pongpon/survey
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial commit - TPU Survey System with Google Forms & Certificate Generator

Browse Source
This commit is contained in:
pongpon pitisuk
2026-09-12 11:56:34 +07:00
commit 72eb7cd0c8
355 changed files with 117012 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/surveys.php
+533
View File
@@ -0,0 +1,533 @@
<?php
/**
* Surveys CRUD API
* GET ?action=list — List surveys (filtered by role)
* GET ?action=get&id=X — Get survey with sections & questions
* GET ?action=getByLink&link=X — Get survey by unique link (public)
* POST ?action=create — Create survey with sections & questions
* POST ?action=update — Update survey
* POST ?action=delete — Delete survey
* POST ?action=generateLink — Generate new unique link
* POST ?action=updateStatus — Update survey status
*/
require_once __DIR__ . '/../config/database.php';
require_once __DIR__ . '/../config/auth.php';
header('Content-Type: application/json; charset=utf-8');
$action = $_GET['action'] ?? '';
// Public endpoint for survey respondents
if ($action === 'getByLink') {
getByLink();
exit;
}
requireLogin();
switch ($action) {
case 'list':
listSurveys();
break;
case 'get':
getSurvey();
break;
case 'create':
createSurvey();
break;
case 'update':
updateSurvey();
break;
case 'delete':
deleteSurvey();
break;
case 'generateLink':
generateLink();
break;
case 'updateStatus':
updateStatus();
break;
case 'duplicate':
duplicateSurvey();
break;
case 'uploadTemplate':
uploadTemplate();
break;
default:
jsonResponse(['error' => 'Invalid action'], 400);
}
function listSurveys() {
$db = getDB();
if (isAdmin()) {
$stmt = $db->query("
SELECT s.*, u.full_name as creator_name,
(SELECT COUNT(*) FROM survey_responses WHERE survey_id = s.id) as response_count
FROM surveys s
LEFT JOIN users u ON s.user_id = u.id
ORDER BY s.created_at DESC
");
} else {
$stmt = $db->prepare("
SELECT s.*, u.full_name as creator_name,
(SELECT COUNT(*) FROM survey_responses WHERE survey_id = s.id) as response_count
FROM surveys s
LEFT JOIN users u ON s.user_id = u.id
WHERE s.user_id = ?
ORDER BY s.created_at DESC
");
$stmt->execute([$_SESSION['user_id']]);
}
jsonResponse(['surveys' => $stmt->fetchAll()]);
}
function getSurvey() {
$id = (int)($_GET['id'] ?? 0);
if (!$id) jsonResponse(['error' => 'Missing ID'], 400);
$db = getDB();
$stmt = $db->prepare("SELECT * FROM surveys WHERE id = ?");
$stmt->execute([$id]);
$survey = $stmt->fetch();
if (!$survey) jsonResponse(['error' => 'ไม่พบแบบสอบถาม'], 404);
// Check access
if (!isAdmin() && $survey['user_id'] != $_SESSION['user_id']) {
jsonResponse(['error' => 'ไม่มีสิทธิ์เข้าถึง'], 403);
}
// Get sections with questions
$survey['sections'] = getSections($db, $id);
jsonResponse(['survey' => $survey]);
}
function getByLink() {
$link = $_GET['link'] ?? '';
if (empty($link)) jsonResponse(['error' => 'Missing link'], 400);
$db = getDB();
$stmt = $db->prepare("SELECT * FROM surveys WHERE unique_link = ? AND status = 'active'");
$stmt->execute([$link]);
$survey = $stmt->fetch();
if (!$survey) jsonResponse(['error' => 'ไม่พบแบบสอบถามหรือแบบสอบถามถูกปิด'], 404);
$survey['sections'] = getSections($db, $survey['id']);
// Remove sensitive data
unset($survey['user_id']);
jsonResponse(['survey' => $survey]);
}
function getSections($db, $surveyId) {
$stmt = $db->prepare("SELECT * FROM survey_sections WHERE survey_id = ? ORDER BY section_number");
$stmt->execute([$surveyId]);
$sections = $stmt->fetchAll();
foreach ($sections as &$section) {
// Load headings for this section
