'TRUE') { echo"

Dilarang mengakses file ini.

"; die(); } if(isset($_GET['mod']) && isset($_GET['act'])) { $mod = $_GET['mod']; $act = $_GET['act']; } else { $mod = ""; $act = ""; } if($mod == "supplier" AND $act == "simpan") { //variable input $kode_supplier = trim($_POST['id']); $nama_toko= anti_inject($_POST['nama_toko']); $alamat= anti_inject($_POST['alamat']); $telepon= anti_inject($_POST['telepon']); $email= anti_inject($_POST['email']); mysql_query("INSERT INTO tb_supplier('kode_supplier', nama_toko, alamat, telepon, email) VALUES ($kode_supplier, '$nama_toko', '$alamat', '$telepon', '$email')") or die(mysql_error()); flash('example_message', '

Berhasil menambah data biaya.

' ); echo""; } elseif ($mod == "supplier" AND $act == "edit") { //variable input $kode_supplier = trim($_POST['id']); $nama_toko= anti_inject($_POST['nama_toko']); $alamat= anti_inject($_POST['alamat']); $telepon= anti_inject($_POST['telepon']); $email= anti_inject($_POST['email']); mysql_query("UPDATE tb_supplier SET nama_toko= '$nama_toko', alamat= '$alamat', telepon= '$telepon', email= '$email' WHERE kode_supplier = '$_POST[id]'") or die(mysql_error()); flash('example_message', '

Berhasil mengubah data biaya.

'); echo""; } elseif ($mod == "supplier" AND $act == "hapus") { mysql_query("DELETE FROM tb_supplier WHERE kode_supplier = '$_GET[id]'") or die(mysql_error()); flash('example_message', '

Berhasil menghapus data biaya kuliah.

' ); echo""; } ?>