tanya proses gambar

---------------------------------------------- Table ------------------------------------------------------
CREATE TABLE `tb_user` (
  `nmlengkap` varchar(70) NOT NULL,
  `username` varchar(20) NOT NULL,
  `password` varchar(200) NOT NULL,
  `jabatan` varchar(20) NOT NULL,
  `foto` varchar(200) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;

----------------------------------form tambah--------------------------------------------------------------
<div class="col-sm-9 ">
  <div class="page-header">
          <h4><i class="glyphicon glyphicon-edit"></i> Input Pengguna Baru</h4>
  </div>
  <div class="panel panel-default">
        <div class="panel-body">
          <form class="form-horizontal" method="POST" action="user-proses.php">
            <div class="form-group">
              <label class="col-sm-2 control-label">Nama Lengkap</label>
              <div class="col-sm-5">
                <input type="text" class="form-control" name="nmlengkap" autocomplete="off"  required>
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">User Login</label>
              <div class="col-sm-4">
                <input type="text" class="form-control" name="username" autocomplete="off" required>
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">Password</label>
              <div class="col-sm-4">
                <input type="password" class="form-control" name="password" autocomplete="off" required>
              </div>
            </div>

            <div class="form-group">
              <label class="col-sm-2 control-label">Masuk Sebagai</label>
              <div class="col-sm-2">
                <select name="jabatan" placeholder="Pilih" required class="form-control">
                <option value=""></option>
                <option value="GA">GA</option>
                <option value="Administrasi">Administrasi</option>
                <option value="Ar Control">AR Control</option>
                <option value="Finance">Finance</option>
                <option value="Admin">Admin</option>
              </select>
              </div>
            </div>
            <div class="form-group">
              <label class="col-sm-2 control-label">Foto</label>
              <div class="col-sm-4">
                <input type="file" name="foto" required class="form-control">
                <p class="help-block">
                <small>Catatan :</small> <br>
                <small>- Pastikan file yang diupload bertipe *.JPG atau *.PNG</small> <br>
                <small>- Ukuran file foto max 1 Mb</small>
              </p>
              </div>
            </div>

            <hr/>
            <div class="form-group">
              <div class="col-sm-offset-2 col-sm-10">
                <input type="submit" class="btn btn-success btn-submit" name="tambah" value="Simpan">
                <a href="masterfile.php?page=user" class="btn btn-default btn-reset">Batal</a>
              </div>
            </div>
          </form>
        </div>
      </div>
</div>
-------------------------------------------------------- user-proses.php ----------------------------------------------------

<?php
require_once "config/database.php";

if (isset($_POST['tambah'])) {
	//$id             = trim($_POST['id']);
	$nmlengkap      = trim($_POST['nmlengkap']);
	$username       = trim($_POST['username']);
	$password       = trim($_POST['password']);
  $jabatan        = trim($_POST['jabatan']);
	$nama_file      = $_FILES['foto']['name'];
	$ukuran_file    = $_FILES['foto']['size'];
	$tipe_file      = $_FILES['foto']['type'];
	$tmp_file       = $_FILES['foto']['tmp_name'];
	$allowed_extensions = array('jpg','jpeg','png');
	$path_file          = "foto/".$nama_file;
	$file               = explode(".", $nama_file);
	$extension          = array_pop($file);
	try {
		$query = "SELECT username FROM tb_user WHERE username=:username";
		$stmt = $dbConn->prepare($query);
    $stmt->bindParam(':username', $username);
		$stmt->execute();

		$count = $stmt->rowCount();
		if($count > 0) {
			header("location: masterfile.php?page=user&username=$username&alert=4");
		}else {
			if (in_array($extension, $allowed_extensions)) {
                if($ukuran_file <= 1000000) {
                    if(move_uploaded_file($tmp_file, $path_file)) {
				        $query = "INSERT INTO tb_user(nmlengkap,username,password,jabatan,foto)
								  VALUES(:nmlengkap,:username,:password,:jabatan,:foto)";
				        $stmt = $pdo->prepare($query);
				        //$stmt->bindParam(':id', $id);
				        $stmt->bindParam(':nmlengkap', $nmlengkap);
				        $stmt->bindParam(':username', $username);
				        $stmt->bindParam(':password', $password);
				        $stmt->bindParam(':jabatann', $jabatan);
				        $stmt->bindParam(':foto', $nama_file);
				        $stmt->execute();
						            header('location: masterfile.php?page=user&alert=1');
                    } else {
                        header("location: masterfile.php?page=user&alert=5");
                    }
                } else {
                    header("location: masterfile.php?page=user&alert=6");
                }
            } else {
                header("location: masterfile.php?page=user&alert=7");
            }
		}
        $pdo = null;
	} catch (PDOException $e) {
        echo "ada kesalahan : ".$e->getMessage();
	}
}
?>