403Webshell
Server IP : 101.255.104.117  /  Your IP : 101.255.104.117
Web Server : Apache/2.4.34 (Win32) OpenSSL/1.0.2o PHP/5.6.38
System : Windows NT DESKTOP-5B8S0D4 6.2 build 9200 (Windows 8 Professional Edition) i586
User : user ( 0)
PHP Version : 5.6.38
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  D:/xampp182/htdocs/wablast/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : D:/xampp182/htdocs/wablast/uploadmhskip.inc.php
<?php
$id = "";
$nama = "";
$hp = "";
$email = "";
$buton = "Simpan";
$u_pswd = "-";
$u_name = "-";
$hp = "-";
$ktp = "-";
$kota_asal = "-";
$alamat = "-";
$email = "-";
$nama = "-";

if(isset($_GET["deleteID"])) {
    $sql = "delete from login_sales where id = ".$_GET["deleteID"];
    if (mysqli_query($conn, $sql)) {
        echo "<script>window.alert('Data Sudah Terhapus');</script>";
    } else {
        echo "Error: " . $sql . "<br>" . mysqli_error($conn);
    }
}

if(isset($_GET["editID"])) {
	$sql = "SELECT * FROM login_sales where id = ".$_GET["editID"]." order by id desc";
	$result = mysqli_query($conn, $sql);

	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
            $id = $row['id'];
            $nama = $row['nama'];
            $hp = $row['hp'];
            $email = $row['email'];
            $buton = "Koreksi";
        }
    }
}

function cariMHS($nim,$conn) {
	$sql = "SELECT * FROM f_riwayatpendidikanmahasiswa where nim = '".$nim."'";
	$result = mysqli_query($conn, $sql);
	$id_registrasi_mahasiswa = 0;

	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
            $id_registrasi_mahasiswa = $row['id_registrasi_mahasiswa'];
        }
    }
	return $id_registrasi_mahasiswa;
}

function cariPT($kd_pt,$conn) {
	$sql = "SELECT * FROM f_pt where kode_perguruan_tinggi = '0".$kd_pt."' or kode_perguruan_tinggi = '".$kd_pt."'";
	$result = mysqli_query($conn, $sql);
	$id_perguruan_tinggi = 0;

	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
            $id_perguruan_tinggi = $row['id_perguruan_tinggi'];
        }
    }
	return $id_perguruan_tinggi;
}

function cariMK($kode_mk,$conn) {
	$sql = "SELECT * FROM f_mk where kode_mata_kuliah = '".$kode_mk."'";
	$result = mysqli_query($conn, $sql);
	$id_matkul = 0;
	
	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
            $id_matkul = $row['id_matkul'];
        }
    }
	return $id_matkul;
}

function cariSKS($kode_mk,$conn) {
	$sql = "SELECT * FROM f_mk where kode_mata_kuliah = '".$kode_mk."'";
	$result = mysqli_query($conn, $sql);
	$sks_mata_kuliah = 0;
	
	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
            $sks_mata_kuliah = $row['sks_mata_kuliah'];
        }
    }
	return $sks_mata_kuliah;
}

if(isset($_GET["setaktif"])) {
    $setz = mysqli_query($conn, "update login_sales set aktif = 0");
    $sql = "update login_sales set aktif = 1 where id = ".$_GET["setaktif"];
    if (mysqli_query($conn, $sql)) {
        echo "<scrnamat>window.alert('Set Aktif');</scrnamat>";
    } else {
        echo "Error: " . $sql . "<br>" . mysqli_error($conn);
    }
}

if(isset($_POST["Clear"])) {
    // $sql = "delete from ins_mhs where del = 1";
    $sql = "delete from ins_mhs";
    $result = mysqli_query($conn, $sql);
}

if(isset($_POST["Transfer"])) {
	$sql = "SELECT * FROM ins_nilai_tranfer where feeder = 0 order by ID asc";
	$result = mysqli_query($conn, $sql);

