write_data.php

<?php
require 'koneksi.php';

// Hanya terima POST untuk operasi penulisan
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    header('Allow: POST');
    exit('Method Not Allowed');
}

$data = isset($_POST['data']) ? trim($_POST['data']) : '';
if ($data === '') {
    http_response_code(400);
    exit('Missing data');
}

// Batasi panjang input untuk mencegah abuse
if (strlen($data) > 1024) {
    http_response_code(413);
    exit('Payload too large');
}

// Prepared statement untuk mencegah SQL injection
$stmt = $koneksi->prepare("INSERT INTO TPS (data) VALUES (?)");
if (!$stmt) {
    error_log('Prepare failed: ' . $koneksi->error);
    http_response_code(500);
    exit('Server error');
}

$stmt->bind_param('s', $data);
if (!$stmt->execute()) {
    error_log('Execute failed: ' . $stmt->error);
    http_response_code(500);
    exit('Server error');
}

http_response_code(201);
echo 'OK';
?>