<?php
session_start();
if (!isset($_SESSION['role']) || !in_array($_SESSION['role'], ['admin', 'petugas'])) {
    header('Content-Type: application/json');
    http_response_code(403);
    echo json_encode(['status'=>'error','message'=>'Akses ditolak.']);
    exit;
}

include '../koneksi.php';
header('Content-Type: application/json');

$id              = (int)($_POST['id']             ?? 0);
$nama            = trim($_POST['nama']            ?? '');
$nik             = trim($_POST['nik']             ?? '');
$keterangan      = trim($_POST['keterangan']      ?? '');
$latitude        = trim($_POST['latitude']        ?? '');
$longitude       = trim($_POST['longitude']       ?? '');
$status_jangkauan= trim($_POST['status_jangkauan']?? 'Luar Jangkauan');
$status_bantuan  = trim($_POST['status_bantuan']  ?? 'Belum Disalurkan');
$fasilitas_publik_id = trim($_POST['fasilitas_publik_id'] ?? '');

if (!$id || !$nama || !$latitude || !$longitude) {
    echo json_encode(['status'=>'error','message'=>'Data tidak lengkap.']);
    exit;
}

$fp_id = ($fasilitas_publik_id !== '') ? (int)$fasilitas_publik_id : null;

// Fungsi upload foto
function uploadFoto($file_input_name) {
    if (isset($_FILES[$file_input_name]) && $_FILES[$file_input_name]['error'] === UPLOAD_ERR_OK) {
        $file_tmp_path = $_FILES[$file_input_name]['tmp_name'];
        $file_name = $_FILES[$file_input_name]['name'];
        $file_size = $_FILES[$file_input_name]['size'];
        $file_type = mime_content_type($file_tmp_path);
        
        $allowed_mime_types = ['image/jpeg', 'image/png', 'image/jpg'];
        $max_size = 2 * 1024 * 1024; // 2MB
        
        if (in_array($file_type, $allowed_mime_types) && $file_size <= $max_size) {
            $file_extension = pathinfo($file_name, PATHINFO_EXTENSION);
            $new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension;
            $upload_file_dir = '../uploads/';
            $dest_path = $upload_file_dir . $new_file_name;
            
            if (move_uploaded_file($file_tmp_path, $dest_path)) {
                return $new_file_name;
            }
        }
    }
    return null;
}

$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');

try {
    $query = "UPDATE penduduk_miskin SET nama=?, nik=?, keterangan=?, latitude=?, longitude=?, status_jangkauan=?, fasilitas_publik_id=?, status_bantuan=?";
    $params = [$nama, $nik, $keterangan, $latitude, $longitude, $status_jangkauan, $fp_id, $status_bantuan];

    if ($foto_rumah) {
        $query .= ", foto_rumah=?";
        $params[] = $foto_rumah;
    }
    if ($foto_kk) {
        $query .= ", foto_kk=?";
        $params[] = $foto_kk;
    }

    $query .= " WHERE id=?";
    $params[] = $id;

    $stmt = $pdo->prepare($query);
    $stmt->execute($params);

    $stmtSelect = $pdo->prepare("SELECT pm.*, fp.nama AS fp_nama FROM penduduk_miskin pm LEFT JOIN fasilitas_publik fp ON pm.fasilitas_publik_id = fp.id WHERE pm.id = ?");
    $stmtSelect->execute([$id]);
    $data = $stmtSelect->fetch(PDO::FETCH_ASSOC);
    
    echo json_encode(['status'=>'success','data'=>$data]);
} catch (PDOException $e) {
    echo json_encode(['status'=>'error','message'=>$e->getMessage()]);
}
?>