| Server IP : 93.127.187.117 / Your IP : 216.73.216.163 Web Server : LiteSpeed System : Linux id-dci-web1986.main-hosting.eu 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64 User : u686484674 ( 686484674) PHP Version : 8.0.30 Disable Function : system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail MySQL : OFF | cURL : ON | WGET : ON | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/u686484674/domains/idikotabandung.com/public_html/IDI/ |
Upload File : |
<?php
ob_start();
?>
<!DOCTIPE html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->
<meta name="description" content="">
<meta name="author" content="">
<link rel="icon" href="assets/img/icon.png">
<title>IDI</title>
</head>
<body>
<?php
session_start();
include "koneksi.php";
// VARIABEL ini akan memastikan bahwa inputan user tidak mengandung ciri ciri tindakan SQL Injection
$username = mysqli_real_escape_string($konek, $_POST['username']);
$p = mysqli_real_escape_string($konek,md5( $_POST['password']));
//$username = $_POST["username"];
//$p = md5($_POST["password"]);
$sql = "select * from mahasiswa where npm='".$username."' and status='aktif' limit 1";
$hasil = mysqli_query ($konek,$sql);
$jumlah = mysqli_num_rows($hasil);
if ($jumlah>0) {
$row = mysqli_fetch_assoc($hasil);
if($row['status']=='aktif'){
$_SESSION['email']= $row['email'];
$_SESSION['npm']= $row['npm'];
$_SESSION['nama_mhs']= $row['nama_mhs'];
$nmlead= $row['nama_mhs'];
$email= $row['email'];
function acakCaptcha() {
$kode = "0123456789";
$passc = array();
$panjangkode = strlen($kode) - 2;
for ($i = 0; $i < 5; $i++) {
$n = rand(0, $panjangkode);
$passc[] = $kode[$n];
}
return implode($passc);
}
//hasil kode acak disimpan di $code
$code = acakCaptcha();
$pass= "IDI".$code;
// $_SESSION['pass']= $pass;
$to = $email;
$pass_md5 = md5($pass);
$update2 = mysqli_query($konek, "UPDATE mahasiswa SET password='$pass_md5' WHERE npm='$username'");
$header = "From: info@idikotabandung.com";
$subjek="Recovery Password";
$pesan = "
Kepada Yth: Mr.$nmlead,
Recovery Password anda :
User : $username
password : $pass
Silahkan login kembali
Demikian konfirmasi kami, terimakasih.
Regards
Sekertariat IDI Bandung
";
mail($to,$subjek,$pesan,$header);
header("Location:./vermail.php?username=$username");
}else {
echo "ID Login tidak diketemukan hub Admin via WA <br><a href='login2.php'>Kembali</a>";
echo "<script class ='merah'>window.alert('Notif: ID Login tidak diketemukan hub Admin via WA')
window.location='forgot.php'</script>";
}
}else{
echo "<script class ='merah'>window.alert('Notif: ID Login tidak diketemukan hub Admin via WA..') window.location='forgot.php'</script>";
header("location:forgot.php?pesan=Login gagal,ID Login tidak diketemukan hub Admin via WA..!");
}
?>
</body>
</html>
<?php
ob_end_flush();
?>