Gecko [ elibrary.unsap.ac.id ]

Name	Size	Permission	Date
.git	[ DIR ]	drwxrwxrwx	2025-04-27 13:16
.well-known	[ DIR ]	drwxrwxrwx	2024-09-05 02:01
asset	[ DIR ]	drwxrwxrwx	2025-04-27 15:34
include	[ DIR ]	drwxrwxrwx	2025-04-20 13:23
resource	[ DIR ]	drwxrwxrwx	2025-04-21 15:02
save	[ DIR ]	drwxrwxrwx	2025-04-21 13:47
upload	[ DIR ]	drwxrwxrwx	2025-02-11 02:56
Backup_13_Jan_2025_1736756652.sql	0 B	-rw-rw-rw-	2025-04-20 13:22
README.md	1.52 KB	-rw-rw-rw-	2024-09-07 01:58
admin.php	6.35 KB	-rw-rw-rw-	2024-09-04 22:54
agenda_surat_keluar.php	17 KB	-rw-rw-rw-	2024-09-04 22:54
agenda_surat_masuk.php	17.09 KB	-rw-rw-rw-	2024-09-04 22:54
backup.php	9.09 KB	-rw-rw-rw-	2024-09-04 22:54
cetak_disposisi.php	12.88 KB	-rw-rw-rw-	2024-09-04 22:54
disposisi.php	11.53 KB	-rw-rw-rw-	2024-09-04 22:54
edit_disposisi.php	12.92 KB	-rw-rw-rw-	2024-09-04 22:54
edit_klasifikasi.php	9.94 KB	-rw-rw-rw-	2024-09-04 22:54
edit_surat_keluar.php	22.76 KB	-rw-rw-rw-	2024-09-04 22:54
edit_surat_masuk.php	23.54 KB	-rw-rw-rw-	2024-09-04 22:54
edit_tipe_user.php	8.92 KB	-rw-rw-rw-	2024-09-04 22:54
enable-javascript.html	3.4 KB	-rw-rw-rw-	2024-09-04 22:54
file_sk.php	10.32 KB	-rw-rw-rw-	2024-09-04 22:54
file_sm.php	10.61 KB	-rw-rw-rw-	2024-09-04 22:54
fti-aset.sql	37.22 KB	-rw-rw-rw-	2024-09-05 02:19
galeri_sk.php	17.88 KB	-rw-rw-rw-	2024-09-04 22:54
galeri_sm.php	17.91 KB	-rw-rw-rw-	2024-09-04 22:54
google3afbb06bed30a512.html	53 B	-rw-rw-rw-	2025-04-27 15:35
hapus_disposisi.php	4.86 KB	-rw-rw-rw-	2024-09-04 22:54
hapus_klasifikasi.php	4.15 KB	-rw-rw-rw-	2024-09-04 22:54
hapus_surat_keluar.php	6.94 KB	-rw-rw-rw-	2024-09-04 22:54
hapus_surat_masuk.php	7.02 KB	-rw-rw-rw-	2024-09-04 22:54
hapus_user.php	5.49 KB	-rw-rw-rw-	2024-09-04 22:54
index.php	11.43 KB	-rw-rw-rw-	2024-09-04 22:54
kode.php	847 B	-rw-rw-rw-	2025-02-01 14:35
logout.php	92 B	-rw-rw-rw-	2024-09-04 22:54
pengaturan.php	25.78 KB	-rw-rw-rw-	2024-09-04 22:54
profil.php	15.59 KB	-rw-rw-rw-	2024-09-04 22:54
referensi.php	22.04 KB	-rw-rw-rw-	2024-09-04 22:54
restore.php	10.75 KB	-rw-rw-rw-	2024-09-04 22:54
robots.txt	323 B	-rw-rw-rw-	2025-04-27 15:41
surat-fti.sql	11.87 KB	-rw-rw-rw-	2024-09-05 02:17
tambah_disposisi.php	11.71 KB	-rw-rw-rw-	2024-09-04 22:54
tambah_klasifikasi.php	9.83 KB	-rw-rw-rw-	2024-09-04 22:54
tambah_surat_keluar.php	19.99 KB	-rw-rw-rw-	2024-09-04 22:54
tambah_surat_masuk.php	21.77 KB	-rw-rw-rw-	2024-09-04 22:54
tambah_user.php	12.69 KB	-rw-rw-rw-	2024-09-04 22:54
transaksi_surat_keluar.php	25.79 KB	-rw-rw-rw-	2024-09-04 22:54
transaksi_surat_masuk.php	27.32 KB	-rw-rw-rw-	2024-09-04 22:54
upload_referensi.php	11.5 KB	-rw-rw-rw-	2024-09-04 22:54
user.php	10.28 KB	-rw-rw-rw-	2024-09-04 22:54
web.config	655 B	-rw-rw-rw-	2024-09-07 01:34

