add files

2026-06-10 19:42:59 +07:00
parent 7bf3c98e59
commit e950468760
3541 changed files with 0 additions and 0 deletions
@@ -0,0 +1,144 @@
+<?php
+define('DB_HOST', getenv('DB_HOST') ?: 'localhost');
+define('DB_USER', getenv('DB_USER') ?: 'root');
+define('DB_PASS', getenv('DB_PASSWORD') ?: '');
+define('DB_NAME', getenv('DB_NAME') ?: 'webgis_pontianak');
+define('BASE_URL', '');
+define('UPLOAD_DIR', __DIR__ . '/../assets/uploads/');
+define('SESSION_TIMEOUT', 7200); // 2 jam
+
+$conn = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
+if ($conn->connect_error) {
+    http_response_code(500);
+    die(json_encode(['error' => 'Koneksi database gagal: ' . $conn->connect_error]));
+}
+$conn->set_charset('utf8mb4');
+
+// ── Session ──────────────────────────────────────────────
+function startSession() {
+    if (session_status() === PHP_SESSION_NONE) {
+        if (!headers_sent()) {
+            session_set_cookie_params(['httponly' => true, 'samesite' => 'Strict']);
+        }
+        session_start();
+    }
+}
+
+function requireLogin($roles = []) {
+    startSession();
+    if (empty($_SESSION['user_id'])) {
+        if (isApiRequest()) {
+            http_response_code(401);
+            echo json_encode(['error' => 'Tidak terautentikasi']);
+            exit;
+        }
+        header('Location: login.php');
+        exit;
+    }
+    if (!empty($roles) && !in_array($_SESSION['role'], $roles)) {
+        if (isApiRequest()) {
+            http_response_code(403);
+            echo json_encode(['error' => 'Akses ditolak']);
+            exit;
+        }
+        header('Location: login.php?error=akses');
+        exit;
+    }
+}
+
+function isApiRequest() {
+    return strpos($_SERVER['REQUEST_URI'], '/api/') !== false
+        || ($_SERVER['HTTP_ACCEPT'] ?? '') === 'application/json';
+}
+
+function currentUser() {
+    startSession();
+    return [
+        'id'    => $_SESSION['user_id']  ?? null,
+        'nama'  => $_SESSION['nama']     ?? '',
+        'role'  => $_SESSION['role']     ?? '',
+        'ibadah'=> $_SESSION['id_rumah_ibadah'] ?? null,
+    ];
+}
+
+// ── Haversine ────────────────────────────────────────────
+function haversine($lat1, $lon1, $lat2, $lon2) {
+    $R = 6371000;
+    $phi1 = deg2rad($lat1); $phi2 = deg2rad($lat2);
+    $dphi = deg2rad($lat2 - $lat1);
+    $dl   = deg2rad($lon2 - $lon1);
+    $a = sin($dphi/2)**2 + cos($phi1)*cos($phi2)*sin($dl/2)**2;
+    return $R * 2 * atan2(sqrt($a), sqrt(1-$a));
+}
+
+function findNearestIbadah($conn, $lat, $lon) {
+    $result = $conn->query("SELECT id, nama, latitude, longitude FROM rumah_ibadah");
+    $nearest = null; $minDist = PHP_INT_MAX;
+    while ($row = $result->fetch_assoc()) {
+        $dist = haversine($lat, $lon, $row['latitude'], $row['longitude']);
+        if ($dist < $minDist) { $minDist = $dist; $nearest = $row; }
+    }
+    return $nearest ? ['id' => $nearest['id'], 'nama' => $nearest['nama'], 'jarak' => round($minDist, 2)] : null;
+}
+
+function findIbadahInRadius($conn, $lat, $lon) {
+    // Cari rumah ibadah yang radius-nya mencakup koordinat ini
+    $result = $conn->query("SELECT id, nama, radius, latitude, longitude FROM rumah_ibadah");
+    $matches = [];
+    while ($row = $result->fetch_assoc()) {
+        $dist = haversine($lat, $lon, $row['latitude'], $row['longitude']);
+        if ($dist <= $row['radius']) $matches[] = ['id' => $row['id'], 'nama' => $row['nama'], 'jarak' => round($dist, 2)];
+    }
+    return $matches ?: [findNearestIbadah($conn, $lat, $lon)];
+}
+
+// ── Log aktivitas ─────────────────────────────────────────
+function logAktivitas($conn, $aksi, $tabel = null, $id = null, $desc = null) {
+    startSession();
+    $uid  = isset($_SESSION['user_id']) ? (int)$_SESSION['user_id'] : 'NULL';
+    $aksi = $conn->real_escape_string($aksi);
+    $tbl  = $conn->real_escape_string($tabel ?? '');
+    $desc = $conn->real_escape_string($desc ?? '');
+    $ip   = $conn->real_escape_string($_SERVER['REMOTE_ADDR'] ?? '');
+    $id   = $id ? (int)$id : 'NULL';
+    $conn->query("INSERT INTO log_aktivitas (id_user,aksi,tabel_terkait,id_terkait,deskripsi,ip_address)
+                  VALUES ($uid,'$aksi','$tbl',$id,'$desc','$ip')");
+}
+
+// ── Notifikasi ────────────────────────────────────────────
+function kirimNotifikasi($conn, $id_user, $judul, $isi, $tipe = 'info', $id_ref = null) {
+    $judul   = $conn->real_escape_string($judul);
+    $isi     = $conn->real_escape_string($isi);
+    $tipe    = $conn->real_escape_string($tipe);
+    $id_ref  = $id_ref ? (int)$id_ref : 'NULL';
+    $id_user = (int)$id_user;
+    $conn->query("INSERT INTO notifikasi (id_user,judul,isi,tipe,id_referensi)
+                  VALUES ($id_user,'$judul','$isi','$tipe',$id_ref)");
+}
+
+// ── Upload helper ─────────────────────────────────────────
+function uploadFile($fileKey, $prefix = 'file') {
+    if (empty($_FILES[$fileKey]['name'])) return null;
+    $dir = UPLOAD_DIR;
+    if (!is_dir($dir)) mkdir($dir, 0755, true);
+    $ext  = strtolower(pathinfo($_FILES[$fileKey]['name'], PATHINFO_EXTENSION));
+    $allowed = ['jpg','jpeg','png','gif','pdf','webp'];
+    if (!in_array($ext, $allowed)) return null;
+    $name = $prefix . '_' . uniqid() . '.' . $ext;
+    if (move_uploaded_file($_FILES[$fileKey]['tmp_name'], $dir . $name)) {
+        return 'assets/uploads/' . $name;
+    }
+    return null;
+}
+
+// ── JSON response ─────────────────────────────────────────
+function jsonResponse($data, $code = 200) {
+    http_response_code($code);
+    header('Content-Type: application/json');
+    echo json_encode($data, JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+// ── Escape shorthand ──────────────────────────────────────
+function esc($conn, $val) { return $conn->real_escape_string($val ?? ''); }
+?>