$hStmt = $db->prepare("SELECT * FROM survey_headings WHERE section_id = ? ORDER BY order_num");
$hStmt->execute([$section['id']]);
$headings = $hStmt->fetchAll();
// Load ALL questions for this section
$qStmt = $db->prepare("SELECT * FROM survey_questions WHERE section_id = ? ORDER BY order_num");
$qStmt->execute([$section['id']]);
$allQuestions = $qStmt->fetchAll();
// Separate questions: those with heading_id vs those without
$looseQuestions = [];
$headingQuestionsMap = [];
foreach ($allQuestions as &$q) {
$q['is_required'] = (int)$q['is_required'];
if ($q['options']) {
$q['options'] = json_decode($q['options'], true);
}
if ($q['heading_id']) {
$headingQuestionsMap[$q['heading_id']][] = $q;
} else {
$looseQuestions[] = $q;
}
}
// Attach questions to their headings
foreach ($headings as &$h) {
$h['questions'] = $headingQuestionsMap[$h['id']] ?? [];
}
$section['headings'] = $headings;
$section['questions'] = $looseQuestions; // questions not in any heading
}
return $sections;
}
function insertQuestion($db, $sectionId, $headingId, $q, $orderNum) {
$options = isset($q['options']) ? json_encode($q['options'], JSON_UNESCAPED_UNICODE) : null;
$stmt = $db->prepare("INSERT INTO survey_questions (section_id, heading_id, question_text, question_type, is_required, order_num, options, scale_min, scale_max, description) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
$stmt->execute([
$sectionId,
$headingId,
$q['question_text'],
$q['question_type'] ?? 'radio',
$q['is_required'] ?? 1,
$q['order_num'] ?? $orderNum,
$options,
$q['scale_min'] ?? 1,
$q['scale_max'] ?? 5,
$q['description'] ?? null
]);
return $db->lastInsertId();
}
function createSurvey() {
$input = getInput();
$title = trim($input['title'] ?? '');
$description = trim($input['description'] ?? '');
$projectId = $input['project_id'] ?? null;
if (empty($title)) {
jsonResponse(['error' => 'กรุณากรอกชื่อแบบสอบถาม'], 400);
}
$hasCertificate = (int)($input['has_certificate'] ?? 0);
$certificateTemplate = $input['certificate_template'] ?? null;
$certNameY = isset($input['cert_name_y']) ? (double)$input['cert_name_y'] : 82.5;
$certCodeY = isset($input['cert_code_y']) ? (double)$input['cert_code_y'] : 190.5;
$db = getDB();
$uniqueLink = bin2hex(random_bytes(16));
$db->beginTransaction();
try {
$stmt = $db->prepare("INSERT INTO surveys (user_id, project_id, title, description, unique_link, has_certificate, certificate_template, cert_name_y, cert_code_y) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)");
$stmt->execute([$_SESSION['user_id'], $projectId, $title, $description, $uniqueLink, $hasCertificate, $certificateTemplate, $certNameY, $certCodeY]);
$surveyId = $db->lastInsertId();
// Create default sections with pre-defined questions based on user requirements
$sections = $input['sections'] ?? [
[
'section_number' => 1,
'title' => 'ส่วนที่ ข้อมูลทั่วไป',
'description' => 'ข้อมูลพื้นฐานของผู้ตอบ (ต้องตอบทุกข้อ)',
'questions' => [
['question_text' => 'เพศ', 'question_type' => 'radio', 'options' => ['ชาย', 'หญิง'], 'is_required' => 1],
['question_text' => 'ช่วงอายุ', 'question_type' => 'dropdown', 'options' => ['18-25 ปี', '26-35 ปี', '36-45 ปี', '46-55 ปี', '56 ปีขึ้นไป'], 'is_required' => 1],
['question_text' => 'คณะ / หน่วยงาน', 'question_type' => 'text', 'is_required' => 1]
]
],
[
'section_number' => 2,
'title' => 'ส่วนที่ การประเมินความพึงพอใจ',
'description' => 'ประเมินระดับความพึงพอใจ (5 = มากที่สุด, 1 = น้อยที่สุด)',
'questions' => [
['question_text' => 'ด้านเนื้อหาของการจัดโครงการ', 'question_type' => 'radio', 'is_required' => 1],