	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
			$ff1 = $row['id_registrasi_mahasiswa'];
			$ff2 = $row['kode_mata_kuliah_asal'];
			$ff3 = $row['nama_mata_kuliah_asal'];
			$ff4 = $row['sks_mata_kuliah_asal'];
			$ff5 = $row['nilai_huruf_asal'];
			$ff6 = $row['id_matkul'];
			$ff7 = $row['sks_mata_kuliah_diakui'];
			$ff8 = $row['nilai_huruf_diakui'];
			$ff9 = $row['nilai_angka_diakui'];
			$ff10 = $row['id_perguruan_tinggi'];
			$ff11 = $row['id_semester'];

			$feeder_token = $_SESSION['feeder_token'];

			$sync['act']="InsertuploadmhskipPendidikanMahasiswa";
			$sync['token']=$feeder_token;
			$sync['record']=[
				"id_registrasi_mahasiswa"=>$ff1,
				"kode_mata_kuliah_asal"=>$ff2,
				"nama_mata_kuliah_asal"=>$ff3,
				"sks_mata_kuliah_asal"=>$ff4,
				"nilai_huruf_asal"=>$ff5,
				"id_matkul"=>$ff6,
				"sks_mata_kuliah_diakui"=>$ff7,
				"nilai_huruf_diakui"=>$ff8,
				"nilai_angka_diakui"=>$ff9,
				"id_semester"=>$ff11,
				"id_perguruan_tinggi"=>$ff10
			];

			$json_array = runWs($sync);
			$jsonn = json_decode($json_array,true);

			$sql2 = "update ins_nilai_tranfer set status = '".$json_array."' where ID = ".$row['ID'];
			$result2 = mysqli_query($conn, $sql2);
			// echo $json_array;
			if(count($jsonn['data']) >= 1) {
					$sql3 = "update ins_nilai_tranfer set feeder = 1 where ID = ".$row['ID'];
					$result3 = mysqli_query($conn, $sql3);
			}
		}
	}

}

if(isset($_POST["Upload"])) {
	require_once('vendor/php-excel-reader/excel_reader2.php');
	require_once('vendor/SpreadsheetReader.php');
	$allowedFileType = ['application/vnd.ms-excel','text/xls','text/xlsx','application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'];

	if(in_array($_FILES["file"]["type"],$allowedFileType)){
		//nanti buat juga folder uploads pada projek kalian masing - masing
		$targetPath = 'uploads/mahasiswa/'.$_FILES['file']['name'];
		move_uploaded_file($_FILES['file']['tmp_name'], $targetPath);
		
		$Reader = new SpreadsheetReader($targetPath);
		$no = 0;
		
		foreach ($Reader as $Row)
		{
			if(strlen($Row[0]) > 5) {
				$no = ($no+1);

				$tbField[0] = "npm";
				$tbField[1] = "nm";
				$tbField[2] = "tmplahir";
				$tbField[3] = "tgl";
				$tbField[4] = "Agama";
				$tbField[5] = "nmibu";
				$tbField[6] = "kwarganegara";
				$tbField[7] = "ktp";
				$tbField[8] = "nisn";
				$tbField[9] = "hp";
				$tbField[10] = "email";
				$tbField[11] = "asalsekolah";
				$tbField[12] = "nimlm";
				$tbField[13] = "jln";
				$tbField[14] = "rt";
				$tbField[15] = "rw";
				$tbField[16] = "kel";
				$tbField[17] = "kec";
				$tbField[18] = "kdpos";
				$tbField[19] = "jenistinggal";
				$tbField[20] = "ayah";
				$tbField[21] = "nikayah";
				$tbField[22] = "ttlayah";
				$tbField[23] = "tglayah";
				$tbField[24] = "pendayah";
				$tbField[25] = "krjaayah";
				$tbField[26] = "ibu";
				$tbField[27] = "nikibu";
				$tbField[28] = "lahiribu";
				$tbField[29] = "tglibu";
				$tbField[30] = "pendibu";
				$tbField[31] = "kerjaibu";

