File Manager

✏️ Edit File: /home/u625410797/domains/monothailand.com/public_html/ecotect_air/api/v1/ota/status.php

<?php
// =============================================================================
// API: OTA STATUS UPDATE
// Method: POST
// Description: Update OTA progress/status from ESP32 devices
// Auth: API Key Required
// POST Body: { slot_id, status, progress, error? }
// =============================================================================
header("Content-Type: application/json; charset=UTF-8");
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Api-Key');
require_once '../../../config.php';
require_once '../slot_resolver.php';

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

// API Key authentication (devices use X-Api-Key header)
$apiKey = $_SERVER['HTTP_X_API_KEY'] ?? '';
if (empty($apiKey)) {
    Response::error(401, "Missing API Key");
}

// Note: In production, validate API key against device registration
// For now, accept any non-empty key

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $input = json_decode(file_get_contents('php://input'), true);
    if (!$input) {
        Response::error(400, "Invalid JSON body");
    }

$slotId = isset($input['slot_id']) ? trim($input['slot_id']) : null;
    $macAddress = isset($input['mac_address']) ? trim($input['mac_address']) : null;
    $status = isset($input['status']) ? trim($input['status']) : null;
    $progress = isset($input['progress']) ? (int)$input['progress'] : 0;
    $error = isset($input['error']) ? trim($input['error']) : null;

if (!$slotId || !$status) {
        Response::error(400, "Missing Required Fields", "slot_id and status are required");
    }

// [PERFORMANCE] Resolve EcoTech_<MAC> to UUID via cached SlotResolver
    $slotId = SlotResolver::resolve($slotId, $pdo);

// [MASTERPIECE] Enhanced Device Security Validation
    try {
        // 1. Verify that the Slot exists and matches the provided MAC (if sent)
        $slotQuery = "SELECT id, mac_address FROM device_slots WHERE id = ?";
        $slotStmt = $pdo->prepare($slotQuery);
        $slotStmt->execute([$slotId]);
        $slot = $slotStmt->fetch();

if (!$slot) {
            Response::error(404, "Slot Not Found", "The specified slot_id does not exist.");
        }

// Strictly enforce MAC matching if mac_address is provided in request or stored in DB
        if ($macAddress && $slot['mac_address'] && strtolower($macAddress) !== strtolower($slot['mac_address'])) {
            error_log("OTA Security Alert: MAC Mismatch for slot $slotId. Request: $macAddress, DB: {$slot['mac_address']}");
            Response::error(401, "Hardware Identity Mismatch");
        }

// 2. Find the most recent pending/active OTA update for this slot
        $stmt = $pdo->prepare("
            SELECT id, firmware_id FROM ota_updates 
            WHERE slot_id = ? AND status IN ('pending', 'downloading', 'verifying', 'installing')
            ORDER BY started_at DESC
            LIMIT 1
        ");
        $stmt->execute([$slotId]);
        $update = $stmt->fetch();

if (!$update) {
            // No active update found, log but don't error as it might be a delayed notification
            error_log("OTA Status Alert: No active update record found for slot $slotId in transient states.");
            Response::success(['action' => 'ignore'], "No active session found (logged)");
        }

// Update the OTA record
        $updateStmt = $pdo->prepare("
            UPDATE ota_updates
            SET status = ?,
                progress_percent = ?,
                error_message = ?,
                completed_at = IF(? IN ('completed', 'failed', 'rolled_back'), NOW(), NULL)
            WHERE id = ?
        ");
        $updateStmt->execute([$status, $progress, $error, $status, $update['id']]);

Response::success([
            'ota_update_id' => $update['id'],
            'status' => $status,
            'progress' => $progress,
        ], "OTA status updated");

} catch (Exception $e) {
        error_log("OTA Status Update Error: " . $e->getMessage());
        Response::error(500, "Database Error", $e->getMessage());
    }
}

// Method not allowed
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    Response::error(405, "Method Not Allowed");
}
?>

Batal

⬅ Naik ke v1 7 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘deploy.php	php	21.3 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘deploy_v2.php	php	8.8 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘list.php	php	3.7 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘status.php	php	4.4 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘sync_mesh.php	php	2.1 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘upload.php	php	5 KB	2026-07-03 04:40	✏️ Edit 👁️ View
🐘upload_file.php	php	5.2 KB	2026-07-03 04:41	✏️ Edit 👁️ View