['question_text' => 'ด้านวิทยากร / ผู้บรรยาย', 'question_type' => 'radio', 'is_required' => 1],
['question_text' => 'ด้านสถานที่และความสะดวก', 'question_type' => 'radio', 'is_required' => 1]
]
],
[
'section_number' => 3,
'title' => 'ส่วนที่ ข้อเสนอแนะ',
'description' => 'ข้อเสนอแนะเพิ่มเติม',
'questions' => [
['question_text' => 'ข้อเสนอแนะอื่นๆ', 'question_type' => 'text', 'is_required' => 0]
]
]
];
foreach ($sections as $section) {
$stmt = $db->prepare("INSERT INTO survey_sections (survey_id, section_number, title, description, category) VALUES (?, ?, ?, ?, ?)");
$stmt->execute([$surveyId, $section['section_number'], $section['title'], $section['description'] ?? '', $section['category'] ?? 'rating']);
$sectionId = $db->lastInsertId();
// Insert headings and their questions
if (isset($section['headings'])) {
foreach ($section['headings'] as $hi => $heading) {
$hStmt = $db->prepare("INSERT INTO survey_headings (section_id, title, description, order_num) VALUES (?, ?, ?, ?)");
$hStmt->execute([$sectionId, $heading['title'], $heading['description'] ?? null, $heading['order_num'] ?? $hi]);
$headingId = $db->lastInsertId();
if (isset($heading['questions'])) {
foreach ($heading['questions'] as $i => $q) {
insertQuestion($db, $sectionId, $headingId, $q, $i);
}
}
}
}
// Insert loose questions (not in any heading)
if (isset($section['questions'])) {
foreach ($section['questions'] as $i => $q) {
insertQuestion($db, $sectionId, null, $q, $i);
}
}
}
$db->commit();
jsonResponse(['success' => true, 'id' => $surveyId, 'unique_link' => $uniqueLink, 'message' => 'สร้างแบบสอบถามสำเร็จ'], 201);
} catch (Exception $e) {
$db->rollBack();
jsonResponse(['error' => 'เกิดข้อผิดพลาด: ' . $e->getMessage()], 500);
}
}
function updateSurvey() {
$input = getInput();
$id = (int)($input['id'] ?? 0);
if (!$id) jsonResponse(['error' => 'Missing ID'], 400);
$db = getDB();
// Check ownership
$stmt = $db->prepare("SELECT user_id FROM surveys WHERE id = ?");
$stmt->execute([$id]);
$survey = $stmt->fetch();
if (!$survey) jsonResponse(['error' => 'ไม่พบแบบสอบถาม'], 404);
if (!isAdmin() && $survey['user_id'] != $_SESSION['user_id']) {
jsonResponse(['error' => 'ไม่มีสิทธิ์'], 403);
}
$db->beginTransaction();
try {
// Update survey info
if (isset($input['title'])) {
$hasCertificate = (int)($input['has_certificate'] ?? 0);
$certificateTemplate = $input['certificate_template'] ?? null;
$certNameY = isset($input['cert_name_y']) ? (double)$input['cert_name_y'] : 82.5;
$certCodeY = isset($input['cert_code_y']) ? (double)$input['cert_code_y'] : 190.5;
$stmt = $db->prepare("UPDATE surveys SET title = ?, description = ?, has_certificate = ?, certificate_template = ?, cert_name_y = ?, cert_code_y = ? WHERE id = ?");
$stmt->execute([$input['title'], $input['description'] ?? '', $hasCertificate, $certificateTemplate, $certNameY, $certCodeY, $id]);
}
// Update sections and questions
if (isset($input['sections'])) {
// Delete old headings first (they reference sections)
$db->prepare("DELETE h FROM survey_headings h JOIN survey_sections s ON h.section_id = s.id WHERE s.survey_id = ?")->execute([$id]);
// Delete old sections (cascades to questions)
$db->prepare("DELETE FROM survey_sections WHERE survey_id = ?")->execute([$id]);
foreach ($input['sections'] as $section) {
$stmt = $db->prepare("INSERT INTO survey_sections (survey_id, section_number, title, description, category) VALUES (?, ?, ?, ?, ?)");
$stmt->execute([$id, $section['section_number'], $section['title'], $section['description'] ?? '', $section['category'] ?? 'rating']);