Rename

<?php

//cek session
    if(empty($_SESSION['admin'])){
        $_SESSION['err'] = '<center>Anda harus login terlebih dahulu!</center>';
        header("Location: ./");
        die();
    } else {

if($_REQUEST['id_user'] == 1){
            echo '<script language="javascript">
                    window.alert("ERROR! Super Admin tidak boleh diedit");
                    window.location.href="./admin.php?page=sett&sub=usr";
                  </script>';
        } else {

if($_REQUEST['id_user'] == $_SESSION['id_user']){
                echo '<script language="javascript">
                        window.alert("ERROR! Anda tidak diperbolehkan mengedit tipe akun Anda sendiri. Hubungi super admin untuk mengeditnya");
                        window.location.href="./admin.php?page=sett&sub=usr";
                      </script>';
            } else {

if(isset($_REQUEST['submit'])){

$id_user = $_REQUEST['id_user'];
                    $admin = $_REQUEST['admin'];

if($id_user == $_SESSION['id_user']){
                        echo '<script language="javascript">
                                window.alert("ERROR! Anda tidak boleh mengedit akun Anda sendiri. Hubungi super admin untuk mengeditnya");
                                window.location.href="./admin.php?page=sett&sub=usr";
                              </script>';
                    } else {

if(!preg_match("/^[2-3]*$/", $admin)){
                            $_SESSION['tipeuser'] = 'Form Tipe User hanya boleh mengandung karakter angka 2 atau 3';
                            echo '<script language="javascript">window.history.back();</script>';
                        } else {

$query = mysqli_query($config, "UPDATE tbl_user SET admin='$admin' WHERE id_user='$id_user'");

if($query == true){
                                $_SESSION['succEdit'] = 'SUKSES! Tipe user berhasil diupdate';
                                header("Location: ./admin.php?page=sett&sub=usr");
                                die();
                            } else {
                                $_SESSION['errQ'] = 'ERROR! Ada masalah dengan query';
                                echo '<script language="javascript">
                                        window.location.href="./admin.php?page=sett&sub=usr&act=edit&id_user='.$id_user.'";
                                      </script>';
                            }
                        }
                    }
                } else {

$id_user = mysqli_real_escape_string($config, $_REQUEST['id_user']);
                    $query = mysqli_query($config, "SELECT * FROM tbl_user WHERE id_user='$id_user'");
                    if(mysqli_num_rows($query) > 0){
                        $no = 1;
                        while($row = mysqli_fetch_array($query)){?>

<div class="row">
                            
                            <div class="col s12">
                                <nav class="secondary-nav">
                                    <div class="nav-wrapper blue-grey darken-1">
                                        <ul class="left">
                                            <li class="waves-effect waves-light  tooltipped" data-position="right" data-tooltip="Menu ini hanya untuk mengedit tipe user. Username dan password bisa diganti lewat menu profil"><a href="#" class="judul"><i class="material-icons">mode_edit</i> Edit Tipe User</a></li>
                                        </ul>
                                    </div>
                                </nav>
                            </div>
                            
                        </div>

<?php
                            if(isset($_SESSION['errQ'])){
                                $errQ = $_SESSION['errQ'];
                                echo '<div id="alert-message" class="row">
                                        <div class="col m12">
                                            <div class="card red lighten-5">
                                                <div class="card-content notif">
                                                    <span class="card-title red-text"><i class="material-icons md-36">clear</i> '.$errQ.'</span>
                                                </div>
                                            </div>
                                        </div>
                                    </div>';
                                unset($_SESSION['errQ']);
                            }
                        ?>

<div class="row jarak-form">

<form class="col s12" method="post" action="?page=sett&sub=usr&act=edit">

<div class="row">
                                    <div class="input-field col s6">
                                        <input type="hidden" value="<?php echo $row['id_user'] ;?>" name="id_user">
                                        <i class="material-icons prefix md-prefix">account_circle</i>
                                        <input id="username" type="text" value="<?php echo $row['username'] ;?>" readonly class="grey-text">
                                        <label  for="username">Username</label>
                                    </div>
                                    <div class="input-field col s6">
                                        <i class="material-icons prefix md-prefix">text_fields</i>
                                        <input id="username" type="text" value="<?php echo $row['nama'] ;?>" readonly class="grey-text">
                                        <label for="username">Nama</label>
                                    </div>
                                    <div class="input-field col s6">
                                        <i class="material-icons prefix md-prefix">supervisor_account</i><label>Pilih tipe user</label><br/>
                                        <div class="input-field col s11 right">
                                            <select class="browser-default" name="admin" id="admin" required>
                                                <option value="<?php echo $row['admin']; ?>">
                                                    <?php
                                                        if($row['admin'] == 2){
                                                            echo 'Administrator';
                                                        } else {
                                                            echo 'User Biasa';
                                                        }
                                                    ?>
                                                </option>
                                                <option value="3">User Biasa</option>
                                                <option value="2">Administrator</option>
                                            </select>
                                        </div>
                                            <?php
                                                if(isset($_SESSION['tipeuser'])){
                                                    $tipeuser = $_SESSION['tipeuser'];
                                                    echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$tipeuser.'</div>';
                                                    unset($_SESSION['tipeuser']);
                                                }
                                            ?>
                                    </div>
                                </div>
                                
                                <br/>
                                <div class="row">
                                    <div class="col 6">
                                        <button type="submit" name="submit" class="btn-large blue waves-effect waves-light">SIMPAN <i class="material-icons">done</i></button>
                                    </div>
                                    <div class="col 6">
                                        <a href="?page=sett&sub=usr" class="btn-large deep-orange waves-effect waves-light">BATAL <i class="material-icons">clear</i></a>
                                    </div>
                                </div>

</form>

</div>

<?php
                        }
                    }
                }
            }
        }
    }
?>