MINI

files >> C:/xampp/htdocs/.backend/New folder/profile1.php
 <?php
defined( '_LANGSUNG' ) or die(''); 

function Breadcrumb()
{
	echo '<i id="iconx" class="fa fa-user"></i>&nbsp; <span>PROFIL '.$_SESSION['Name'].'</span>';
}

function MainContent(){
	global $dbkoneksi;
	$q_data = $dbkoneksi->prepare("SELECT * FROM user_account WHERE id_account=:id_account");
	$q_data -> bindValue (':id_account', $_SESSION['AccountId'], PDO::PARAM_INT);
	$q_data -> execute();
	$data = $q_data -> fetch (PDO::FETCH_ASSOC);
	
	$foto = $data['foto'];
	?>

<!-- Content Header (Page header) -->

<section class="content-header">
  <h1> User Profile </h1>
</section>

<!-- Main content -->
<section class="content">
  <div class="row">
    <div class="col-md-3">
      <div class="box box-primary">
        <div class="box-body box-profile"> <img id="previewing" class="profile-user-img img-responsive img-circle" src="<?php echo FotoUser(); ?>" alt="User profile picture" width="100%" height="100%">
          <h3 class="profile-username text-center"><?php echo $_SESSION['AccountName']; ?></h3>
          <p class="text-muted text-center"><?php echo $_SESSION['AccountPosition']; ?></p>
          <form id="uploadimage" action="" method="post" enctype="multipart/form-data">
            <input type="file" name="gambar" id="gambar"/>
            <input type="submit" name="simpanfoto" id="simpanfoto" class="btn btn-primary btn-block" value="SIMPAN FOTO" />
          </form>
        </div>
      </div>
    </div>
    <!-- /.col -->
    <div class="col-md-9">
      <div class="box box-primary">
        <div class="box-header with-border">
          <h3 class="box-title">Edit Profil</h3>
        </div>
        <div class="box-body">
          <form class="form-horizontal" id="editprofile" name="editprofile" action="<?php echo APP_URI."/".APP_ADMINPATH."x/".basename(__FILE__, '.php').".html"; ?>" method="post" enctype="multipart/form-data">
            <div class="form-group">
              <label class="col-sm-2 control-label">Username</label>
              <div class="col-sm-10">
                <input type="text" class="form-control" id="username" name="username" disabled="disabled" value="<?php echo $data['username']; ?>">
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">Nama Lengkap</label>
              <div class="col-sm-10">
                <input type="text" class="form-control validate[required]" id="name" name="name" placeholder="Nama Lengkap"  value="<?php echo $data['name']; ?>">
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">Jabatan</label>
              <div class="col-sm-10">
                <input type="text" class="form-control validate[required]" id="possition" name="possition" placeholder="Jabatan" value="<?php echo $data['possition']; ?>">
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">Telepon</label>
              <div class="col-sm-10">
                <input type="text" class="form-control validate[required]" id="telepon" name="telepon" placeholder="No Telepon" value="<?php echo $data['telepon']; ?>">
              </div>
            </div>
            <div class="form-group">
              <label for="inputName" class="col-sm-2 control-label">Password</label>
              <div class="col-sm-10">
                <span id="cpass" class="btn btn-sm btn-danger"><i class="fa fa-lock"></i> GANTI PASSWORD</span>
              </div>
            </div>
            <div class="form-group">
              <div class="col-sm-offset-2 col-sm-10">
                <span id="uprofile" class="btn btn-primary"><i class="fa fa-lock"></i> UPDATE PROFILE</span>
              </div>
            </div>
          </form>
        </div>
      </div>
    </div>
    <!-- /.col --> 
  </div>
  <!-- /.row --> 
  
