Fix SPBU status writes

04/simpan.php

@@ -1,18 +1,25 @@
 <?php
 include 'koneksi.php';
 
-$nama = $_POST['nama_spbu'];
-$wa = $_POST['no_wa'];
-$status = $_POST['status'];
-$lat = $_POST['latitude'];
-$lng = $_POST['longitude'];
+$nama = trim($_POST['nama_spbu'] ?? '');
+$wa = trim($_POST['no_wa'] ?? '');
+$status = $_POST['status'] ?? 'no';
+$lat = (float)($_POST['latitude'] ?? 0);
+$lng = (float)($_POST['longitude'] ?? 0);
 
-$sql = "INSERT INTO spbu (nama_spbu, no_wa, status, latitude, longitude)
-        VALUES ('$nama', '$wa', '$status', '$lat', '$lng')";
-
-if ($conn->query($sql)) {
-    echo "success";
-} else {
-    echo "error";
+if (!in_array($status, ['yes', 'no'], true)) {
+    http_response_code(400);
+    echo "Status tidak valid";
+    exit;
 }
-?>
+
+try {
+    $stmt = $conn->prepare("INSERT INTO spbu (nama_spbu, no_wa, status, latitude, longitude) VALUES (?, ?, ?, ?, ?)");
+    $stmt->bind_param('sssdd', $nama, $wa, $status, $lat, $lng);
+    $stmt->execute();
+    echo "success";
+} catch (mysqli_sql_exception $e) {
+    http_response_code(500);
+    echo "error: " . $e->getMessage();
+}
+?>