File Manager

✏️ Edit File: /home/u625410797/domains/monothailand.com/public_html/smart_panel/api/create_alert.php

<?php
// =============================================================================
// API: CREATE ALERT
// Method: POST
// Description: Create a new alert from Edge Device
// =============================================================================

require_once '../config.php';

// [MASTERPIECE] Unified Security Guard
$auth = Security::requireAuth();
$userId = $auth['user_id'];

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    Response::error(405, "Method Not Allowed");
}

$input = json_decode(file_get_contents('php://input'), true);

// Validate Input
if (!isset($input['slot_id']) || !isset($input['type']) || !isset($input['severity']) || !isset($input['message'])) {
    Response::error(400, "Missing Parameters", "slot_id, type, severity, message are required");
}

try {
    // [SECURITY PATROL] Verify Slot existence and Ownership
    // We check if the slot exists AND belongs to the user via Site -> User mapping
    $verifySql = "SELECT ds.id FROM device_slots ds 
                  JOIN rooms r ON ds.room_id = r.id 
                  JOIN sites s ON r.site_id = s.id 
                  WHERE ds.id = ?";
    
    $params = [$input['slot_id']];
    
    // If not admin, enforce user ownership
    if (!$auth['isAdmin']) {
        $verifySql .= " AND s.user_id = ?";
        $params[] = $userId;
    }

$stmt = $pdo->prepare($verifySql);
    $stmt->execute($params);
    $slotExists = $stmt->fetch();

if (!$slotExists) {
        // [INTEGRITY GUARD] return 404/Ignore instead of 500 to stop retry loops on client
        Response::error(404, "Invalid Slot", "The provided slot_id does not exist or you do not have permission to access it.");
    }

// Insert Alert
    $sql = "INSERT INTO alerts (slot_id, type, severity, message, packet_hash, status, created_at)
            VALUES (:slot, :type, :sev, :msg, :hash, 'active', NOW())
            ON DUPLICATE KEY UPDATE status = 'active'"; // Deduplication handling
            
    $stmt = $pdo->prepare($sql);
    $stmt->execute([
        ':slot' => $input['slot_id'],
        ':type' => $input['type'],
        ':sev'  => $input['severity'],
        ':msg'  => $input['message'],
        ':hash' => $input['packet_hash'] ?? null
    ]);

Response::success([], "Alert Created");

} catch (Exception $e) {
    Response::error(500, "Database Error", $e->getMessage());
}
?>

Batal

⬅ Naik ke smart_panel 7 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁v1	dir	—	2026-04-30 04:28	📂 Buka
📁v2	dir	—	2026-04-30 04:28	📂 Buka
🐘create_alert.php	php	2.4 KB	2026-04-30 04:28	✏️ Edit 👁️ View
🐘diagnostic.php	php	2.4 KB	2026-04-30 04:28	✏️ Edit 👁️ View
🐘get_active_alerts.php	php	2.6 KB	2026-04-30 04:28	✏️ Edit 👁️ View
🐘resolve_alert.php	php	1.7 KB	2026-04-30 04:28	✏️ Edit 👁️ View
🐘set_room_master.php	php	1.1 KB	2026-04-30 04:28	✏️ Edit 👁️ View