403Webshell
Server IP : 101.255.104.117  /  Your IP : 101.255.104.117
Web Server : Apache/2.4.34 (Win32) OpenSSL/1.0.2o PHP/5.6.38
System : Windows NT DESKTOP-5B8S0D4 6.2 build 9200 (Windows 8 Professional Edition) i586
User : user ( 0)
PHP Version : 5.6.38
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  D:/xampp182/htdocs/siami/prodi/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : D:/xampp182/htdocs/siami/prodi/profile.php
<?php
require '../koneksi.php';

session_start();

if (!isset($_SESSION["loginprodi"])) {
    header("Location: ../index.php");
}

$querysetting = "SELECT * FROM ami_setting WHERE id_setting = 1";
$resultsetting = mysqli_query($conn, $querysetting);
$rowsetting = mysqli_fetch_assoc($resultsetting);
$num_rowssetting = mysqli_num_rows($resultsetting);

$sesinidn = $_SESSION["nidn"];
$queryauditor = "SELECT * FROM ami_prodi WHERE nidn = '$sesinidn'";
$resultauditor = mysqli_query($conn, $queryauditor);
$rowauditor = mysqli_fetch_assoc($resultauditor);
$num_rowsauditor = mysqli_num_rows($resultauditor);

$queryfakultas = "SELECT * FROM ami_fakultas";
$resultfakultas = mysqli_query($conn, $queryfakultas);
$num_rowsfakultas = mysqli_num_rows($resultfakultas);

if (isset($_POST["submit"])) {
    //panggil semua field pada form kecuali foto
    $prodi = $_POST["prodi"];
    $jenjang = $_POST["jenjang"];
    $kaprodi = htmlspecialchars($_POST["kaprodi"]);
    $niknip = htmlspecialchars($_POST["niknip"]);
    $telp = htmlspecialchars($_POST["telp"]);
    $email = htmlspecialchars($_POST["email"]);
    //tambahkan foto lama agar foto lama tidak hilang apabila tidak diganti
    $fotoLama = htmlspecialchars($_POST["fotoLama"]);

    //jika foto lama tidak di ganti maka jalankan field foto lama
    if ($_FILES['foto']['error'] === 4) {
        $foto = $fotoLama;
        //jika diganti maka jalankan skrips dibawah
    } else {

        //mengelola field foto
        //keluarkan array yang diperlukan pada field foto
        $namaFile = $_FILES['foto']['name'];
        $ukuranFile = $_FILES['foto']['size'];
        $error = $_FILES['foto']['error'];
        $tmpName = $_FILES['foto']['tmp_name'];

        //menyesuaikan nama file yg diinput
        $ekstensifotoValid = ['jpg', 'jpeg', 'png'];
        $ekstensifoto = explode('.', $namaFile);
        $ekstensifoto = strtolower(end($ekstensifoto));

        //jika file yg diupload bukan foto, stop proses
        if (!in_array($ekstensifoto, $ekstensifotoValid)) {
            echo "<script>alert('Yang anda upload bukan foto...!'); history.go(-1);</script>";
            return false;
        }

        //menyesuaikan ukuran file yg diupload jika lebih dari 1 MB (1000000 beat) maka stop proses
        if ($ukuranFile > 1000000) {
            echo "<script>alert('Ukuran foto terlalu besar...! Max. 1 MB'); history.go(-1);</script>";
            return false;
        }

        //merubah nama file yg diinput secara acak otomatis
        $namaFileBaru = uniqid();
        $namaFileBaru .= '.';
        $namaFileBaru .= $ekstensifoto;

        //proses upload file
        move_uploaded_file($tmpName, '../images/user/' . $namaFileBaru);

        //mendefinisikan nama file baru untuk diinput ke database
        $foto = $namaFileBaru;
    }

    //query edit data
    $query = "UPDATE ami_prodi SET 
                prodi = '$prodi', 
                jenjang = '$jenjang', 
                kaprodi = '$kaprodi', 
                niknip = '$niknip', 
                telp = '$telp', 
                email = '$email', 
                foto = '$foto' 
                WHERE nidn = $sesinidn
            ";

    //menambahkan data ke database
    $proses = mysqli_query($conn, $query);

    //jika berhasil jalankan alert dan sebaliknya
    if ($proses) {
        echo "<script type='text/javascript'>
                alert('Data berhasil disimpan...!'); 
                document.location.href = 'home.php';
            </script>";
    } else {
        echo "<script type='text/javascript'>
                alert('Data GAGAL disimpan...!'); 
                history.go(-1);
            </script>";
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <title>SPMI | Profile</title>
    <!-- Favicon icon -->
    <link rel="icon" type="image/png" sizes="16x16" href="../images/<?php echo $rowsetting["favicon"] ?>">
    <!-- Custom Stylesheet -->
    <link href="../vendor/bootstrap-select/dist/css/bootstrap-select.min.css" rel="stylesheet">
    <link href="../css/style.css" rel="stylesheet">

</head>

<body>

    <div id="preloader">
        <div class="sk-three-bounce">
            <div class="sk-child sk-bounce1"></div>
            <div class="sk-child sk-bounce2"></div>
            <div class="sk-child sk-bounce3"></div>
        </div>
    </div>

    <div id="main-wrapper">

        <?php include('theme-logo.php') ?>

        <?php include('theme-header.php') ?>

        <?php include('theme-sidebar.php') ?>

        <div class="content-body">
            <div class="container-fluid">
                <div class="page-titles">
                    <ol class="breadcrumb">
                        <li class="breadcrumb-item"><a href="home.php">Beranda</a></li>
                        <li class="breadcrumb-item active"><a href="javascript:void(0)">Profile</a></li>
                    </ol>
                </div>
                <!-- row -->
                <div class="row">

                    <div class="col-xl-12 col-lg-12">
                        <div class="card">
                            <div class="card-header">
                                <h4 class="card-title">Update Profile</h4>
                            </div>
                            <div class="card-body">
                                <div class="basic-form">
                                    <form action="" method="post" enctype="multipart/form-data">
                                        <input type="hidden" name="fotoLama" value="<?php echo $rowauditor["foto"]; ?>">
                                        <div class="form-group">
                                            <label for="prodi">Nama Auditee :</label>
                                            <input type="text" name="prodi" id="prodi" class="form-control" value="<?php echo $rowauditor['prodi'] ?>" placeholder="Nama Lengkap Auditee" required>
                                        </div>
                                        <div class="form-group mb-0">
                                            <label>Jenjang : </label><br>
                                            <?php
                                            $resultjenjang = mysqli_query($conn, "SELECT * FROM ami_jenjang");
                                            while ($row_jenjang = mysqli_fetch_assoc($resultjenjang)) {
                                            ?>
                                                <label class="radio-inline mr-3"><input type="radio" name="jenjang" value="<?php echo $row_jenjang["id_jenjang"] ?>" <?php if ($row_jenjang["id_jenjang"] == $rowauditor["jenjang"]) {
                                                                                                                                                                            echo "checked";
                                                                                                                                                                        } ?>> <?php echo $row_jenjang["jenjang"] ?></label>
                                            <?php } ?>
                                        </div>
                                        <div class="form-group">
                                            <label for="kaprodi">Nama Anda :</label>
                                            <input type="text" name="kaprodi" id="kaprodi" class="form-control" value="<?php echo $rowauditor['kaprodi'] ?>" placeholder="Nama Lengkap Beserta Gelar" required>
                                        </div>
                                        <div class="form-group">
                                            <label for="niknip">NIK / NIP :</label>
                                            <input type="text" name="niknip" id="niknip" class="form-control" value="<?php echo $rowauditor['niknip'] ?>" placeholder="NIK atau NIP anda, isi angka saja tanpa spasi atau tanda baca lain">
                                        </div>
                                        <div class="form-group">
                                            <label for="telp">Telpon :</label>
                                            <input type="text" name="telp" id="telp" class="form-control" value="<?php echo $rowauditor['telp'] ?>" placeholder="Nomor Telpon Anda">
                                        </div>
                                        <div class="form-group">
                                            <label for="email">Email :</label>
                                            <input type="email" name="email" id="email" class="form-control" value="<?php echo $rowauditor['email'] ?>" placeholder="Email Aktif Anda" required>
                                        </div>
                                        <p>Foto Sekarang : <img class="mr-3 img-fluid rounded" src="../images/user/<?php echo $rowauditor['foto'] ?>" width="50"></p>
                                        <div class="input-group">
                                            <div class="custom-file">
                                                <input type="file" class="custom-file-input" name="foto">
                                                <label class="custom-file-label">Pilih foto baru</label>
                                            </div>
                                        </div>
                                        <p><code>Foto format jpg, jpeg, png dengan ukuran tidak lebih dari 1 Mb</code></p>
                                        <button type="submit" class="btn btn-primary mt-3" name="submit">Simpan</button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>

        <?php include('theme-footer.php') ?>

    </div>

    <script src="../vendor/global/global.min.js"></script>
    <script src="../vendor/bootstrap-select/dist/js/bootstrap-select.min.js"></script>
    <script src="../js/custom.min.js"></script>
    <script src="../js/deznav-init.js"></script>

</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit