xamxam/TODO.md

XAMXAM TODO

File Upload & Display System

• DB migration 007 — add sort_order and display_label columns to thesis_files
• Database.php — getThesisFiles ordered by sort_order ASC; insertThesisFile accepts display_label + sort_order; new reorderThesisFiles() and updateThesisFileLabel() methods
• ThesisCreateController — expand MIME/ext allowlist (audio: mp3/ogg/wav/flac/aac/m4a; video: webm/mov/ogv; image: gif/webp; archives: tar/gz; any-ext via octet-stream); raise max size to 500 MB; accept file_labels[] and file_orders[] POST fields; detectFileType() helper
• ThesisEditController — same expansions; handle file_sort_order[], file_label[id] POST fields; reorder + label-update methods called; detectFileType() helper
• MediaController — expanded MIME allowlist; HTTP Range support for audio/video seeking; force-download for "other" types; inline display for known displayable types
• fieldset-files.php (shared partial) — replaced old multi-file input with sortable queue UI using SortableJS; per-file label inputs; wide accept attribute; 500 MB hint
• templates/admin/edit.php — existing files rendered as sortable list with drag handles, file type icons, label inputs, delete checkboxes; hidden file_sort_order[] inputs; new-file queue widget
• file-upload-queue.js — new JS: sortable queue for new uploads (SortableJS), per-file label fields, hidden order fields injected on submit; existing-file drag-sort; backward-compatible legacy preview for cover/banner inputs
• tfe.php (public template) — handles audio (<audio>), video (all exts), image, PDF, "other" (download link); reads display_label; files already sorted by sort_order
• tfe.css — styles for .tfe-audio, .tfe-download-file, .tfe-download-link
• form.css — styles for .tfe-file-queue, .fq-item, .admin-file-list-item (sortable), drag handles, label inputs, ghost class
• PHP upload limits — .htaccess + .user.ini in public/ (Apache/FPM) + -d flags in justfile serve recipe (built-in dev server ignores ini files)
• add.php / edit.php / partage/index.php — use sortable.min.js + file-upload-queue.js instead of file-preview.js
• docs/file-uploads.md — reference document covering accepted types, size limits, storage layout, ordering, labels, security, and source file index

UI

• admin header — replace "Déconnexion" text link with SVG sign-out icon (accessible via aria-label + .sr-only span)

Bug fixes

• smtp-test.php — wrap SmtpRelay::send() in try/catch SmtpSendException so SMTP delivery failures (e.g. 550 recipient rejected) surface as a proper flash error instead of an uncaught exception/silent crash
• partage email retry — on 550 recipient-rejected, redirect to /partage/retry-email instead of recapitulatif; student can correct address and resend or skip
• tfe access form email retry — on recipient_rejected JSON response, highlight email field in red, show corrected error message, let user fix and resubmit inline
• ThesisCreateController — confirmation_email is now optional (empty = skip send)
• admin/add.php template — email confirmation field marked optional, label and hint updated

Previously completed

• Multi-file upload for thesis files (basic)
• File access restriction system (email approval workflow)
• Share link system for student submission
• Admin CRUD for theses
• Public TFE detail page with file display
• Search and repertoire
• Tag management
• Form help blocks
• SMTP notification