Syariffullah
38 lines
1.3 KiB
PHP
38 lines
1.3 KiB
PHP
<?php
|
|
header('Content-Type: application/json');
|
|
require_once '../auth_helper.php';
|
|
requireAdminOrPengelola();
|
|
require_once '../db_connect.php';
|
|
|
|
$data = json_decode(file_get_contents('php://input'), true);
|
|
|
|
$miskin_id = intval($data['miskin_id'] ?? 0);
|
|
$ibadah_id = intval($data['ibadah_id'] ?? 0);
|
|
$tipe_bantuan = trim($data['tipe_bantuan'] ?? '');
|
|
$tanggal = trim($data['tanggal'] ?? '');
|
|
$keterangan = trim($data['keterangan'] ?? '');
|
|
|
|
if ($_SESSION['role'] === 'pengelola') {
|
|
if ($ibadah_id !== intval($_SESSION['ibadah_id'])) {
|
|
header('HTTP/1.1 403 Forbidden');
|
|
echo json_encode(['status' => 'error', 'message' => 'Forbidden: Anda tidak diizinkan membuat log untuk rumah ibadah lain.']);
|
|
exit;
|
|
}
|
|
}
|
|
|
|
if (!$miskin_id || !$ibadah_id || !$tipe_bantuan || !$tanggal) {
|
|
echo json_encode(['status' => 'error', 'message' => 'Data tidak lengkap']);
|
|
exit;
|
|
}
|
|
|
|
$sql = "INSERT INTO log_bantuan (miskin_id, ibadah_id, tipe_bantuan, tanggal, keterangan) VALUES (?, ?, ?, ?, ?)";
|
|
$stmt = $conn->prepare($sql);
|
|
$stmt->bind_param('iisss', $miskin_id, $ibadah_id, $tipe_bantuan, $tanggal, $keterangan);
|
|
|
|
if ($stmt->execute()) {
|
|
echo json_encode(['status' => 'success', 'id' => $stmt->insert_id]);
|
|
} else {
|
|
echo json_encode(['status' => 'error', 'message' => $conn->error]);
|
|
}
|
|
$conn->close();
|