Update codebase

2026-08-09 16:56:13 +03:00
parent 95e2e4f35d
commit b64debaa88
1058 changed files with 164327 additions and 113928 deletions
@@ -0,0 +1,43 @@
+<?php
+// ============================================================
+// food/connect_merchant.php — بوابة لوحة المطعم (ويب متجاوب)
+// المصادقة عبر session token (هاتف + كلمة مرور) — مستقلة عن JWT
+// ============================================================
+
+require_once __DIR__ . '/../core/bootstrap.php';
+require_once __DIR__ . '/functions.php';
+
+if (getenv('FOOD_ENABLED') === 'false') {
+    http_response_code(503);
+    echo json_encode(['status' => 'failure', 'message' => 'Food service is currently disabled']);
+    exit;
+}
+
+// CORS للوحة المطعم
+$merchantOrigins = array_map('trim', explode(',',
+    getenv('FOOD_MERCHANT_ORIGINS') ?: 'https://food-merchant.siromove.com,https://admin.siromove.com'
+));
+$origin = $_SERVER['HTTP_ORIGIN'] ?? '';
+if (in_array($origin, $merchantOrigins)) {
+    header("Access-Control-Allow-Origin: $origin");
+    header('Access-Control-Allow-Credentials: true');
+}
+if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit; }
+
+$limiter = new RateLimiter($redis);
+$limiter->enforce(RateLimiter::identifier(), 'api');
+
+try {
+    $food_con = Database::get('food');
+} catch (Exception $e) {
+    // السبب الحقيقي في اللوج فقط — الرد يبقى عاماً.
+    error_log('[FOOD] DB connection failed in ' . basename(__FILE__) . ': ' . $e->getMessage());
+    http_response_code(503);
+    echo json_encode(['status' => 'failure', 'message' => 'Food service unavailable']);
+    exit;
+}
+
+// التحقق من الـ session (يُعيد ['merchant_user_id'=>X, 'merchant_id'=>Y])
+$food_merchant_session   = foodAuthMerchant();
+$food_merchant_user_id   = (int)$food_merchant_session['merchant_user_id'];
+$food_merchant_id        = (int)$food_merchant_session['merchant_id'];