submit_lost_report.php

<?php
// Disable error reporting for production
error_reporting(0);
ini_set('display_errors', 0);
// Set JSON content type before any output
header('Content-Type: application/json');

try {
    $servername = "localhost";
    $username = "root";
    $password = "";
    $dbname = "lost_found_db";

    // Create connection
    $conn = new mysqli($servername, $username, $password, $dbname);
    
    // Check connection
    if ($conn->connect_error) {
        throw new Exception("Connection failed: " . $conn->connect_error);
    }

    // Get POST data with validation
    $Fname = isset($_POST['Fname']) ? $conn->real_escape_string($_POST['Fname']) : '';
    $Lname = isset($_POST['Lname']) ? $conn->real_escape_string($_POST['Lname']) : '';
    $email = isset($_POST['email']) ? $conn->real_escape_string($_POST['email']) : '';
    $contact_no = isset($_POST['contact_no']) ? $conn->real_escape_string($_POST['contact_no']) : '';
    $dept_college = isset($_POST['dept_college']) ? $conn->real_escape_string($_POST['dept_college']) : '';
    $item_name = isset($_POST['item_name']) ? $conn->real_escape_string($_POST['item_name']) : '';
    $item_category = isset($_POST['item_category']) ? $conn->real_escape_string($_POST['item_category']) : '';
    $location_lost = isset($_POST['location_lost']) ? $conn->real_escape_string($_POST['location_lost']) : '';
    $date = isset($_POST['report_date']) ? $conn->real_escape_string($_POST['report_date']) : '';
    $time = isset($_POST['report_time']) ? $conn->real_escape_string($_POST['report_time']) : '';
    $other_details = isset($_POST['other_details']) ? $conn->real_escape_string($_POST['other_details']) : '';

    // Handle optional file uploads
    $uploads_dir = 'uploads/img_reported_lost_items/';
    if (!file_exists($uploads_dir)) {
        mkdir($uploads_dir, 0777, true);
    }

    $images = array();
    for ($i = 1; $i <= 5; $i++) {
        $fieldName = "img" . $i;
        $images[$fieldName] = '';
        if (isset($_FILES[$fieldName]) && $_FILES[$fieldName]['error'] == 0) {
            $temp = $_FILES[$fieldName]['tmp_name'];
            $name = uniqid() . '_' . basename($_FILES[$fieldName]['name']);
            if (move_uploaded_file($temp, $uploads_dir . $name)) {
                $images[$fieldName] = $name;
            }
        }
    }

    // Prepare SQL statement
    $sql = "INSERT INTO reported_lost_items (
                Fname, Lname, email, contact_no, dept_college, 
                item_name, item_category, location_lost, report_date, report_time, 
                other_details, img1, img2, img3, img4, img5, status
            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'Missing')";

    $stmt = $conn->prepare($sql);
    if ($stmt === false) {
        throw new Exception("Prepare failed: " . $conn->error);
    }

    $stmt->bind_param("ssssssssssssssss",
        $Fname, $Lname, $email, $contact_no, $dept_college,
        $item_name, $item_category, $location_lost, $date, $time,
        $other_details, $images['img1'], $images['img2'], $images['img3'], 
        $images['img4'], $images['img5']
    );

    if ($stmt->execute()) {
        echo json_encode(['success' => true, 'message' => 'Report submitted successfully']);
    } else {
        throw new Exception("Error executing statement: " . $stmt->error);
    }

    $stmt->close();
    $conn->close();

} catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
}
?>