$sectionId = $db->lastInsertId();
// Insert headings and their questions
if (isset($section['headings'])) {
foreach ($section['headings'] as $hi => $heading) {
$hStmt = $db->prepare("INSERT INTO survey_headings (section_id, title, description, order_num) VALUES (?, ?, ?, ?)");
$hStmt->execute([$sectionId, $heading['title'], $heading['description'] ?? null, $heading['order_num'] ?? $hi]);
$headingId = $db->lastInsertId();
if (isset($heading['questions'])) {
foreach ($heading['questions'] as $i => $q) {
insertQuestion($db, $sectionId, $headingId, $q, $i);
}
}
}
}
// Insert loose questions (not in any heading)
if (isset($section['questions'])) {
foreach ($section['questions'] as $i => $q) {
insertQuestion($db, $sectionId, null, $q, $i);
}
}
}
}
$db->commit();
jsonResponse(['success' => true, 'message' => 'อัปเดตแบบสอบถามสำเร็จ']);
} catch (Exception $e) {
$db->rollBack();
jsonResponse(['error' => 'เกิดข้อผิดพลาด: ' . $e->getMessage()], 500);
}
}
function deleteSurvey() {
$input = getInput();
$id = (int)($input['id'] ?? 0);
if (!$id) jsonResponse(['error' => 'Missing ID'], 400);
$db = getDB();
$stmt = $db->prepare("SELECT user_id FROM surveys WHERE id = ?");
$stmt->execute([$id]);
$survey = $stmt->fetch();
if (!$survey) jsonResponse(['error' => 'ไม่พบแบบสอบถาม'], 404);
if (!isAdmin() && $survey['user_id'] != $_SESSION['user_id']) {
jsonResponse(['error' => 'ไม่มีสิทธิ์'], 403);
}
$db->prepare("DELETE FROM surveys WHERE id = ?")->execute([$id]);
jsonResponse(['success' => true, 'message' => 'ลบแบบสอบถามสำเร็จ']);
}
function generateLink() {
$input = getInput();
$id = (int)($input['id'] ?? 0);
if (!$id) jsonResponse(['error' => 'Missing ID'], 400);
$db = getDB();
$newLink = bin2hex(random_bytes(16));
$stmt = $db->prepare("UPDATE surveys SET unique_link = ?, status = 'active' WHERE id = ?");
$stmt->execute([$newLink, $id]);
$baseUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'];
$fullLink = $baseUrl . '/survey/respond.php?link=' . $newLink;
jsonResponse(['success' => true, 'unique_link' => $newLink, 'full_url' => $fullLink]);
}
function updateStatus() {
$input = getInput();
$id = (int)($input['id'] ?? 0);
$status = $input['status'] ?? '';
if (!$id || !in_array($status, ['draft', 'active', 'closed'])) {
jsonResponse(['error' => 'Invalid input'], 400);
}
$db = getDB();
$stmt = $db->prepare("UPDATE surveys SET status = ? WHERE id = ?");
$stmt->execute([$status, $id]);
jsonResponse(['success' => true, 'message' => 'อัปเดตสถานะสำเร็จ']);
}
function duplicateSurvey() {
$input = getInput();
$id = (int)($input['id'] ?? 0);
if (!$id) jsonResponse(['error' => 'Missing ID'], 400);
$db = getDB();
$stmt = $db->prepare("SELECT * FROM surveys WHERE id = ?");
$stmt->execute([$id]);
$survey = $stmt->fetch();
if (!$survey) jsonResponse(['error' => 'ไม่พบแบบสอบถาม'], 404);
$db->beginTransaction();
try {
$uniqueLink = bin2hex(random_bytes(16));
$stmt = $db->prepare("INSERT INTO surveys (user_id, project_id, title, description, unique_link, status, has_certificate, certificate_template, cert_name_y, cert_code_y) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
$stmt->execute([
$_SESSION['user_id'],
$survey['project_id'],
"สำเนาของ " . $survey['title'],
$survey['description'],
$uniqueLink,
'draft',
$survey['has_certificate'],
$survey['certificate_template'],
$survey['cert_name_y'],
$survey['cert_code_y']
]);
$newSurveyId = $db->lastInsertId();
// Copy sections
$stmt = $db->prepare("SELECT * FROM survey_sections WHERE survey_id = ? ORDER BY section_number");