				$tbIsi[0] = "'".$Row[0]."'";
				$tbIsi[1] = "'".addslashes($Row[1])."'";
				$tbIsi[2] = "'".addslashes($Row[2])."'";
				$tbIsi[3] = "'".addslashes($Row[3])."'";
				$tbIsi[4] = "'".addslashes($Row[4])."'";
				$tbIsi[5] = "'".addslashes($Row[5])."'";
				$tbIsi[6] = "'".addslashes($Row[6])."'";
				$tbIsi[7] = "'".($Row[7])."'";
				$tbIsi[8] = "'".addslashes($Row[8])."'";
				$tbIsi[9] = "'".addslashes($Row[9])."'";
				$tbIsi[10] = "'".addslashes($Row[10])."'";
				$tbIsi[11] = "'".addslashes($Row[11])."'";
				$tbIsi[12] = "'".addslashes($Row[12])."'";
				$tbIsi[13] = "'".addslashes($Row[13])."'";
				$tbIsi[14] = "'".addslashes($Row[14])."'";
				$tbIsi[15] = "'".addslashes($Row[15])."'";
				$tbIsi[16] = "'".addslashes($Row[16])."'";
				$tbIsi[17] = "'".addslashes($Row[17])."'";
				$tbIsi[18] = "'".addslashes($Row[18])."'";
				$tbIsi[19] = "'".addslashes($Row[19])."'";
				$tbIsi[20] = "'".addslashes($Row[20])."'";
				$tbIsi[21] = "'".addslashes($Row[21])."'";
				$tbIsi[22] = "'".addslashes($Row[22])."'";
				$tbIsi[23] = "'".addslashes($Row[23])."'";
				$tbIsi[24] = "'".addslashes($Row[24])."'";
				$tbIsi[25] = "'".addslashes($Row[25])."'";
				$tbIsi[26] = "'".addslashes($Row[26])."'";
				$tbIsi[27] = "'".addslashes($Row[27])."'";
				$tbIsi[28] = "'".addslashes($Row[28])."'";
				$tbIsi[29] = "'".addslashes($Row[29])."'";
				$tbIsi[30] = "'".addslashes($Row[30])."'";
				$tbIsi[31] = "'".addslashes($Row[31])."'";
				
				// echo $no.". ".$Row[0]." | ".$Row[1]." | ".$Row[2]." | ".$Row[3]." | ".$Row[4]." | ".$Row[5]." | ".$Row[6]." | ".$Row[7]." | ".$Row[8]." | ".$Row[9]." | ".$Row[10]." | ".$Row[11]." | ".addslashes($Row[12])." <br> ";

				$nmField = compile_array($tbField);
				$isiField = compile_array($tbIsi);

				$sql = "insert into ins_mhs (".$nmField.") values (".$isiField.")";

				$notif = $ssm;

				if (mysqli_query($conn, $sql)) {
					// echo "<script>window.alert('".$notif."');</script>";
				} else {
					echo "Error: " . $sql . "<br>" . mysqli_error($conn);
				}
			}
		}
	}
}

if(isset($_GET["sync2"])) {
    $sql = "update ins_mhs set del = 1 where id = ".$_GET["sync2"];
    $result = mysqli_query($conn, $sql);
}

if(isset($_GET["sync"])) {
	include 'feeder_ws.php';

	token();

	$sql = "SELECT * FROM ins_mhs where id = ".$_GET["sync"]." order by id desc";
	$result = mysqli_query($conn, $sql);

