PAL.C.T MINI SHELL
<?php
session_start();
if (empty($_SESSION['username']) AND empty($_SESSION['passuser'])){
echo "<link href='style.css' rel='stylesheet' type='text/css'>
<center>Untuk mengakses modul, Anda harus login <br>";
echo "<a href=../../index.php><b>LOGIN</b></a></center>";
}
else{
include "../../config/koneksi.php";
include "../../config/library.php";
include "../../config/fungsi_thumb.php";
$module=$_GET['module'];
$act=$_GET['act'];
// Hapus sales
if ($module=='sales' AND $act=='hapus'){
$data = mysql_fetch_array(mysql_query("SELECT foto FROM sales WHERE id='$_GET[id]'"));
if($data['foto']!=''){
unlink("../../images/sales/$_GET[namafile]");
}
mysql_query("DELETE FROM sales WHERE id='$_GET[id]'");
header('location:../../media.php?module='.$module);
}
// Input sales
elseif ($module=='sales' AND $act=='input'){
$kode_marketing=$_POST['kode_marketing'];
$tgl_sekarang = date('Y-m-d');
$password = md5($_POST['password']);
$lokasi_file = $_FILES['fupload']['tmp_name'];
$tipe_file = $_FILES['fupload']['type'];
$nama_file = $_FILES['fupload']['name'];
$acak = rand(1,99);
$nama_file_unik = $acak.$nama_file;
if(!empty($lokasi_file)){
UploadSales($nama_file_unik);
mysql_query("INSERT INTO sales(kode_marketing, password, nama, no_ponsel,foto) VALUES('$kode_marketing','$password','$_POST[nama]','$_POST[no_ponsel]','$nama_file_unik')");
}
else{
mysql_query("INSERT INTO sales(kode_marketing, password, nama, no_ponsel) VALUES('$kode_marketing','$password','$_POST[nama]','$_POST[no_ponsel]')");
}
header('location:../../media.php?module='.$module);
}
// Update sales
elseif ($module=='sales' AND $act=='update'){
$kode_marketing=$_POST['kode_marketing'];
$password = md5($_POST['password']);
$lokasi_file = $_FILES['fupload']['tmp_name'];
$tipe_file = $_FILES['fupload']['type'];
$nama_file = $_FILES['fupload']['name'];
$acak = rand(1,99);
$nama_file_unik = $acak.$nama_file;
if(!empty($password) && !empty($lokasi_file)){
UploadSales($nama_file_unik);
mysql_query("UPDATE sales SET password = '$password',
no_ponsel = '$_POST[no_ponsel]',
foto = '$nama_file_unik'
WHERE id = '$_POST[id]'");
}
elseif(!empty($password)){
mysql_query("UPDATE sales SET password = '$password',
no_ponsel = '$_POST[no_ponsel]'
WHERE id = '$_POST[id]'");
}
elseif(!empty($lokasi_file)){
UploadSales($nama_file_unik);
mysql_query("UPDATE sales SET no_ponsel = '$_POST[no_ponsel]',
foto = '$nama_file_unik'
WHERE id = '$_POST[id]'");
}
else{
mysql_query("UPDATE sales SET no_ponsel = '$_POST[no_ponsel]' WHERE id = '$_POST[id]'");
}
header('location:../../media.php?module='.$module);
}
}
?>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`