Edit File - update-ship-rest.php

<?php
session_start();
header('Content-Type: text/plain; charset=utf-8');
include '../../inc/config.php';

$userID = isset($_SESSION['AdminID']) ? (int)$_SESSION['AdminID'] : 0;
if ($userID <= 0) {
    http_response_code(401);
    exit('User not logged in.');
}

if (!isset($_POST['shipData'][0])) {
    http_response_code(400);
    exit('Incomplete data received.');
}

$amount = trim($_POST['shipData'][0]);
if ($amount === '') {
    http_response_code(400);
    exit('Amount is required.');
}
if (!is_numeric($amount) || (float)$amount < 0) {
    http_response_code(400);
    exit('Amount must be a non-negative number.');
}
$escAmount = (float)$amount;

$id = null;
if (isset($_POST['id']) && $_POST['id'] !== '' && is_numeric($_POST['id'])) {
    $id = (int)$_POST['id'];
    if ($id <= 0) {
        http_response_code(400);
        exit('Invalid ID.');
    }
}

if ($id !== null) {
    $chkSql = "SELECT `sca_id` FROM `shipping-cost-all` WHERE `sca_id` = $id LIMIT 1";
    $chkRes = mysqli_query($con, $chkSql);
    if (!$chkRes) {
        http_response_code(500);
        exit('Check failed: ' . mysqli_error($con));
    }

if (mysqli_num_rows($chkRes) > 0) {
        $updSql = "UPDATE `shipping-cost-all` SET `amount` = $escAmount, `updated_at` = NOW() WHERE `sca_id` = $id";
        if (!mysqli_query($con, $updSql)) {
            http_response_code(500);
            exit('Update failed: ' . mysqli_error($con));
        }
        $logMsg = "Shipping rate (ROW) updated: ID=$id, Amount=$amount";
    } else {
        $insSql = "INSERT INTO `shipping-cost-all` (`sca_id`, `amount`, `updated_at`) VALUES ($id, $escAmount, NOW())";
        if (!mysqli_query($con, $insSql)) {
            http_response_code(500);
            exit('Insert failed: ' . mysqli_error($con));
        }
        $logMsg = "Shipping rate (ROW) created with explicit ID: ID=$id, Amount=$amount";
    }
} else {

$insSql = "INSERT INTO `shipping-cost-all` (`amount`, `updated_at`) VALUES ($escAmount, NOW())";
    if (!mysqli_query($con, $insSql)) {
        http_response_code(500);
        exit('Insert failed (no id): ' . mysqli_error($con));
    }
    $newId = mysqli_insert_id($con);
    $logMsg = "Shipping rate (ROW) created: ID=$newId, Amount=$amount";
}

$logEsc = mysqli_real_escape_string($con, $logMsg);
if (!mysqli_query($con, "INSERT INTO `log` (`log_data`,`user_id`) VALUES ('$logEsc', $userID)")) {
    http_response_code(500);
    exit('Log insert failed: ' . mysqli_error($con));
}

echo 'TRUE';
?>

Kembali