MINI

files >> C:/siak/TOOL SIAK/tool9/restore1/asset/proses.php
 


<?php
session_start();
include '../lib/db/dbconfig.php';
include '../lib/db/koneksi_siak.php';


if (isset($_POST['login'])) {

	if (empty($_POST['user'])  || empty($_POST['password'])) {
		echo "<script>alert('Kolom tidak boleh kosong!'); window.location=('../home');</script>";
	} else {
		$user = mysqli_real_escape_string($conn, $_POST['user']);
		$password = sha1(mysqli_escape_string($conn, $_POST['password']));

		$sql = "SELECT * FROM user WHERE user='$user' AND password='$password'";
		$query = $conn->query($sql);
		$hitung = $query->num_rows;
		
		if ($hitung!==0) {
			$ambil = $query->fetch_assoc();
			extract($ambil);
			$_SESSION['user_restore'] = "$user";
			$_SESSION['id'] = "$id_user";
			$_SESSION['level'] = "$level";
			$timeout=3;
			$_SESSION['expires_by']=time()+$timeout;

			header("location:../home");
		}else{
			header("location:../home&log=2");
		}
	}
} elseif (isset($_GET['logout'])) {
	session_destroy();
	header("location:../home");
}
elseif (isset($_SESSION['user_restore'])) {
	// Tambahh stasiun
	if (isset($_POST['add_keterangan'])) {
		$id = "NULL";
		
		$keterangan = mysqli_real_escape_string($conn, $_POST['keterangan']);
		$deskripsi = mysqli_real_escape_string($conn, $_POST['deskripsi']);
	
		$status = mysqli_real_escape_string($conn, $_POST['status']);
	
		if (!empty($keterangan) || !empty($deskripsi)  || !empty($status) ) {
			$q_cek = $conn->query("SELECT * FROM keterangan WHERE keterangan='$keterangan'");
			if ($q_cek->num_rows!=0) { // Cek ada nama stasiun yg sama ga
				echo "<script>window.alert('Sudah ada Data Sekolah dengan nama \"$keterangan\"');
						window.location=('../add_keterangan');</script>"; // aksi ada
			} else {
				// aksi ga ada
			$sql = "INSERT INTO keterangan ( id_keterangan, keterangan, descrip, 
				status) VALUES (?, ?, ?, ?)";
			if ($statement = $conn->prepare($sql)) {
				$statement->bind_param(
					"isss", $id, $keterangan, $deskripsi, $status);
				if ($statement->execute()) {
					header("location:../add_keterangan&st=1");
				} else {
					header("location:../add_keterangan&st=2");
				}
			} else {
				header("location:../add_keterangan&st=2");
			}
		}
		} else {
			header("location:../add_keterangan&st=3");
		}
	}

elseif (isset($_POST['add_flag'])) {
		$id = "NULL";
		$flag = mysqli_real_escape_string($conn, $_POST['flag']);
		$nik = mysqli_real_escape_string($conn, $_POST['nik']);

		// echo $flag.'<br>'.$nik;

		if (!empty($flag)) {
					$sqlz="UPDATE biodata_wni SET flag_status='$flag' WHERE nik='$nik'";
					$statmentz=oci_parse($conn1,$sqlz);
					oci_execute($statmentz,OCI_DEFAULT);
					oci_commit($conn1);

					// echo "<script>
					// swal('Flag Sudah dirubah eyaa');</script>";

					// echo '<div class="callout callout-success" style="margin-bottom: 0!important;">
     //                          <h4><i class="fa fa-info"></i> Note:</h4>
     //                          Flag Berhasil Di Rubah.
     //                        </div><br />';
					echo "<script>
						
						window.location=('../flag_wni&st=1');</script>";
			} else {
				header("location:../flag_wni&st=2");
			}
		
	}


elseif (isset($_POST['add_flag_kk'])) {
		$id = "NULL";
		$flag = mysqli_real_escape_string($conn, $_POST['flag']);
		$no_kk = mysqli_real_escape_string($conn, $_POST['no_kk']);

		// echo $flag.'<br>'.$nik;

		if (!empty($flag)) {
					$sqlz="UPDATE data_keluarga SET tipe_kk='$flag' WHERE no_kk='$no_kk'";
					$statmentz=oci_parse($conn1,$sqlz);
					oci_execute($statmentz,OCI_DEFAULT);
					oci_commit($conn1);

