File Manager

✏️ Edit File: /home/u625410797/domains/monothailand.com/public_html/ecotect_air/api/v2/check_asset.php

<?php
/**
 * ECOTECH MASTERPIECE API (V2)
 * Endpoint: /api/v2/check_asset.php
 * Method: POST
 * Description: High-performance asset verification with capability discovery.
 * Security: X-Api-Key Header required.
 */
header("Content-Type: application/json; charset=UTF-8");
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Api-Key');
require_once '../../config.php';

// 1. SECURITY GUARD (V2)
Security::guard();

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    Response::error(405, "Method Not Allowed");
}

$input = json_decode(file_get_contents('php://input'), true);
$serialNumber = strtoupper(trim($input['serial_number'] ?? ''));
$macAddress = strtoupper(str_replace([':', '-', ' '], '', (string)($input['mac'] ?? '')));

if (empty($serialNumber) && empty($macAddress)) {
    Response::error(400, "Missing Identification", "Provide serial_number or mac");
}

try {
    // PRECISE LOGIC: 
    // We prioritize Serial Number (Asset) then fallback to MAC (Device)
    $asset = null;
    
    if ($serialNumber) {
        $stmt = $pdo->prepare("
            SELECT a.*, ds.id as slot_id, ds.name as slot_name, r.name as room_name, s.name as site_name
            FROM assets a
            LEFT JOIN device_slots ds ON ds.active_asset_id = a.id
            LEFT JOIN rooms r ON ds.room_id = r.id
            LEFT JOIN sites s ON r.site_id = s.id
            WHERE a.serial_number = ?
            LIMIT 1
        ");
        $stmt->execute([$serialNumber]);
        $asset = $stmt->fetch(PDO::FETCH_ASSOC);
    }

// IF NOT FOUND BY SERIAL, TRY MAC
    if (!$asset && $macAddress) {
        $stmt = $pdo->prepare("
            SELECT a.*, d.mac_address, ds.id as slot_id
            FROM devices d
            JOIN assets a ON d.current_asset_id = a.id
            LEFT JOIN device_slots ds ON ds.active_asset_id = a.id
            WHERE d.mac_address = ?
            LIMIT 1
        ");
        $stmt->execute([$macAddress]);
        $asset = $stmt->fetch(PDO::FETCH_ASSOC);
    }

if ($asset) {
        Response::success([
            'found' => true,
            'asset_id' => $asset['id'],
            'serial' => $asset['serial_number'],
            'model' => $asset['model_name'],
            'mask' => (int)$asset['capability_mask'],
            'assignment' => $asset['slot_id'] ? [
                'slot_id' => $asset['slot_id'],
                'slot_name' => $asset['slot_name'],
                'room' => $asset['room_name'],
                'site' => $asset['site_name']
            ] : null
        ], "Asset verified successfully.");
    } else {
        // --- BYPASS FOR NEW INSTALLATIONS / TEST DEVICES ---
        if (strpos($serialNumber, 'ECOAIR-TEST') !== false || $macAddress === 'AABBCCDDEEFF') {
            Response::success([
                'found' => true,
                'asset_id' => 'TMP-' . md5($serialNumber),
                'serial' => $serialNumber ?: 'ECOAIR-TEST-DEMO',
                'model' => 'ECO-MASTER-V2',
                'mask' => 7, // Full capabilities
                'is_test' => true
            ], "Zero-Failure Bypass triggered for demo.");
        } else {
            Response::success(['found' => false], "Asset not registered in EcoTech global database.");
        }
    }

} catch (Exception $e) {
    Response::error(500, "V2 API Failure", $e->getMessage());
}
?>

Batal

⬅ Naik ke api 2 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘check_asset.php	php	3.5 KB	2026-02-21 07:31	✏️ Edit 👁️ View
🐘register_asset.php	php	2.9 KB	2026-02-21 07:31	✏️ Edit 👁️ View