315 lines
12 KiB
PHP
315 lines
12 KiB
PHP
<?php
|
|
session_start(); // ✅ ambil session login user
|
|
|
|
header('Content-Type: application/json');
|
|
header('Access-Control-Allow-Origin: *');
|
|
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
|
|
header('Access-Control-Allow-Headers: Content-Type, X-Requested-With, Authorization');
|
|
header('Access-Control-Max-Age: 3600');
|
|
|
|
// Handle preflight OPTIONS request
|
|
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
|
|
http_response_code(200);
|
|
exit();
|
|
}
|
|
|
|
require_once '../config/database.php';
|
|
|
|
$database = new Database();
|
|
$db = $database->getConnection();
|
|
|
|
// Ambil user login
|
|
$user_id = $_SESSION['user_id'] ?? null;
|
|
$user_role = $_SESSION['role'] ?? null;
|
|
|
|
// Function to parse multipart/form-data for PUT requests
|
|
function parseMultipartFormData($input, $contentType) {
|
|
$data = array();
|
|
if (preg_match('/boundary=(.+)$/', $contentType, $matches)) {
|
|
$boundary = $matches[1];
|
|
$parts = array_slice(explode('--' . $boundary, $input), 1);
|
|
foreach ($parts as $part) {
|
|
if (trim($part) == '--' || empty(trim($part))) continue;
|
|
$sections = explode("\r\n\r\n", $part, 2);
|
|
if (count($sections) != 2) continue;
|
|
$headers = $sections[0];
|
|
$body = rtrim($sections[1], "\r\n");
|
|
if (preg_match('/name="([^"]*)"/', $headers, $matches)) {
|
|
$fieldName = $matches[1];
|
|
$data[$fieldName] = $body;
|
|
}
|
|
}
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
// Handle method override and multipart data parsing
|
|
$method = $_SERVER['REQUEST_METHOD'];
|
|
if (($method === 'PUT' || $method === 'PATCH') && empty($_POST) &&
|
|
isset($_SERVER['CONTENT_TYPE']) && strpos($_SERVER['CONTENT_TYPE'], 'multipart/form-data') !== false) {
|
|
$raw_input = file_get_contents('php://input');
|
|
$parsed_data = parseMultipartFormData($raw_input, $_SERVER['CONTENT_TYPE']);
|
|
if (!empty($parsed_data)) {
|
|
if (isset($parsed_data['_method'])) {
|
|
$method = strtoupper($parsed_data['_method']);
|
|
unset($parsed_data['_method']);
|
|
}
|
|
$_POST = $parsed_data;
|
|
}
|
|
}
|
|
|
|
// Check for X-HTTP-Method-Override header
|
|
if (isset($_SERVER['HTTP_X_HTTP_METHOD_OVERRIDE'])) {
|
|
$method = $_SERVER['HTTP_X_HTTP_METHOD_OVERRIDE'];
|
|
}
|
|
|
|
// Check for _method parameter (Laravel style)
|
|
if (isset($_POST['_method'])) {
|
|
$method = strtoupper($_POST['_method']);
|
|
unset($_POST['_method']); // Clean it up
|
|
}
|
|
|
|
$response = array('success' => false, 'message' => '', 'data' => null);
|
|
|
|
try {
|
|
switch($method) {
|
|
case 'GET':
|
|
if (isset($_GET['id'])) {
|
|
// Get single route
|
|
$query = "SELECT r.*,
|
|
fi.name as from_item_name, fi.latitude as from_lat, fi.longitude as from_lng,
|
|
ti.name as to_item_name, ti.latitude as to_lat, ti.longitude as to_lng
|
|
FROM cable_routes r
|
|
LEFT JOIN ftth_items fi ON r.from_item_id = fi.id
|
|
LEFT JOIN ftth_items ti ON r.to_item_id = ti.id
|
|
WHERE r.id = :id";
|
|
|
|
if ($user_role !== 'engineer') {
|
|
$query .= " AND r.user_id = :user_id";
|
|
}
|
|
|
|
$stmt = $db->prepare($query);
|
|
$stmt->bindParam(':id', $_GET['id']);
|
|
if ($user_role !== 'engineer') {
|
|
$stmt->bindParam(':user_id', $user_id);
|
|
}
|
|
$stmt->execute();
|
|
|
|
$route = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
if ($route) {
|
|
