Untitled

<?php
error_reporting(~E_NOTICE ); // avoid notice
ini_set('display_errors',1);

require_once 'koneksi.php';
if(isset($_POST['submit'])){
    // Simpan data yang di inputkan ke POST ke masing-masing variable
    // dan convert semua tag HTML yang mungkin dimasukkan untuk mengindari XSS
    $username = htmlentities($_POST['username']);
    $password = htmlentities($_POST['password']);
    $nama = htmlentities($_POST['nama']);
    $jk = htmlentities($_POST['jk']);
    $wni = htmlentities($_POST['wni']);
    $level = htmlentities($_POST['level']);

    $imgFile = $_FILES['foto']['name'];
        $tmp_dir = $_FILES['foto']['tmp_name'];
        $imgSize = $_FILES['foto']['size'];
    $alamat = htmlentities($_POST['alamat']);

    if(empty($username)){
            $errMSG = "Please Enter Username.";
        }
        else if(empty($password)){
            $errMSG = "Please Enter Your Job Work.";
        }
        else if(empty($imgFile)){
            $errMSG = "Please Select Image File.";
        }
        else
        {
            $upload_dir = 'images/'; // upload directory

            $imgExt = strtolower(pathinfo($imgFile,PATHINFO_EXTENSION)); // get image extension

            // valid image extensions
            $valid_extensions = array('jpeg', 'jpg', 'png', 'gif'); // valid extensions

            // rename uploading image
            $userpic = rand(1000,1000000).".".$imgExt;

            // allow valid image file formats
            if(in_array($imgExt, $valid_extensions)){
                // Check file size '5MB'
                if($imgSize < 5000000)              {
                    move_uploaded_file($tmp_dir,$upload_dir.$userpic);
                }
                else{
                    $errMSG = "Sorry, your file is too large.";
                }
            }
            else{
                $errMSG = "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";
            }
        }


        // if no error occured, continue ....
        if(!isset($errMSG))
        {
                    $query = $koneksi->prepare('INSERT INTO login(`username`, `password`, `nama`, `jk`, `wni`, `level`,`foto`,`alamat`)');
              $query->bindParam(":username", $username);
              $query->bindParam(":password", $password);
              $query->bindParam(":nama", $nama);
              $query->bindParam(":jk", $jk);
              $query->bindParam(":wni", $wni);
              $query->bindParam(":level", $level);
              $query->bindParam(":foto", $userPic);
              $query->bindParam(":alamat", $alamat);

            if($query->execute())
            {
                $successMSG = "new record succesfully inserted ...";
                header("refresh:5;index.php"); // redirects image view page after 5 seconds.
        exit;
      }
            else
            {
                $errMSG = "error while inserting....";
            }
        }
    }
?>


<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <title>Form Daftar</title>
  </head>
  <body>
    <h1>Form Daftar</h1>
    <form method="post" enctype="multipart/form-data">
      <h3>Username</h3>
        <label for="username"></label>
        <input type="text" name="username" value="" required="" placeholder="Username">
      <h3>Password</h3>
        <label for="password"></label>
        <input type="password" name="password" value="" placeholder="Password" required="">
      <h3>Nama</h3>
        <label for="nama"></label>
        <input type="text" name="nama" value="" required="" placeholder="Mis: Agus">
      <h3>Jenis Kelamin</h3>
        <input type="radio" name="jk" value="Pria">Pria
        <input type="radio" name="jk" value="Wanita">Wanita
      <h3>Warga Indonesia?</h3>
        <input type="checkbox" name="wni" value="Iya">Iya
        <input type="checkbox" name="wni" value="Tidak">Tidak
      <h3>Level Admin</h3>
        <label for="level"></label>
        <select class="level" name="level" required>
          <option value="Admin">Admin</option>
          <option value="User">User</option>
      </select>
      <h3>Foto</h3>
        <label for="foto"></label>
        <input type="file" name="foto" accept="image/*">
      <h3>Alamat</h3>
        <textarea name="alamat" rows="8" cols="40"></textarea>
      <br><br>
      <input type="submit" name="submit" value="Daftar">
    </form>
  </body>
</html>