db.php

<?php
    // connect to the database
    if ($is_server) {
        $dbHost = "10.100.3.12";
        $dbUser = "bayiku";
        $dbPass = "b@y!ku";
        $dbName = "bayiku";
    } else {
        $dbHost = "localhost";
        $dbUser = "root";
        $dbPass = "";
        $dbName = "inibayik_bayi";
    }

/*Tambahan*/
    $db = new PDO('mysql:host='.$dbHost.';dbname='.$dbName.';charset=utf8', $dbUser, $dbPass);
    $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    $db->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
/*end Tambahan*/

    $dbConn = mysql_connect ($dbHost, $dbUser, $dbPass);
    if (!$dbConn) {
        common_message_error('Could not connect: ' . mysql_error());
    }

    $dbSelected = mysql_select_db($dbName, $dbConn);
    if (!$dbSelected) {
        common_message_error ('Can\'t use $dbName : ' . mysql_error());
    }

    function dbQuery ($sql) {
        $sql = trim ($sql);
        $res = mysql_query($sql);
        if (!$res) {
            $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
            $errMessage .= 'Whole query: ' . $sql;
            common_message_error($errMessage);
        }
        return $res;
    }

    function dbInsertLastModification($sql, $tablename, $form="", $remind_datetime="", $user_id_view="") {
        global $global_user_id;
        $tmp_arr = explode(" ",$sql);
        $action = strtolower($tmp_arr[0]);

        $new_sql = "SELECT MAX(id) as last_id FROM last_modification_table;";
        $row = dbQueryAndFetch($new_sql);
        $last_id = $row["last_id"]+1;

        if ($remind_datetime=="") $remind_datetime="NOW()";

        if (($tablename!="token") && ($tablename!="customer_token")) {
            if (!$user_id_view) $user_id_view = $global_user_id;
            $sql = "insert into last_modification_table (id, table_name, `sql`, form, user_id, user_id_view, `action`, update_at, remind_datetime)
                        values ('".$last_id."','".$tablename."','".mysql_real_escape_string($sql)."','".$form."','".$global_user_id."','".$user_id_view."','".$action."',NOW(),".$remind_datetime.")";
            $res2 = mysql_query($sql);

            if (!$res2) {
                $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
                $errMessage .= 'Whole query: ' . $sql;
                common_message_error($errMessage);
            }
        }
    }

    function dbExecute($sql,$tablename, $form="", $remind_datetime="", $user_id_view="") {
        global $global_user_id;
        $sql = trim ($sql);
        $res = mysql_query($sql);
        if ($res) {
            dbInsertLastModification($sql,$tablename,$form,$remind_datetime,$user_id_view);
        } else {
            $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
            $errMessage .= 'Whole query: ' . $sql;
            common_message_error($errMessage);
        }
        return $res;
    }

    function dbExecuteArray($table, $data, $tablename="", $form="", $remind_datetime="", $exclude = array()) {
        $fields = $values = array();
        if( !is_array($exclude) ) $exclude = array($exclude);
        foreach( array_keys($data) as $key ) {
            if( !in_array($key, $exclude) ) {
                $fields[] = "`$key`";
                $values[] = "'" . mysql_real_escape_string($data[$key]) . "'";
            }
        }
        $fields = implode(",", $fields);
        $values = implode(",", $values);

        $sql = "INSERT INTO `$table` ($fields) VALUES ($values)";
        $res = mysql_query($sql);
        if($res) {
            if($tablename != '') {
                $tmp_arr = explode(" ",$sql);
                $action = strtolower($tmp_arr[0]);

                $new_sql = "SELECT MAX(id) as last_id FROM last_modification_table;";
                $row = dbQueryAndFetch($new_sql);
                $last_id = $row["last_id"]+1;

                if ($remind_datetime=="") $remind_datetime="NOW()";
                $sql = "insert into last_modification_table (id, table_name, `sql`, form, `action`, update_at, remind_datetime)
                            values ('".$last_id."','".$tablename."','".mysql_real_escape_string($sql)."','".$form."','".$action."',NOW(),".$remind_datetime.")";
                $res2 = mysql_query($sql);

