PAL.C.T MINI SHELL
<?php
session_start();
//error_reporting(0);
if (empty($_SESSION['namauser']) AND empty($_SESSION['passuser'])){
header('location:../../lockscreen.php');
}
else{
include "../../konfig/koneksi.php";
include "../../konfig/fungsi_thumb.php";
include "../../konfig/library.php";
$module=$_GET['module'];
$act=$_GET['act'];
// Input user
if ($module=='jaringan' AND $act=='input'){
if (isset($_POST['jenis'])) {
$jenis = '1';
}else{
$jenis='0';
}
$acak = rand(1,99);
$lokasi_file = $_FILES['fupload']['tmp_name'];
$tipe_file = $_FILES['fupload']['type'];
$nama_file = $_FILES['fupload']['name'];
$nama_file_unik = $acak.$nama_file;
if(cext($lokasi_file) == 0){
$_SESSION['log']="invalid-file";
header('location:tambah-jaringan');
exit();
}
else{
if ($_FILES["fupload"]["error"] > 0 OR empty($lokasi_file)){
$nama_file_unik = "";
}
else{
UploadJaringan($nama_file_unik);
}
mysql_query("INSERT INTO fbc_jaringan (nama_toko, alamat1, alamat2, id_kab, id_kec, gps, kode_pos, phone, whatsapp, nama_pemilik, phone_pemilik, staff_toko, foto, id_staff, status, jenis) VALUES ('$_POST[nama_toko]', '$_POST[alamat1]', '$_POST[alamat2]', '$_POST[id_kab]', '$_POST[id_kec]', '$_POST[gps]', '$_POST[kode_pos]', '$_POST[phone]', '$_POST[whatsapp]', '$_POST[nama_pemilik]', '$_POST[phone_pemilik]', '$_POST[staff_toko]', '$nama_file_unik', '$_SESSION[namauser]', 'hidden', '$jenis')");
header('location:jaringan');
}
}
elseif ($module=='jaringan' AND $act=='update'){
if (isset($_POST['jenis'])) {
$jenis = '1';
}else{
$jenis='0';
}
$acak = rand(1,99);
$lokasi_file = $_FILES['fupload']['tmp_name'];
$tipe_file = $_FILES['fupload']['type'];
$nama_file = $_FILES['fupload']['name'];
$nama_file_unik = $acak.$nama_file;
if ($_FILES["fupload"]["error"] > 0 OR empty($lokasi_file)){
$nama_file_unik = "$_POST[foto]";
}
else{
UploadJaringan($nama_file_unik);
unlink("../../images/img_jaringan/$_POST[foto]");
}
mysql_query("UPDATE fbc_jaringan SET nama_toko='$_POST[nama_toko]', alamat1='$_POST[alamat1]', alamat2='$_POST[alamat2]', id_kab='$_POST[id_kab]', id_kec='$_POST[id_kec]', gps='$_POST[gps]', kode_pos='$_POST[kode_pos]', phone='$_POST[phone]', whatsapp='$_POST[whatsapp]', nama_pemilik='$_POST[nama_pemilik]', staff_toko='$_POST[staff_toko]', foto='$nama_file_unik', id_staff='$_SESSION[namauser]', status='$_POST[status]', jenis='$jenis' WHERE id_db='$_POST[id_jaringan]'");
header('location:jaringan');
}
elseif($module=='jaringan' AND $act='delete'){
$d=mysql_fetch_array(mysql_query("SELECT * FROM fbc_jaringan WHERE id_db='$_GET[id]'"));
unlink("../../images/img_jaringan/$d[foto]");
mysql_query("DELETE FROM fbc_jaringan WHERE id_db='$_GET[id]'");
header('location:jaringan');
}
}
?>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`