('admin@test.de');
// 1) Vorlagen im Ticket
[$s, $view] = $req('GET', '/staff/ticket_view.php?n=T-A1', [], $admin);
$check($s === 200 && str_contains($view, 'canned_picker'), 'Ticketansicht mit Vorlagenauswahl lädt (HTTP ' . $s . ')');
$select = preg_match('#