pertama dan terakhir

project_final/config/app.php

@@ -0,0 +1,25 @@
+<?php
+/**
+ * Application path helpers.
+ *
+ * Set APP_BASE_PATH to the subdirectory that serves project_final.
+ * In this repository's Coolify image the final app runs at /project_final.
+ */
+function app_base_path(): string {
+    $basePath = getenv('APP_BASE_PATH');
+    if ($basePath === false) {
+        $basePath = '/project/project_final';
+    }
+
+    $basePath = trim($basePath);
+    if ($basePath === '' || $basePath === '/') {
+        return '';
+    }
+
+    return '/' . trim($basePath, '/');
+}
+
+function app_url(string $path = ''): string {
+    $path = '/' . ltrim($path, '/');
+    return app_base_path() . $path;
+}

project_final/config/auth_check.php

@@ -0,0 +1,45 @@
+<?php
+/**
+ * auth_check.php — Middleware: pastikan user sudah login dan role sesuai.
+ * Usage: require_once __DIR__ . '/../config/auth_check.php';
+ *        requireRole('admin'); // atau 'user'
+ */
+require_once __DIR__ . '/session.php';
+
+if (session_status() === PHP_SESSION_NONE) {
+    startAppSession();
+}
+
+function isLoggedIn(): bool {
+    return isset($_SESSION['user_id']) && isset($_SESSION['role']);
+}
+
+function requireLogin(?string $redirect = null): void {
+    if (!isLoggedIn()) {
+        $redirect = $redirect ?? app_url('login.php');
+        header("Location: $redirect");
+        exit;
+    }
+}
+
+function requireRole(string $role, ?string $redirect = null): void {
+    requireLogin($redirect);
+    if ($_SESSION['role'] !== $role) {
+        // Redirect ke dashboard yang sesuai role-nya
+        if ($_SESSION['role'] === 'admin') {
+            header('Location: ' . app_url('admin/index.php'));
+        } else {
+            header('Location: ' . app_url('user/index.php'));
+        }
+        exit;
+    }
+}
+
+function currentUser(): array {
+    return [
+        'id'          => $_SESSION['user_id']    ?? null,
+        'username'    => $_SESSION['username']   ?? '',
+        'role'        => $_SESSION['role']        ?? '',
+        'nama_lengkap'=> $_SESSION['nama_lengkap']?? '',
+    ];
+}

project_final/config/db.php

@@ -0,0 +1,34 @@
+<?php
+/**
+ * Singleton PDO connection.
+ *
+ * Coolify: set DB_HOST, DB_PORT, DB_DATABASE, DB_USERNAME, and DB_PASSWORD
+ * from the database service credentials.
+ */
+class Database {
+    private static $conn = null;
+
+    private static function env(string $key, string $default = ''): string {
+        $value = getenv($key);
+        return ($value === false || $value === '') ? $default : $value;
+    }
+
+    public static function getConnection() {
+        if (self::$conn === null) {
+            $host = self::env('DB_HOST', '127.0.0.1');
+            $port = self::env('DB_PORT', '3306');
+            $dbName = self::env('DB_DATABASE', 'webgis_db');
+            $username = self::env('DB_USERNAME', 'root');
+            $password = self::env('DB_PASSWORD', '');
+
+            self::$conn = new PDO(
+                "mysql:host={$host};port={$port};dbname={$dbName};charset=utf8mb4",
+                $username,
+                $password
+            );
+            self::$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+            self::$conn->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
+        }
+        return self::$conn;
+    }
+}

project_final/config/session.php

@@ -0,0 +1,24 @@
+<?php
+require_once __DIR__ . '/app.php';
+
+function startAppSession(): void {
+    if (session_status() === PHP_SESSION_ACTIVE) {
+        return;
+    }
+
+    $secureEnv = strtolower((string)getenv('SESSION_SECURE'));
+    $isHttps = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
+        || (($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https')
+        || $secureEnv === 'true'
+        || $secureEnv === '1';
+
+    session_set_cookie_params([
+        'lifetime' => 0,
+        'path' => app_base_path() ?: '/',
+        'secure' => $isHttps,
+        'httponly' => true,
+        'samesite' => 'Lax',
+    ]);
+
+    session_start();
+}