Files
sidak/admin/pengguna/add_pengguna.php

91 lines
3.1 KiB
PHP

<div class="card card-primary">
<div class="card-header">
<h3 class="card-title">
<i class="fa fa-edit"></i> Tambah Data</h3>
</div>
<form action="" method="post" enctype="multipart/form-data">
<div class="card-body">
<div class="form-group row">
<label class="col-sm-2 col-form-label">Nama User</label>
<div class="col-sm-6">
<input type="text" class="form-control" id="nama_pengguna" name="nama_pengguna" placeholder="Nama user" required>
</div>
</div>
<div class="form-group row">
<label class="col-sm-2 col-form-label">Username</label>
<div class="col-sm-6">
<input type="text" class="form-control" id="username" name="username" placeholder="Username">
</div>
</div>
<div class="form-group row">
<label class="col-sm-2 col-form-label">Password</label>
<div class="col-sm-6">
<input type="password" class="form-control" id="password" name="password" placeholder="Password">
</div>
</div>
<div class="form-group row">
<label class="col-sm-2 col-form-label">Level</label>
<div class="col-sm-4">
<select name="level" id="level" class="form-control">
<option value="">- Pilih -</option>
<option value="Administrator">Administrator</option>
<option value="Kaur Pemerintah">Kaur Pemerintah</option>
</select>
</div>
</div>
</div>
<div class="card-footer">
<input type="submit" name="Simpan" value="Simpan" class="btn btn-info">
<a href="?page=data-pengguna" title="Kembali" class="btn btn-secondary">Batal</a>
</div>
</form>
</div>
<?php
if (isset ($_POST['Simpan'])){
// Map level untuk database (enum: 'admin', 'kaur')
$level_map = [
'Administrator' => 'admin',
'Kaur Pemerintah' => 'kaur'
];
$level_db = isset($level_map[$_POST['level']]) ? $level_map[$_POST['level']] : $_POST['level'];
// Sanitize Input to prevent SQL Injection & Syntax Errors
$nama_pengguna = mysqli_real_escape_string($koneksi, trim($_POST['nama_pengguna']));
$username = mysqli_real_escape_string($koneksi, trim($_POST['username']));
$password_raw = trim($_POST['password']);
$password_hash = MD5($password_raw);
$level_db = mysqli_real_escape_string($koneksi, $level_db);
//mulai proses simpan data
$sql_simpan = "INSERT INTO tb_pengguna (nama_pengguna,username,password,level) VALUES (
'$nama_pengguna',
'$username',
'$password_hash',
'$level_db')";
$query_simpan = mysqli_query($koneksi, $sql_simpan);
mysqli_close($koneksi);
if ($query_simpan) {
echo "<script>
Swal.fire({title: 'Tambah Data Berhasil',text: '',icon: 'success',confirmButtonText: 'OK'
}).then((result) => {if (result.value){
window.location = 'index.php?page=data-pengguna';
}
})</script>";
}else{
echo "<script>
Swal.fire({title: 'Tambah Data Gagal',text: '',icon: 'error',confirmButtonText: 'OK'
}).then((result) => {if (result.value){
window.location = 'index.php?page=add-pengguna';
}
})</script>";
}}
//selesai proses simpan data