Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-611.26.1.el9_7.x86_64

PHP Version:

8.4.15

User:

u892747680

Directory:

/home/u892747680/domains/sisteminformasic.com/public_html/pengaduanitb/views/admin

Free Space:

9.89 TB

🔧 Quick Actions

✏️ Editing: create_lembaga.php

<?php
session_start();

// Cek apakah admin sudah login
if (!isset($_SESSION['admin_id'])) {
    header('Location: ../public/login_admin.php');
    exit();
}

// Sertakan file koneksi database
// Sesuaikan path jika struktur folder berbeda
require_once '../../config/database.php';

// Inisialisasi objek Database dan dapatkan koneksi PDO
$database = new Database();
$pdo = $database->getConnection();

// Pastikan koneksi berhasil didapatkan
if (!$pdo) {
    // Jika koneksi gagal, set pesan error dan redirect
    $_SESSION['form_message'] = 'Koneksi ke database gagal. Silakan coba lagi.';
    $_SESSION['form_message_type'] = 'error';
    header('Location: admin_dashboard.php#create-lembaga');
    exit();
}

// Proses form jika ada data yang dikirimkan
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Validasi dan sanitasi input
    $username = trim($_POST['username'] ?? '');
    $password = $_POST['password'] ?? ''; // Password akan dihash, jadi tidak perlu trim berlebihan
    $nama_lembaga = trim($_POST['nama_lembaga'] ?? '');

// Pastikan semua field wajib terisi
    if (empty($username) || empty($password) || empty($nama_lembaga)) {
        $_SESSION['form_message'] = 'Semua field harus diisi.';
        $_SESSION['form_message_type'] = 'error';
        header('Location: admin_dashboard.php#create-lembaga');
        exit();
    }

// Hash password sebelum menyimpan ke database
    $hashed_password = password_hash($password, PASSWORD_DEFAULT);

try {
        // Cek apakah username sudah ada
        $stmt_check = $pdo->prepare("SELECT COUNT(*) FROM lembaga WHERE username = :username");
        $stmt_check->bindParam(':username', $username);
        $stmt_check->execute();
        if ($stmt_check->fetchColumn() > 0) {
            $_SESSION['form_message'] = 'Username lembaga sudah ada. Silakan gunakan username lain.';
            $_SESSION['form_message_type'] = 'error';
            header('Location: admin_dashboard.php#create-lembaga');
            exit();
        }

// Siapkan query SQL untuk menyimpan data lembaga baru
        $stmt = $pdo->prepare("INSERT INTO lembaga (username, password, nama_lembaga) VALUES (:username, :password, :nama_lembaga)");

// Bind parameter
        $stmt->bindParam(':username', $username);
        $stmt->bindParam(':password', $hashed_password);
        $stmt->bindParam(':nama_lembaga', $nama_lembaga);

// Eksekusi query
        if ($stmt->execute()) {
            $_SESSION['form_message'] = 'Akun lembaga berhasil dibuat!';
            $_SESSION['form_message_type'] = 'success';
        } else {
            $_SESSION['form_message'] = 'Gagal membuat akun lembaga. Terjadi kesalahan database.';
            $_SESSION['form_message_type'] = 'error';
        }
    } catch (PDOException $e) {
        $_SESSION['form_message'] = 'Terjadi kesalahan database: ' . $e->getMessage();
        $_SESSION['form_message_type'] = 'error';
        // Dalam lingkungan produksi, sebaiknya log error detail dan tampilkan pesan generik
        // error_log($e->getMessage());
    }
} else {
    // Jika diakses langsung tanpa POST request
    $_SESSION['form_message'] = 'Akses tidak valid.';
    $_SESSION['form_message_type'] = 'error';
}

// Redirect kembali ke halaman dashboard admin, ke bagian "Buat Akun Lembaga"
header('Location: index.php#create-lembaga');
exit();
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: create_lembaga.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation