PAL.C.T MINI SHELL
<?php
require('../../../inc/konek.php');
session_start();
$uuid_promo = gen_uuid();
$kode=$_POST['kode'];
$judul = strtoupper(htmlspecialchars(strip_tags($_POST['judul']), ENT_QUOTES));
$tgl_mulai =$_POST['tgl_mulai'];
$tgl_akhir =$_POST['tgl_akhir'];
$short_detail =htmlspecialchars(strip_tags($_POST['short_detail']), ENT_QUOTES);
$long_detail =htmlspecialchars(strip_tags($_POST['long_detail']), ENT_QUOTES);
$status='HOLD';
$qcekkode = $con->prepare("SELECT * FROM db_promo WHERE kode=?");
$qcekkode->execute(array($kode));
$ccekkode = $qcekkode->rowCount();
if ($ccekkode == 0) {
$qinpromo = $con->prepare("INSERT INTO db_promo SET uuid_promo=?,kode=?,judul=?,tgl_mulai=?,tgl_akhir=?,short_detail=?,long_detail=?,status=?");
$qinpromo->execute(array($uuid_promo,$kode,$judul,$tgl_mulai,$tgl_akhir,$short_detail,$long_detail,$status));
if ($_FILES['foto1']['name']!= '') {
$fotoname = "fotopromo_";
$filext = $_FILES['foto1']['name'];
$filext2 = $_FILES['foto1']['tmp_name'];
$filename = $_FILES['foto1']['name'];
$lokasi_file = $_FILES['foto1']['tmp_name'];
$uploaddir = "../../assets/promo/";
$uploadfile = $uploaddir . basename($filename);
$ext = pathinfo($filename, PATHINFO_EXTENSION);
$NAMA_FILE = $fotoname.date('His')."_".$uuid_promo.".".$ext;
$uploadfile = $uploaddir.$NAMA_FILE;
if(cext($filext) == 0){
?>
<script type="text/Javascript">
alert("Invalid File");
window.location = "../../media.php?module=add_promo";
</script>
<?php
exit();
}
else{
$query = "UPDATE db_promo
SET image=?
WHERE uuid_promo =?";
$stmt = $con->prepare($query);
$stmt->execute(array($NAMA_FILE, $uuid_promo));
$UPLOAD_PROCESS = move_uploaded_file($lokasi_file, $uploadfile);
}
}
?>
<script type="text/Javascript">
alert("Add Promo berhasil!");
window.location = "../../media.php?module=detail_promo&uuid_promo=<?php echo $uuid_promo;?>";
</script>
<?php
}
else{
?>
<script type="text/Javascript">
alert("Kode telah terdaftar!");
window.location = "../../media.php?module=add_promo";
</script>
<?php
}
?>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`