View difference between Paste ID: evNU2esr and Xg4NmVh6

-ini aksi input yang konfirmasi.php
+
 /*
 KARENA lebih greget semua coding jadi 1
 */
 
 include "../includes/config.php";
 include "../includes/functions.php";
 //===========start
-<form enctype="multipart/form-data" method="post" action="javascript:void(null);" onsubmit="return cek(this)">
+if($_POST['tombol'])
 {
    switch($_POST['proc']){
 	case 'delete' :
 		$pos = $_POST['pos'];
 
 		unset($_SESSION['s_bajuChart'][$pos]);
 		unset($_SESSION['s_jumlahChart'][$pos]);
 
 		$_SESSION['s_bajuChart'] 	= array_values($_SESSION['s_bajuChart']);
 		$_SESSION['s_jumlahChart'] 	= array_values($_SESSION['s_jumlahChart']);
 
 		header("location:keranjang.php");
 		break;
 
 	case 'refresh' :
 		$pos 	= $_POST['pos'];
 		$id		= $_POST['id'];
 		$jumlah = $_POST['jumlah'];
 		list($nama, $stok) = mysql_fetch_row(mysql_query("SELECT nama, stok FROM _baju WHERE id_baju = '$id'"));
 		if($jumlah > $stok){
 			echo "<script>alert('Stok maksimal $nama : $stok');</script>";
 		}else{
 			$_SESSION['s_jumlahChart'][$pos] = $jumlah;
 		}
 		echo "<script>sendRequest('users/keranjang.php', '', 'content', 'div', '');</script>";
 		break;
 
 	case 'finish' :
-			<td colspan="3"><input type="button" value="Kirim" onclick="javascript: sendRequest('users/keranjang_proses.php','proc=confirm&id='+document.getElementById('hdid').value+'&tanggal='+document.getElementById('txttanggal').value+'&bank='+document.getElementById('txtbank').value+'&pemilik='+document.getElementById('txtpemilik').value+'&dana='+document.getElementById('txtdana').value+'&foto='+document.createElement('foto').value, 'content', 'div', '');" /></td>
+
 		$id = uniqid("ORD");
 		$tujuan = $_POST['tujuan'];
-</form>
+
 		$qData2 = "INSERT INTO _pemesanan VALUES('$id', NOW(), '$_SESSION[s_emailCust]', '$tujuan', '$alamat', '', '', '', '', '', '0')";
 		$qData = "INSERT INTO _pemesanan VALUES('$id', NOW(), '$_SESSION[s_emailCust]', '$tujuan', '$alamat', '', '', '', '', '', '0')";
 		$hqData2 = mysql_query($qData2);
 		$hqData = mysql_query($qData);
 
 		//Masukkan ke pemesanan detail
 		$x=0;
-ini aksi prosesnya yang keranjang_proses.php
+
 			foreach($_SESSION['s_bajuChart'] as $idBaju){
-session_start();
+
 				list($harga)= mysql_fetch_row(mysql_query("SELECT harga FROM _baju WHERE id_baju = '$idBaju'"));
 				$jumlah 	= $_SESSION['s_jumlahChart'][$x];
 				$subtotal	= $harga * $jumlah;
-switch($_POST['proc']){
+
 				$qData2 = "UPDATE `baju_db`.`_baju` SET `stok` = stok - $jumlah WHERE CONVERT(`_baju`.`id_baju` USING utf8) = '$idBaju'";
 				// mysql_query = "update INTO _baju VALUES('$id', '$idBaju', '$jumlah', '$subtotal')";
 				$hqData2 = mysql_query($qData2);
 				$hqData = mysql_query($qData);
 
 				$x++;
 			}
 		}
 		$_SESSION['s_bajuOrder'] = $id;
 		unset($_SESSION['s_bajuChart']);
 		unset($_SESSION['s_jumlahChart']);
 
 		header("location:keranjang_finish.php");
 		break;
 
 	case 'confirm' :
 
 		//Update ke tabel pemesanan
 		$id			= $_POST['id'];
 		$tanggal	= ExplodeDate($_POST['tanggal']);
 		$bank 		= $_POST['bank'];
 		$pemilik	= $_POST['pemilik'];
 		$dana		= $_POST['dana'];
 		$nm=$_FILES['foto']['name'];
 
 	if(strlen($nm)>0){
 	if(is_uploaded_file($_FILES['foto']['tmp_name'])){
 	move_uploaded_file($_FILES['foto']['tmp_name'],"../foto/".$nm);
 	}
     mysql_query("Update _pemesanan set foto='$nm' where id_pemesanan='$id'") or die(mysql_error());
 	}
 
 		mysql_query("UPDATE _pemesanan
 					SET tanggal_konfirmasi 	= '$tanggal',
 						bank_konfirmasi		= '$bank',
 						nama_konfirmasi		= '$pemilik',
 						jumlah_konfirmasi	= '$dana'
 					WHERE id_pemesanan = '$id'");
 
 		//mysql_query("UPDATE _pemesanan SET foto = '$nm' WHERE id_pemesanan = '$id'");
 
 	    header("location:history.php");
 		break;
 
    }
 
 }
 //===========end
 /*
 selamat bersenang-senang
 */
 $_SESSION['s_page'] = "users/keranjang.php";
 ?>
 <form enctype="multipart/form-data" method="post"   >
 	<table>
 		<tr>
 			<td>Tanggal Transfer</td>
 			<td>:</td>
 			<td><input type="hidden" name="hdid" id="hdid" value="<?php echo $_POST['id']; ?>" /><input type="text" name="txttanggal" id="txttanggal" size="10" value="<?php echo date("d/m/Y"); ?>" />&nbsp;<img src="includes/popup-calendar/calendar.gif" width="24" height="12" onclick="displayCalendar(document.getElementById('txttanggal'),'dd/mm/yyyy',this)" style="cursor:pointer"></td>
 		</tr>
 		<tr>
 			<td>Bank Rekening Asal</td>
 			<td>:</td>
 			<td><input type="text" name="txtbank" id="txtbank" /></td>
 		</tr>
 		<tr>
 			<td>Nama Pemilik Rekening Asal</td>
 			<td>:</td>
 			<td><input type="text" name="txtpemilik" id="txtpemilik" /></td>
 		</tr>
 		<tr>
 			<td>Jumlah Dana Dikirim</td>
 			<td>:</td>
 			<td><input type="text" name="txtdana" id="txtdana" /></td>
 		</tr>
 
 		<tr>
 			<td>Gambar</td>
 			<td>:</td>
 			 <td><input type="file" name="foto" id="foto" /></td>
 		</tr>
 		<tr>
 			<td colspan="3"><input type="submit" name='tombol' value="Kirim"  /></td>
 <!--
 onclick="javascript: sendRequest('users/keranjang_proses.php','proc=confirm&id='+document.getElementById('hdid').value+'&tanggal='+document.getElementById('txttanggal').value+'&bank='+document.getElementById('txtbank').value+'&pemilik='+document.getElementById('txtpemilik').value+'&dana='+document.getElementById('txtdana').value+'&foto='+document.createElement('foto').value, 'content', 'div', '');"
 
 -->
 		</tr>
 	</table>
-?>
+</form>