prepare("SELECT d.id, d.praticien_id, c.nom, c.prenom
FROM client_dossiers d JOIN client c ON c.id=d.client_id
WHERE d.id=:d AND d.praticien_id=:p AND d.archived_at IS NULL");
$ok->execute([':d'=>$dossier_id, ':p'=>$praticien_id]);
$dos = $ok->fetch(PDO::FETCH_ASSOC);
if(!$dos){ header('Location: index.php'); exit; }
// CSRF
if (empty($_SESSION['cl_csrf'])) $_SESSION['cl_csrf'] = bin2hex(random_bytes(32));
$CSRF = $_SESSION['cl_csrf'];
?>