Actualiser api.php

api.php

@@ -5,21 +5,18 @@ header("Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS");
 header("Access-Control-Allow-Headers: Content-Type, Authorization");
 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
 header("Pragma: no-cache");
-
 if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
     http_response_code(200);
     exit;
 }
-
 define('ENCRYPTION_KEY', 'MaCleSecreteSuperRobuste123!');
-
 try {
     $pdo = new PDO("mysql:host=localhost;dbname=mon_cinema;charset=utf8mb4", "root", "", [
         PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
         PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
     ]);
     
-    // Création des tables (ajout de la table config)
+    // Création des tables (rating changé en DECIMAL(3,1) pour accepter les notes Letterboxd comme 2.5, 3.5)
     $pdo->exec("CREATE TABLE IF NOT EXISTS users (
         id INT PRIMARY KEY, username VARCHAR(50) NOT NULL, password_hash VARCHAR(255) NOT NULL
     )");
@@ -28,7 +25,7 @@ try {
     )");
     $pdo->exec("CREATE TABLE IF NOT EXISTS critiques (
         id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255),
-        poster TEXT, rating INT DEFAULT 3, review TEXT, streaming VARCHAR(255)
+        poster TEXT, rating DECIMAL(3,1) DEFAULT 3.0, review TEXT, streaming VARCHAR(255)
     )");
     $pdo->exec("CREATE TABLE IF NOT EXISTS videotheque (
         id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255),
@@ -48,13 +45,11 @@ function makeStableId($title, $year) {
 function checkAuth($pdo) {
     $stmtCheck = $pdo->query("SELECT COUNT(*) FROM users");
     if ($stmtCheck->fetchColumn() == 0) return true;
-    
     $token = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
     if (empty($token) && function_exists('apache_request_headers')) {
         $headers = apache_request_headers();
         $token = $headers['Authorization'] ?? $headers['authorization'] ?? '';
     }
-    
     if ($token !== md5(ENCRYPTION_KEY . 'session')) {
         http_response_code(403);
         echo json_encode(["error" => "Accès interdit."]);
@@ -62,8 +57,6 @@ function checkAuth($pdo) {
     }
 }
 
-// ── FONCTIONS TMDB & CHIFFREMENT ──
-
 function encryptData($data) {
     $iv = openssl_random_pseudo_bytes(16);
     $key = hash('sha256', ENCRYPTION_KEY, true);
@@ -93,7 +86,6 @@ function getTmdbApiKey($pdo) {
 
 function fetchTmdbData($title, $year, $apiKey) {
     if (empty($apiKey) || empty($title)) return null;
-
     $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$apiKey}&query=" . urlencode($title) . "&year={$year}&language=fr-FR";
     $searchRes = @file_get_contents($searchUrl);
     if (!$searchRes && function_exists('curl_init')) {
@@ -104,14 +96,11 @@ function fetchTmdbData($title, $year, $apiKey) {
         curl_close($ch);
     }
     if (!$searchRes) return null;
-    
     $searchData = json_decode($searchRes, true);
     if (empty($searchData['results'])) return null;
-    
     $movie = $searchData['results'][0];
     $movieId = $movie['id'];
     $poster = !empty($movie['poster_path']) ? "https://image.tmdb.org/t/p/w500" . $movie['poster_path'] : '';
-    
     $creditsUrl = "https://api.themoviedb.org/3/movie/{$movieId}/credits?api_key={$apiKey}&language=fr-FR";
     $creditsRes = @file_get_contents($creditsUrl);
     if (!$creditsRes && function_exists('curl_init')) {
@@ -121,7 +110,6 @@ function fetchTmdbData($title, $year, $apiKey) {
         $creditsRes = curl_exec($ch);
         curl_close($ch);
     }
-    
     $director = '';
     if ($creditsRes) {
         $creditsData = json_decode($creditsRes, true);
@@ -134,15 +122,12 @@ function fetchTmdbData($title, $year, $apiKey) {
             }
         }
     }
-    
     return ['director' => $director, 'poster' => $poster];
 }
 
 // ── ROUTEUR PRINCIPAL ──
-
 $action = $_GET['action'] ?? '';
 $data = json_decode(file_get_contents('php://input'), true) ?? [];
-
 switch ($action) {
     case 'check_security_status':
         $stmt = $pdo->query("SELECT COUNT(*) FROM users");
@@ -175,7 +160,6 @@ switch ($action) {
         echo json_encode(["success" => true]);
         break;
         