					// echo "<script>
					// swal('Flag Sudah dirubah eyaa');</script>";

					// echo '<div class="callout callout-success" style="margin-bottom: 0!important;">
     //                          <h4><i class="fa fa-info"></i> Note:</h4>
     //                          Flag Berhasil Di Rubah.
     //                        </div><br />';
					echo "<script>
						
						window.location=('../flag_kk&st=1');</script>";
			} else {
				header("location:../flag_kk&st=2");
			}
		
	}
	// Edit Client
elseif (isset($_POST['simpan_user'])) {
		$id = "NULL";
		$user = mysqli_real_escape_string($conn, $_POST['user_id']);
		$nama_lgkp = mysqli_real_escape_string($conn, $_POST['nama_lgkp']);
		$telp = mysqli_real_escape_string($conn, $_POST['telp']);
		$nagari = mysqli_real_escape_string($conn, $_POST['nagari']);
		$kecamatan = mysqli_real_escape_string($conn, $_POST['kecamatan']);
		$new = mysqli_real_escape_string($conn, $_POST['password']);
		$password = sha1($new);
		$level = mysqli_real_escape_string($conn, $_POST['level']);
		
		if (!empty($nama_lgkp) || !empty($user_id) || !empty($level) || !empty($password) ) {
			$q_cek = $conn->query("SELECT*FROM user WHERE user='$user'");
			if ($q_cek->num_rows!=0) { // Cek ada nama stasiun yg sama ga
				echo "<script>window.alert('Data Sudah ada dengan user id \"$user\"');
						window.location=('../tambah_user');</script>"; // aksi ada
			} else {
				// aksi ga ada
			$sql = "INSERT INTO user (  id_user, user, password, level, nama_lgkp, kelurahan,kecamatan, telp ) VALUES ( ?, ?, ?, ?, ?, ?, ?,?)";
			if ($statement = $conn->prepare($sql)) {
				$statement->bind_param(
					"ssssssss", $id, $user, $password, $level, $nama_lgkp, $nagari, $kecamatan, $telp);
				if ($statement->execute()) {
					header("location:../tambah_user&st=1");
				} else {
					header("location:../tambah_user&st=2");
				}
			} else {
				header("location:../tambah_user&st=2");
			}
		}
		} else {
			header("location:../tambah_user&st=3");
		}
	}
	
	// Delete Client
	elseif (isset($_POST['del_cln'])) {
		$id_client = mysqli_real_escape_string($conn, $_POST['id_client']);
		$id_blok = mysqli_real_escape_string($conn, $_POST['id_blok']);
		$sql = "DELETE FROM client WHERE id_client=?";
		$delete = $conn->prepare($sql);
		$delete->bind_param("i", $id_client);
		if ($delete->execute()) {
			header("location:../stasiun&id=$id_blok&st=4");
		} else {
			header("location:../stasiun&id=$id_blok&st=5");
		}
	}


	// Edit Sekolah

	elseif (isset($_POST['edit_keterangan'])) {
		$id_keterangan = mysqli_real_escape_string($conn, $_POST['id_keterangan']);
		$keterangan = mysqli_real_escape_string($conn, $_POST['keterangan']);
		$descrip = mysqli_real_escape_string($conn, $_POST['descrip']);
		$status = mysqli_real_escape_string($conn, $_POST['status']);
		if (!empty($id_keterangan) || !empty($keterangan) || !empty($status)) {
			$sql = "UPDATE keterangan SET id_keterangan=?, keterangan=?, descrip=?, status=? WHERE id_keterangan='$id_keterangan'";
			if ($statement = $conn->prepare($sql)) {
				$statement->bind_param(
					"ssss", $id_keterangan, $keterangan, $descrip, $status);
				if ($statement->execute()) {
					header("location:../list_keterangan&id=$blok&st=1");
				} else {
					header("location:../list_keterangan&id=$blok&st=2");
				}
			} else {
				header("location:../list_keterangan&st=2");
			}
		} else {
			header("location:../list_keterangan&st=3");
		}
	}



	// Delete Sekolah
	elseif (isset($_POST['del_keterangan'])) {
		$id_keterangan = mysqli_real_escape_string($conn, $_POST['id_keterangan']);
		
