function.php

<?php
//------------------------------------------//

//-----------------------------------------//
//-----------------------------------------//
    $host = "localhost";
    $username = "id9364249_root";
    $password = "rootuser23";
    $db = "id9364249_magenta";
    $koneksi = mysqli_connect($host,$username,$password,$db);
//----------------------------------------//

function hapus($tabel,$where,$id){
    $syntax = "DELETE FROM $tabel WHERE $where = $id";
    mysqli_query($GLOBALS["koneksi"],$syntax);
    return mysqli_affected_rows($GLOBALS["koneksi"]);
}

function tampil_table($nama_table){
    $tampil = mysqli_query($GLOBALS['koneksi'],"SELECT * FROM $nama_table");
    $datas = [];
    while ($data=mysqli_fetch_assoc($tampil)) {
        $datas[]= $data;
    }
    return $datas;
}

function tambah_produk($data){
    $nama       = htmlspecialchars($data["nama"]);
    $keterangan = htmlspecialchars($data["keterangan"]);
    $stok       = htmlspecialchars($data["stok"]);
    $harga      = htmlspecialchars($data["harga"]);
    $satuan     = htmlspecialchars($data["satuan"]);
    $kategori   = htmlspecialchars($data["kategori"]);
    $status     = htmlspecialchars($data["status"]);
    $gambar     = upload();

    if (!$gambar) {
        return false;
    }
    $syntax = "INSERT INTO produk
            VALUES (
                '', '$nama', '$keterangan', $stok, $harga, '$satuan','$gambar','$kategori','$status'
                )";

    mysqli_query($GLOBALS['koneksi'],$syntax);

    return (mysqli_affected_rows($GLOBALS['koneksi']));
}

function ubah_produk($data){

    $id         = $data["id"];
    $nama       = htmlspecialchars($data["nama"]);
    $keterangan = htmlspecialchars($data["keterangan"]);
    $stok       = htmlspecialchars($data["stok"]);
    $harga      = htmlspecialchars($data["harga"]);
    $satuan     = htmlspecialchars($data["satuan"]);
    $kategori   = htmlspecialchars($data["kategori"]);
    $status     = htmlspecialchars($data["status"]);
    $gambarLama = htmlspecialchars($data["gambarLama"]);

    if ($_FILES["gambar"]["error"] === 4) {
        $gambar = $gambarLama;
    }else {
        $gambar = upload();
    }
    $syntax = " UPDATE produk SET
                nama_produk         = '$nama',
                keterangan_produk   = '$keterangan',
                stok_produk         =  $stok,
                harga_produk        =  $harga,
                satuan_produk       = '$satuan',
                gambar_produk       = '$gambar',
                kategori_produk     = '$kategori',
                status_produk       = '$status'
                WHERE id_produk = $id
                ";
    mysqli_query($GLOBALS['koneksi'],$syntax);
    return (mysqli_affected_rows($GLOBALS['koneksi']));
}

function cari($nama_table,$keyword){
    $syntax = "$nama_table WHERE nama LIKE '%$keyword%'";
    return tampil_table($syntax);
}

function upload(){
    $namaFile = $_FILES["gambar"]["name"];
    $ukuranFile = $_FILES["gambar"]["size"];
    $error = $_FILES["gambar"]["error"];
    $tmpName = $_FILES["gambar"]["tmp_name"];
//====================================================//
//                 VALIDASI GAMBAR
//====================================================//
    //cek apakah ada error atau tidak
    if ($error === 4) {
    echo "<script>
        alert('Anda belum memasukan gambar');
        </script>";
        return false;
    }
    //cek apakah ekstensi yang di bolehkan
    $type = ['jpg','png','jpeg'];
    $file = explode('.',$namaFile);
    $file = strtolower(end($file));

    //adakah string dalam array
    // needle -> haystack
    if (!in_array($file,$type)) { //menghasilkan nilai true
    echo "<script>
        alert('Yang anda upload bukan gambar');
        </script>";
    return false;
    }
    //cek ukuran gambar

    if ($ukuranFile > 100000000) {
    echo "<script>
        alert('ukuran file terlalu besar');
        </script>";
    return false;
    }

    //jika semua lolos maka upload file
    //generate random nomor untuk mencegah duplicate
    $namaFileBaru = uniqid();
    $namaFileBaru .= ".";
    $namaFileBaru .= $file; // ambil ekstensi gambar

    //gunakan fungsi move_uploaded file
    move_uploaded_file($tmpName, 'images/' . $namaFileBaru);

    return $namaFileBaru;

}

function daftar($data){
    $username = strtolower(stripcslashes($data["username"]));
    $email = strtolower(stripslashes($data['email']));
    $password = mysqli_real_escape_string($GLOBALS['koneksi'],$data["password"]);
    $password2 = mysqli_real_escape_string($GLOBALS['koneksi'],$data["password2"]);

//cek username apakah ada yang sama atau tidak
    //query lalu fetch data
    $syntax = "SELECT * FROM pelanggan WHERE username_pelanggan = '$username' OR email_pelanggan='$email'";
    $result = mysqli_query($GLOBALS['koneksi'],$syntax);

    if (mysqli_fetch_assoc($result)) {
        echo "<script>alert('username atau email sudah ada')</script>";
        return false;
    }
//cek password sama dulu
    if ($password !== $password2) {
        return false;
    }

    $password = password_hash($password, PASSWORD_DEFAULT);

    $syntax = "INSERT INTO pelanggan
            VALUES (
                '', '$username','$email','$password'
                )";

    mysqli_query($GLOBALS['koneksi'],$syntax);

    return (mysqli_affected_rows($GLOBALS['koneksi']));