</section>
<!-- /.content -->
<?php
}

function HeaderCss(){
	echo Minify('
    <link href="'.APP_URI.'/plugins/validationEngine/validationEngine.jquery.css" rel="stylesheet" type="text/css"/>
	');
}

function FooterJs(){
	echo Minify('
	<script src="'.APP_URI.'/plugins/validationEngine/jquery.validationEngine.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/validationEngine/jquery.validationEngine-en.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/bootstrap-filestyle/bootstrap-filestyle.min.js" type="text/javascript"></script>
	');
}

function FooterScript()
{
	?>
<script>
	function imageIsLoaded(e) {
		$('#previewing').attr('src', e.target.result);
		$('#previewing').attr('width', '100%');
		$('#previewing').attr('height', '100%');
	};
	var base_ajax = "<?php echo APP_URI."/".APP_ADMINPATH."x/".basename(__FILE__, '.php').".html"; ?>";
	
	$(document).ready(function(){
		$("#uploadimage").validationEngine({
			showOneMessage:false,
			autoHidePrompt: true,
			autoHideDelay: 3000,
			promptPosition : "bottomLeft",
			fadeDuration: 200
		});

		$("#editprofile").validationEngine({
			showOneMessage:false,
			autoHidePrompt: true,
			autoHideDelay: 3000,
			promptPosition : "bottomLeft",
			fadeDuration: 200
		});
		$(":file").filestyle({badge: false, buttonText: "Ganti Foto"});
		$("#cpass").on("click", function(e) {
			e.preventDefault();
			$.ajax({
				type:"POST",
				url :base_ajax,
				data: "act=cpass-cek",
				success: function(data){
					if(data === "sukses"){
						$.ajax({
							type:"POST",
							url:base_ajax,    
							data: "act=cpass",
							success: function(data){
								$("#maction").html(data);
								$("#maction").removeClass().addClass("modal fade modal-danger");
								$("#maction").modal("show");
								$("#save").on("click", function(){
									if($("#edit").validationEngine("validate")){
										var datasave = $("#edit").serializeArray();
										datasave.push({name: "act", value: "cpass-save"});
										$.ajax({
											type:"POST",
											url :base_ajax,    
											data: datasave,
											success: function(data){
												if (data==="sukses"){
													$("#maction").modal("hide");
													DtNotif("success","Success ubah password","");
												}
												else{
													DtNotif("error",data,"");
												}
											}
										});
									}
								});
								$("#edit").validationEngine({
									showOneMessage:false,
									autoHidePrompt: true,
									autoHideDelay: 3000,
									promptPosition : "bottomLeft",
									fadeDuration: 200
								});
								$("#edit").attr("autocomplete","off");
							}
						});
					}
					else{
						DtNotif("error",data,"");
					}
				}
			});
		});
		$("#gambar").change(function() {
			var file = this.files[0];
			var imagefile = file.type;
			if(imagefile != "image/jpeg"){
				$('#previewing').attr('src','<?php echo APP_URI."/images/admin/nophoto.jpg"; ?>');
				$("#gambar").val('');
				DtNotif("error","File yang diijinkan hanya *.jpg","");
				return false;
			}
			else{
				var reader = new FileReader();
				reader.onload = imageIsLoaded;
				reader.readAsDataURL(this.files[0]);
			}
		});

		$("#uploadimage").on('submit', function(e){
			e.preventDefault();
			var datasave = new FormData($(this)[0]),
				name = 'act',
				value = 'foto-save';
			datasave.append(name, value);
			$.ajax({
				type:"POST",
				url:base_ajax,    
				data: datasave,
				contentType: false, 
				cache: false,
				processData:false,
				success: function(data){
					if (data==="sukses"){
						DtNotif("success","Success menambahkan data","");
						location.reload();	
					}
					else{
						DtNotif("error",data,"");
					}
				}
			});
		});
		$("#uprofile").on('click', function(e){
			e.preventDefault();
			ajax_post('editprofile','profile-save','rPage','Sukses update profile','');
		});
	});
  </script>
<?php	
}

