Version stable, aprelic, connexion CFRS et autres corrections

public/client/supprimer_favori.php

@@ -1,15 +1,59 @@
 <?php
+declare (strict_types = 1);
+
 require_once __DIR__ . '/../includes/init_client.php';
 
-$client_id = $_SESSION['reference_id'];
-$praticien_id = intval($_POST['praticien_id'] ?? 0);
+header('Content-Type: application/json; charset=utf-8');
 
-if ($praticien_id > 0) {
-   
-    $stmt = $pdo->prepare("DELETE FROM praticien_client WHERE client_id = ? AND praticien_id = ?");
+if (($_SERVER['REQUEST_METHOD'] ?? '') !== 'POST') {
+    echo json_encode([
+        'ok'      => false,
+        'message' => 'Méthode non autorisée.',
+    ], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+require_post_csrf();
+
+$client_id    = (int) ($_SESSION['reference_id'] ?? 0);
+$praticien_id = (int) ($_POST['praticien_id'] ?? 0);
+
+if ($client_id <= 0) {
+    echo json_encode([
+        'ok'      => false,
+        'message' => $translations['erreur_generique'] ?? 'Erreur.',
+    ], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+if ($praticien_id <= 0) {
+    echo json_encode([
+        'ok'      => false,
+        'message' => $translations['praticien_id_invalide'] ?? 'ID praticien invalide.',
+    ], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+try {
+    $stmt = $pdo->prepare("
+        DELETE FROM praticien_client
+        WHERE client_id = ? AND praticien_id = ?
+    ");
     $stmt->execute([$client_id, $praticien_id]);
-    echo $translations['favori_supprime_title'];
-} else {
-    echo $translations['praticien_id_invalide'];
+
+    echo json_encode([
+        'ok'      => true,
+        'deleted' => ($stmt->rowCount() > 0),
+        'message' => $translations['favori_supprime_title'] ?? 'Favori supprimé.',
+    ], JSON_UNESCAPED_UNICODE);
+    exit;
+
+} catch (Throwable $e) {
+    error_log('supprimer_favori.php: ' . $e->getMessage());
+
+    echo json_encode([
+        'ok'      => false,
+        'message' => $translations['erreur_generique'] ?? 'Erreur serveur.',
+    ], JSON_UNESCAPED_UNICODE);
+    exit;
 }
-?>