Upload perdana untuk deploy

2026-06-11 13:17:31 +07:00
parent 5857b15aec
commit 72133d0a9a
63 changed files with 10057 additions and 457 deletions
@@ -1,4 +1,13 @@
 <?php
+session_start();
+// Role check: hanya admin dan petugas yang boleh menyimpan
+if (!isset($_SESSION['role']) || !in_array($_SESSION['role'], ['admin', 'petugas'])) {
+    header('Content-Type: application/json');
+    http_response_code(403);
+    echo json_encode(['status'=>'error','message'=>'Akses ditolak. Hanya admin/petugas yang dapat menambah data.']);
+    exit;
+}
+
 // point/simpan.php
 include '../koneksi.php';
 header('Content-Type: application/json');