Bayu/WebGIS-Project
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add files and folders

Browse Source
This commit is contained in:
mhmmadbayuu
2026-06-10 17:28:32 +07:00
parent 52f4cf86ab
commit 61f4fb2e71
80 changed files with 17551 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
webgis-kemiskinan/php/api/laporan.php
+255
View File
@@ -0,0 +1,255 @@
<?php
// ============================================================
// API: Laporan Masyarakat
// GET ?action=list|detail&id=...
// POST action=create (multipart untuk foto)
// PUT action=update_status&id=...
// ============================================================
require_once __DIR__ . '/../middleware/auth.php';
header('Content-Type: application/json; charset=utf-8');
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type');
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { exit; }
$method = $_SERVER['REQUEST_METHOD'];
$action = $_GET['action'] ?? '';
$currentUser = getApiUser($pdo);
// ============================================================
// GET: list laporan
// ============================================================
if ($method === 'GET') {
if ($action === 'list') {
$where = [];
$params = [];
if (!empty($_GET['status'])) {
$where[] = 'l.status = :status';
$params[':status'] = $_GET['status'];
}
if (!empty($_GET['urgensi'])) {
$where[] = 'l.tingkat_urgensi = :urgensi';
$params[':urgensi'] = $_GET['urgensi'];
}
$whereStr = $where ? 'WHERE ' . implode(' AND ', $where) : '';
$rows = $pdo->prepare("
SELECT l.*,
p.nama_lengkap AS nama_terdampak,
u.nama AS nama_verifikator
FROM laporan l
LEFT JOIN penduduk p ON p.nik = l.nik_terdampak
LEFT JOIN users u ON u.id = l.diverifikasi_oleh
$whereStr
ORDER BY
CASE l.tingkat_urgensi WHEN 'darurat' THEN 1 WHEN 'tinggi' THEN 2 WHEN 'sedang' THEN 3 ELSE 4 END ASC,
CASE l.status WHEN 'pending' THEN 1 WHEN 'diverifikasi' THEN 2 ELSE 3 END ASC,
l.created_at DESC
LIMIT 500
");
$rows->execute($params);
jsonResponse(true, 'OK', ['data' => $rows->fetchAll(), 'total' => $rows->rowCount()]);
}
if ($action === 'detail') {
$id = (int)($_GET['id'] ?? 0);
$stmt = $pdo->prepare("
SELECT l.*, p.nama_lengkap AS nama_terdampak, p.status_ekonomi,
p.kondisi_kesehatan, p.alamat AS alamat_penduduk
FROM laporan l
LEFT JOIN penduduk p ON p.nik = l.nik_terdampak
WHERE l.id = :id
");
$stmt->execute([':id' => $id]);
$data = $stmt->fetch();
if (!$data) jsonResponse(false, 'Laporan tidak ditemukan.', [], 404);
jsonResponse(true, 'OK', ['data' => $data]);
}
if ($action === 'geojson') {
// Untuk layer marker laporan di peta
$stmt = $pdo->query("
SELECT id, nama_pelapor, pelapor_id, kategori, tingkat_urgensi, status,
latitude, longitude, alamat, created_at
FROM laporan
WHERE latitude IS NOT NULL AND longitude IS NOT NULL
AND status NOT IN ('selesai','ditolak')
");
$rows = $stmt->fetchAll();
$features = [];
foreach ($rows as $r) {
$color = match($r['tingkat_urgensi']) {
'darurat' => '#dc2626',
'tinggi' => '#ea580c',
'sedang' => '#ca8a04',
default => '#2563eb',
};
$features[] = [
'type' => 'Feature',
'geometry' => ['type' => 'Point', 'coordinates' => [(float)$r['longitude'], (float)$r['latitude']]],
'properties' => array_merge($r, ['color' => $color, 'layer' => 'laporan'])
];
}
header('Content-Type: application/json');
echo json_encode(['type' => 'FeatureCollection', 'features' => $features], JSON_UNESCAPED_UNICODE);
exit;
}
if ($action === 'stats') {
$stats = $pdo->query("
SELECT
SUM(status='pending') AS pending,
SUM(status='diverifikasi') AS diverifikasi,
SUM(status='diproses') AS diproses,
SUM(status='selesai') AS selesai,
SUM(tingkat_urgensi='darurat') AS darurat,
COUNT(*) AS total
FROM laporan
")->fetch();
jsonResponse(true, 'OK', ['data' => $stats]);
}
jsonResponse(false, 'Action tidak dikenal.', [], 400);
}
// ============================================================
// POST: buat laporan baru (bisa dilakukan masyarakat umum)
// ============================================================
if ($method === 'POST') {
$deskripsi = sanitizeStr($_POST['deskripsi'] ?? '', 2000);
$kategori = sanitizeStr($_POST['kategori'] ?? 'butuh_bantuan_lain');
$urgensi = sanitizeStr($_POST['tingkat_urgensi'] ?? 'sedang');
$lat = !empty($_POST['latitude']) ? (float)$_POST['latitude'] : null;
$lng = !empty($_POST['longitude']) ? (float)$_POST['longitude'] : null;
