File Manager

✏️ Edit File: /home/u625410797/domains/monothailand.com/public_html/smart_panel/api/v1/alerts/create_alert.php

<?php
// =============================================================================
// API: CREATE ALERT
// Method: POST
// Description: Create new alert from ESP32 or Flutter app
// Auth: API Key Required (for ESP32) or JWT (for Flutter)
// POST Body: { slot_id, type, severity, message, metadata? }
// =============================================================================

require_once '../../../config.php';

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

// 1. Authentication Engine [WORLD CLASS SECURITY]
$auth = Security::requireAuth();
$userId = $auth['user_id'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $input = json_decode(file_get_contents('php://input'), true);
    if (!$input) {
        Response::error(400, "Invalid JSON body");
    }

$slotId = isset($input['slot_id']) ? trim($input['slot_id']) : null;
    $macAddress = isset($input['mac']) ? trim($input['mac']) : (isset($input['mac_address']) ? trim($input['mac_address']) : null);
    $packetHash = isset($input['packet_hash']) ? trim($input['packet_hash']) : null;
    $type = isset($input['type']) ? trim($input['type']) : null;
    $severity = isset($input['severity']) ? trim($input['severity']) : 'info';
    $message = isset($input['message']) ? trim($input['message']) : null;
    $metadata = isset($input['metadata']) ? $input['metadata'] : null;

if (!$slotId || !$type || !$message) {
        Response::error(400, "Missing Required Fields", "slot_id, type, and message are required");
    }

// [MASTERPIECE] Identity Mapping Strategy
    // The app/firmware might send a MAC address as slot_id. 
    // We must resolve it to the database UUID to satisfy Foreign Key constraints.
    try {
        $cleanMacId = strtoupper(str_replace([':', '-', '.'], '', $slotId));
        $resolveStmt = $pdo->prepare("
            SELECT id FROM device_slots 
            WHERE id = :id 
               OR REPLACE(REPLACE(REPLACE(mac_address, ':', ''), '-', ''), '.', '') = :m1 
               OR REPLACE(REPLACE(REPLACE(mac_pzem, ':', ''), '-', ''), '.', '') = :m2 
               OR REPLACE(REPLACE(REPLACE(mac_dht, ':', ''), '-', ''), '.', '') = :m3 
            LIMIT 1
        ");
        $resolveStmt->execute([
            ':id' => $slotId, 
            ':m1' => $cleanMacId, 
            ':m2' => $cleanMacId, 
            ':m3' => $cleanMacId
        ]);
        $realSlot = $resolveStmt->fetch();
        
        if ($realSlot) {
            $slotId = $realSlot['id']; // Map to the official UUID/ID
        } else {
            // [FAIL-SAFE] If slot is not found, we ignore the alert to allow the sync loop to continue.
            // Returning 200 Success with status 'ignored' avoids app-side error handling/stopping.
            Response::success(['status' => 'ignored', 'message' => "Target Slot not found: $slotId"], "Alert ignored (Unprovisioned Slot)");
            exit;
        }
    } catch (Exception $e) {
        error_log("Identity Resolution Error: " . $e->getMessage());
        // Continue with original slotId, it will hit the 500 block if wrong, but we tried.
    }

try {
        // [MASTERPIECE] Self-Healing Deduplication: Check if column exists before querying
        $hasPacketHash = false;
        try {
            $checkColumn = $pdo->query("SHOW COLUMNS FROM `alerts` LIKE 'packet_hash'");
            if ($checkColumn->fetch()) {
                $hasPacketHash = true;
            }
        } catch (Exception $e) { $hasPacketHash = false; }

if ($hasPacketHash && $packetHash) {
            $hashStmt = $pdo->prepare("SELECT id FROM alerts WHERE packet_hash = ? LIMIT 1");
            $hashStmt->execute([$packetHash]);
            if ($hashStmt->fetch()) {
                Response::success(['status' => 'ignored', 'message' => 'Duplicate alert hash'], "Alert already processed");
            }
        }

