api.php

<?php
header('Content-Type: application/json');
require_once 'config.php';
require_once 'auth.php';

$auth = new Auth($pdo);

switch ($_GET['action']) {
    case 'rate':
        if (!$auth->isLoggedIn()) {
            echo json_encode(['error' => 'Login required']);
            exit;
        }
        
        $appId = filter_input(INPUT_POST, 'app_id', FILTER_VALIDATE_INT);
        $rating = filter_input(INPUT_POST, 'rating', FILTER_VALIDATE_INT);
        $comment = trim($_POST['comment'] ?? '');
        
        try {
            recordRating($pdo, $appId, $_SESSION['user_id'], $rating, $comment);
            echo json_encode(['success' => true]);
        } catch (Exception $e) {
            echo json_encode(['error' => $e->getMessage()]);
        }
        break;

    case 'favorite':
        // Handle favoriting apps
        break;

    case 'report':
        // Handle app reporting
        break;
}
?>