chore: prepare docker webgis deployment

2026-06-11 18:14:21 +07:00
parent d2214ad9c8
commit a90748d9c1
149 changed files with 20844 additions and 5 deletions
@@ -0,0 +1,49 @@
+<?php
+header('Content-Type: application/json');
+require_once '../../config.php';
+require_once '../../auth/helper.php';
+require_once '../../koneksi.php';
+
+require_auth('operator');
+
+$penduduk_id = (int)($_GET['penduduk_id'] ?? 0);
+if ($penduduk_id <= 0) {
+    echo json_encode(['status' => 'error', 'message' => 'Parameter tidak valid.']);
+    exit;
+}
+
+// Operator hanya boleh lihat kebutuhan warga dalam ibadah-nya
+if (!has_role('administrator')) {
+    $op_ibadah = get_ibadah_id();
+    $stmt = $conn->prepare(
+        "SELECT ibadah_id FROM penduduk_miskin
+         WHERE id=? AND is_active=1 AND deleted_at IS NULL"
+    );
+    $stmt->bind_param('i', $penduduk_id);
+    $stmt->execute();
+    $r = $stmt->get_result()->fetch_assoc();
+    $stmt->close();
+    if (!$r || (int)$r['ibadah_id'] !== (int)$op_ibadah) {
+        http_response_code(403);
+        echo json_encode(['status' => 'error', 'message' => 'Akses ditolak.']);
+        exit;
+    }
+}
+
+$stmt = $conn->prepare("
+    SELECT k.id, k.kategori, k.deskripsi, k.status, k.created_at,
+           u.nama_lengkap AS created_by_nama
+    FROM kebutuhan k
+    LEFT JOIN users u ON u.id = k.created_by
+    WHERE k.penduduk_id = ?
+    ORDER BY k.created_at DESC
+");
+$stmt->bind_param('i', $penduduk_id);
+$stmt->execute();
+$res  = $stmt->get_result();
+$rows = [];
+while ($r = $res->fetch_assoc()) $rows[] = $r;
+$stmt->close();
+
+echo json_encode(['status' => 'success', 'data' => $rows]);
+$conn->close();
@@ -0,0 +1,65 @@
+<?php
+header('Content-Type: application/json');
+require_once '../../config.php';
+require_once '../../auth/helper.php';
+require_once '../../koneksi.php';
+
+require_auth('operator');
+require_csrf();
+
+$penduduk_id = (int)($_POST['penduduk_id'] ?? 0);
+$kategori    = trim($_POST['kategori']    ?? '');
+$deskripsi   = trim($_POST['deskripsi']   ?? '');
+
+$valid_kategori = ['Sembako','Biaya Sekolah','Biaya Kesehatan','Modal Usaha',
+                   'Renovasi Rumah','Perlengkapan Rumah','Pakaian','Lainnya'];
+
+if ($penduduk_id <= 0 || !in_array($kategori, $valid_kategori, true)) {
+    echo json_encode(['status' => 'error', 'message' => 'Parameter tidak valid.']);
+    exit;
+}
+
+// Verifikasi akses warga
+$stmt = $conn->prepare(
+    "SELECT ibadah_id, status_verifikasi FROM penduduk_miskin
+     WHERE id=? AND is_active=1 AND deleted_at IS NULL"
+);
+$stmt->bind_param('i', $penduduk_id);
+$stmt->execute();
+$warga = $stmt->get_result()->fetch_assoc();
+$stmt->close();
+
+if (!$warga) {
+    echo json_encode(['status' => 'error', 'message' => 'Data warga tidak ditemukan.']);
+    exit;
+}
+
+if (!has_role('administrator')) {
+    $op_ibadah = get_ibadah_id();
+    if ($warga['ibadah_id'] === null || (int)$warga['ibadah_id'] !== (int)$op_ibadah) {
+        http_response_code(403);
+        echo json_encode(['status' => 'error', 'message' => 'Anda tidak memiliki akses untuk warga ini.']);
+        exit;
+    }
+}
+
+if ($warga['status_verifikasi'] !== 'Terverifikasi') {
+    echo json_encode(['status' => 'error', 'message' => 'Data warga belum terverifikasi']);
+    exit;
+}
+
+$user_id    = (int)$_SESSION['user_id'];
+$deskripsi  = $deskripsi !== '' ? mb_substr($deskripsi, 0, 300) : null;
+
+$stmt = $conn->prepare(
+    "INSERT INTO kebutuhan (penduduk_id, kategori, deskripsi, created_by) VALUES (?,?,?,?)"
