aksi_kader.php

<?php
session_start();
// Apabila user belum login
if (empty($_SESSION['username']) AND empty($_SESSION['password'])){
  echo "<link href=\"../../css/style_login.css\" rel=\"stylesheet\" type=\"text/css\" />
        <div id=\"login\"><h1 class=\"fail\">Untuk mengakses modul, Anda harus login dulu.</h1>
        <p class=\"fail\"><a href=\"../../index.php\">LOGIN</a></p></div>";
}
// Apabila user sudah login dengan benar, maka terbentuklah session
else{
  include "../../../config/koneksi.php";
  include "../../../config/library.php";
  include "../../../config/fungsi_seo.php";
  include "../../../config/fungsi_thumbnail.php";

  $module = $_GET['module'];
  $act    = $_GET['act'];

  // Hapus user
  if ($module=='kader' AND $act=='hapus'){
    $query = "SELECT foto, bukti FROM user WHERE id_user='$_GET[id]'";
    $hapus = mysqli_query($koneksi, $query);
    $r     = mysqli_fetch_array($hapus);

    if (($r['foto']!='') OR ($r['bukti']!='')) {
      $namafile = $r['foto'];
      $namabukti = $r['bukti'];
      // hapus file gambar yang berhubungan dengan user tersebut
      unlink("../../../foto_user/$namafile");
      unlink("../../../foto_user/small_$namafile");
        // hapus file gambar yang berhubungan dengan user tersebut
      unlink("../../../file_bukti/$namabukti");
      unlink("../../../file_bukti/small_$namabukti");
      // hapus data user di database
      mysqli_query($koneksi, "DELETE FROM user WHERE id_user='$_GET[id]'");




      // hapus data user di database
      mysqli_query($koneksi, "DELETE FROM user WHERE id_user='$_GET[id]'");
    }
    else{
      mysqli_query($koneksi, "DELETE FROM user WHERE id_user='$_GET[id]'");
    }
    header("location:../../media.php?module=".$module);
  }

  // Input user
  elseif ($module=='kader' AND $act=='input'){
    $lokasi_file    = $_FILES['fupload']['tmp_name'];
    $tipe_file      = $_FILES['fupload']['type'];
    $nama_file      = $_FILES['fupload']['name'];
    $acak            = rand(1,99);
    $nama_file_bukti = $acak.$nama_file;

    $lokasi_foto    = $_FILES['ffoto']['tmp_name'];
    $tipe_foto      = $_FILES['ffoto']['type'];
    $nama_foto      = $_FILES['ffoto']['name'];
    $acak            = rand(1,99);
    $nama_file_foto = $acak.$nama_foto;


    $nama       = $_POST['nama'];
    $email      = $_POST['email'];
    $username   = $_POST['username'];
    $password   = md5($_POST['password']);
    $jk         = $_POST['jenis_kelamin'];
    $tgl_lahir  = $_POST['tanggal_lahir'];
    $alamat     = $_POST['alamat'];
    $nohape     = $_POST['nohape'];
    $kampus     = $_POST['kampus'];
    $thn_masuk  = $_POST['tahun_masuk'];
    $jabatan    = $_POST['jabatan'];
    $tggal_lk   = $_POST['tanggal_lk'];

    // Apabila tidak ada gambar yang di upload
    if (empty($lokasi_file) AND empty($lokasi_foto)){
      $input = "INSERT INTO user(nama,
                                   email,
                                   username,
                                   password,
                                   level,
                                   j_kelamin,
                                   tggal_lahir,
                                   alamat,
                                   no_hape,
                                   kampus,
                                   thn_masuk,
                                   jabatan,
                                   tggal_lk,
                                   verifikasi)
                             VALUES('$nama',
                                  '$email',
                                  '$username',
                                  '$password',
                                  'kader',
                                  '$jk',
                                  '$tgl_lahir',
                                  '$alamat',
                                  '$nohape',
                                  '$kampus',
                                  '$thn_masuk',
                                  '$jabatan',
                                  '$tggal_lk',
                                  'Y')";
      mysqli_query($koneksi, $input);

      header("location:../../media.php?module=".$module);
    }

    // Apabila ada gambar yang di upload
    else{
      if ($tipe_file != "image/jpeg" AND $tipe_file != "image/pjpeg") {
        echo "<script>window.alert('Upload Gagal! Pastikan file yang di upload bertipe *.JPG');
              window.location=('../../media.php?module=kader')</script>";

      }
      else{
       $folderfoto = "../../../foto/"; // folder untuk foto
       $folderbukti = "../../../file_bukti/"; // folder untuk foto
       $ukuran = 200;
      // upload foto
        UploadFoto($nama_file_foto, $folderfoto, $ukuran);
        // upload bukti
    UploadFotouser($nama_file_bukti, $folderbukti, $ukuran);