	if(mysqli_num_rows($result) > 0) {
		while($row = mysqli_fetch_assoc($result)) {
			$npm = $row['npm'];
			$f1 = $row['nm'];
			$f2 = "P";
			$f3 = $row['tmplahir'];
			$f4 = $row['tgl'];
			if(strtoupper(trim($row['Agama'])) == "ISLAM") $f5 = 1;
			if(strtoupper(trim($row['Agama'])) == "KRISTEN") $f5 = 2;
			if(strtoupper(trim($row['Agama'])) == "PROTESTAN") $f5 = 2;
			if(strtoupper(trim($row['Agama'])) == "KRISTEN PROTESTAN") $f5 = 2;
			if(strtoupper(trim($row['Agama'])) == "KATOLIK") $f5 = 3;
			if(strtoupper(trim($row['Agama'])) == "KATHOLIK") $f5 = 3;
			if(strtoupper(trim($row['Agama'])) == "HINDU") $f5 = 4;
			if(strtoupper(trim($row['Agama'])) == "BUDHA") $f5 = 5;
			// $f5 = $row['Agama'];//Agama
			$f6 = trim($row['ktp']);
			$f7 = substr($row['npm'],0,10);
			$f8 = "ID";
			$f9 = substr($row['jln'],0,30);
			$f10 = substr($row['jln'],0,30);
			$f11 = $row['rt'];
			$f12 = $row['rw'];
			$f13 = $row['kel'];
			$f14 = substr($row['kdpos'],0,5);
			$f15 = "016301";
			$f16 = "10";
			$f17 = "13"; //
			$f18 = "0";
			// $f19 = str_replace("+","",$row['hp']);
			// $f19 = str_replace("-","",trim($f19));
			$f19 = substr($row['hp'],0,12);
			$f20 = trim($row['email']);
			$f21 = "0";
			$f22 = "0";
			$f23 = $row['nikayah'];
			if(strlen($f23) <> 16) $f23 = "1234567891012345";
			$f24 = $row['ayah'];
			$f25 = "2023-03-10";
			$f26 = "0";
			$f27 = "0";
			$f28 = "0";
			$f29 = $row['nikibu'];
			if(strlen($f29) <> 16) $f29 = "1234567891012345";
			$f30 = $row['ibu'];
			$f31 = "2023-03-10";
			$f32 = "0";
			$f33 = "0";
			$f34 = "0";
			$f35 = "0";
			$f36 = "";
			$f37 = "2023-03-10";
			$f38 = "0";
			$f39 = "0";
			$f40 = "0";
			$f41 = "0";
			$f42 = "0";
			$f43 = "0";
		}
	}
	$feeder_token = $_SESSION['feeder_token'];

	$sync['act']="InsertBiodataMahasiswa";
	$sync['token']=$feeder_token;
	$sync['record']=[
		"nama_mahasiswa"=>$f1,
		"jenis_kelamin"=>$f2,
		"tempat_lahir"=>$f3,
		"tanggal_lahir"=>$f4,
		"id_agama"=>$f5,
		"nik"=>$f6,
		"nisn"=>$f7,
		"kewarganegaraan"=>$f8,
		"jalan"=>$f9,
		"dusun"=>$f10,
		"rt"=>$f11,
		"rw"=>$f12,
		"kelurahan"=>$f13,
		"kode_pos"=>$f14,
		"id_wilayah"=>$f15,
		"id_jenis_tinggal"=>$f16,
		"id_alat_transportasi"=>$f17,
		"telepon"=>$f18,
		"handphone"=>$f19,
		"email"=>$f20,
		"penerima_kps"=>$f21,
		"nomor_kps"=>$f22,
		// "nik_ayah"=>$f23,
		"nama_ayah"=>$f24,
		// "tanggal_lahir_ayah"=>$f25,
		"id_pendidikan_ayah"=>$f26,
		// "id_pekerjaan_ayah"=>$f27,
		"id_penghasilan_ayah"=>$f28,
		// "nik_ibu"=>$f29,
		"nama_ibu_kandung"=>$f30,
		// "tanggal_lahir_ibu"=>$f31,
		"id_pendidikan_ibu"=>$f32,
		// "id_pekerjaan_ibu"=>$f33,
		"id_penghasilan_ibu"=>$f34,
		"npwp"=>$f35,
		"nama_wali"=>$f36,
		"tanggal_lahir_wali"=>$f37,
		"id_pendidikan_wali"=>$f38,
		// "id_pekerjaan_wali"=>$f39,
		"id_penghasilan_wali"=>$f40,
		"id_kebutuhan_khusus_mahasiswa"=>$f41,
		"id_kebutuhan_khusus_ayah"=>$f42,
		"id_kebutuhan_khusus_ibu"=>$f43
	];

