mirror of
https://github.com/dyzulk/raisen-app.git
synced 2026-01-26 05:15:29 +07:00
first commit
This commit is contained in:
dyzulk
294
functions.php
Normal file
294
functions.php
Normal file
@@ -0,0 +1,294 @@
|
||||
<?php
|
||||
|
||||
// koneksi ke database
|
||||
$conn = mysqli_connect("localhost", "root", "", "phpdasar", "3308");
|
||||
|
||||
function ranID(){
|
||||
$prefix = "pel-";
|
||||
$date = date("ymd");
|
||||
$uniqid = $prefix . $date . rand(10, 99);
|
||||
return $uniqid;
|
||||
}
|
||||
|
||||
function query($query) {
|
||||
global $conn;
|
||||
$result = mysqli_query($conn, $query);
|
||||
$rows = [];
|
||||
while( $row = mysqli_fetch_assoc($result) ) {
|
||||
$rows[] = $row;
|
||||
}
|
||||
return $rows;
|
||||
}
|
||||
|
||||
function getuser($id) {
|
||||
global $conn;
|
||||
$query = "SELECT * FROM user WHERE id = '$id'";
|
||||
$result = mysqli_query($conn, $query);
|
||||
$user = mysqli_fetch_assoc($result);
|
||||
return $user;
|
||||
}
|
||||
|
||||
function getdata2($table, $id) {
|
||||
global $conn;
|
||||
|
||||
// Menggunakan prepared statement untuk mencegah SQL injection
|
||||
$stmt = mysqli_prepare($conn, "SELECT * FROM $table WHERE id = ?");
|
||||
mysqli_stmt_bind_param($stmt, "i", $id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
|
||||
$result = mysqli_stmt_get_result($stmt);
|
||||
$data = mysqli_fetch_assoc($result);
|
||||
|
||||
// mysqli_close($conn);
|
||||
|
||||
return $data;
|
||||
}
|
||||
|
||||
function getuser2($id) {
|
||||
global $conn;
|
||||
$table = "user";
|
||||
|
||||
// Menggunakan prepared statement untuk mencegah SQL injection
|
||||
$stmt = mysqli_prepare($conn, "SELECT $id FROM user WHERE id = ?");
|
||||
mysqli_stmt_bind_param($stmt, "i", $id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
|
||||
$result = mysqli_stmt_get_result($stmt);
|
||||
$data = mysqli_fetch_assoc($result);
|
||||
|
||||
// mysqli_close($conn);
|
||||
|
||||
return $data;
|
||||
}
|
||||
|
||||
function role_id($id) {
|
||||
global $conn;
|
||||
$table = "user";
|
||||
|
||||
// Menggunakan prepared statement untuk mencegah SQL injection
|
||||
$stmt = mysqli_prepare($conn, "SELECT role_id FROM user WHERE id = ?");
|
||||
mysqli_stmt_bind_param($stmt, "i", $id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
|
||||
$result = mysqli_stmt_get_result($stmt);
|
||||
$data = mysqli_fetch_assoc($result);
|
||||
|
||||
// mysqli_close($conn);
|
||||
|
||||
return $data;
|
||||
}
|
||||
|
||||
|
||||
function tambah($data) {
|
||||
global $conn;
|
||||
|
||||
$nrp = htmlspecialchars($data["nrp"]);
|
||||
$nama = htmlspecialchars($data["nama"]);
|
||||
$email = htmlspecialchars($data["email"]);
|
||||
$jurusan = htmlspecialchars($data["jurusan"]);
|
||||
|
||||
// upload gambar
|
||||
$gambar = upload();
|
||||
if( !$gambar ) {
|
||||
return false;
|
||||
}
|
||||
|
||||
$query = "INSERT INTO mahasiswa
|
||||
VALUES
|
||||
('', '$nrp', '$nama', '$email', '$jurusan', '$gambar')
|
||||
";
|
||||
mysqli_query($conn, $query);
|
||||
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
|
||||
function upload() {
|
||||
|
||||
$namaFile = $_FILES['gambar']['name'];
|
||||
$ukuranFile = $_FILES['gambar']['size'];
|
||||
$error = $_FILES['gambar']['error'];
|
||||
$tmpName = $_FILES['gambar']['tmp_name'];
|
||||
|
||||
// cek apakah tidak ada gambar yang diupload
|
||||
if( $error === 4 ) {
|
||||
echo "<script>
|
||||
alert('pilih gambar terlebih dahulu!');
|
||||
</script>";
|
||||
return false;
|
||||
}
|
||||
|
||||
// cek apakah yang diupload adalah gambar
|
||||
$ekstensiGambarValid = ['jpg', 'jpeg', 'png'];
|
||||
$ekstensiGambar = explode('.', $namaFile);
|
||||
$ekstensiGambar = strtolower(end($ekstensiGambar));
|
||||
if( !in_array($ekstensiGambar, $ekstensiGambarValid) ) {
|
||||
echo "<script>
|
||||
alert('yang anda upload bukan gambar!');
|
||||
</script>";
|
||||
return false;
|
||||
}
|
||||
|
||||
// cek jika ukurannya terlalu besar
|
||||
if( $ukuranFile > 1000000 ) {
|
||||
echo "<script>
|
||||
alert('ukuran gambar terlalu besar!');
|
||||
</script>";
|
||||
return false;
|
||||
}
|
||||
|
||||
// lolos pengecekan, gambar siap diupload
|
||||
// generate nama gambar baru
|
||||
$namaFileBaru = uniqid();
|
||||
$namaFileBaru .= '.';
|
||||
$namaFileBaru .= $ekstensiGambar;
|
||||
|
||||
