<?php
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Methods: GET");
header("Access-Control-Allow-Headers: Content-Type");
require_once 'db.php';
try {
// Check if user_id is provided
if (!isset($_GET['user_id'])) {
throw new Exception("User ID is required");
}
$userId = $_GET['user_id'];
// Fetch user's medicine orders
$query = "SELECT
id,
name,
phone,
state,
district,
full_address,
products,
order_date,
status
FROM medicine_orders
WHERE user_id = :user_id
ORDER BY order_date DESC";
$stmt = $pdo->prepare($query);
$stmt->bindParam(':user_id', $userId, PDO::PARAM_INT);
$stmt->execute();
$orders = [];
while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
// Decode products JSON
$row['products'] = json_decode($row['products'], true);
$orders[] = $row;
}
// Return orders
echo json_encode([
'status' => 'success',
'orders' => $orders
]);
} catch (Exception $e) {
// Handle any errors
http_response_code(400);
echo json_encode([
'status' => 'error',
'message' => $e->getMessage()
]);
}
?>