	$json_array = runWs($sync);
    $jsonn = json_decode($json_array,true);

	// echo "<div class='card-body'>".$json_array." --==>>> <a href='dashboard.php?uploadmhskip'>refresh</a></div>";
	$sql = "update ins_mhs set status = '".$json_array."' where id = ".$_GET["sync"];
	$result = mysqli_query($conn, $sql);

    foreach($jsonn['data'] as $row) {
		$sql = "update ins_mhs set del = 1 where id = ".$_GET["sync"];
		$result = mysqli_query($conn, $sql);
	}
	// echo "<script>window.alert('".$f1." sudah Insert ke Neo Feeder');</script>";
	
	/*
	
	// $ff1 = $idMhs_feeder;
	$ff1 = "b1f02560-ccc1-4a50-880b-fc81bc3ff939";
	$ff2 = $npm;
	$ff3 = "2"; //2 pindahan;1 baru
	$ff4 = "12"; //12 mandiri
	$ff5 = "202201";
	$ff6 = "2022-09-12";
	$ff7 = "8415170d-2153-4bb7-98b5-a16f7765c831";
	$ff8 = "51824a53-1fb0-4d16-a534-23999aca90e0"; //kebidanan
	// $ff8 = "e8586ff4-3870-4f71-abe3-ccbc54e66818"; //profesi
	$ff9 = "null";
	$ff10 = "103";
	$ff11 = $ff7; //stikes
	$ff12 = "STIKES BHAKTI PERTIWI INDONESIA"; //stikes
	$ff13 = "639f998e-1ad1-4841-b307-9e58c76f08a9"; //d3 kebidanan
	$ff14 = "D3 KEBIDANAN";
	$ff15 = "1";
	$ff16 = "16000000";
	
	$sync['act']="InsertRiwayatPendidikanMahasiswa";
	$sync['token']=$feeder_token;
	$sync['record']=[
		"id_mahasiswa"=>$ff1,
		"nim"=>$ff2,
		"id_jenis_daftar"=>$ff3,
		"id_jalur_daftar"=>$ff4,
		"id_periode_masuk"=>$ff5,
		"tanggal_daftar"=>$ff6,
		"id_perguruan_tinggi"=>$ff7,
		"id_prodi"=>$ff8,
		"id_bidang_minat"=>$ff9,
		"sks_diakui"=>$ff10,
		"id_perguruan_tinggi_asal"=>$ff11,
		"nama_perguruan_tinggi_asal"=>$ff12,
		"id_prodi_asal"=>$ff13,
		"nama_prodi_asal"=>$ff14,
		"id_pembiayaan"=>$ff15,
		"biaya_masuk"=>$ff16
	];

	$json_array = runWs($sync);
    $jsonn = json_decode($json_array,true);

	echo $json_array."<br>";
	*/
}

?>
<?php if(isset($_GET["editID"])) { ?>

<?php }else{ ?>
<div class="container-fluid">
    <div class="card shadow mb-4">
        <div class="card-header py-3">
            <h6 class="m-0 font-weight-bold text-primary">Entry Data </h6>
        </div>
        <div class="card-body">
<form class="user" action="dashboard.php?uploadmhskip" accept-charset="utf-8" method="post" name="frmExcelImport" id="frmExcelImport" enctype="multipart/form-data">


