FileMgr

✏️ /home/mien4214/public_html/absenku.mienyinyir.com/admin/mod/user/proses.php

✕ Tutup

<?php
session_start();
if(empty($_SESSION['SESSION_USER']) && empty($_SESSION['SESSION_ID'])){
 header('location:../../login/');
 exit;}
else {
require_once'../../../library/sw-config.php';
require_once'../../login/login_session.php';
include('../../../library/sw-function.php'); 
$salt = '$%DSuTyr47542@#&*!=QxR094{a911}+';
switch (@$_GET['action']){

case 'add':
  $error = array();
  
  if (empty($_POST['username'])) {
        $error[] = 'tidak boleh kosong';
    } else {
    $username = mysqli_real_escape_string($connection, $_POST['username']);
  }

if (empty($_POST['password'])) {
        $error[] = 'tidak boleh kosong';
      } else {

$password_kirim = mysqli_real_escape_string($connection,$_POST['password']);
        $password = mysqli_real_escape_string($connection,hash('sha256',$salt.$_POST['password']));
  }

if (empty($_POST['fullname'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $fullname = mysqli_real_escape_string($connection, $_POST['fullname']);
  }

if (empty($_POST['email'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $email = mysqli_real_escape_string($connection, $_POST['email']);
  }

if (empty($_POST['level'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $level = mysqli_real_escape_string($connection, $_POST['level']);
  }

$pesan = '<html lang="id-ID" xml:lang="id-ID"><body>';
 $pesan .= 'Pendaftaran Administrator di '.$site_name.' berhasil dengan detail akun sebagai berikut:';
 $pesan .= '[Detail Akun] :';
 $pesan .= 'Username: '.$username.' Password : '.$password_kirim.' Id : '.$ip.' Browser : '.$browser.'';
 $pesan .= 'Hormat Kami, '.$site_name.' Email otomatis, Mohon tidak membalas email ini"';
 $pesan .= "</body></html>";
 $to = $email;
 $subject = 'Registrasi Administrator Berhasil';
 $headers = "From: ".$site_name."<".$site_email_domain.">\r\n";
 $headers .= "MIME-Version: 1.0\r\n";
 $headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";

if (empty($error)) { 
  if (filter_var($email, FILTER_VALIDATE_EMAIL)) {
    $query="SELECT email from user where email='$email'";
    $result= $connection->query($query) or die($connection->error.__LINE__);
    if(!$result ->num_rows >0){
    $add= "INSERT INTO user(username,
                          password,
                          fullname,
                          email,
                          registered,
                          created_login,
                          last_login,
                          session,
                          ip,
                          browser,
                          level) values('$username',
                          '$password',
                          '$fullname',
                          '$email',
                          '$date $time',
                          '$date $time',
                          '$date $time',
                          '0',
                          '$ip',
                          '$browser',
                          '$level')";

if($connection->query($add) === false) { 
        die($connection->error.__LINE__); 
        echo'Data tidak berhasil disimpan!';
    } else{
        echo'success';
        mail($to, $subject, $pesan, $headers);
    }}

else{
        echo'Sepertinya Email "'.$email.'" sudah terdaftar!';
    }}

else   {
        echo'Email yang anda masukkan salah!';
      }
    }

else{           
        echo'Bidang inputan masih ada yang kosong!';
    }

break;
/* ------------------------------
    Update
---------------------------------*/
case 'update':
 $error = array();
   if (empty($_POST['id'])) {
      $error[] = 'ID tidak boleh kosong';
    } else {
      $id = mysqli_real_escape_string($connection, $_POST['id']);
  }

if (empty($_POST['username'])) {
        $error[] = 'tidak boleh kosong';
    } else {
    $username = mysqli_real_escape_string($connection, $_POST['username']);
  }

if (empty($_POST['password'])) {
        $password ='';
      } else {
        $password_kirim = mysqli_real_escape_string($connection,$_POST['password']);
        $password = mysqli_real_escape_string($connection,hash('sha256',$salt.$_POST['password']));
  }

if (empty($_POST['fullname'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $fullname = mysqli_real_escape_string($connection, $_POST['fullname']);
  }

if (empty($_POST['email'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $email = mysqli_real_escape_string($connection, $_POST['email']);
  }

if (empty($_POST['level'])) {
        $error[] = 'tidak boleh kosong';
      } else {
        $level = mysqli_real_escape_string($connection, $_POST['level']);
  }

$pesan = '<html lang="id-ID" xml:lang="id-ID"><body>';
 $pesan .= 'Pendaftaran Administrator di '.$site_name.' berhasil dengan detail akun sebagai berikut:';
 $pesan .= '[Detail Akun] :';
 $pesan .= 'Username: '.$username.' Password : '.$password_kirim.' Id : '.$ip.' Browser : '.$browser.'';
 $pesan .= 'Hormat Kami, '.$site_name.' Email otomatis, Mohon tidak membalas email ini"';
 $pesan .= "</body></html>";
 $to = $email;
 $subject = 'Registrasi Administrator Berhasil';
 $headers = "From: ".$site_name."<".$site_email_domain.">\r\n";
 $headers .= "MIME-Version: 1.0\r\n";
 $headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";

if($password == ''){
  if (empty($error)) { 
    $update="UPDATE user SET username='$username',
                    fullname='$fullname',
                    email='$email',
                    level='$level' WHERE user_id='$id'";  
    if($connection->query($update) === false) { 
        die($connection->error.__LINE__); 
        echo'Data tidak berhasil disimpan!';
    } else{
        echo'success';
    }}
    else{           
        echo'Bidang inputan tidak boleh ada yang kosong..!';
    }
  }
  else{
      $update="UPDATE user SET username='$username',
                    fullname='$fullname',
                    email='$email',
                    password='$password',
                    level='$level' WHERE user_id='$id'"; 
      if($connection->query($update) === false) { 
        die($connection->error.__LINE__); 
        echo'Data tidak berhasil disimpan!';
      }else{
          echo'success';
          mail($to, $subject, $pesan, $headers); 
  }
}

break;
/* --------------- Delete ------------*/
case 'delete':
  $id       = mysqli_real_escape_string($connection,epm_decode($_POST['id']));
  $deleted  = "DELETE FROM user WHERE user_id='$id'";
    if($connection->query($deleted) === true) {
        echo'success';
      } else { 
        //tidak berhasil
        echo'Data tidak berhasil dihapus.!';
        die($connection->error.__LINE__);
  }
break;

}

Batal

⬅ mod 3 item

Nama	Tipe	Ukuran	Diubah	Perm	Aksi
🐘 proses.php	php	6.9 KB	02/07/21 04:05	0644	✏️ ⬇
📜 scripts.js	js	4 KB	26/06/21 04:08	0644	✏️ ⬇
🐘 user.php	php	8.4 KB	01/07/21 07:21	0644	✏️ ⬇

✏️ Rename

🔑 Ubah Permission