<?
$configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
  include_once($configPath);
  $error = true;
  if (!empty($_POST) && !empty($_SESSION["utente"]) && $_SESSION["utente"]->gerarchia < 100 &&  tokenVerify()) {
    if (!empty($_POST["modulo"]) && !empty($_POST["codice_elemento"])) {
      $manager = new DGUE($_POST["modulo"],$_POST["codice_elemento"]);
      if ($manager->checkAdminPermission()) {
        if (!$manager->lock) {
          $error = false;
          $manager->removeDGUE();
          $object = $manager->getObject();
          $error = $manager->saveRequest(array_keys($_POST["criterio"] ?? []));
          if (!$error) {
            $action = "window.location.reload();";
            if (!empty($object)) {
              if (!empty($object->info["codice"])) {
                $url = DGUE::moduliAbilitati()[$manager->modulo]["returnURL"] ?? "";
                if (!empty($url)) {
                  $url .= "?codice={$object->info["codice"]}";
                  if (!empty($object->round["codice"])) {
                    $url .= "&codice_round={$object->round["codice"]}";
                  }
                  $action = "window.location.href='{$url}';";
                }
              }
            }
            ?>
            swal({title:js_dict["success-msg"],type:"success"}).then(function(){ <?= $action ?> });
            <?
          }
        }
      }
    }
  }
  if ($error) {
    header('HTTP/1.0 403 Forbidden');
    die();
  }
?>