<div class="col m6">
    <div class="row">
        <div class="input-field col m6 s12">
            <table border="0" width="100%" cellspacing="1" cellpadding="1">
                <tr>
                    <td width="30%">File Excel</td>
                    <td width="70%">
                        <input value="<?php echo $id;?>" name="id" type="hidden">
                        <input name="file" type="file" accept=".xls,.xlsx" class="form-control" id="exampleFirstName" placeholder="Username Feeder">
                    </td>
                </tr>
                <tr>
                    <td>&nbsp;</td>
                    <td>
                                <div class="form-group row" style="margin-top : 5pt;">
                                    <div class="col-sm-3 mb-3 mb-sm-0">
                                        <button name="Upload" type="submit" class="btn btn-primary btn-block">Upload</button>
                                    </div>
                                    <div class="col-sm-3">
                                        <button name="Clear" type="submit" class="btn btn-primary btn-block">Clear All</button>
                                    </div>
                                    <div class="col-sm-3">
                                        <button name="Cancel" type="submit" class="btn btn-primary btn-block">Cancel</button>
                                    </div>
                                    <div class="col-sm-3">
                                        <button name="Contoh" type="button" onclick="window.open('uploads/mahasiswa/test.xls');" class="btn btn-primary btn-block">Contoh</button>
                                    </div>
                                </div>
                    </td>
                </tr>
            </table>
        </div>
    </div>
    </div>
</div>
</div>
</div>
<?php } ?>
<div class="container-fluid">

<!-- Page Heading -->

                    <!-- DataTales Example -->
                    <div class="card shadow mb-4">
                        <div class="card-header py-3">
                            <h6 class="m-0 font-weight-bold text-primary">DataTables Mahasiswa</h6>
                        </div>
                        <div class="card-body">
                            <div class="table-responsive">
                                <table class="table table-bordered" id="dataTable" width="100%" cellspacing="0">
                                    <thead>
                                        <tr>
                                            <!--th>Aksi</th-->
                                            <th>Sync</th>
                                            <th>Sync2</th>
                                            <th>NIM</th>
                                            <th>Nama</th>
                                            <th>KTP</th>
                                            <th>Tgl Lhr</th>
                                            <th>Status</th>
                                        </tr>
                                    </thead>
                                    <tfoot>
                                        <tr>
                                            <!--th>Aksi</th-->
                                            <th>Sync</th>
                                            <th>Sync2</th>
                                            <th>NIM</th>
                                            <th>Nama</th>
                                            <th>KTP</th>
                                            <th>Tgl Lhr</th>
                                            <th>Status</th>
                                        </tr>
                                    </tfoot>
                                    <tbody>
                                        <?php
	$sql = "SELECT * FROM ins_mhs order by ID desc";
	$result = mysqli_query($conn, $sql);

	if(mysqli_num_rows($result) > 0) {
        while($row = mysqli_fetch_assoc($result)) {
                                        ?>
                                        <tr>
                                            <!--td>
                                                <a class="btn btn-primary btn-danger" href="dashboard.php?uploadmhskip&deleteID=<?php echo $row['id'];?>"><i class="fas fa-trash"></i></a>
                                                <a class="btn btn-primary btn-warning" href="dashboard.php?uploadmhskip&editID=<?php echo $row['id'];?>"><i class="fas fa-edit"></i></a>
                                            </td-->
                                            <td>
												<?php if($row['del'] == 0) { ?>
													<a class="btn btn-primary btn-info" href="dashboard.php?uploadmhskip&sync=<?php echo $row['ID'];?>"><i class="fas fa-download"></i></a>
												<?php }else echo "-";?>
											</td>
                                            <td>
												<?php if($row['del'] == 0) { ?>
													<!--a class="btn btn-primary btn-info" href="dashboard.php?uploadmhskip&sync2=<?php echo $row['ID'];?>"><i class="fas fa-sign-out-alt"></i></a-->
													<input type="checkbox">
												<?php }else echo "-";?>
											</td>
                                            <td><?php echo $row['npm'];?></td>
                                            <td><?php echo $row['nm'];?></td>
                                            <td><?php echo $row['ktp'];?></td>
                                            <td><?php echo substr($row['tgl'],0,25);?></td>
                                            <td><?php echo $row['status'];?></td>
                                        </tr>
                                        <?php
        }
    }
                                        ?>
                                    </tbody>
                                </table>
                                </div>
								<!--hr>
								<div align="center">
									<button name="Transfer" type="submit" class="btn btn-primary btn-block">Transfer Neo Feeder</button>
								</div-->
                            </div>
                        </div>
                    </div>
</form>


Youez - 2016 - github.com/yon3zu
LinuXploit