delete folder backup
This commit is contained in:
dena27
@@ -0,0 +1,305 @@
|
||||
<?php
|
||||
// api/laporan.php — Pelaporan Warga oleh Kontributor & Koordinator
|
||||
header('Content-Type: application/json');
|
||||
header('Access-Control-Allow-Origin: *');
|
||||
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
|
||||
header('Access-Control-Allow-Headers: Content-Type');
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(204); exit; }
|
||||
|
||||
require_once '../config/db.php';
|
||||
require_once 'middleware.php';
|
||||
|
||||
$method = $_SERVER['REQUEST_METHOD'];
|
||||
if ($method === 'POST' && isset($_POST['_method'])) {
|
||||
$method = strtoupper($_POST['_method']);
|
||||
}
|
||||
$action = $_GET['action'] ?? '';
|
||||
|
||||
try {
|
||||
switch ($method) {
|
||||
|
||||
// ── GET: List laporan ──────────────────────────────────────────────────
|
||||
case 'GET':
|
||||
$currentUser = requireAuth(['admin', 'petugas', 'koordinator', 'kontributor']);
|
||||
$role = $currentUser['role'];
|
||||
$userId = (int)$currentUser['id'];
|
||||
|
||||
// Jika ada action=stats untuk admin dashboard
|
||||
if ($action === 'stats') {
|
||||
if (!in_array($role, ['admin', 'petugas'])) {
|
||||
http_response_code(403);
|
||||
echo json_encode(['success' => false, 'message' => 'Forbidden']);
|
||||
exit;
|
||||
}
|
||||
$stmtStats = $pdo->query("
|
||||
SELECT status, COUNT(*) as jumlah
|
||||
FROM laporan_warga
|
||||
GROUP BY status
|
||||
");
|
||||
$stats = [];
|
||||
while ($r = $stmtStats->fetch(PDO::FETCH_ASSOC)) {
|
||||
$stats[$r['status']] = (int)$r['jumlah'];
|
||||
}
|
||||
$stmtTotal = $pdo->query("SELECT COUNT(*) FROM laporan_warga");
|
||||
echo json_encode(['success' => true, 'stats' => $stats, 'total' => (int)$stmtTotal->fetchColumn()]);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Filter berdasarkan role
|
||||
$where = [];
|
||||
$params = [];
|
||||
|
||||
// Jika ada action=get_petugas
|
||||
if ($action === 'get_petugas') {
|
||||
if (!in_array($role, ['admin', 'petugas'])) {
|
||||
http_response_code(403); echo json_encode(['success' => false, 'message' => 'Forbidden']); exit;
|
||||
}
|
||||
$stmt = $pdo->query("SELECT username FROM users WHERE role = 'petugas' ORDER BY username ASC");
|
||||
$petugas = $stmt->fetchAll(PDO::FETCH_COLUMN);
|
||||
echo json_encode(['success' => true, 'petugas' => $petugas]);
|
||||
exit;
|
||||
}
|
||||
|
||||
if ($role === 'kontributor') {
|
||||
// Kontributor hanya lihat laporan milik sendiri
|
||||
$where[] = 'lw.pelapor_id = ?';
|
||||
$params[] = $userId;
|
||||
} elseif ($role === 'koordinator') {
|
||||
// Koordinator lihat laporan dari wilayahnya + laporan milik sendiri
|
||||
$where[] = '(lw.pelapor_id = ? OR lw.koordinator_ibadah_id = ?)';
|
||||
$params[] = $userId;
|
||||
$params[] = !empty($currentUser['rumah_ibadah_id']) ? (int)$currentUser['rumah_ibadah_id'] : 0;
|
||||
} elseif ($role === 'petugas') {
|
||||
// Petugas hanya lihat laporan yang ditugaskan ke mereka
|
||||
$where[] = 'lw.ditugaskan_ke = ?';
|
||||
$params[] = $currentUser['username'];
|
||||
}
|
||||
// Admin: lihat semua
|
||||
|
||||
// Filter status
|
||||
if (!empty($_GET['status'])) {
|
||||
$where[] = 'lw.status = ?';
|
||||
$params[] = $_GET['status'];