$response['success'] = true;
|
|
$response['data'] = $route;
|
|
} else {
|
|
$response['message'] = 'Route not found';
|
|
}
|
|
} else {
|
|
// Get all routes
|
|
$query = "SELECT r.*,
|
|
fi.name as from_item_name, fi.latitude as from_lat, fi.longitude as from_lng,
|
|
ti.name as to_item_name, ti.latitude as to_lat, ti.longitude as to_lng
|
|
FROM cable_routes r
|
|
LEFT JOIN ftth_items fi ON r.from_item_id = fi.id
|
|
LEFT JOIN ftth_items ti ON r.to_item_id = ti.id";
|
|
|
|
if ($user_role !== 'engineer') {
|
|
$query .= " WHERE r.user_id = :user_id";
|
|
}
|
|
|
|
$query .= " ORDER BY r.created_at DESC";
|
|
|
|
$stmt = $db->prepare($query);
|
|
if ($user_role !== 'engineer') {
|
|
$stmt->bindParam(':user_id', $user_id);
|
|
}
|
|
$stmt->execute();
|
|
|
|
$routes = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
$response['success'] = true;
|
|
$response['data'] = $routes;
|
|
}
|
|
break;
|
|
|
|
case 'POST':
|
|
// Create new route
|
|
$from_item_id = $_POST['from_item_id'] ?? null;
|
|
$to_item_id = $_POST['to_item_id'] ?? null;
|
|
$route_coordinates = $_POST['route_coordinates'] ?? null;
|
|
$distance = $_POST['distance'] ?? null;
|
|
$cable_type = $_POST['cable_type'] ?? 'Fiber Optic';
|
|
$core_count = $_POST['core_count'] ?? 24;
|
|
$status = $_POST['status'] ?? 'planned';
|
|
|
|
if (!$from_item_id || !$to_item_id) {
|
|
$response['message'] = 'From and To items are required';
|
|
break;
|
|
}
|
|
|
|
// Check if route already exists
|
|
$query = "SELECT id FROM cable_routes WHERE
|
|
(from_item_id = :from_id AND to_item_id = :to_id) OR
|
|
(from_item_id = :to_id AND to_item_id = :from_id)";
|
|
$stmt = $db->prepare($query);
|
|
$stmt->bindParam(':from_id', $from_item_id);
|
|
$stmt->bindParam(':to_id', $to_item_id);
|
|
$stmt->execute();
|
|
|
|
if ($stmt->fetch()) {
|
|
$response['message'] = 'Route already exists between these items';
|
|
break;
|
|
}
|
|
|
|
$query = "INSERT INTO cable_routes
|
|
(from_item_id, to_item_id, route_coordinates, distance, cable_type, core_count, status, user_id)
|
|
VALUES
|
|
(:from_item_id, :to_item_id, :route_coordinates, :distance, :cable_type, :core_count, :status, :user_id)";
|
|
|
|
$stmt = $db->prepare($query);
|
|
$stmt->bindParam(':from_item_id', $from_item_id);
|
|
$stmt->bindParam(':to_item_id', $to_item_id);
|
|
$stmt->bindParam(':route_coordinates', $route_coordinates);
|
|
$stmt->bindParam(':distance', $distance);
|
|
$stmt->bindParam(':cable_type', $cable_type);
|
|
$stmt->bindParam(':core_count', $core_count);
|
|
$stmt->bindParam(':status', $status);
|
|
$stmt->bindParam(':user_id', $user_id);
|
|
|
|
if ($stmt->execute()) {
|
|
$route_id = $db->lastInsertId();
|
|
$response['success'] = true;
|
|
$response['message'] = 'Route created successfully';
|
|
$response['route_id'] = $route_id;
|
|
} else {
|
|
$response['message'] = 'Failed to create route';
|
|
}
|
|
break;
|
|
|
|
case 'PUT':
|
|
$put_data = $_POST;
|
|
$id = $put_data['id'] ?? null;
|
|
|
|
if (!$id) {
|
|
$response['message'] = 'ID required for update';
|
|
break;
|
|
}
|
|
|
|
// Pastikan teknisi hanya update kabel miliknya
|
|
if ($user_role !== 'engineer') {
|
|
$check = $db->prepare("SELECT id FROM cable_routes WHERE id = :id AND user_id = :user_id");
|
|
$check->execute([':id'=>$id, ':user_id'=>$user_id]);
|
|
if (!$check->fetch()) {
|
|
$response['message'] = 'Not authorized to update this route';