+);
+$stmt->bind_param('issi', $penduduk_id, $kategori, $deskripsi, $user_id);
+
+if ($stmt->execute()) {
+    echo json_encode(['status' => 'success', 'id' => $conn->insert_id]);
+} else {
+    echo json_encode(['status' => 'error', 'message' => 'Gagal menyimpan: ' . $stmt->error]);
+}
+$stmt->close();
+$conn->close();
@@ -0,0 +1,73 @@
+<?php
+header('Content-Type: application/json');
+require_once '../../config.php';
+require_once '../../auth/helper.php';
+require_once '../../koneksi.php';
+
+require_auth('operator');
+require_csrf();
+
+$id     = (int)($_POST['id']     ?? 0);
+$status = trim($_POST['status']  ?? '');
+$catatan = trim($_POST['catatan'] ?? '');
+
+$valid_status = ['Belum Terpenuhi', 'Dalam Proses', 'Terpenuhi'];
+if ($id <= 0 || !in_array($status, $valid_status, true)) {
+    echo json_encode(['status' => 'error', 'message' => 'Parameter tidak valid.']);
+    exit;
+}
+
+// Ambil kebutuhan + ibadah warga untuk cek akses
+$stmt = $conn->prepare("
+    SELECT k.id, k.status AS status_lama, pm.ibadah_id, pm.status_verifikasi
+    FROM kebutuhan k
+    JOIN penduduk_miskin pm ON pm.id = k.penduduk_id
+                            AND pm.is_active = 1
+                            AND pm.deleted_at IS NULL
+    WHERE k.id = ?
+");
+$stmt->bind_param('i', $id);
+$stmt->execute();
+$row = $stmt->get_result()->fetch_assoc();
+$stmt->close();
+
+if (!$row) {
+    echo json_encode(['status' => 'error', 'message' => 'Data tidak ditemukan.']);
+    exit;
+}
+
+if (!has_role('administrator')) {
+    $op_ibadah = get_ibadah_id();
+    if ($row['ibadah_id'] === null || (int)$row['ibadah_id'] !== (int)$op_ibadah) {
+        http_response_code(403);
+        echo json_encode(['status' => 'error', 'message' => 'Akses ditolak.']);
+        exit;
+    }
+}
+
+if ($row['status_verifikasi'] !== 'Terverifikasi') {
+    echo json_encode(['status' => 'error', 'message' => 'Data warga belum terverifikasi']);
+    exit;
+}
+
+$user_id    = (int)$_SESSION['user_id'];
+$old_status = $row['status_lama'];
+
+$stmt = $conn->prepare(
+    "UPDATE kebutuhan SET status=?, updated_by=?, updated_at=NOW() WHERE id=?"
+);
+$stmt->bind_param('sii', $status, $user_id, $id);
+$stmt->execute();
+$stmt->close();
+
+$stmt = $conn->prepare(
+    "INSERT INTO riwayat_kebutuhan (kebutuhan_id, operator_id, status_lama, status_baru, catatan)
+     VALUES (?,?,?,?,?)"
+);
+$catatan_val = $catatan !== '' ? $catatan : null;
+$stmt->bind_param('iisss', $id, $user_id, $old_status, $status, $catatan_val);
+$stmt->execute();
+$stmt->close();
+
+echo json_encode(['status' => 'success', 'status_baru' => $status]);
+$conn->close();