        $input = "INSERT INTO user(nama,
                                   email,
                                   username,
                                   password,
                                   level,
                                   j_kelamin,
                                   tggal_lahir,
                                   alamat,
                                   no_hape,
                                   kampus,
                                   thn_masuk,
                                   jabatan,
                                   tggal_lk,
                                   bukti,
                                   foto,
                                   verifikasi)
                             VALUES('$nama',
                                  '$email',
                                  '$username',
                                  '$password',
                                  'kader',
                                  '$jk',
                                  '$tgl_lahir',
                                  '$alamat',
                                  '$nohape',
                                  '$kampus',
                                  '$thn_masuk',
                                  '$jabatan',
                                  '$tggal_lk',
                                  '$nama_file_bukti',
                                  '$nama_file_foto',
                                  'Y'
                                  )";
        mysqli_query($koneksi, $input);

        header("location:../../media.php?module=".$module);
      }
    }
  }

  // Update kader
  elseif ($module=='kader' AND $act=='update'){
   $lokasi_file = $_FILES['fupload']['tmp_name'];
    $tipe_file   = $_FILES['fupload']['type'];
    $nama_file   = $_FILES['fupload']['name'];
    $acak        = rand(1,99);
    $nama_gambar = $acak.$nama_file;

    $lokasi_file2 = $_FILES['ffoto']['tmp_name'];
    $tipe_file2   = $_FILES['ffoto']['type'];
    $nama_file2   = $_FILES['ffoto']['name'];
    $acak2        = rand(1,99);
    $nama_gambar2 = $acak.$nama_file2;

     $id         = $_POST['id'];
    $nama       = $_POST['nama'];
    $email      = $_POST['email'];
    $password   = md5($_POST['password']);
    $jk         = $_POST['jenis_kelamin'];
    $tgl_lahir  = $_POST['tanggal_lahir'];
    $alamat     = $_POST['alamat'];
    $nohape     = $_POST['nohape'];
    $kampus     = $_POST['kampus'];
    $thn_masuk  = $_POST['tahun_masuk'];
    $jabatan    = $_POST['jabatan'];
    $tggal_lk   = $_POST['tanggal_lk'];


    // Apabila gambar dan bukti tidak diganti
    if (empty($lokasi_file)){
      $update = "UPDATE user SET nama = '$nama',
                                   email = '$email',
                                   password = '$password',
                                   j_kelamin = '$jk',
                                   tggal_lahir = '$tgl_lahir',
                                   alamat = '$alamat',
                                   no_hape = '$nohape',
                                   kampus = '$kampus',
                                   thn_masuk = '$thn_masuk',
                                   jabatan = '$jabatan',
                                   tggal_lk = '$tggal_lk'
                             WHERE id_user   = '$id'";
      mysqli_query($koneksi, $update);

      header("location:../../media.php?module=".$module);
    }
    else{
       if ($tipe_file2 != "image/jpeg" AND $tipe_file != "image/pjpeg") {
        echo "<script>window.alert('Upload Gagal! Pastikan file yang di upload bertipe *.JPG');
              window.location=('../../media.php?module=kader')</script>";
       }else if ($tipe_file != "file/pdf") {
        echo "<script>window.alert('Upload Gagal! Pastikan file yang di upload bertipe *.PDF');
              window.location=('../../media.php?module=kader')</script>";
      } else{
        $folder2 = "../../../foto_user/"; // folder untuk foto berita
        $ukuran = 200;                     // foto diperkecil jadi 200px (thumb)
        UploadFoto($nama_gambar2, $folder2, $ukuran);

         $folder = "../../../file_bukti/"; // folder untuk foto berita
      $file_upload = $folder . $nama_gambar;
      // upload file
      move_uploaded_file($_FILES["fupload"]["tmp_name"], $file_upload2);
        $update = "UPDATE user SET nama = '$nama',
                                   email = '$email',
                                   password = '$password',
                                   j_kelamin = '$jk',
                                   tggal_lahir = '$tgl_lahir',
                                   alamat = '$alamat',
                                   no_hape = '$nohape',
                                   kampus = '$kampus',
                                   thn_masuk = '$thn_masuk',
                                   jabatan = '$jabatan',
                                   tggal_lk = '$tggal_lk',
                                   foto = '$nama_gambar',
                                   bukti = '$nama_gambar2'
                             WHERE id_user   = '$id'";
        mysqli_query($koneksi, $update);

        header("location:../../media.php?module=".$module);
      }
    }
  }
}
?>