		$sql = "DELETE FROM keterangan WHERE id_keterangan=?";
		$delete = $conn->prepare($sql);
		$delete->bind_param("i", $id_keterangan);
		if ($delete->execute()) {
			header("location:../list_keterangan&st=4");
		} else {
			header("location:../list_keterangan&st=5");
		}
	}
// Edit Sekolah

elseif (isset($_POST['edit_user'])) {

		$id_user = mysqli_real_escape_string($conn, $_POST['id_user']);
		$nama_lgkp = mysqli_real_escape_string($conn, $_POST['nama_lgkp']);
		$telp = mysqli_real_escape_string($conn, $_POST['telp']);
		$nagari = mysqli_real_escape_string($conn, $_POST['nagari']);
		$kecamatan = mysqli_real_escape_string($conn, $_POST['kecamatan']);
		$new = mysqli_real_escape_string($conn, $_POST['password']);

		if (!empty($new)) {
		$password = sha1($new);
		} else {

				$sql = "SELECT*FROM user WHERE id_user='$id_user'";
				$query = $conn->query($sql);
				$get = $query->fetch_assoc();
				$password=$get['password'];

		}

		

		if (!empty($nama_lgkp) || !empty($telp) || !empty($nagari)) {
			$sql = "UPDATE user SET nama_lgkp=?, telp=?, kelurahan=?, kecamatan=?, password=? WHERE id_user='$id_user'";
			if ($statement = $conn->prepare($sql)) {
				$statement->bind_param(
					"sssss", $nama_lgkp, $telp, $nagari, $kecamatan, $password);
				if ($statement->execute()) {
					header("location:../tambah_user&id=$blok&st=1");
				} else {
					header("location:../tambah_user&id=$blok&st=2");
				}
			} else {
				header("location:../tambah_user&st=2");
			}
		} else {
			header("location:../tambah_user&st=3");
		}
	}



	// Delete Sekolah
	elseif (isset($_POST['del_user'])) {
		$id_user = mysqli_real_escape_string($conn, $_POST['id_user']);
		
		$sql = "DELETE FROM user WHERE id_user=?";
		$delete = $conn->prepare($sql);
		$delete->bind_param("i", $id_user);
		if ($delete->execute()) {
			header("location:../tambah_user&st=4");
		} else {
			header("location:../tambah_user&st=5");
		}
	}


	


	// Del log
	elseif (isset($_GET['del_log'])) {
		if (!empty($_POST['id_log'])) {
			$count_id = count($_POST["id_log"]);
			for($i=0; $i < $count_id; $i++) 
			{	
				$id_log = $_POST['id_log'][$i];
			    $sql_log = "DELETE FROM log WHERE id_log='$id_log'";
			    
			    if ($stmt = $conn->prepare($sql_log)) {
			    	if ($stmt->execute()) {
			    		header("location:../log&st=4");
			    	} else {
			    		header("location:../log&st=5");
			    	}
			    }
			}
		} else {
			header("location:../log&st=3");
		}
	}
   //  Menjadikan Stasiun default
	
	//ubah katasandi
	elseif (isset($_GET['change-pwd'])) {
		$old = mysqli_real_escape_string($conn, $_POST['old-pwd']);
		$new = mysqli_real_escape_string($conn, $_POST['new-pwd']);
		$cek = mysqli_real_escape_string($conn, $_POST['cek-new-pwd']);
		$sql = "SELECT*FROM user WHERE id_user='$_SESSION[id]'";
		$query = $conn->query($sql);
		$get = $query->fetch_assoc();
		if (!empty($old) && !empty($new) && !empty($cek)) {
			if ($get['password'] !== sha1($old)) {
				header("location:../katasandi&st=3");
			} else {
				if ($new !== "$cek") {
					header("location: ../katasandi&st=4");
				} else {
					$sql_in = "UPDATE user SET password = ? WHERE id_user='$_SESSION[id]'";
					if ($stmt = $conn->prepare($sql_in)) {
						$pwd_true = sha1($new);
						$stmt->bind_param("s", $pwd_true);
						if ($stmt->execute()) {
							header("location:../katasandi&st=1");
						} else {
							header("location:../katasandi&st=2");
						}
					} else {
						header("location:../katasandi&st=2");
					}
				}
			}
		} else {
			header("location:../katasandi&st=5");
		}
	}
	 
}
else {
	echo "<script>alert('Wah ! nakal ya..'); window.location=('../home');</script>";
}
?>