-    // ── NOUVELLE ACTION : SAUVEGARDE DE LA CLÉ EN BASE ──
     case 'save_config':
         checkAuth($pdo);
         $keyName = $data['key_name'] ?? '';
@@ -202,7 +186,6 @@ switch ($action) {
         $type = $data['type'] ?? 'critique';
         $id = !empty($data['id']) ? $data['id'] : makeStableId($data['title'] ?? '', $data['year'] ?? '0000');
         
-        // 🔍 RÉCUPÉRATION AUTO TMDB SI CHAMPS VIDES
         if (empty($data['director']) || empty($data['poster'])) {
             $apiKey = getTmdbApiKey($pdo);
             $tmdbData = fetchTmdbData($data['title'] ?? '', $data['year'] ?? '', $apiKey);
@@ -219,7 +202,7 @@ switch ($action) {
             $stmt = $pdo->prepare($sql);
             $stmt->execute([
                 $id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '',
-                $data['poster'] ?? '', $data['rating'] ?? 3, $data['review'] ?? '', $data['streaming'] ?? ''
+                $data['poster'] ?? '', $data['rating'] ?? 3.0, $data['review'] ?? '', $data['streaming'] ?? ''
             ]);
         } else {
             $sql = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description)
@@ -268,24 +251,27 @@ switch ($action) {
         if (isset($_FILES['csv_file'])) {
             $file = $_FILES['csv_file']['tmp_name'];
             $type = $_POST['type'] ?? 'critique';
-            
-            // On récupère la clé une seule fois pour tout l'import
             $tmdbApiKey = getTmdbApiKey($pdo);
             
+            try {
                 if (($handle = fopen($file, "r")) !== FALSE) {
                     $header = fgetcsv($handle, 0, ",");
+                    if (!$header) throw new Exception("Impossible de lire l'en-tête du CSV.");
+                    
+                    // 🧹 Nettoyage du BOM UTF-8 (très fréquent sur les exports Letterboxd/Excel)
+                    $header[0] = str_replace("\xEF\xBB\xBF", '', $header[0]);
                     $header = array_map('trim', $header);
                     
+                    $imported = 0;
                     while (($row = fgetcsv($handle, 0, ",")) !== FALSE) {
-                    if (count($row) !== count($header)) continue;
+                        if (count($row) !== count($header)) continue; // Ignore les lignes vides ou mal formées
-                    $rowData = array_combine($header, $row);
                         
+                        $rowData = array_combine($header, $row);
                         $title    = $rowData['Name'] ?? $rowData['title'] ?? 'Sans titre';
                         $year     = $rowData['Year'] ?? $rowData['year'] ?? '0000';
                         $director = $rowData['Director'] ?? $rowData['director'] ?? '';
                         $poster   = $rowData['Poster'] ?? $rowData['poster'] ?? $rowData['image'] ?? '';
                         
-                    // 🔍 RÉCUPÉRATION AUTO TMDB SI CHAMPS VIDES DANS LE CSV
                         if (empty($director) || empty($poster)) {
                             $tmdbData = fetchTmdbData($title, $year, $tmdbApiKey);
                             if ($tmdbData) {
@@ -297,9 +283,11 @@ switch ($action) {
                         $id = makeStableId($title, $year);
                         
                         if ($type === 'critique') {
-                        $rating    = isset($rowData['Rating']) ? (int)round($rowData['Rating'] * 1) : 3;
+                            // 🌟 Conservation de la précision Letterboxd (2.5, 3.5, etc.)
+                            $rating    = isset($rowData['Rating']) && $rowData['Rating'] !== '' ? (float)$rowData['Rating'] : 3.0;
                             $review    = $rowData['Review'] ?? $rowData['review'] ?? '';
                             $streaming = $rowData['Streaming'] ?? $rowData['streaming'] ?? '';
+                            
                             $sql = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming)
                                     VALUES (?, ?, ?, ?, ?, ?, ?, ?)
                                     ON DUPLICATE KEY UPDATE
@@ -333,10 +321,17 @@ switch ($action) {
                             $stmt = $pdo->prepare($sql);
                             $stmt->execute([$id, $title, $year, $director, $poster, $format, $length, $publisher, $ean, $discs, $aspect, $desc]);
                         }
+                        $imported++;
                     }
                     fclose($handle);
+                    echo json_encode(["success" => true, "imported" => $imported]);
+                } else {
+                    throw new Exception("Impossible d'ouvrir le fichier.");
+                }
+            } catch (Exception $e) {
+                http_response_code(500);
+                echo json_encode(["error" => "Erreur lors de l'import : " . $e->getMessage()]);
             }
-            echo json_encode(["success" => true]);
         } else {
             http_response_code(400);
             echo json_encode(["error" => "Aucun fichier reçu."]);