get_zone.php

<?php
include 'config.php';
include 'functions.php';
require_once 'auth.php';

/** @var array $config */

header('Content-Type: application/json');

// 🔐 Start sesji i walidacja CSRF
if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST' ||
    !isset($_POST['csrf_token']) ||
    $_POST['csrf_token'] !== ($_SESSION['csrf_token'] ?? '')
) {
    http_response_code(403);
    echo json_encode(['success' => false, 'error' => 'Nieprawidłowy token CSRF']);
    exit;
}

$auth = login($config['username'], $config['password']);

if (!empty($auth['token'])) {
    $userId = $_POST['user_id'] ?? '';
    $udid   = $_POST['udid'] ?? '';
    $zoneId = (int) ($_POST['zone_id'] ?? 0);

    if ($userId && $udid && $zoneId) {
        $details = getModuleDetails($userId, $udid, $auth['token']);

        foreach ($details['zones']['elements'] ?? [] as $zone) {
            if (($zone['mode']['id'] ?? 0) == $zoneId) {
                echo json_encode([
                    'success' => true,
                    'setTemperature' => number_format($zone['zone']['setTemperature'] / 10, 1, '.', ''),
                    'currentTemperature' => number_format($zone['zone']['currentTemperature'] / 10, 1, '.', ''),
                    'state' => $zone['zone']['zoneState'] ?? 'brak'
                ]);
                exit;
            }
        }
    }
}

http_response_code(400);
echo json_encode(['success' => false, 'error' => 'Nie udało się pobrać danych strefy']);