$stmt->execute([$id]);
$sections = $stmt->fetchAll();
foreach ($sections as $section) {
$stmtInsert = $db->prepare("INSERT INTO survey_sections (survey_id, section_number, title, description, category) VALUES (?, ?, ?, ?, ?)");
$stmtInsert->execute([$newSurveyId, $section['section_number'], $section['title'], $section['description'], $section['category']]);
$newSectionId = $db->lastInsertId();
// Copy headings
$stmtH = $db->prepare("SELECT * FROM survey_headings WHERE section_id = ? ORDER BY order_num");
$stmtH->execute([$section['id']]);
$headings = $stmtH->fetchAll();
$headingIdMap = []; // old heading id -> new heading id
foreach ($headings as $h) {
$stmtInsertH = $db->prepare("INSERT INTO survey_headings (section_id, title, description, order_num) VALUES (?, ?, ?, ?)");
$stmtInsertH->execute([$newSectionId, $h['title'], $h['description'], $h['order_num']]);
$headingIdMap[$h['id']] = $db->lastInsertId();
}
// Copy questions
$stmtQ = $db->prepare("SELECT * FROM survey_questions WHERE section_id = ? ORDER BY order_num");
$stmtQ->execute([$section['id']]);
$questions = $stmtQ->fetchAll();
foreach ($questions as $q) {
$newHeadingId = $q['heading_id'] ? ($headingIdMap[$q['heading_id']] ?? null) : null;
$stmtInsertQ = $db->prepare("INSERT INTO survey_questions (section_id, heading_id, question_text, question_type, is_required, order_num, options, scale_min, scale_max, description) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
$stmtInsertQ->execute([
$newSectionId,
$newHeadingId,
$q['question_text'],
$q['question_type'],
$q['is_required'],
$q['order_num'],
$q['options'],
$q['scale_min'],
$q['scale_max'],
$q['description']
]);
}
}
$db->commit();
jsonResponse(['success' => true, 'id' => $newSurveyId, 'message' => 'คัดลอกแบบสอบถามสำเร็จ']);
} catch (Exception $e) {
$db->rollBack();
jsonResponse(['error' => 'เกิดข้อผิดพลาด: ' . $e->getMessage()], 500);
}
}
function uploadTemplate() {
if (!isset($_FILES['template_image'])) {
jsonResponse(['error' => 'ไม่พบไฟล์ที่อัปโหลด'], 400);
}
$file = $_FILES['template_image'];
if ($file['error'] !== UPLOAD_ERR_OK) {
jsonResponse(['error' => 'การอัปโหลดไฟล์ล้มเหลว: รหัสข้อผิดพลาด ' . $file['error']], 400);
}
// ตรวจสอบขนาดไฟล์ (สูงสุด 5MB)
if ($file['size'] > 5 * 1024 * 1024) {
jsonResponse(['error' => 'ขนาดไฟล์รูปภาพต้องไม่เกิน 5MB'], 400);
}
// ตรวจสอบนามสกุล/ประเภทไฟล์ (ต้องเป็น PNG หรือ JPEG เท่านั้น)
$imageInfo = getimagesize($file['tmp_name']);
if ($imageInfo === false) {
jsonResponse(['error' => 'ไฟล์ที่อัปโหลดไม่ใช่รูปภาพที่ถูกต้อง'], 400);
}
$mimeType = $imageInfo['mime'];
$allowedMimeTypes = ['image/png', 'image/jpeg', 'image/jpg'];
if (!in_array($mimeType, $allowedMimeTypes)) {
jsonResponse(['error' => 'อนุญาตให้อัปโหลดเฉพาะไฟล์รูปภาพ PNG หรือ JPG/JPEG เท่านั้น'], 400);
}
// สร้างโฟลเดอร์สำหรับเก็บไฟล์รูปภาพ (ถ้ายังไม่มี)
$uploadDir = __DIR__ . '/../uploads/templates';
if (!is_dir($uploadDir)) {
mkdir($uploadDir, 0777, true);
}
chmod($uploadDir, 0777);
// สร้างชื่อไฟล์ใหม่เพื่อป้องกันไฟล์ซ้ำและแฮกเกอร์
$ext = ($mimeType === 'image/png') ? 'png' : 'jpg';
$fileName = 'tpl_' . time() . '_' . bin2hex(random_bytes(8)) . '.' . $ext;
$destPath = $uploadDir . '/' . $fileName;
if (move_uploaded_file($file['tmp_name'], $destPath)) {
chmod($destPath, 0666);
$relativePath = 'uploads/templates/' . $fileName;
jsonResponse(['success' => true, 'template_path' => $relativePath, 'message' => 'อัปโหลดเทมเพลตสำเร็จ']);
} else {
jsonResponse(['error' => 'ไม่สามารถย้ายไฟล์ไปยังโฟลเดอร์ปลายทางได้'], 500);
}
}