API

<?php

require_once 'DBhost.php';

$response = array();

if (isset($_GET['apicall'])) {

    switch ($_GET['apicall']) {
        case 'signup':
            if (isTheseParametersAvailable(array('email', 'password','nama', 'usaha', 'tlp', 'ktp','ftktp'))) {
                $email = $_POST['email'];
                $password = md5($_POST['password']);
                $nama = $_POST['nama'];
                $usaha = $_POST['usaha'];
                $tlp = $_POST['tlp'];
                $ktp = $_POST['ktp'];
                $ftktp = $_POST['ftktp'];

                $stmt = $conn->prepare("SELECT email,password,nama,usaha,tlp,ktp,ftktp FROM user WHERE  email = ?");
                $stmt->bind_param("s", $email);
                $stmt->execute();
                $stmt->store_result();

                if ($stmt->num_rows > 0) {
                    $response['error'] = true;
                    $response['message'] = 'User already registered';
                    $stmt->close();
                } else {
                    $stmt = $conn->prepare("INSERT INTO user (email,password,nama,usaha,tlp,ktp,ftktp) VALUES (?, ?, ?, ?, ?, ?, ?)");
                    $stmt->bind_param("sssssss", $email, $password, $nama, $usaha, $tlp, $ktp, $ftktp);

                    if ($stmt->execute()) {
                        $stmt = $conn->prepare("SELECT id,email,password,nama,usaha,tlp,ktp,ftktp FROM user WHERE email = ?");
                        $stmt->bind_param("s", $email);
                        $stmt->execute();
                        $stmt->bind_result($id, $email, $password, $nama, $usaha, $tlp, $ktp, $ftktp);
                        $stmt->fetch();

                        $user = array(
                            'id' => $id,
                            'email' => $email,
                            'password' => $password,
                            'nama' => $nama,
                            'usaha' => $usaha,
                            'tlp' => $tlp,
                            'ktp' => $ktp,
                            'ftktp' => $ftktp
                        );
                        $stmt->close();

                        $response['error'] = false;
                        $response['message'] = 'User registered successfully';
                        $response['user'] = $user;
                    }
                }
            } else {
                $response['error'] = true;
                $response['message'] = 'required parameters are not available';
            }
            break;
        case 'edit':
            if (isTheseParametersAvailable(array('email', 'password', 'nama', 'usaha', 'tlp', 'ktp', 'ftktp'))) {
                $email = $_POST['email'];
                $password = md5($_POST['password']);
                $nama = $_POST['nama'];
                $usaha = $_POST['usaha'];
                $tlp = $_POST['tlp'];
                $ktp = $_POST['ktp'];
                $ftktp = $_POST['ftktp'];

                $stmt = $conn->prepare("SELECT email,password,nama,usaha,tlp,ktp,ftktp FROM user WHERE email=?");
                $stmt->bind_param("s", $email);
                $stmt->execute();
                $stmt->store_result();

                if ($stmt->num_rows > 0) {
                    $stmt = $conn->prepare("UPDATE user SET password=?, nama=?, usaha=?, tlp=?, ktp=?, ftktp=? WHERE  email=?");
                    $stmt->bind_param("sssssss", $password , $nama, $usaha, $tlp, $ktp, $ftktp);

                    if ($stmt->execute()) {
                        $stmt = $conn->prepare("SELECT id,email,password,nama,usaha,tlp,ktp,ftktp FROM user WHERE email=?");
                        $stmt->bind_param("s", $email);
                        $stmt->execute();
                        $stmt->bind_result($id, $email, $password, $nama, $usaha, $tlp, $ktp, $ftktp);
                        $stmt->fetch();

                        $user = array(
                            'id' => $id,
                            'email' => $email,
                            'password' => $password,
                            'nama' => $nama,
                            'usaha' => $usaha,
                            'tlp' => $tlp,
                            'ktp' => $ktp,
                            'ftktp' => $ftktp
                        );
                        $stmt->close();

                        $response['error'] = false;
                        $response['message'] = 'User edited successfully';
                        $response['user'] = $user;
                    }
                } else {
                    $response['error'] = true;
                    $response['message'] = 'User not found';
                    $stmt->close();
                }
            } else {
                $response['error'] = true;
                $response['message'] = 'required parameters are not available';
            }
            break;

        case 'login':
             if (isTheseParametersAvailable(array('email', 'password'))) {
                $email = $_POST['email'];
                $password = md5($_POST['password']);

                $stmt = $conn->prepare("SELECT id,email,password FROM user WHERE email =? AND password=?");
                $stmt->bind_param("ss", $email, $password);

                $stmt->execute();

                $stmt->store_result();

                if ($stmt->num_rows > 0) {
                    $stmt->bind_result($id, $email, $password);
                    $stmt->fetch();

                    $user = array(
                        'id' => $id,
                        'email' => $email,
                        'password' => $password,

                    );

                    $response['error'] = false;
                    $response['message'] = 'Login successfull';
                    $response['user'] = $user;
                } else {
                    $response['error'] = false;
                    $response['message'] = 'Invalid username or password';
                }
            }


            break;
        case 'edit':
            if (isTheseParametersAvailable(array('email', 'password'))) {
                $email = $_POST['email'];
                $nama = $_POST['nama'];
                $usaha = $_POST['usaha'];
                $tlp = $_POST['tlp'];
                $ktp = $_POST['ktp'];
                $password = md5($_POST['password']);
                $ftktp = $_POST['ftktp'];

                $stmt = $conn->prepare("SELECT email,password FROM user WHERE email=? AND password=?");
                $stmt->bind_param("ss", $email, $password);
                $stmt->execute();
                $stmt->store_result();

                if ($stmt->num_rows > 0) {
                    $stmt = $conn->prepare("UPDATE user SET password = ? WHERE  email=?");
                    $stmt->bind_param("ss", $password, $email);

                    if ($stmt->execute()) {
                        $stmt = $conn->prepare("SELECT id,email,password FROM user WHERE email=?");
                        $stmt->bind_param("s", $email);
                        $stmt->execute();
                        $stmt->bind_result($id, $email, $password);
                        $stmt->fetch();

                        $user = array(
                            'id' => $id,
                            'email' => $email,
                            'password' => $password
                        );
                        $stmt->close();

                        $response['error'] = false;
                        $response['message'] = 'User edited successfully';
                        $response['user'] = $user;
                    }
                } else {
                    $response['error'] = true;
                    $response['message'] = 'User not found';
                    $stmt->close();
                }
            } else {
                $response['error'] = true;
                $response['message'] = 'required parameters are not available';
            }
            break;
        default:
            $response['error'] = true;
            $response['message'] = 'Invalid Operation Called';
    }
} else {
    $response['error'] = true;
    $response['message'] = 'Invalid API Call';
}

echo json_encode($response); //sudah ada ini, sesuai format android di tutorial

function isTheseParametersAvailable($params)
{
    foreach ($params as $param) {
        if (!isset($_POST[$param])) {
            return false;
        }
    }
    return true;

}
?>