api_management.php

<?php
class APIManagement {
    private $pdo;
    private $currentTime;
    private $currentUser;

    public function __construct($pdo) {
        $this->pdo = $pdo;
        $this->currentTime = '2025-06-14 12:47:29';
        $this->currentUser = 'imabutahersiddik';
    }

    public function generateAPIKey() {
        $apiKey = bin2hex(random_bytes(32));
        
        $stmt = $this->pdo->prepare("
            INSERT INTO api_keys 
            (user_id, api_key, created_at, last_used)
            VALUES (?, ?, ?, NULL)
        ");
        $stmt->execute([
            $_SESSION['user_id'],
            $apiKey,
            $this->currentTime
        ]);

        return $apiKey;
    }

    public function checkRateLimit($apiKey, $endpoint) {
        $stmt = $this->pdo->prepare("
            SELECT COUNT(*) 
            FROM api_requests 
            WHERE api_key = ? 
            AND endpoint = ?
            AND created_at >= DATE_SUB(?, INTERVAL 1 HOUR)
        ");
        $stmt->execute([$apiKey, $endpoint, $this->currentTime]);
        $count = $stmt->fetchColumn();

        // Limit: 1000 requests per hour
        return $count < 1000;
    }

    public function logAPIRequest($apiKey, $endpoint, $response_code) {
        $stmt = $this->pdo->prepare("
            INSERT INTO api_requests 
            (api_key, endpoint, response_code, ip_address, created_at)
            VALUES (?, ?, ?, ?, ?)
        ");
        return $stmt->execute([
            $apiKey,
            $endpoint,
            $response_code,
            $_SERVER['REMOTE_ADDR'],
            $this->currentTime
        ]);
    }
}
?>