<?php
include 'koneksi.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $nama    = $_POST['nama'];
    $status  = $_POST['status'];
    $panjang = $_POST['panjang'];
    $geom    = $_POST['geom']; // Menerima teks string GeoJSON dari frontend

    // Menghindari SQL Injection dengan Prepared Statements
    $stmt = $conn->prepare("INSERT INTO jalan (nama_jalan, status_jalan, panjang_jalan, geom) VALUES (?, ?, ?, ?)");
    $stmt->bind_param("ssds", $nama, $status, $panjang, $geom);

    if ($stmt->execute()) {
        echo "Sukses";
    } else {
        echo "Gagal: " . $conn->error;
    }
    
    $stmt->close();
    $conn->close();
}
?>