                if (!$res2) {
                    $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
                    echo $errMessage .= 'Whole query: ' . $sql;
                    common_message_error($errMessage);
                }
            }
        } else {
            $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
            echo $errMessage .= 'Whole query: ' . $sql;
            common_message_error($errMessage);
        }
        return $res;
    }

function dbExecuteUpdateArray($table, $data, $id_field, $id_value, $tablename="", $form="", $remind_datetime="") {
    foreach ($data as $field=>$value) {
        $fields[] = sprintf("`%s` = '%s'", $field, mysql_real_escape_string($value));
    }
    $field_list = join(',', $fields);
    $sql = sprintf("UPDATE `%s` SET %s WHERE `%s` = %s", $table, $field_list, $id_field, $id_value);
    $res = mysql_query($sql);
    if($res) {
        if($tablename != '') {
            $tmp_arr = explode(" ",$sql);
            $action = strtolower($tmp_arr[0]);

            $new_sql = "SELECT MAX(id) as last_id FROM last_modification_table;";
            $row = dbQueryAndFetch($new_sql);
            $last_id = $row["last_id"]+1;

            if ($remind_datetime=="") $remind_datetime="NOW()";
            $sql = "insert into last_modification_table (id, table_name, `sql`, form, `action`, update_at, remind_datetime)
                            values ('".$last_id."','".$tablename."','".mysql_real_escape_string($sql)."','".$form."','".$action."',NOW(),".$remind_datetime.")";
            $res2 = mysql_query($sql);

            if (!$res2) {
                $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
                echo $errMessage .= 'Whole query: ' . $sql;
                common_message_error($errMessage);
            }
        }
    } else {
        $errMessage  = 'Invalid query: ' . mysql_error() . "\n";
        echo $errMessage .= 'Whole query: ' . $sql;
        common_message_error($errMessage);
    }
    return $res;
}

    function dbFetch($res) {
        return mysql_fetch_array($res);
    }

    function dbQueryAndFetch($sql) {
        $res = dbQuery($sql);
        if ($res) return dbFetch($res);
    }

    /* get number of field from query result */
    function dbNumField($res) {
        return mysql_num_fields($res);
    }

    /* get Field Name from query result */
    function dbFieldName($res, $idx) {
        return mysql_field_name($res, $idx);
    }

    function dbGetLastID($tablename) {
        $sql = "DESC ".$tablename;
        $res = dbQuery($sql);
        while ($row=dbFetch($res)) {
            if ($row["Key"]=="PRI") { $field_name = $row["Field"]; break; }
        }

        $sql = sprintf("SELECT MAX(%s) from %s",$field_name,$tablename);
        $row = dbQueryAndFetch($sql);
        return $row[0];
    }

    function dbGetNewID($tablename) {
        $new_id = dbGetLastID($tablename) + 1;
        return $new_id;
    }
    function dbQueryAndFetchAll($sql) {
        $res = dbQuery($sql);
        $arr = array();
        while($row = dbFetch($res)) {
            $arr[] = $row;
        }
        return $arr;
    }
    function dbNumRows($sql) {
        return count(dbQueryAndFetchAll($sql));
    }

    function dbExecuteOnline ($sql, $tablename) {

        $param = array (
            "username" => "xxx",
            "password" => "7841",
            "sql" => $sql
        );

        $param_encrypted = encrypt_text(serialize($param));

        $curlstring = sprintf("param=%s"
            , $param_encrypted
        );

        $url = 'http://www.inibayiku.com/newxfiles/dbexecute/dbexecuteonline.php';
        $curlHandle = curl_init();
        curl_setopt($curlHandle, CURLOPT_URL, $url);
        curl_setopt($curlHandle, CURLOPT_POSTFIELDS, $curlstring);
        curl_setopt($curlHandle, CURLOPT_HEADER, 0);
        //curl_setopt($curlHandle, CURLOPT_HTTPHEADER,$headers);
        curl_setopt($curlHandle, CURLOPT_TIMEOUT,15);
        curl_setopt($curlHandle, CURLOPT_POST, 1);
        curl_setopt($curlHandle, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($curlHandle,CURLOPT_SSL_VERIFYPEER,false);


            $output = curl_exec($curlHandle);

        curl_close($curlHandle);
        return $output;

    }

?>