|
||||
}
|
||||
|
||||
// Filter prioritas
|
||||
if (!empty($_GET['prioritas'])) {
|
||||
$where[] = 'lw.prioritas = ?';
|
||||
$params[] = $_GET['prioritas'];
|
||||
}
|
||||
|
||||
$whereSql = $where ? 'WHERE ' . implode(' AND ', $where) : '';
|
||||
|
||||
$sql = "
|
||||
SELECT
|
||||
lw.*,
|
||||
rw.nama_kepala_keluarga,
|
||||
rw.kelurahan,
|
||||
rw.kecamatan,
|
||||
rw.kategori_kemiskinan,
|
||||
rw.status_bantuan,
|
||||
u.username AS pelapor_nama,
|
||||
u.role AS pelapor_role
|
||||
FROM laporan_warga lw
|
||||
JOIN rumah_warga rw ON rw.id = lw.rumah_warga_id
|
||||
JOIN users u ON u.id = lw.pelapor_id
|
||||
$whereSql
|
||||
ORDER BY lw.created_at DESC
|
||||
LIMIT 100
|
||||
";
|
||||
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute($params);
|
||||
$data = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
||||
|
||||
// Summary counts for filter badges
|
||||
$stmtSummary = $pdo->query("SELECT status, COUNT(*) as n FROM laporan_warga GROUP BY status");
|
||||
$summary = [];
|
||||
while ($r = $stmtSummary->fetch(PDO::FETCH_ASSOC)) {
|
||||
$summary[$r['status']] = (int)$r['n'];
|
||||
}
|
||||
|
||||
$response = ['success' => true, 'data' => $data, 'summary' => $summary, 'total' => count($data)];
|
||||
|
||||
// Sertakan list petugas jika user admin
|
||||
if ($role === 'admin' || $role === 'petugas') {
|
||||
$stmtP = $pdo->query("SELECT username FROM users WHERE role = 'petugas' ORDER BY username ASC");
|
||||
$response['petugas'] = $stmtP->fetchAll(PDO::FETCH_COLUMN);
|
||||
}
|
||||
|
||||
echo json_encode($response);
|
||||
break;
|
||||
|
||||
// ── POST: Buat laporan baru ──────────────────────────────────────────
|
||||
case 'POST':
|
||||
$currentUser = requireAuth(['koordinator', 'kontributor']);
|
||||
|
||||
$input = json_decode(file_get_contents('php://input'), true) ?: $_POST;
|
||||
|
||||
$rumahWargaId = (int)($input['rumah_warga_id'] ?? 0);
|
||||
$jenisLaporan = trim($input['jenis_laporan'] ?? '');
|
||||
$deskripsi = trim($input['deskripsi'] ?? '');
|
||||
|
||||
// Penentuan prioritas otomatis berdasarkan jenis laporan
|
||||
$prioritasMap = [
|
||||
'warga_meninggal' => 'tinggi',
|
||||
'warga_pindah' => 'tinggi',
|
||||
'warga_mampu' => 'tinggi',
|
||||
'data_ganda' => 'sedang',
|
||||
'data_tidak_sesuai'=> 'sedang',
|
||||
'lainnya' => 'rendah'
|
||||
];
|
||||
$prioritas = $prioritasMap[$jenisLaporan] ?? 'sedang';
|
||||
|
||||
if (!$rumahWargaId || !$jenisLaporan || !$deskripsi) {
|
||||
http_response_code(400);
|
||||
echo json_encode(['success' => false, 'message' => 'Data tidak lengkap: rumah_warga_id, jenis_laporan, dan deskripsi wajib diisi.']);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Cek warga ada
|
||||
$stmtCek = $pdo->prepare("SELECT id, nama_kepala_keluarga FROM rumah_warga WHERE id = ?");
|
||||
$stmtCek->execute([$rumahWargaId]);
|
||||
$warga = $stmtCek->fetch();
|
||||
if (!$warga) {
|
||||
http_response_code(404);
|
||||
echo json_encode(['success' => false, 'message' => 'Data warga tidak ditemukan.']);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Cek apakah laporan duplikat dalam 7 hari terakhir
|
||||
$stmtDupCheck = $pdo->prepare("
|
||||
SELECT id FROM laporan_warga
|
||||
WHERE rumah_warga_id = ? AND pelapor_id = ?
