<?php
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Methods: POST");
header("Access-Control-Max-Age: 3600");
header("Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With, X-API-Key");

// Endpoint publico (CORS *): exige la clave de API. Ver core/lib/ApiAuth.php
require_once __DIR__ . '/core/lib/ApiAuth.php';
ApiAuth::requireKey();

//include_once '../config/Database.php';
//include_once '../class/Items.php';

//$database = new Database();
//$db = $database->getConnection();
include "core/autoload.php";
include "core/app/model/InformData.php";

//$items = new Items($db);

$data = json_decode(file_get_contents("php://input"));
// Escapa todo el payload ANTES de asignarlo a los modelos: sus add()
// interpolan en crudo y estos endpoints son publicos (CORS *).
if (is_object($data)) {
    $__con = Database::getCon();
    foreach (get_object_vars($data) as $__k => $__v) {
        if (is_string($__v)) { $data->$__k = $__con->real_escape_string($__v); }
    }
}

if (!empty($data->resp_id)) {
    $product = new InformData();
    $product->student_id = $data->student_id;
    $product->psicomotricity = $data->psicomotricity;
    $product->language = $data->language;
    $product->cognitive = $data->cognitive;
    $product->resp_id = $data->resp_id;
    $product->emotional = $data->emotional;
    $product->observations = $data->observations;
    $p = $product->add();
    echo $p[1];
    $p1 = InformData::getById($p[1]);

    if ($p1) {
        http_response_code(201);
        echo json_encode(array("message" => "Inform was created."));
    } else {
        http_response_code(503);
        echo json_encode(array("message" => "Unable to create inform."));
    }
} else {
    http_response_code(400);
    echo json_encode(array("message" => "Unable to create inform. Data is incomplete."));
}