<?php
include 'koneksi.php';
header('Content-Type: application/json');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = $_POST['username'] ?? '';

    if (empty($username)) {
        echo json_encode(['status' => 'error', 'message' => 'Username is required.']);
        exit;
    }

    try {
        $stmt = $pdo->prepare("SELECT foto, pin FROM account WHERE username = ?");
        $stmt->execute([$username]);
        $user = $stmt->fetch(PDO::FETCH_ASSOC);

        if ($user && !empty($user['foto'])) {
            // Check if foto file exists locally
            if (file_exists(__DIR__ . '/' . $user['foto'])) {
                echo json_encode([
                    'status' => 'success',
                    'foto' => $user['foto'],
                    'pin' => $user['pin']
                ]);
            } else {
                echo json_encode(['status' => 'error', 'message' => 'Photo file not found on server.']);
            }
        } else {
            echo json_encode(['status' => 'error', 'message' => 'No reference photo found for this account.']);
        }
    } catch (PDOException $e) {
        echo json_encode(['status' => 'error', 'message' => 'Database error.']);
    }
} else {
    echo json_encode(['status' => 'error', 'message' => 'Invalid request method.']);
}
?>