|
|
break;
|
|
}
|
|
}
|
|
|
|
$update_fields = [];
|
|
$params = [':id' => $id];
|
|
$allowed_fields = ['cable_type', 'core_count', 'status', 'distance', 'route_coordinates'];
|
|
|
|
foreach ($allowed_fields as $field) {
|
|
if (isset($put_data[$field])) {
|
|
$update_fields[] = "$field = :$field";
|
|
$params[":$field"] = $put_data[$field];
|
|
}
|
|
}
|
|
|
|
if (empty($update_fields)) {
|
|
$response['message'] = 'No fields to update';
|
|
break;
|
|
}
|
|
|
|
$query = "UPDATE cable_routes SET " . implode(', ', $update_fields) . " WHERE id = :id";
|
|
$stmt = $db->prepare($query);
|
|
|
|
if ($stmt->execute($params)) {
|
|
$response['success'] = true;
|
|
$response['message'] = 'Route updated successfully';
|
|
} else {
|
|
$response['message'] = 'Failed to update route';
|
|
}
|
|
break;
|
|
|
|
case 'DELETE':
|
|
$input = file_get_contents("php://input");
|
|
$delete_data = [];
|
|
$json_data = json_decode($input, true);
|
|
if ($json_data) {
|
|
$delete_data = $json_data;
|
|
} else {
|
|
parse_str($input, $delete_data);
|
|
}
|
|
if (empty($delete_data)) {
|
|
$delete_data = $_POST;
|
|
}
|
|
|
|
if (isset($delete_data['id'])) {
|
|
$id = $delete_data['id'];
|
|
|
|
// Pastikan teknisi hanya hapus kabel miliknya
|
|
if ($user_role !== 'engineer') {
|
|
$check = $db->prepare("SELECT id FROM cable_routes WHERE id = :id AND user_id = :user_id");
|
|
$check->execute([':id'=>$id, ':user_id'=>$user_id]);
|
|
if (!$check->fetch()) {
|
|
$response['message'] = 'Not authorized to delete this route';
|
|
break;
|
|
}
|
|
}
|
|
|
|
$query = "DELETE FROM cable_routes WHERE id = :id";
|
|
$stmt = $db->prepare($query);
|
|
$stmt->bindParam(':id', $id);
|
|
|
|
if ($stmt->execute()) {
|
|
$response['success'] = true;
|
|
$response['message'] = 'Route deleted successfully';
|
|
} else {
|
|
$response['message'] = 'Failed to delete route';
|
|
}
|
|
} else if (isset($delete_data['item_id'])) {
|
|
$item_id = $delete_data['item_id'];
|
|
|
|
// Pastikan teknisi hanya hapus rute yg terkait item miliknya
|
|
if ($user_role !== 'engineer') {
|
|
$queryCheck = "SELECT id FROM cable_routes WHERE (from_item_id = :item_id OR to_item_id = :item_id) AND user_id = :user_id";
|
|
$stmtCheck = $db->prepare($queryCheck);
|
|
$stmtCheck->execute([':item_id'=>$item_id, ':user_id'=>$user_id]);
|
|
$route_ids = $stmtCheck->fetchAll(PDO::FETCH_COLUMN);
|
|
if (empty($route_ids)) {
|
|
$response['message'] = 'Not authorized to delete these routes';
|
|
break;
|
|
}
|
|
}
|
|
|
|
$query = "DELETE FROM cable_routes WHERE from_item_id = :item_id OR to_item_id = :item_id";
|
|
if ($user_role !== 'engineer') {
|
|
$query .= " AND user_id = :user_id";
|
|
}
|
|
|
|
$stmt = $db->prepare($query);
|
|
$stmt->bindParam(':item_id', $item_id);
|
|
if ($user_role !== 'engineer') {
|
|
$stmt->bindParam(':user_id', $user_id);
|
|
}
|
|
|
|
if ($stmt->execute()) {
|
|
$response['success'] = true;
|
|
$response['message'] = 'Routes deleted successfully';
|
|
} else {
|
|
$response['message'] = 'Failed to delete routes';
|
|
}
|
|
} else {
|
|
$response['message'] = 'ID or item_id required for deletion';
|
|
}
|
|
break;
|
|
|
|
default:
|
|
$response['message'] = 'Method not allowed';
|
|
break;
|
|
}
|
|
|
|
} catch (Exception $e) {
|
|
$response['message'] = 'Database error: ' . $e->getMessage();
|
|
}
|
|
|
|
echo json_encode($response);
|