|
||||
AND status NOT IN ('selesai', 'ditolak')
|
||||
AND created_at >= DATE_SUB(NOW(), INTERVAL 7 DAY)
|
||||
");
|
||||
$stmtDupCheck->execute([$rumahWargaId, $currentUser['id']]);
|
||||
if ($stmtDupCheck->fetch()) {
|
||||
http_response_code(409);
|
||||
echo json_encode(['success' => false, 'message' => 'Anda sudah membuat laporan untuk warga ini dalam 7 hari terakhir. Harap tunggu laporan sebelumnya diproses.']);
|
||||
exit;
|
||||
}
|
||||
|
||||
$koordinatorIbadahId = !empty($currentUser['rumah_ibadah_id']) ? (int)$currentUser['rumah_ibadah_id'] : null;
|
||||
|
||||
$stmtInsert = $pdo->prepare("
|
||||
INSERT INTO laporan_warga
|
||||
(rumah_warga_id, pelapor_id, koordinator_ibadah_id, jenis_laporan, deskripsi, prioritas, status)
|
||||
VALUES (?, ?, ?, ?, ?, ?, 'pending')
|
||||
");
|
||||
$stmtInsert->execute([
|
||||
$rumahWargaId,
|
||||
$currentUser['id'],
|
||||
$koordinatorIbadahId,
|
||||
$jenisLaporan,
|
||||
$deskripsi,
|
||||
$prioritas,
|
||||
]);
|
||||
|
||||
echo json_encode([
|
||||
'success' => true,
|
||||
'message' => 'Laporan berhasil dikirim. Admin akan meninjau laporan Anda segera.',
|
||||
'id' => $pdo->lastInsertId()
|
||||
]);
|
||||
break;
|
||||
|
||||
case 'PUT':
|
||||
$currentUser = requireAuth(['admin', 'petugas']);
|
||||
$input = json_decode(file_get_contents('php://input'), true);
|
||||
if (!$input) $input = $_POST;
|
||||
|
||||
$id = (int)($input['id'] ?? 0);
|
||||
$status = $input['status'] ?? '';
|
||||
$catatanAdmin = trim($input['catatan_admin'] ?? '');
|
||||
$ditugaskanKe = trim($input['ditugaskan_ke'] ?? '');
|
||||
|
||||
// Ambil dari old state
|
||||
$stmtDok = $pdo->prepare("SELECT dokumentasi FROM laporan_warga WHERE id = ?");
|
||||
$stmtDok->execute([$id]);
|
||||
$oldDok = $stmtDok->fetchColumn();
|
||||
|
||||
$dokumentasi = trim($input['dokumentasi'] ?? $oldDok ?? '');
|
||||
|
||||
// Handle file upload
|
||||
if (isset($_FILES['dokumentasi_file']) && $_FILES['dokumentasi_file']['error'] === UPLOAD_ERR_OK) {
|
||||
$uploadDir = '../uploads/dokumentasi/';
|
||||
if (!is_dir($uploadDir)) {
|
||||
mkdir($uploadDir, 0755, true);
|
||||
}
|
||||
$ext = strtolower(pathinfo($_FILES['dokumentasi_file']['name'], PATHINFO_EXTENSION));
|
||||
$allowedExts = ['jpg', 'jpeg', 'png', 'pdf'];
|
||||
if (in_array($ext, $allowedExts)) {
|
||||
$filename = 'dok_' . $id . '_' . time() . '.' . $ext;
|
||||
$dest = $uploadDir . $filename;
|
||||
if (move_uploaded_file($_FILES['dokumentasi_file']['tmp_name'], $dest)) {
|
||||
