PAL.C.T MINI SHELL
<?php
require('../../../inc/konek.php');
session_start();
$uuid_staff = $_POST['uuid_staff'];
$no_ktp = htmlspecialchars(strip_tags($_POST['no_ktp']), ENT_QUOTES);
$phone_staff =htmlspecialchars(strip_tags($_POST['phone_staff']), ENT_QUOTES);
$alamat_staff =htmlspecialchars(strip_tags($_POST['alamat_staff']), ENT_QUOTES);
$agama =htmlspecialchars(strip_tags($_POST['agama']), ENT_QUOTES);
$suku =htmlspecialchars(strip_tags($_POST['suku']), ENT_QUOTES);
$jabatan =htmlspecialchars(strip_tags($_POST['jabatan']), ENT_QUOTES);
$catatan_staff =htmlspecialchars(strip_tags($_POST['catatan_staff']), ENT_QUOTES);
$list_ckjenistoko = "";
if(isset($_POST['ckjenistoko'])){
$ckjenistoko = $_POST['ckjenistoko'];
foreach ($ckjenistoko as $h){
$list_ckjenistoko .= "|".$h;
}
$list_ckjenistoko = $list_ckjenistoko."|";
}
$list_ckwewenangapps = "";
if(isset($_POST['ckwewenangapps'])){
$ckwewenangapps = $_POST['ckwewenangapps'];
foreach ($ckwewenangapps as $h){
$list_ckwewenangapps .= "|".$h;
}
$list_ckwewenangapps = $list_ckwewenangapps."|";
}
$qupstaff = $con->prepare("UPDATE staff SET no_ktp=?,phone_staff=?,alamat_staff=?,agama=?,suku=?,jabatan=?,jenis_toko=?,wewenang=?,catatan_staff=? WHERE uuid_staff=?");
$qupstaff->execute(array($no_ktp,$phone_staff,$alamat_staff,$agama,$suku,$jabatan,$list_ckjenistoko,$list_ckwewenangapps,$catatan_staff,$uuid_staff));
if ($_FILES['foto1']['name']!= '') {
$fotoname = "fotoktp_";
$filext = $_FILES['foto1']['name'];
$filext2 = $_FILES['foto1']['tmp_name'];
$filename = $_FILES['foto1']['name'];
$lokasi_file = $_FILES['foto1']['tmp_name'];
$uploaddir = "../../assets/staff/";
$uploadfile = $uploaddir . basename($filename);
$ext = pathinfo($filename, PATHINFO_EXTENSION);
$NAMA_FILE = $fotoname.date('His')."_".$uuid_staff.".".$ext;
$uploadfile = $uploaddir.$NAMA_FILE;
if(cext($filext) == 0){
?>
<script type="text/Javascript">
alert("Invalid File");
window.location = "../../media.php?module=detail_staff&id=<?php echo $uuid_staff; ?>";
</script>
<?php
exit();
}
else{
$query = "UPDATE staff
SET foto_ktp=?
WHERE uuid_staff =?";
$stmt = $con->prepare($query);
$stmt->execute(array($NAMA_FILE, $uuid_staff));
$UPLOAD_PROCESS = move_uploaded_file($lokasi_file, $uploadfile);
}
}
?>
<script type="text/Javascript">
alert("Edit Staff berhasil.");
window.location = "../../media.php?module=detail_staff&uuid_staff=<?php echo $uuid_staff;?>";
</script>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`