// Check if this exact alert already exists and is active for this slot
        $checkStmt = $pdo->prepare("
            SELECT id FROM alerts
            WHERE slot_id = ? AND type = ? AND status = 'active'
            ORDER BY created_at DESC LIMIT 1
        ");
        $checkStmt->execute([$slotId, $type]);
        $existing = $checkStmt->fetch();

if ($existing) {
            // Alert already exists, just update the message and timestamp
            $updateStmt = $pdo->prepare("
                UPDATE alerts
                SET message = ?, severity = ?, metadata = ?, created_at = NOW()
                WHERE id = ?
            ");
            $metadataJson = $metadata ? json_encode($metadata) : null;
            $updateStmt->execute([$message, $severity, $metadataJson, $existing['id']]);

Response::success([
                'alert_id' => $existing['id'],
                'sync_status' => 'updated',
                'description' => 'Existing alert updated'
            ], "Alert updated");
        } else {
            // [MASTERPIECE] Fully Schema-Aware Dynamic Insertion
            $potentialColumns = [
                'mac_address' => $macAddress,
                'mac' => $macAddress,
                'packet_hash' => $packetHash,
                'status' => 'active',
                'metadata' => $metadata ? json_encode($metadata) : null,
                'severity' => $severity,
                'type' => $type,
                'message' => $message,
                'slot_id' => $slotId
            ];

$fields = [];
            $params = [];
            $placeholders = [];

// 1. Determine mandatory fields (slot_id, type, message, created_at)
            $fields[] = 'slot_id'; $params[] = $slotId; $placeholders[] = '?';
            $fields[] = 'type'; $params[] = $type; $placeholders[] = '?';
            $fields[] = 'message'; $params[] = $message; $placeholders[] = '?';

// 2. Check and add optional fields
            $optionalCheck = ['mac_address', 'mac', 'packet_hash', 'severity', 'metadata'];
            $macFound = false;
            foreach ($optionalCheck as $col) {
                if ($col === 'mac_address' || $col === 'mac') {
                    if ($macFound) continue;
                    if (Database::detectColumn('alerts', $col)) {
                        $fields[] = $col; $params[] = $macAddress; $placeholders[] = '?';
                        $macFound = true;
                    }
                } else if (Database::detectColumn('alerts', $col)) {
                    $val = ($col === 'metadata' && $metadata) ? json_encode($metadata) : $potentialColumns[$col];
                    if ($val !== null) {
                        $fields[] = $col; $params[] = $val; $placeholders[] = '?';
                    }
                }
            }

// 3. Handle Status vs is_active
            if (Database::detectColumn('alerts', 'status')) {
                $fields[] = 'status'; $params[] = 'active'; $placeholders[] = '?';
            } else if (Database::detectColumn('alerts', 'is_active')) {
                $fields[] = 'is_active'; $params[] = 1; $placeholders[] = '?';
            }

// 4. Always add created_at
            $fields[] = 'created_at';
            $placeholders[] = 'NOW()';

$sql = "INSERT INTO alerts (" . implode(', ', $fields) . ") VALUES (" . implode(', ', $placeholders) . ")";
            $insertStmt = $pdo->prepare($sql);
            $insertStmt->execute($params);
            
            $alertId = $pdo->lastInsertId();

Response::success([
                'alert_id' => $alertId,
                'sync_status' => 'created',
                'description' => 'New alert created'
            ], "Alert created successfully");
        }

} catch (Exception $e) {
        error_log("Create Alert Error: " . $e->getMessage());
        Response::error(500, "Database Error", $e->getMessage());
    }
}

// Method not allowed
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    Response::error(405, "Method Not Allowed");
}
?>

Batal

⬅ Naik ke v1 6 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘create_alert.php	php	8 KB	2026-05-01 02:07	✏️ Edit 👁️ View
🐘history_v2.php	php	5.9 KB	2026-05-01 02:07	✏️ Edit 👁️ View
🐘list.php	php	5.9 KB	2026-05-01 02:07	✏️ Edit 👁️ View
🐘resolve_alert.php	php	2.8 KB	2026-05-01 02:07	✏️ Edit 👁️ View
🐘resolve_batch.php	php	2.8 KB	2026-05-01 02:07	✏️ Edit 👁️ View
🐘stats.php	php	7.5 KB	2026-05-01 02:07	✏️ Edit 👁️ View