usbcheck.it/api/v1/result/browser.quick.test.php

<?php
// /api/v1/result/browser.quick.test.php

declare(strict_types=1);

/**
 * Handler für:  /v1/browser.quick.test
 *
 * WICHTIG:
 * - Keine direkten header()/echo-Ausgaben hier.
 * - Der Router (router.v1.php) ruft diese Funktion auf und encodiert das Ergebnis als JSON.
 *
 * Erwartung des Routers:
 *   function browser_quick_test_handle_request(): array
 */
function browser_quick_test_handle_request(): array
{
    // Session & DB
    if (session_status() !== PHP_SESSION_ACTIVE) {
        session_start();
    }

    // ---------------------------------------------------------------------
    // 1. JSON einlesen
    // ---------------------------------------------------------------------
    $raw  = file_get_contents('php://input');
    $data = json_decode($raw, true);

    if (!is_array($data)) {
        // Kein gültiges JSON → wir geben nur das Ergebnis zurück,
        // HTTP-Status-Code kann der Router setzen, wenn er mag.
        return [
            'ok'    => false,
            'error' => 'Invalid JSON payload',
        ];
    }

    // ---------------------------------------------------------------------
    // 2. User / Session ermitteln – angepasst an dein Login
    // ---------------------------------------------------------------------
    $userId     = null;
    $isLoggedIn = 0;

    // **Primär**: so wird der User in src/auth/login.php gesetzt:
    // $_SESSION['user'] = ['id' => ..., ...]
    if (
        isset($_SESSION['user']) &&
        is_array($_SESSION['user']) &&
        !empty($_SESSION['user']['id'])
    ) {
        $userId = (int)$_SESSION['user']['id'];
    }
    // Fallback A: klassisch
    elseif (!empty($_SESSION['user_id'])) {
        $userId = (int)$_SESSION['user_id'];
    }
    // Fallback B: auth-Block (z.B. $_SESSION['auth']['user_id'])
    elseif (
        isset($_SESSION['auth']) &&
        is_array($_SESSION['auth']) &&
        !empty($_SESSION['auth']['user_id'])
    ) {
        $userId = (int)$_SESSION['auth']['user_id'];
    }

    if ($userId) {
        $isLoggedIn = 1;
    }

    $sessionId = session_id() ?: null;

    $ipAddress  = $_SERVER['REMOTE_ADDR']     ?? null;
    $userAgent  = $_SERVER['HTTP_USER_AGENT'] ?? null;

    // ---------------------------------------------------------------------
    // 3. Grobe Auswertung aus dem Report (optional)
    // ---------------------------------------------------------------------
    $modeRequested = $data['mode_requested'] ?? 'unknown';
    $meta          = $data['meta'] ?? [];

    // Hier könntest du später Browser/OS parsen
    $browserName    = null;
    $browserVersion = null;
    $osName         = null;
    $osVersion      = null;

    // Beispiel: Gesamtmenge geschriebener/verifizierter Bytes aggregieren
    $measuredBytes = 0;

    if (!empty($data['quick']) && is_array($data['quick'])) {
        $measuredBytes += (int)($data['quick']['size_bytes'] ?? 0);
    }
    if (!empty($data['benchmark']) && is_array($data['benchmark'])) {
        $measuredBytes += (int)($data['benchmark']['size_bytes'] ?? 0);
    }
    if (!empty($data['writeverify']) && is_array($data['writeverify'])) {
        $measuredBytes += (int)($data['writeverify']['total_bytes'] ?? 0);
    }

    // Kapazitätsstatus vorerst neutral
    $capacityStatus = 'unknown';

    // Volume-/Stick-Daten hast du aktuell im Browser noch nicht separat,
    // darum bleiben diese Felder (erstmal) NULL:
    $volumeLabel   = null;
    $manufacturer  = null;
    $modelName     = null;
    $usbType       = null;
    $filesystem    = null;

    // advertised_capacity_bytes kennen wir im Browser noch nicht:
    $advCapacityBytes = null;

    // test_report_json = kompletter Report (roher JSON-String)
    $testReportJson = $raw ?: json_encode($data, JSON_UNESCAPED_UNICODE);

    // ---------------------------------------------------------------------
    // 4. Insert in web_quicktests
    // ---------------------------------------------------------------------
    /** @var PDO $pdo */
    global $pdo;

    try {
        $sql = "
            INSERT INTO web_quicktests (
                user_id,
                is_logged_in,
                usb_device_id,
                browser_name,
                browser_version,
                os_name,
                os_version,
                volume_label,
                manufacturer,
                model_name,
                usb_type,
                advertised_capacity_bytes,
                measured_capacity_bytes,
                capacity_status,
                filesystem,
                test_report_json,
                ip_address,
                session_id
            )
            VALUES (
                :user_id,
                :is_logged_in,
                :usb_device_id,
                :browser_name,
                :browser_version,
                :os_name,
                :os_version,
                :volume_label,
                :manufacturer,
                :model_name,
                :usb_type,
                :advertised_capacity_bytes,
                :measured_capacity_bytes,
                :capacity_status,
                :filesystem,
                :test_report_json,
                :ip_address,
                :session_id
            )
        ";

        $stmt = $pdo->prepare($sql);

        $stmt->execute([
            'user_id'                   => $userId,
            'is_logged_in'              => $isLoggedIn,
            'usb_device_id'             => null,
            'browser_name'              => $browserName,
            'browser_version'           => $browserVersion,
            'os_name'                   => $osName,
            'os_version'                => $osVersion,
            'volume_label'              => $volumeLabel,
            'manufacturer'              => $manufacturer,
            'model_name'                => $modelName,
            'usb_type'                  => $usbType,
            'advertised_capacity_bytes' => $advCapacityBytes,
            'measured_capacity_bytes'   => $measuredBytes ?: null,
            'capacity_status'           => $capacityStatus,
            'filesystem'                => $filesystem,
            'test_report_json'          => $testReportJson,
            'ip_address'                => $ipAddress,
            'session_id'                => $sessionId,
        ]);

        $id = (int)$pdo->lastInsertId();

        // Optionales Debug-Logging, falls trotz Login kein user_id ankam
        if ($isLoggedIn === 0 && !empty($_SESSION['user'])) {
            error_log('[usbcheck] browser.quick.test: SESSION[user] vorhanden, aber user_id blieb leer: ' . json_encode($_SESSION['user']));
        }

        return [
            'ok'             => true,
            'id'             => $id,
            'mode'           => $modeRequested,
            'measured_bytes' => $measuredBytes ?: null,
        ];
    } catch (Throwable $e) {
        // Fehler ins Error-Log schreiben (nur Server-seitig sichtbar)
        error_log('[usbcheck] web_quicktests insert failed: ' . $e->getMessage());

        return [
            'ok'    => false,
            'error' => 'DB error',
            'debug' => $e->getMessage(), // zum Debuggen – ggf. später entfernen
        ];
    }
}