if (strlen($deskripsi) < 10) jsonResponse(false, 'Deskripsi laporan terlalu singkat.', [], 400);
$fotoNama = null;
if (!empty($_FILES['foto']['name'])) {
try {
$fotoNama = uploadFile($_FILES['foto'], UPLOAD_LAPORAN, ALLOWED_IMG_EXT);
} catch (RuntimeException $e) {
jsonResponse(false, $e->getMessage(), [], 400);
}
}
$stmt = $pdo->prepare("
INSERT INTO laporan
(nama_pelapor, pelapor_id, nik_terdampak, deskripsi, kategori, tingkat_urgensi,
latitude, longitude, alamat, foto, status)
VALUES
(:np, :pid, :nik, :dsk, :kat, :urg, :lat, :lng, :almt, :foto, 'pending')
");
$stmt->execute([
':np' => sanitizeStr($_POST['nama_pelapor'] ?? '') ?: null,
':pid' => $currentUser['id'] ?? null,
':nik' => sanitizeStr($_POST['nik_terdampak'] ?? '') ?: null,
':dsk' => $deskripsi,
':kat' => $kategori,
':urg' => $urgensi,
':lat' => $lat,
':lng' => $lng,
':almt' => sanitizeStr($_POST['alamat'] ?? '') ?: null,
':foto' => $fotoNama,
]);
$laporanId = (int)$pdo->lastInsertId();
// Kirim notifikasi ke pengurus jika darurat
if (in_array($urgensi, ['darurat', 'tinggi'])) {
$pengurus = $pdo->query("SELECT id FROM users WHERE role_id = 2")->fetchAll();
foreach ($pengurus as $p) {
$pdo->prepare("
INSERT INTO notifikasi (user_id, judul, isi, tipe, ref_id)
VALUES (:uid, :judul, :isi, 'laporan', :ref)
")->execute([
':uid' => $p['id'],
':judul' => '🚨 Laporan ' . strtoupper($urgensi) . ' masuk!',
':isi' => "Ada laporan baru kategori '$kategori'. Segera ditangani.",
':ref' => $laporanId,
]);
}
}
logAktivitas($pdo, $currentUser['id'] ?? null, 'LAPORAN', 'laporan', (string)$laporanId);
jsonResponse(true, 'Laporan berhasil dikirim. Terima kasih!', ['id' => $laporanId], 201);
}
// ============================================================
// PUT: Update status laporan (hanya pengurus/admin)
// ============================================================
if ($method === 'PUT') {
if (!canVerify($currentUser)) jsonResponse(false, 'Akses ditolak.', [], 403);
$id = (int)($_GET['id'] ?? 0);
if ($id <= 0) jsonResponse(false, 'ID tidak valid.', [], 400);
$body = json_decode(file_get_contents('php://input'), true) ?? [];
$status = sanitizeStr($body['status'] ?? '');
$valid = ['diverifikasi', 'diproses', 'selesai', 'ditolak'];
if (!in_array($status, $valid)) jsonResponse(false, 'Status tidak valid.', [], 400);
$old = $pdo->prepare("SELECT * FROM laporan WHERE id = :id");
$old->execute([':id' => $id]);
$dataLama = $old->fetch();
if (!$dataLama) jsonResponse(false, 'Laporan tidak ditemukan.', [], 404);
$sets = ['status = :status', 'updated_at = NOW()'];
$params = [':id' => $id, ':status' => $status];
if ($status === 'diverifikasi' && $currentUser) {
$sets[] = 'diverifikasi_oleh = :verif';
$params[':verif'] = $currentUser['id'];
}
if ($status === 'diproses' && $currentUser) {
$sets[] = 'ditangani_oleh = :tangani';
$params[':tangani'] = $currentUser['id'];
}
if ($status === 'selesai') {
$sets[] = 'tanggal_selesai = NOW()';
}
if (!empty($body['catatan_verifikasi'])) {
$sets[] = 'catatan_verifikasi = :catatan';
$params[':catatan'] = sanitizeStr($body['catatan_verifikasi'], 1000);
}
$pdo->prepare("UPDATE laporan SET " . implode(', ', $sets) . " WHERE id = :id")->execute($params);
logAktivitas($pdo, $currentUser['id'], 'UPDATE', 'laporan', (string)$id, $dataLama, $body);
jsonResponse(true, "Status laporan diperbarui menjadi '$status'.", ['id' => $id]);
}
// ============================================================
// PUT: Update koordinat (via drag map)
// ============================================================
if ($method === 'PUT' && $action === 'update_koordinat') {
if (!canVerify($currentUser)) jsonResponse(false, 'Akses ditolak.', [], 403);
$id = (int)($_GET['id'] ?? 0);
$body = json_decode(file_get_contents('php://input'), true);
$lat = isset($body['latitude']) ? (float)$body['latitude'] : null;
$lng = isset($body['longitude']) ? (float)$body['longitude'] : null;
if (!$lat || !$lng) jsonResponse(false, 'Latitude dan Longitude wajib diisi.', [], 400);
$pdo->prepare("UPDATE laporan SET latitude = :lat, longitude = :lng, updated_at = NOW() WHERE id = :id")->execute([
':lat' => $lat,
':lng' => $lng,
':id' => $id
]);
logAktivitas($pdo, $currentUser['id'], 'UPDATE_KOORDINAT', 'laporan', (string)$id);
jsonResponse(true, 'Koordinat laporan berhasil diperbarui.', ['id' => $id]);
}
jsonResponse(false, 'Method tidak didukung.', [], 405);