if(isset($_POST['act']) && !empty($_POST['act']) && IsLogin()){
	if($_POST['act']=='cpass-cek'){
		echo 'sukses';
	}
	elseif($_POST['act']=='cpass'){
		?>
	<div class="modal-dialog">
		<div class="modal-content">
			<div class="modal-header">
				<h4 class="modal-title">GANTI PASSWORD</h4>
			</div>
			<div class="modal-body">
				<form id="edit" name="edit" method="post" class="form-horizontal" action="">
				<div class="form-group">
					<label class="control-label col-lg-4">Password Lama</label>
					<div class=" col-lg-8">
					<input class="validate[required] form-control" type="password" name="oldpassword" id="oldpassword" />
					</div>
				</div>
				<div class="form-group">
					<label class="control-label col-lg-4">Password Baru</label>
					<div class=" col-lg-8">
					<input class="validate[required] form-control" type="password" name="newpassword1" id="newpassword1" />
					</div>
				</div>
				<div class="form-group">
					<label class="control-label col-lg-4">Konfirmasi Password Baru</label>
					<div class=" col-lg-8">
					<input class="validate[required,equals[newpassword1]] form-control" type="password" name="newpassword2" id="newpassword2" />
					</div>
				</div>
				</form>
			</div>
			<div class="modal-footer">
				<span id="save" class="btn btn-warning">SIMPAN</span>
				<span class="btn btn-primary" data-dismiss="modal">BATAL</span>
			</div>
		</div>
	</div>
        <?php	
	}
	elseif($_POST['act']=='cpass-save'){
		$q_cpass = $dbkoneksi->prepare("SELECT * FROM user_account WHERE id_account =:id_account");
		$q_cpass->bindValue(':id_account', $_SESSION['AccountId'], PDO::PARAM_INT);
		$q_cpass->execute();
		$cpass= $q_cpass->fetch(PDO::FETCH_ASSOC);
		
		if (password_verify($_POST['oldpassword'], $cpass['passwordhash'])){
			$q_upass = $dbkoneksi->prepare("UPDATE user_account SET passwordhash=:password WHERE id_account =:id_account");
			$q_upass->bindValue(':password', password_hash($_POST['newpassword1'], PASSWORD_DEFAULT), PDO::PARAM_STR);
			$q_upass->bindValue(':id_account', $_SESSION['AccountId'], PDO::PARAM_INT);
			$q_upass->execute();
			echo 'sukses';
		}
		else{
			echo 'Password lama salah';	
		}
	}
	elseif($_POST['act']=='foto-save'){
		if(empty($_FILES['gambar']['name'])){
			echo 'File belum dipilih';
		}
		else{
			$q_update = $dbkoneksi -> prepare ("UPDATE user_account SET foto=1 WHERE id_account=:id_account");
			$q_update -> bindValue(':id_account', $_SESSION['AccountId'], PDO::PARAM_INT);
			
			if($_FILES['gambar']['type']!="image/jpeg"){
				exit ("Format gambar bukan Jpeg");
			}
			
			if($q_update -> execute()){
				$filename = $_FILES['gambar']['name'];
				$uploadfile = 'images/admin/profile/'.$_SESSION['AccountId'].'.jpg';
				if (move_uploaded_file($_FILES['gambar']['tmp_name'], $uploadfile)) {
					$_SESSION['AccountFoto']=1;
					echo 'sukses';
				}
				else{
					echo 'Gagal upload gambar';
				}
			}
			else
			{
				echo 'Gagal menyimpan data';
			}
		}
	}
	elseif($_POST['act']=='profile-save'){
		$q_update = $dbkoneksi -> prepare ("UPDATE user_account SET name=:name, possition=:possition, telepon=:telepon, is_login=0 WHERE id_account =:id_account");                              
		$q_update -> bindValue(':name', $_POST['name'], PDO::PARAM_STR);
		$q_update -> bindValue(':possition', $_POST['possition'], PDO::PARAM_STR);
		$q_update -> bindValue(':telepon', $_POST['telepon'], PDO::PARAM_STR);
		$q_update -> bindValue(':id_account', $_SESSION['AccountId'], PDO::PARAM_INT);
		if($q_update->execute()){
			echo 'sukses';
			session_destroy();	
		}
		else{
			echo 'Gagal update data';
		}
	}
}
else{
	echo 'Access dennied';
}
?>