$dokumentasi = 'uploads/dokumentasi/' . $filename;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$allowedStatus = ['pending', 'ditinjau', 'diproses', 'selesai', 'ditolak'];
|
||||
if (!$id || !in_array($status, $allowedStatus)) {
|
||||
http_response_code(400);
|
||||
echo json_encode(['success' => false, 'message' => 'ID dan status valid wajib diisi.']);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Jika petugas, pastikan hanya bisa update dokumentasi, status, catatan. (ditugaskan_ke biarkan tetap)
|
||||
if ($currentUser['role'] === 'petugas') {
|
||||
$stmt = $pdo->prepare("
|
||||
UPDATE laporan_warga
|
||||
SET status = ?, catatan_admin = ?, dokumentasi = ?, updated_at = NOW()
|
||||
WHERE id = ? AND ditugaskan_ke = ?
|
||||
");
|
||||
$stmt->execute([$status, $catatanAdmin, $dokumentasi, $id, $currentUser['username']]);
|
||||
} else {
|
||||
// Admin bisa update semua
|
||||
$stmt = $pdo->prepare("
|
||||
UPDATE laporan_warga
|
||||
SET status = ?, catatan_admin = ?, ditugaskan_ke = ?, dokumentasi = ?, updated_at = NOW()
|
||||
WHERE id = ?
|
||||
");
|
||||
$stmt->execute([$status, $catatanAdmin, $ditugaskanKe ?: null, $dokumentasi, $id]);
|
||||
}
|
||||
|
||||
$statusLabel = [
|
||||
'pending' => 'Menunggu',
|
||||
'ditinjau' => 'Sedang Ditinjau',
|
||||
'diproses' => 'Sedang Diproses',
|
||||
'selesai' => 'Selesai',
|
||||
'ditolak' => 'Ditolak',
|
||||
];
|
||||
|
||||
echo json_encode([
|
||||
'success' => true,
|
||||
'message' => 'Laporan berhasil diperbarui ke status: ' . ($statusLabel[$status] ?? $status)
|
||||
]);
|
||||
break;
|
||||
|
||||
// ── DELETE: Hapus laporan (admin only) ──────────────────────────────
|
||||
case 'DELETE':
|
||||
$currentUser = requireAuth(['admin']);
|
||||
$id = (int)($_GET['id'] ?? 0);
|
||||
if (!$id) {
|
||||
$input = json_decode(file_get_contents('php://input'), true);
|
||||
$id = (int)($input['id'] ?? 0);
|
||||
}
|
||||
if (!$id) {
|
||||
http_response_code(400);
|
||||
echo json_encode(['success' => false, 'message' => 'ID laporan wajib diisi.']);
|
||||
exit;
|
||||
}
|
||||
$stmt = $pdo->prepare("DELETE FROM laporan_warga WHERE id = ?");
|
||||
$stmt->execute([$id]);
|
||||
echo json_encode(['success' => true, 'message' => 'Laporan berhasil dihapus.']);
|
||||
break;
|
||||
|
||||
default:
|
||||
http_response_code(405);
|
||||
echo json_encode(['error' => 'Method not allowed']);
|
||||
}
|
||||
} catch (Exception $e) {
|
||||
http_response_code(500);
|
||||
echo json_encode(['success' => false, 'message' => 'Kesalahan sistem: ' . $e->getMessage()]);
|
||||
}
|
||||
Reference in New Issue
Block a user