From baa1bca6ccb9bb35bcc603fa326f66c23d6430d6 Mon Sep 17 00:00:00 2001
From: Freya_Martines <d1041231078@student.untan.ac.id>
Date: Fri, 12 Jun 2026 17:50:05 +0000
Subject: [PATCH] Upload files to "/"

---
 simpan_jalan.php   | 14 ++++++++++----
 simpan_kavling.php | 14 ++++++++++----
 update.php         | 23 ++++++++++-------------
 update_jalan.php   | 12 +++++++++---
 update_kavling.php | 12 +++++++++---
 5 files changed, 48 insertions(+), 27 deletions(-)

diff --git a/simpan_jalan.php b/simpan_jalan.php
index 31ab3df..fea2233 100644
--- a/simpan_jalan.php
+++ b/simpan_jalan.php
@@ -1,5 +1,11 @@
 <?php
-$conn = new mysqli("localhost","root","","gis_spbu");
-$conn->query("INSERT INTO jalan (nama,status,panjang,geom)
-VALUES ('$_POST[nama]','$_POST[status]','$_POST[panjang]','$_POST[geom]')");
-?>
\ No newline at end of file
+require_once 'koneksi.php';
+$nama = $_POST['nama'] ?? '';
+$status = $_POST['status'] ?? 'Kabupaten';
+$panjang = $_POST['panjang'] ?? 0;
+$geom = $_POST['geom'] ?? '[]';
+$stmt = $conn->prepare("INSERT INTO jalan (nama, status, panjang, geom) VALUES (?, ?, ?, ?)");
+$stmt->bind_param('ssds', $nama, $status, $panjang, $geom);
+$stmt->execute();
+echo json_encode(['status' => 'success']);
+?>
diff --git a/simpan_kavling.php b/simpan_kavling.php
index 28cc11f..57ce41b 100644
--- a/simpan_kavling.php
+++ b/simpan_kavling.php
@@ -1,5 +1,11 @@
 <?php
-$conn = new mysqli("localhost","root","","gis_spbu");
-$conn->query("INSERT INTO kavling (pemilik,status,luas,geom)
-VALUES ('$_POST[pemilik]','$_POST[status]','$_POST[luas]','$_POST[geom]')");
-?>
\ No newline at end of file
+require_once 'koneksi.php';
+$pemilik = $_POST['pemilik'] ?? '';
+$status = $_POST['status'] ?? 'SHM';
+$luas = $_POST['luas'] ?? 0;
+$geom = $_POST['geom'] ?? '[]';
+$stmt = $conn->prepare("INSERT INTO kavling (pemilik, status, luas, geom) VALUES (?, ?, ?, ?)");
+$stmt->bind_param('ssds', $pemilik, $status, $luas, $geom);
+$stmt->execute();
+echo json_encode(['status' => 'success']);
+?>
diff --git a/update.php b/update.php
index 5ff41ed..c9c0db7 100644
--- a/update.php
+++ b/update.php
@@ -1,14 +1,11 @@
 <?php
-$conn = new mysqli("localhost", "root", "", "gis_spbu");
-
-$id = $_POST['id'];
-$nama = $_POST['nama'];
-$wa = $_POST['wa'];
-$buka = $_POST['buka'];
-
-$conn->query("UPDATE spbu SET 
-    nama='$nama',
-    wa='$wa',
-    buka='$buka'
-WHERE id='$id'");
-?>
\ No newline at end of file
+require_once 'koneksi.php';
+$id = (int)($_POST['id'] ?? 0);
+$nama = $_POST['nama'] ?? '';
+$wa = $_POST['wa'] ?? '';
+$buka = $_POST['buka'] ?? 'Tidak';
+$stmt = $conn->prepare("UPDATE spbu SET nama=?, wa=?, buka=? WHERE id=?");
+$stmt->bind_param('sssi', $nama, $wa, $buka, $id);
+$stmt->execute();
+echo json_encode(['status' => 'success']);
+?>
diff --git a/update_jalan.php b/update_jalan.php
index 4a7cc85..eebc08a 100644
--- a/update_jalan.php
+++ b/update_jalan.php
@@ -1,4 +1,10 @@
 <?php
-$conn=new mysqli("localhost","root","","gis_spbu");
-$conn->query("UPDATE jalan SET nama='$_POST[nama]',status='$_POST[status]' WHERE id=$_POST[id]");
-?>
\ No newline at end of file
+require_once 'koneksi.php';
+$id = (int)($_POST['id'] ?? 0);
+$nama = $_POST['nama'] ?? '';
+$status = $_POST['status'] ?? 'Kabupaten';
+$stmt = $conn->prepare("UPDATE jalan SET nama=?, status=? WHERE id=?");
+$stmt->bind_param('ssi', $nama, $status, $id);
+$stmt->execute();
+echo json_encode(['status' => 'success']);
+?>
diff --git a/update_kavling.php b/update_kavling.php
index c8916bd..cb50fbb 100644
--- a/update_kavling.php
+++ b/update_kavling.php
@@ -1,4 +1,10 @@
 <?php
-$conn=new mysqli("localhost","root","","gis_spbu");
-$conn->query("UPDATE kavling SET pemilik='$_POST[pemilik]',status='$_POST[status]' WHERE id=$_POST[id]");
-?>
\ No newline at end of file
+require_once 'koneksi.php';
+$id = (int)($_POST['id'] ?? 0);
+$pemilik = $_POST['pemilik'] ?? '';
+$status = $_POST['status'] ?? 'SHM';
+$stmt = $conn->prepare("UPDATE kavling SET pemilik=?, status=? WHERE id=?");
+$stmt->bind_param('ssi', $pemilik, $status, $id);
+$stmt->execute();
+echo json_encode(['status' => 'success']);
+?>