diff --git a/spbu/index.php b/spbu/index.php
index d74d953..f288dd6 100644
--- a/spbu/index.php
+++ b/spbu/index.php
@@ -1092,7 +1092,20 @@ function openJalanPopup(layer, geojson, panjang) {
         if (!form) return;
         form.addEventListener('submit', function(ev) {
             ev.preventDefault();
-            fetch('simpan_jalan.php', { method:'POST', body:new FormData(this) }).then(() => location.reload());
+            fetch('simpan_jalan.php', { method:'POST', body:new FormData(this) })
+                .then(r => r.text())
+                .then(res => {
+                    if (res.trim() === 'success') {
+                        map.closePopup();
+                        cancelPendingShape(false);
+                        setMode(null);
+                        loadData();
+                        showToast('Jalan berhasil ditambahkan!', 'success');
+                    } else {
+                        showToast('Gagal simpan jalan: ' + res, 'error');
+                    }
+                })
+                .catch(() => showToast('Error koneksi ke server.', 'error'));
         });
     }, 50);
 }
@@ -1105,7 +1118,20 @@ function openParsilPopup(layer, geojson, luas) {
         if (!form) return;
         form.addEventListener('submit', function(ev) {
             ev.preventDefault();
-            fetch('simpan_parsil.php', { method:'POST', body:new FormData(this) }).then(() => location.reload());
+            fetch('simpan_parsil.php', { method:'POST', body:new FormData(this) })
+                .then(r => r.text())
+                .then(res => {
+                    if (res.trim() === 'success') {
+                        map.closePopup();
+                        cancelPendingShape(false);
+                        setMode(null);
+                        loadData();
+                        showToast('Parsil berhasil ditambahkan!', 'success');
+                    } else {
+                        showToast('Gagal simpan parsil: ' + res, 'error');
+                    }
+                })
+                .catch(() => showToast('Error koneksi ke server.', 'error'));
         });
     }, 50);
 }
diff --git a/spbu/simpan.php b/spbu/simpan.php
index 077edb2..1b33669 100644
--- a/spbu/simpan.php
+++ b/spbu/simpan.php
@@ -1,18 +1,17 @@
 <?php
 include 'koneksi.php';
 
-$nama = $_POST['nama_spbu'];
-$wa = $_POST['no_wa'];
-$buka = $_POST['buka_24jam'];
-$lat = $_POST['latitude'];
-$lng = $_POST['longitude'];
+$nama = mysqli_real_escape_string($conn, $_POST['nama_spbu'] ?? '');
+$wa   = mysqli_real_escape_string($conn, $_POST['no_wa'] ?? '');
+$buka = mysqli_real_escape_string($conn, $_POST['buka_24jam'] ?? 'Tidak');
+$lat  = (float)($_POST['latitude'] ?? 0);
+$lng  = (float)($_POST['longitude'] ?? 0);
 
-$query = "INSERT INTO spbu (nama_spbu, no_wa, buka_24jam, latitude, longitude)
-          VALUES ('$nama','$wa','$buka','$lat','$lng')";
+$result = mysqli_query($conn, "INSERT INTO spbu (nama_spbu, no_wa, buka_24jam, latitude, longitude) VALUES ('$nama','$wa','$buka','$lat','$lng')");
 
-if(mysqli_query($conn, $query)){
-    echo "success";
-}else{
-    echo "error";
+if ($result) {
+    echo 'success';
+} else {
+    echo 'error: ' . mysqli_error($conn);
 }
 ?>
\ No newline at end of file
diff --git a/spbu/simpan_jalan.php b/spbu/simpan_jalan.php
index ad5738a..f1f301e 100644
--- a/spbu/simpan_jalan.php
+++ b/spbu/simpan_jalan.php
@@ -1,11 +1,16 @@
 <?php
 include 'koneksi.php';
 
-$nama = $_POST['nama_jalan'];
-$status = $_POST['status_jalan'];
-$panjang = $_POST['panjang'];
-$geom = $_POST['geom'];
+$nama   = mysqli_real_escape_string($conn, $_POST['nama_jalan'] ?? '');
+$status = mysqli_real_escape_string($conn, $_POST['status_jalan'] ?? '');
+$panjang = (float)($_POST['panjang'] ?? 0);
+$geom   = $_POST['geom'] ?? '';
 
-mysqli_query($conn, "INSERT INTO jalan (nama_jalan, status_jalan, panjang, geom)
-VALUES ('$nama','$status','$panjang','$geom')");
+$result = mysqli_query($conn, "INSERT INTO jalan (nama_jalan, status_jalan, panjang, geom) VALUES ('$nama','$status','$panjang','$geom')");
+
+if ($result) {
+    echo 'success';
+} else {
+    echo 'error: ' . mysqli_error($conn);
+}
 ?>
\ No newline at end of file
diff --git a/spbu/simpan_parsil.php b/spbu/simpan_parsil.php
index 148bdb0..d8a65ca 100644
--- a/spbu/simpan_parsil.php
+++ b/spbu/simpan_parsil.php
@@ -1,11 +1,16 @@
 <?php
 include 'koneksi.php';
 
-$nama = $_POST['nama_pemilik'];
-$status = $_POST['status'];
-$luas = $_POST['luas'];
-$geom = $_POST['geom'];
+$nama   = mysqli_real_escape_string($conn, $_POST['nama_pemilik'] ?? '');
+$status = mysqli_real_escape_string($conn, $_POST['status'] ?? '');
+$luas   = (float)($_POST['luas'] ?? 0);
+$geom   = $_POST['geom'] ?? '';
 
-mysqli_query($conn, "INSERT INTO parsil (nama_pemilik, status, luas, geom)
-VALUES ('$nama','$status','$luas','$geom')");
+$result = mysqli_query($conn, "INSERT INTO parsil (nama_pemilik, status, luas, geom) VALUES ('$nama','$status','$luas','$geom')");
+
+if ($result) {
+    echo 'success';
+} else {
+    echo 'error: ' . mysqli_error($conn);
+}
 ?>
\ No newline at end of file