pguzman
663fde3909
Full source for loveandrosary.com: slide-based Rosary/novena/Divine Mercy Chaplet presentation tool with multi-user roles, SVG bead ring, audio uploads, donate strip, and public session profiles. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
46 lines
1023 B
PHP
46 lines
1023 B
PHP
<?php
|
|
/**
|
|
* api/delete_audio.php
|
|
* POST: delete the audio file for a specific prayer key.
|
|
* Admin only.
|
|
*
|
|
* POST params:
|
|
* key — audio key string
|
|
*
|
|
* Returns JSON: {"deleted": true|false}
|
|
*/
|
|
require_once __DIR__ . '/../config/db.php';
|
|
require_once __DIR__ . '/../includes/auth.php';
|
|
|
|
header('Content-Type: application/json');
|
|
require_auth();
|
|
|
|
if (!has_role('admin')) {
|
|
http_response_code(403);
|
|
echo json_encode(['error' => 'Permission denied']);
|
|
exit;
|
|
}
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
|
http_response_code(405);
|
|
echo json_encode(['error' => 'Method not allowed']);
|
|
exit;
|
|
}
|
|
|
|
$key = trim($_POST['key'] ?? '');
|
|
if (!preg_match('/^[a-z0-9_]+$/', $key) || strlen($key) > 100) {
|
|
http_response_code(400);
|
|
echo json_encode(['error' => 'Invalid audio key']);
|
|
exit;
|
|
}
|
|
|
|
$audio_dir = UPLOADS_DIR . 'audio/';
|
|
$deleted = false;
|
|
|
|
foreach (glob($audio_dir . $key . '.*') ?: [] as $file) {
|
|
unlink($file);
|
|
$deleted = true;
|
|
}
|
|
|
|
echo json_encode(['deleted' => $deleted]);
|