403Webshell
Server IP : 101.255.104.117  /  Your IP : 101.255.104.117
Web Server : Apache/2.4.34 (Win32) OpenSSL/1.0.2o PHP/5.6.38
System : Windows NT DESKTOP-5B8S0D4 6.2 build 9200 (Windows 8 Professional Edition) i586
User : user ( 0)
PHP Version : 5.6.38
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  D:/xampp182/htdocs/siami/auditor/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : D:/xampp182/htdocs/siami/auditor/foto.php
<?php
require '../koneksi.php';

session_start();

if (!isset($_SESSION["loginauditor"])) {
    header("Location: ../index.php");
}

$querysetting = "SELECT * FROM ami_setting WHERE id_setting = 1";
$resultsetting = mysqli_query($conn, $querysetting);
$rowsetting = mysqli_fetch_assoc($resultsetting);
$num_rowssetting = mysqli_num_rows($resultsetting);

$sesinidn = $_SESSION["nidn"];
$queryauditor = "SELECT * FROM ami_auditor WHERE nidn = '$sesinidn'";
$resultauditor = mysqli_query($conn, $queryauditor);
$rowauditor = mysqli_fetch_assoc($resultauditor);
$num_rowsauditor = mysqli_num_rows($resultauditor);

$id_ami = $_GET["id_ami"];
$queryami = "SELECT * FROM ami_ami WHERE id_ami = $id_ami";
$resultami = mysqli_query($conn, $queryami);
$rowami = mysqli_fetch_assoc($resultami);
$num_rowsami = mysqli_num_rows($resultami);

$queryfoto = "SELECT * FROM ami_foto WHERE id_ami = $id_ami";
$resultfoto = mysqli_query($conn, $queryfoto);
$num_rowsfoto = mysqli_num_rows($resultfoto);

if (isset($_POST["submit"])) {
    $id_ami = htmlspecialchars($_POST["id_ami"]);
    $tgl = htmlspecialchars($_POST["tgl"]);
    $id_auditor = htmlspecialchars($_POST["id_auditor"]);

    //mengelola field foto
    //keluarkan array yang diperlukan pada field foto
    $namafoto = $_FILES['foto']['name'];
    $ukuranfoto = $_FILES['foto']['size'];
    $error = $_FILES['foto']['error'];
    $tmpName = $_FILES['foto']['tmp_name'];

    //menyesuaikan nama foto yg diinput
    $ekstensifotoValid = ['jpg', 'jpeg', 'png'];
    $ekstensifoto = explode('.', $namafoto);
    $ekstensifoto = strtolower(end($ekstensifoto));

    //jika foto yg diupload bukan foto, stop proses
    if (!in_array($ekstensifoto, $ekstensifotoValid)) {
        echo "<script>alert('Format foto belum sesuai...!'); history.go(-1);</script>";
        return false;
    }

    //menyesuaikan ukuran foto yg diupload jika lebih dari 2 MB (2000000 beat) maka stop proses
    if ($ukuranfoto > 2000000) {
        echo "<script>alert('Ukuran foto terlalu besar...! Max. 2 MB'); history.go(-1);</script>";
        return false;
    }

    //merubah nama foto yg diinput secara acak otomatis
    $namafotoBaru = uniqid();
    $namafotoBaru .= '.';
    $namafotoBaru .= $ekstensifoto;

    //proses upload foto
    move_uploaded_file($tmpName, '../images/foto/' . $namafotoBaru);

    //mendefinisikan nama foto baru untuk diinput ke database
    $foto = $namafotoBaru;

    //query input data ke database
    $queryInsert = "INSERT INTO ami_foto VALUES (null, '$id_ami', '$foto', '$tgl', '$id_auditor')";

    //proses simpan data ke database
    mysqli_query($conn, $queryInsert);

    //apabila data berhasil diinput dan sebaliknya
    if (mysqli_affected_rows($conn) > 0) {
        echo "<script type='text/javascript'>
                alert('Data berhasil dikirim...!'); 
                document.location.href = 'foto.php?id_ami=$rowami[id_ami]';
            </script>";
    } else {
        echo "<script type='text/javascript'>
                alert('Data GAGAL disimpan...!'); 
                history.go(-1);
            </script>";
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <title>SIAMI | Foto Dokumentasi Audit</title>
    <!-- Favicon icon -->
    <link rel="icon" type="image/png" sizes="16x16" href="../images/<?php echo $rowsetting["favicon"] ?>">
    <!-- Custom Stylesheet -->
    <link href="../vendor/bootstrap-select/dist/css/bootstrap-select.min.css" rel="stylesheet">
    <link href="../css/style.css" rel="stylesheet">

