MINI

C:/xampp/htdocs/hnj/htdocs/htdocs/.backend/master/
files >> C:/xampp/htdocs/hnj/htdocs/htdocs/.backend/master/pengguna_akses.php
 <?php
defined( '_LANGSUNG' ) or die(''); 

CekAkses('master');
CekAkses('pengguna');

if(!isset($_SESSION['AccessList']))
{
	header("Location: ".APP_URI."/".APP_ADMINPATH."/master/pengguna.html");
}	
function HeaderCss(){
	echo '
	<link href="'.APP_URI.'/plugins/validationEngine/validationEngine.jquery.css" rel="stylesheet" type="text/css"/>
	<link href="'.APP_URI.'/plugins/datatables/datatables.css" rel="stylesheet" type="text/css"/>
	'; 
}
	
function FooterJs(){
	echo '
	<script src="'.APP_URI.'/plugins/datatables/datatables.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/accounting/accounting.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/chained/jquery.chained.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/validationEngine/jquery.validationEngine.js" type="text/javascript"></script>
	<script src="'.APP_URI.'/plugins/validationEngine/jquery.validationEngine-en.js" type="text/javascript"></script>
	';
}

function FooterScript() {
	?>
<script>
	var base_ajax = "<?php echo APP_URI."/".APP_ADMINPATH."x/master/".basename(__FILE__, '.php').".html"; ?>";
	$(document).ready(function () {
		$(".connectedSortable").sortable({
			placeholder: "sort-highlight",
			connectWith: ".connectedSortable",
			handle: ".box-header, .nav-tabs",
			forcePlaceholderSize: true,
			zIndex: 999999
		});
		$(".connectedSortable .box-header, .connectedSortable .nav-tabs-custom").css("cursor", "move");
		
		
		$('#save-data').click(function (e) {
			e.preventDefault();
			var datasave = $("#accesslist").serializeArray();
			datasave.push({name: 'act', value: 'access-save'});
			$.ajax({
				type:"POST",
				url:base_ajax,    
				data: datasave,
				success: function(data){
					var result = $.parseJSON(data);
					if(result.status === "success"){
						DtNotif(result.status,result.message,result.redirect);
					}
					else{
						DtNotif("error",result.message,"");
					}
				}
			});
		});
	
		$('#cancel-create').click(function (e) {
			e.preventDefault();
			$.ajax({
				type:"POST",
				url:base_ajax,    
				data: "act=access-cancel",
				success: function(data){
					var result = $.parseJSON(data);
					gotoPage(result.redirect);
				}
			});
		});
	
	});
	</script>
<?php
}

function MainContent() {
	global $sambungan;
	$q_akseslist = $sambungan->prepare("SELECT ba.id_baccess, ba.id_mod, bm.name_mod, ba.access_mod, bm.title_mod FROM bet_access AS ba LEFT OUTER JOIN bet_modules bm ON bm.id_mod = ba.id_mod WHERE ba.id_account = :id_account AND bm.parent_mod = 0");
	$q_akseslist ->bindValue(':id_account', $_SESSION['AccessList'], PDO::PARAM_INT);
	$q_akseslist ->execute();
	
	
	function ACB($fieldx)
	{
		$hasil ='';
		if (!(strcmp(htmlentities($fieldx), 1))) 
		{
			echo 'checked="checked"';
		}
		return $hasil;	
	}
	function JQCAB($main,$submain)
	{
		$hasil ='';
		$hasil = '
		$("#'.$main.'").on(\'change\',function(){
			if($(this).is(":checked")) {
				$("#'.str_replace("/",", #",$submain).'").prop(\'disabled\',false);
			}			
			else
			{
				$("#'.str_replace("/",", #",$submain).'").prop(\'disabled\',true);
			}
		});
		';
		echo $hasil;
		return $hasil;	
	}
	?>
  <div class="row">
    <div class="col-xs-12">
      <div class="box">
        <div class="box-header">
          <h3 class="box-title">ACCESS LEVEL FOR</h3>
        </div>
        <div class="box-body">
        <form action="" method="post" name="accesslist" id="accesslist">
        <div class="row">
            <?php while ($akseslist = $q_akseslist->fetch(PDO::FETCH_ASSOC)){ 
			$q_akseslist2 = $sambungan->prepare("SELECT ba.id_baccess, ba.id_mod, bm.name_mod, ba.access_mod, bm.title_mod FROM bet_access AS ba LEFT OUTER JOIN bet_modules bm ON bm.id_mod = ba.id_mod WHERE ba.id_account = :id_account AND bm.parent_mod=:parent_mod ");
			$q_akseslist2 ->bindValue(':id_account', $_SESSION['AccessList'], PDO::PARAM_INT);
			$q_akseslist2 ->bindValue(':parent_mod', $akseslist['id_mod'], PDO::PARAM_INT);
			$q_akseslist2 ->execute();
		
		?>
          <div class="col-md-4 connectedSortable">
            <div class="box box-warning box-solid">
              <div class="box-header with-border">
                <h3 class="box-title"><input name="<?php echo $akseslist['id_mod']; ?>" type="checkbox" id="<?php echo $akseslist['id_mod']; ?>" value="1" <?php if (!(strcmp(htmlentities($akseslist['access_mod']), 1))) {	echo 'checked="checked"';}?>/> <?php echo $akseslist['title_mod']; ?></h3>
                <div class="box-tools pull-right">
                  
                  <button type="button" class="btn btn-box-tool" data-widget="collapse"><i class="fa fa-minus"></i></button>
                  <button type="button" class="btn btn-box-tool" data-widget="remove"><i class="fa fa-times"></i></button>
                </div>
              </div>
              <div class="box-body">
                  <?php while ($akseslist2 = $q_akseslist2->fetch(PDO::FETCH_ASSOC)) { ?>
                  <input name="<?php echo $akseslist2['id_mod']; ?>" type="checkbox" id="<?php echo $akseslist2['id_mod']; ?>" value="1" <?php if (!(strcmp(htmlentities($akseslist2['access_mod']), 1))) {	echo 'checked="checked"';}?>/>
                  &nbsp;<?php echo $akseslist2['title_mod']; ?><br/>
                  <?php } ?>
              </div>
            </div>
          </div>
            <?php } ?>
        </div>
          <div class="col-lg-12 text-center">
            <button type="submit" id="save-data" class="btn btn-primary">SAVE <i class="fa fa-save"></i></button>
            <button type="submit" id="cancel-create" class="btn btn-danger validate-skip">CANCEL <i class="fa fa-times-circle-o"></i></button>
          </div>
          </div>
        </form>
        </div>
      </div>
    </div>
  </div>
<?php
}

if(isset($_POST['act']) && !empty($_POST['act'])){
	if ($_POST['act']=='access-save'){
		$q_rmodul= $sambungan->prepare("SELECT * FROM bet_access WHERE id_account=:id_account");
		$q_rmodul->bindValue(':id_account', $_SESSION['AccessList'], PDO::PARAM_INT);
		$q_rmodul->execute();

		while ($rmodul = $q_rmodul -> fetch (PDO::FETCH_ASSOC)) {
			$listmodulid = $rmodul['id_mod'];
			if(isset($_POST[$listmodulid])){
				$_POST['modul'][$listmodulid]=$listmodulid;
				$_POST['data'][$listmodulid] = 1;
			} 
			else 
			{ 
				$_POST['modul'][$listmodulid]=$listmodulid;
				$_POST['data'][$listmodulid]=0;
			}
		}

		//UPDATE ACCESS
		$q_udata = $sambungan->prepare("UPDATE bet_access SET access_mod=:access_mod WHERE id_mod=:id_mod AND id_account=:id_account");
		$q_udata->bindParam(':access_mod', $accessmod, PDO::PARAM_INT);
		$q_udata->bindParam(':id_mod', $idmod, PDO::PARAM_INT);
		$q_udata->bindParam(':id_account', $_SESSION['AccessList'], PDO::PARAM_INT);
		
		foreach ($_POST['data'] as $id => $id) 
		{
			$accessmod = $_POST['data'][$id];
			$idmod = $_POST['modul'][$id];
			$q_udata->execute();
		}
		unset($_SESSION['AccessList']);
		$response = array(
			'status'=>'success',
			'message'=>'Succes update access',
			'redirect'=> '/'.APP_ADMINPATH.'/master/pengguna.html'
		);
	}
	elseif ($_POST['act']=='access-cancel'){
		unset($_SESSION['AccessList']);
		$response = array(
			'status'=>'success',
			'message'=>'Canceling access edit',
			'redirect'=> '/'.APP_ADMINPATH.'/master/pengguna.html'
		);
	}
	else
	{
		$response = array(
			'status'=>'error',
			'message'=>'Unknown action'
		);
	}
	echo json_encode($response);
}
?>