63 lines
2.2 KiB
PHP
63 lines
2.2 KiB
PHP
<?php
|
|
require __DIR__ . '/_bootstrap.php';
|
|
|
|
/**
|
|
* @OA\Post(
|
|
* path="/home-photo.php",
|
|
* tags={"Homes"},
|
|
* summary="Upload property main photo",
|
|
* security={{"bearerAuth":{}}},
|
|
* @OA\RequestBody(required=true, @OA\MediaType(mediaType="multipart/form-data",
|
|
* @OA\Schema(
|
|
* required={"idhome","photo"},
|
|
* @OA\Property(property="idhome", type="integer"),
|
|
* @OA\Property(property="photo", type="string", format="binary", description="image")
|
|
* )
|
|
* )),
|
|
* @OA\Response(response=200, description="OK", @OA\JsonContent(
|
|
* @OA\Property(property="data", ref="#/components/schemas/Home"))),
|
|
* @OA\Response(response=403, ref="#/components/responses/Forbidden"),
|
|
* @OA\Response(response=422, ref="#/components/responses/ValidationError")
|
|
* )
|
|
*/
|
|
require_method('POST');
|
|
$user = require_auth($pdo);
|
|
$config = require __DIR__ . '/config.php';
|
|
|
|
$idhome = (int) ($_POST['idhome'] ?? 0);
|
|
$fields = [];
|
|
if ($idhome <= 0) {
|
|
$fields['idhome'] = ['Required'];
|
|
}
|
|
if (empty($_FILES['photo']) || $_FILES['photo']['error'] !== UPLOAD_ERR_OK) {
|
|
$fields['photo'] = ['Valid image is required'];
|
|
} elseif (!is_allowed_upload($_FILES['photo']['tmp_name'], $_FILES['photo']['name'], true)) {
|
|
$fields['photo'] = ['Only image files are allowed'];
|
|
}
|
|
if ($fields) {
|
|
json_error(422, 'Validation failed', $fields);
|
|
}
|
|
if (!user_owns_home($pdo, $user, $idhome)) {
|
|
json_error(403, 'No access to this home');
|
|
}
|
|
|
|
$dir = $config['mainphoto_dir'];
|
|
if (!is_dir($dir) && !mkdir($dir, 0775, true) && !is_dir($dir)) {
|
|
json_error(500, 'Storage directory unavailable');
|
|
}
|
|
|
|
$safe = preg_replace('/[^A-Za-z0-9._-]/', '_', basename($_FILES['photo']['name']));
|
|
$filename = $idhome . '-' . $user['id'] . '-' . time() . '-' . $safe;
|
|
|
|
if (!move_uploaded_file($_FILES['photo']['tmp_name'], $dir . '/' . $filename)) {
|
|
json_error(500, 'Failed to store photo');
|
|
}
|
|
|
|
$pdo->prepare('UPDATE home SET mainphoto = ? WHERE idhome = ? AND iduser = ?')
|
|
->execute([$filename, $idhome, $user['id']]);
|
|
|
|
$stmt = $pdo->prepare('SELECT * FROM home WHERE idhome = ? LIMIT 1');
|
|
$stmt->execute([$idhome]);
|
|
|
|
json_data(present_home($stmt->fetch(), true, home_counts($pdo, [$idhome])[$idhome] ?? null));
|