</head>

<body>

    <div id="preloader">
        <div class="sk-three-bounce">
            <div class="sk-child sk-bounce1"></div>
            <div class="sk-child sk-bounce2"></div>
            <div class="sk-child sk-bounce3"></div>
        </div>
    </div>

    <div id="main-wrapper">

        <?php include('theme-logo.php') ?>

        <?php include('theme-header.php') ?>

        <?php include('theme-sidebar.php') ?>

        <div class="content-body">
            <div class="container-fluid">
                <div class="page-titles">
                    <ol class="breadcrumb">
                        <li class="breadcrumb-item"><a href="home.php">Beranda</a></li>
                        <li class="breadcrumb-item"><a href="home.php">Audit</a></li>
                        <li class="breadcrumb-item active"><a href="javascript:void(0)">Upload Foto</a></li>
                    </ol>
                </div>
                <!-- row -->
                <div class="row">
                    <div class="col-xl-12 col-lg-12">
                        <div class="card">
                            <div class="card-header">
                                <h4 class="card-title">Foto Dokumentasi Audit</h4>
                            </div>
                            <div class="card-body">
                                <div class="basic-form">
                                    <form action="" method="post" enctype="multipart/form-data">
                                        <div class="input-group">
                                            <div class="custom-file">
                                                <input type="file" class="custom-file-input" name="foto" required>
                                                <label class="custom-file-label">Upload foto dokumentasi AMI</label>
                                            </div>
                                        </div>
                                        <p><code>Foto format jpg, jpeg, png dengan ukuran tidak lebih dari 2 Mb. Cara paling mudah resize foto adalah dengan mengirimkan foto tersebut ke WA teman</code></p>
                                        <input type="hidden" name="id_ami" value="<?php echo $rowami['id_ami'] ?>">
                                        <input type="hidden" name="tgl" value="<?php echo date('Y-m-d H:i:s') ?>">
                                        <input type="hidden" name="id_auditor" value="<?php echo $rowauditor['id_auditor'] ?>">
                                        <button type="submit" name="submit" class="btn btn-primary mt-3">Simpan</button>
                                        <button type="button" class="btn btn-secondary mt-3" onclick="window.location='home.php'">Kembali</button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>
                    <?php if ($num_rowsfoto > 0) { ?>
                        <div class="col-lg-12">
                            <div class="card">
                                <div class="card-header">
                                    <h4 class="card-title">Foto Dokumentasi Audit</h4>
                                </div>
                                <div class="card-body">
                                    <div class="table-responsive">
                                        <table class="table table-responsive-md">
                                            <thead>
                                                <tr>
                                                    <th>No</th>
                                                    <th>Action</th>
                                                    <th>Foto</th>
                                                    <th>Tanggal Upload</th>
                                                </tr>
                                            </thead>
                                            <tbody>
                                                <?php $no = 1;
                                                while ($rowfoto = mysqli_fetch_assoc($resultfoto)) { ?>
                                                    <tr>
                                                        <td><?php echo $no ?></td>
                                                        <td>
                                                            <span class="badge badge-rounded badge-warning"><a href="foto-hapus.php?id_foto=<?php echo $rowfoto['id_foto'] ?>" onClick="return confirm('Apakah anda yakin ingin menghapus foto <?php echo $rowfoto['foto'] ?>...?')">Delete</a></span>
                                                        </td>
                                                        <td><a href="../images/foto/<?php echo $rowfoto['foto'] ?>" target="_blank"><img src="../images/foto/<?php echo $rowfoto['foto'] ?>" width="200"></a></td>
                                                        <td><?php echo $rowfoto['tgl'] ?></td>
                                                    </tr>
                                                <?php $no++;
                                                } ?>
                                            </tbody>
                                        </table>
                                    </div>
                                </div>
                            </div>
                        </div>
                    <?php } ?>
                </div>
            </div>
        </div>

        <?php include('theme-footer.php') ?>

    </div>

    <script src="../vendor/global/global.min.js"></script>
    <script src="../vendor/bootstrap-select/dist/js/bootstrap-select.min.js"></script>
    <script src="../js/custom.min.js"></script>
    <script src="../js/deznav-init.js"></script>

</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit