<?php
header('Content-Type: application/json');
require_once '../auth_helper.php';
requireAdminOrPengelola();
require_once '../db_connect.php';

$data = json_decode(file_get_contents('php://input'), true);

$miskin_id    = intval($data['miskin_id'] ?? 0);
$ibadah_id    = intval($data['ibadah_id'] ?? 0);
$tipe_bantuan = trim($data['tipe_bantuan'] ?? '');
$tanggal      = trim($data['tanggal'] ?? '');
$keterangan   = trim($data['keterangan'] ?? '');

if ($_SESSION['role'] === 'pengelola') {
    if ($ibadah_id !== intval($_SESSION['ibadah_id'])) {
        header('HTTP/1.1 403 Forbidden');
        echo json_encode(['status' => 'error', 'message' => 'Forbidden: Anda tidak diizinkan membuat log untuk rumah ibadah lain.']);
        exit;
    }
}

if (!$miskin_id || !$ibadah_id || !$tipe_bantuan || !$tanggal) {
    echo json_encode(['status' => 'error', 'message' => 'Data tidak lengkap']);
    exit;
}

$sql  = "INSERT INTO log_bantuan (miskin_id, ibadah_id, tipe_bantuan, tanggal, keterangan) VALUES (?, ?, ?, ?, ?)";
$stmt = $conn->prepare($sql);
$stmt->bind_param('iisss', $miskin_id, $ibadah_id, $tipe_bantuan, $tanggal, $keterangan);

if ($stmt->execute()) {
    echo json_encode(['status' => 'success', 'id' => $stmt->insert_id]);
} else {
    echo json_encode(['status' => 'error', 'message' => $conn->error]);
}
$conn->close();