SWAMPy

✎ CARVE FLESH

EDITING: leadership.php

<?php
// api/admin/leadership.php
// GET           → LeadershipMember[]   (ordered by sort_order)
// GET ?id=      → LeadershipMember     (single)
// POST          → LeadershipMember     (create)
// PUT           → LeadershipMember     (update)
// DELETE        → { message }          (delete)

declare(strict_types=1);

require_once __DIR__ . '/cors.php';
require_once __DIR__ . '/db.php';
require_once __DIR__ . '/auth_middleware.php';

require_auth();

$method = $_SERVER['REQUEST_METHOD'];
$pdo    = db();

// ── Helpers ───────────────────────────────────────────────────────────────────

function format_member(array $row): array
{
    return [
        'id'    => $row['id'],
        'name'  => $row['name'],
        'role'  => $row['role'],
        'bio'   => $row['bio'],
        'image' => $row['image'],
        'order' => (int)$row['sort_order'],
    ];
}

// ── GET ───────────────────────────────────────────────────────────────────────

if ($method === 'GET') {
    if (!empty($_GET['id'])) {
        $stmt = $pdo->prepare('SELECT * FROM leadership WHERE id = ? LIMIT 1');
        $stmt->execute([$_GET['id']]);
        $row  = $stmt->fetch();
        if (!$row) abort(404, 'Team member not found');
        json_out(format_member($row));
    }

$rows = $pdo->query('SELECT * FROM leadership ORDER BY sort_order ASC, created_at ASC')->fetchAll();
    json_out(array_map('format_member', $rows));
}

// ── POST (create) ─────────────────────────────────────────────────────────────

if ($method === 'POST') {
    $data  = body();
    $name  = trim((string)($data['name']  ?? ''));
    $role  = trim((string)($data['role']  ?? ''));
    $bio   = trim((string)($data['bio']   ?? ''));
    $image = trim((string)($data['image'] ?? ''));
    $order = (int)($data['order'] ?? 0);

if ($name === '' || $role === '') abort(422, 'name and role are required');

$id = bin2hex(random_bytes(16));

$pdo->prepare('
        INSERT INTO leadership (id, name, role, bio, image, sort_order)
        VALUES (?, ?, ?, ?, ?, ?)
    ')->execute([$id, $name, $role, $bio, $image, $order]);

$row = $pdo->prepare('SELECT * FROM leadership WHERE id = ? LIMIT 1');
    $row->execute([$id]);
    json_out(format_member($row->fetch()), 201);
}

// ── PUT (update) ──────────────────────────────────────────────────────────────

if ($method === 'PUT') {
    $data = body();
    $id   = trim((string)($data['id'] ?? ''));
    if ($id === '') abort(400, 'id is required');

$stmt = $pdo->prepare('SELECT id FROM leadership WHERE id = ? LIMIT 1');
    $stmt->execute([$id]);
    if (!$stmt->fetch()) abort(404, 'Team member not found');

$sets   = [];
    $params = [];

foreach (['name', 'role', 'bio', 'image'] as $f) {
        if (isset($data[$f])) {
            $sets[]   = "{$f} = ?";
            $params[] = trim((string)$data[$f]);
        }
    }

if (isset($data['order'])) {
        $sets[]   = 'sort_order = ?';
        $params[] = (int)$data['order'];
    }

if (empty($sets)) abort(400, 'No fields provided to update');

$params[] = $id;
    $pdo->prepare('UPDATE leadership SET ' . implode(', ', $sets) . ' WHERE id = ?')
        ->execute($params);

$row = $pdo->prepare('SELECT * FROM leadership WHERE id = ? LIMIT 1');
    $row->execute([$id]);
    json_out(format_member($row->fetch()));
}

// ── DELETE ────────────────────────────────────────────────────────────────────

if ($method === 'DELETE') {
    $data = body();
    $id   = trim((string)($data['id'] ?? ''));
    if ($id === '') abort(400, 'id is required');

$stmt = $pdo->prepare('SELECT id FROM leadership WHERE id = ? LIMIT 1');
    $stmt->execute([$id]);
    if (!$stmt->fetch()) abort(404, 'Team member not found');

$pdo->prepare('DELETE FROM leadership WHERE id = ?')->execute([$id]);
    json_out(['message' => 'Team member removed']);
}

abort(405, 'Method not allowed');

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 migrations/	DIR	—	2020-12-15 11:33
📄 .htaccess	HTACCESS	658 B	2026-10-23 13:41	EDIT
📄 auth_middleware.php	PHP	3.2 KB	2026-05-16 15:57	EDIT
📄 change-password.php	PHP	1.3 KB	2026-05-16 15:10	EDIT
📄 cors.php	PHP	746 B	2026-05-16 16:47	EDIT
📄 db.php	PHP	993 B	2026-05-16 15:56	EDIT
📄 inquiries.php	PHP	3.8 KB	2026-05-16 18:51	EDIT
📄 leadership.php	PHP	4.5 KB	2026-05-16 15:10	EDIT
📄 login.php	PHP	1.3 KB	2026-05-16 16:39	EDIT
📄 properties.php	PHP	6.3 KB	2026-05-16 15:10	EDIT
📄 services.php	PHP	4.1 KB	2026-05-16 15:10	EDIT
📄 settings.php	PHP	1.9 KB	2026-05-16 15:10	EDIT
📄 stats.php	PHP	3.3 KB	2026-05-16 15:10	EDIT
📄 upload.php	PHP	3.5 KB	2026-05-16 15:10	EDIT