1f81d98c52
Complete port of all 163 API endpoints from Lucee/CFML to PHP 8.3. Shared helpers in api/helpers.php (DB, auth, request/response, security). PDO prepared statements throughout. Same JSON response shapes as CFML.
45 lines
2.2 KiB
PHP
45 lines
2.2 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../helpers.php';
|
|
runAuth();
|
|
|
|
try {
|
|
$data = readJsonBody();
|
|
$taskID = (int) ($data['TaskID'] ?? 0);
|
|
$adminUserID = (int) ($data['AdminUserID'] ?? 0);
|
|
|
|
if ($taskID === 0) apiAbort(['OK' => false, 'ERROR' => 'missing_task', 'MESSAGE' => 'TaskID is required.']);
|
|
if ($adminUserID === 0) apiAbort(['OK' => false, 'ERROR' => 'missing_admin', 'MESSAGE' => 'AdminUserID is required.']);
|
|
|
|
$qTask = queryOne("SELECT ID, ClaimedByUserID, CompletedOn, BusinessID FROM Tasks WHERE ID = ?", [$taskID]);
|
|
if (!$qTask) apiAbort(['OK' => false, 'ERROR' => 'not_found', 'MESSAGE' => 'Task not found.']);
|
|
if (empty($qTask['CompletedOn'])) apiAbort(['OK' => false, 'ERROR' => 'not_completed', 'MESSAGE' => 'Task has not been completed yet.']);
|
|
|
|
$workerUserID = (int) $qTask['ClaimedByUserID'];
|
|
if ($workerUserID === 0) apiAbort(['OK' => false, 'ERROR' => 'no_worker', 'MESSAGE' => 'No worker assigned to this task.']);
|
|
|
|
$qExisting = queryOne("SELECT ID FROM TaskRatings WHERE TaskID = ? AND Direction = 'admin_rates_worker' LIMIT 1", [$taskID]);
|
|
if ($qExisting) apiAbort(['OK' => false, 'ERROR' => 'already_rated', 'MESSAGE' => 'This task has already been rated by an admin.']);
|
|
|
|
$token = generateSecureToken();
|
|
|
|
queryTimed("
|
|
INSERT INTO TaskRatings (TaskID, ByUserID, ForUserID, Direction,
|
|
OnTime, CompletedScope, RequiredFollowup, ContinueAllow,
|
|
AccessToken, ExpiresOn, CompletedOn)
|
|
VALUES (?, ?, ?, 'admin_rates_worker', ?, ?, ?, ?, ?, DATE_ADD(NOW(), INTERVAL 24 HOUR), NOW())
|
|
", [
|
|
$taskID, $adminUserID, $workerUserID,
|
|
isset($data['onTime']) ? ($data['onTime'] ? 1 : 0) : null,
|
|
isset($data['completedScope']) ? ($data['completedScope'] ? 1 : 0) : null,
|
|
isset($data['requiredFollowup']) ? ($data['requiredFollowup'] ? 1 : 0) : null,
|
|
isset($data['continueAllow']) ? ($data['continueAllow'] ? 1 : 0) : null,
|
|
$token,
|
|
]);
|
|
|
|
$ratingID = (int) lastInsertId();
|
|
|
|
jsonResponse(['OK' => true, 'MESSAGE' => 'Rating submitted successfully.', 'RatingID' => $ratingID]);
|
|
|
|
} catch (Exception $e) {
|
|
jsonResponse(['OK' => false, 'ERROR' => 'server_error', 'MESSAGE' => 'Error creating rating', 'DETAIL' => $e->getMessage()]);
|
|
}
|