}

function detail_pelanggan($data){
    $id_pelanggan   = htmlspecialchars($data["id_pelanggan"]);
    $nama_depan     = htmlspecialchars($data["nama_depan"]);
    $nama_belakang  = htmlspecialchars($data["nama_belakang"]);
    $telepon        = htmlspecialchars($data["telepon"]);
    $alamat         = htmlspecialchars($data["alamat"]);
    $kota           = htmlspecialchars($data["kota"]);
    $kodepos        = htmlspecialchars($data["kodepos"]);
    $no_rekening    = htmlspecialchars($data["no_rekening"]);
    $nama_rekening  = htmlspecialchars($data["nama_rekening"]);
    $bank           = htmlspecialchars($data["bank"]);

    $syntax = "INSERT INTO info_pelanggan
            VALUES (
                '', $id_pelanggan, '$nama_depan', '$nama_belakang', $telepon, '$alamat','$kota', $kodepos, $no_rekening,'$nama_rekening','$bank'
                )";

    mysqli_query($GLOBALS['koneksi'],$syntax);

    return (mysqli_affected_rows($GLOBALS['koneksi']));
}


function update_data_pelanggan($data){

    $id_pelanggan   = htmlspecialchars($data["id_pelanggan"]);
    $id_info_pelanggan = htmlspecialchars($data["id_info_pelanggan"]);
    $nama_depan     = htmlspecialchars($data["nama_depan"]);
    $nama_belakang  = htmlspecialchars($data["nama_belakang"]);
    $telepon        = htmlspecialchars($data["telepon"]);
    $alamat         = htmlspecialchars($data["alamat"]);
    $kota           = htmlspecialchars($data["kota"]);
    $kodepos        = htmlspecialchars($data["kodepos"]);
    $no_rekening    = htmlspecialchars($data["no_rekening"]);
    $nama_rekening  = htmlspecialchars($data["nama_rekening"]);
    $bank           = htmlspecialchars($data["bank"]);


    $syntax = "UPDATE info_pelanggan SET
                id_pelanggan    =  $id_pelanggan,
                nama_depan      = '$nama_depan',
                nama_belakang   = '$nama_belakang',
                telepon         = '$telepon',
                alamat          = '$alamat',
                kota            = '$kota',
                kodepos         =  $kodepos,
                no_rekening     =  $no_rekening,
                nama_rekening   = '$nama_rekening',
                bank            = '$bank'
                WHERE id_info_pelanggan = $id_info_pelanggan
                ";
    mysqli_query($GLOBALS['koneksi'],$syntax);
    return (mysqli_affected_rows($GLOBALS['koneksi']));
}

function pembelian($data){
    $id_pelanggan   = htmlspecialchars($data["id_pelanggan"]);
    $tanggal        = htmlspecialchars($data["tanggal"]);
    $pengiriman     = htmlspecialchars($data["pengiriman"]);
    $telepon        = htmlspecialchars($data["telepon"]);
    $alamat         = htmlspecialchars($data["alamat"]);
    $pesan          = htmlspecialchars($data["pesan"]);
    $total_pembelian = htmlspecialchars($data["total_pembelian"]);
    $syntax = "INSERT INTO `pembelian`
    VALUES (NULL, '$id_pelanggan', '$tanggal', '$pengiriman', '$telepon', '$alamat', '$pesan', '$total_pembelian','pending');";

    mysqli_query($GLOBALS['koneksi'],$syntax);

    return (mysqli_affected_rows($GLOBALS['koneksi']));
}

function bukti_pembayaran($data){
    $id_pembelian       = htmlspecialchars($data["id_pembelian"]);
    $nama = htmlspecialchars($data["nama"]);
    $bank       = htmlspecialchars($data["bank"]);
    $no_rekening      = htmlspecialchars($data["no_rekening"]);
    $jumlah     = htmlspecialchars($data["jumlah"]);
    $tanggal = date('Y-m-d');
    $gambar     = upload();

    if (!$gambar) {
        return false;
    }
    $syntax = "INSERT INTO `pembayaran`
                VALUES (NULL, '$id_pembelian', '$nama', '$bank', '$no_rekening', '$jumlah', '$tanggal', '$gambar')";

    $ubah_status ="UPDATE pembelian SET status_pembayaran = 'Pembayaran Berhasil' WHERE id_pembelian = $id_pembelian";
    mysqli_query($GLOBALS['koneksi'],$syntax);
    mysqli_query($GLOBALS['koneksi'],$ubah_status);

    return (mysqli_affected_rows($GLOBALS['koneksi']));
}

function tambah_admin($data){
    $username = strtolower(stripcslashes($data["username"]));
    $nama = strtolower(stripcslashes($data["nama"]));
    $email = strtolower(stripslashes($data['email']));
    $password = mysqli_real_escape_string($GLOBALS['koneksi'],$data["password"]);
    $password1 = mysqli_real_escape_string($GLOBALS['koneksi'],$data["password1"]);

//cek username apakah ada yang sama atau tidak
    //query lalu fetch data
    $syntax = "SELECT * FROM admin WHERE username = '$username' OR email_admin='$email'";
    $result = mysqli_query($GLOBALS['koneksi'],$syntax);

    if (mysqli_fetch_assoc($result)) {
        echo "<script>alert('username atau email sudah ada')</script>";
        return false;
    }
//cek password sama dulu
    if ($password !== $password1) {
        return false;
    }

    $password = password_hash($password, PASSWORD_DEFAULT);

    $syntax = "INSERT INTO admin
            VALUES (
                '', '$username','$password','$nama','$email'
                )";

    mysqli_query($GLOBALS['koneksi'],$syntax);

    return (mysqli_affected_rows($GLOBALS['koneksi']));

}

?>