move_uploaded_file($tmpName, 'img/' . $namaFileBaru);
|
||||
|
||||
return $namaFileBaru;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
function hapus($id) {
|
||||
global $conn;
|
||||
mysqli_query($conn, "DELETE FROM mahasiswa WHERE id = $id");
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
|
||||
function ubah($data) {
|
||||
global $conn;
|
||||
|
||||
$id = $data["id"];
|
||||
$nrp = htmlspecialchars($data["nrp"]);
|
||||
$nama = htmlspecialchars($data["nama"]);
|
||||
$email = htmlspecialchars($data["email"]);
|
||||
$jurusan = htmlspecialchars($data["jurusan"]);
|
||||
$gambarLama = htmlspecialchars($data["gambarLama"]);
|
||||
|
||||
// cek apakah user pilih gambar baru atau tidak
|
||||
if( $_FILES['gambar']['error'] === 4 ) {
|
||||
$gambar = $gambarLama;
|
||||
} else {
|
||||
$gambar = upload();
|
||||
}
|
||||
|
||||
|
||||
$query = "UPDATE mahasiswa SET
|
||||
nrp = '$nrp',
|
||||
nama = '$nama',
|
||||
email = '$email',
|
||||
jurusan = '$jurusan',
|
||||
gambar = '$gambar'
|
||||
WHERE id = $id
|
||||
";
|
||||
|
||||
mysqli_query($conn, $query);
|
||||
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
function update_pelanggan($data) {
|
||||
global $conn;
|
||||
|
||||
$id = $data["id"];
|
||||
$nama = htmlspecialchars($data["nama"]);
|
||||
$email = htmlspecialchars($data["email"]);
|
||||
$alamat = htmlspecialchars($data["alamat"]);
|
||||
|
||||
$query = "UPDATE user SET
|
||||
nama = '$nama',
|
||||
email = '$email',
|
||||
alamat = '$alamat'
|
||||
WHERE id = '$id'
|
||||
";
|
||||
|
||||
mysqli_query($conn, $query);
|
||||
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
|
||||
function cari($keyword) {
|
||||
$query = "SELECT * FROM mahasiswa
|
||||
WHERE
|
||||
nama LIKE '%$keyword%' OR
|
||||
nrp LIKE '%$keyword%' OR
|
||||
email LIKE '%$keyword%' OR
|
||||
jurusan LIKE '%$keyword%'
|
||||
";
|
||||
return query($query);
|
||||
}
|
||||
|
||||
|
||||
function registrasi($data) {
|
||||
global $conn;
|
||||
|
||||
$id = ranID();
|
||||
$nama = htmlspecialchars($data["nama"]);
|
||||
$email = strtolower(stripslashes($data["email"]));
|
||||
$password = mysqli_real_escape_string($conn, $data["password"]);
|
||||
$password2 = mysqli_real_escape_string($conn, $data["password2"]);
|
||||
$alamat = mysqli_real_escape_string($conn, $data["alamat"]);
|
||||
$image = mysqli_real_escape_string($conn, "default.png");
|
||||
$role_id = mysqli_real_escape_string($conn, 2);
|
||||
$is_active = mysqli_real_escape_string($conn, 1);
|
||||
$date_created = time();
|
||||
|
||||
// cek email sudah ada atau belum
|
||||
$result = mysqli_query($conn, "SELECT email FROM user WHERE email = '$email'");
|
||||
if( mysqli_fetch_assoc($result) ) {
|
||||
echo "<script>
|
||||
alert('email sudah terdaftar!')
|
||||
</script>";
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
// cek konfirmasi password
|
||||
if( $password !== $password2 ) {
|
||||
echo "<script>
|
||||
alert('konfirmasi password tidak sesuai!');
|
||||
</script>";
|
||||
return false;
|
||||
}
|
||||
|
||||
// enkripsi password
|
||||
$password = password_hash($password, PASSWORD_DEFAULT);
|
||||
|
||||
// tambahkan user baru ke database
|
||||
$query = "INSERT INTO user VALUES('$id', '$email', '$password', '$nama', '$alamat', '$image', '$role_id', '$is_active', '$date_created')";
|
||||
mysqli_query($conn, $query);
|
||||
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
function tambahPelanggan($data) {
|
||||
global $conn;
|
||||
|
||||
$id = ranID();
|
||||
$email = htmlspecialchars($data["email"]);
|
||||
$password = password_hash("123456", PASSWORD_DEFAULT);
|
||||
$nama = htmlspecialchars($data["nama"]);
|
||||
$alamat = htmlspecialchars($data["alamat"]);
|
||||
$image = "default.png";
|
||||
$role_id = 2;
|
||||
$is_active = 1;
|
||||
$date_created = time();
|
||||
|
||||
$query = "INSERT INTO user
|
||||
VALUES
|
||||
('$id', '$email', '$password', '$nama', '$alamat', '$image', '$role_id', '$is_active', '$date_created')
|
||||
";
|
||||
mysqli_query($conn, $query);
|
||||
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
|
||||
function hapusPelanggan($id) {
|
||||
global $conn;
|
||||
mysqli_query($conn, "DELETE FROM user WHERE id = '$id'");
|
||||
return mysqli_affected_rows($conn);
|
||||
}
|
||||
Reference in New Issue
Block a user