<?php
session_start();
// Apabila user belum login
if (empty($_SESSION['namauser']) AND empty($_SESSION['passuser'])){
  echo "<link href=\"../../css/style_login.css\" rel=\"stylesheet\" type=\"text/css\" />
        <div id=\"login\"><h1 class=\"fail\">Untuk mengakses modul, Anda harus login dulu.</h1>
        <p class=\"fail\"><a href=\"../../index.php\">LOGIN</a></p></div>";  
}
// Apabila user sudah login dengan benar, maka terbentuklah session
else{
  include "../../../config/koneksi.php";
  include "../../../config/library.php";
  include "../../../config/fungsi_seo.php";
  include "../../../config/fungsi_thumbnail.php";

  $module = $_GET['module'];
  $act    = $_GET['act'];

  // Hapus berita
  if ($module=='berita' AND $act=='hapus'){
    $query = "SELECT gambar FROM berita WHERE id_berita='$_GET[id]'";
    $hapus = mysqli_query($konek, $query);
    $r     = mysqli_fetch_array($hapus);
    
    if ($r['gambar']!=''){
      $namafile = $r['gambar'];
      // hapus file gambar yang berhubungan dengan berita tersebut
      unlink("../../../foto_berita/$namafile");   
      unlink("../../../foto_berita/small_$namafile");   
      
      // hapus data berita di database 
      mysqli_query($konek, "DELETE FROM berita WHERE id_berita='$_GET[id]'");      
    }
    else{
      mysqli_query($konek, "DELETE FROM berita WHERE id_berita='$_GET[id]'");
    }
    header("location:../../media.php?module=".$module);
  }

  // Input berita
  elseif ($module=='berita' AND $act=='input'){
  
   if (!empty($_POST['tag_seo'])){
      $tag_seo = $_POST['tag_seo'];
      $tag     = implode(',',$tag_seo);
    }
   
    
    $judul      = addslashes($_POST['judul']);          
    $judul_seo  = seo_title($_POST['judul']);
    $kategori   = $_POST['kategori'];
    $isi_berita = addslashes($_POST['isi_berita']);
    $a1      = addslashes($_POST['a1']);
    $a2      = addslashes($_POST['a2']);
    $a3      = addslashes($_POST['a3']);
    



 $rand = rand();
$ekstensi =  array('png','jpg','jpeg','gif','webp');
$filename = $_FILES['foto']['name'];
$ukuran = $_FILES['foto']['size'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);



 if (empty($filename)){
      mysqli_query($konek, "INSERT INTO berita(judul,
                                   judul_seo,  
                                   id_kategori,
                                   username,
                                   isi_berita,
                                   a1,
                                   a2,
                                   a3,
                                   gambar) 
                           VALUES('$judul',
                                  '$judul_seo', 
                                  '$kategori',
                                  '$_SESSION[namauser]',
                                  '$isi_berita',
                                  '$a1',
                                  '$a2',
                                  '$a3',
                                  '$xx')");
    header("location:../../media.php?module=".$module);
    }
      // Apabila ada gambar yang di upload
    else{

 
 
if(!in_array($ext,$ekstensi) ) {
  header("location:index.php?alert=gagal_ekstensi");
}else{
  if($ukuran < 1044070){    
    $xx = $rand.'_'.$filename;
    $folder = "../../../foto_berita/";
    move_uploaded_file($_FILES['foto']['tmp_name'], $folder.$rand.'_'.$filename);
    mysqli_query($konek, "INSERT INTO berita(judul,
                                   judul_seo,   
                                   id_kategori,
                                   username,
                                   isi_berita,
                                   a1,
                                   a2,
                                   a3,
                                   gambar) 
                           VALUES('$judul',
                                  '$judul_seo', 
                                  '$kategori',
                                  '$_SESSION[namauser]',
                                  '$isi_berita',
                                  '$a1',
                                  '$a2',
                                  '$a3',
                                  '$xx')");
    header("location:../../media.php?module=".$module);
  }else{
     echo "<script>window.alert('Upload Gagal! Ukuran Terlalu Besar');
              window.location=('../../media.php?module=album)</script>";
  }
}


}







  
  }

  // Update berita
  elseif ($module=='berita' AND $act=='update'){
 

    if (!empty($_POST['tag_seo'])){
      $tag_seo = $_POST['tag_seo'];
      $tag     = implode(',',$tag_seo);
    }

    $id         = $_POST['id'];
    $judul      = addslashes($_POST['judul']);           
    $judul_seo  = seo_title($_POST['judul']);
    $kategori   = $_POST['kategori'];
    $isi_berita = addslashes($_POST['isi_berita']);
     $a1      = addslashes($_POST['a1']);
    $a2      = addslashes($_POST['a2']);
    $a3      = addslashes($_POST['a3']);
    $fotoku           = $_POST['fotoku'];






$rand = rand();
$ekstensi =  array('png','jpg','jpeg','gif','webp');
$filename = $_FILES['foto']['name'];
$ukuran = $_FILES['foto']['size'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);


    // Apabila gambar tidak diganti
    if (empty($filename)){
      mysqli_query($konek, "UPDATE berita SET judul       = '$judul',
                                     judul_seo   = '$judul_seo', 
                                     id_kategori = '$kategori',
                                     isi_berita  = '$isi_berita',  
                                     a1         = '$a1',
                                     a2         = '$a2',
                                     a3         = '$a3' 
                               WHERE id_berita   = '$id'");
    header("location:../../media.php?module=".$module);
    }
    else{
        
         $namafile = $fotoku;
      
      // hapus filenya
      unlink("../../../foto_berita/$namafile");   
      unlink("../../../foto_berita/small_$namafile");

if(!in_array($ext,$ekstensi) ) {
  header("location:index.php?alert=gagal_ekstensi");
}else{
  if($ukuran < 1044070){    
    $xx = $rand.'_'.$filename;
    $folder = "../../../foto_berita/";
    move_uploaded_file($_FILES['foto']['tmp_name'], $folder.$rand.'_'.$filename);
    mysqli_query($konek, "UPDATE berita SET judul       = '$judul',
                                     judul_seo   = '$judul_seo', 
                                     id_kategori = '$kategori',
                                     isi_berita  = '$isi_berita',  
                                     a1         = '$a1',
                                     a2         = '$a2',
                                     a3         = '$a3', 
                                     gambar      = '$xx' 
                               WHERE id_berita   = '$id'");
    header("location:../../media.php?module=".$module);
  }else{
     echo "<script>window.alert('Upload Gagal! Ukuran Terlalu Besar');
              window.location=('../../media.php?module=album)</script>";
  }
} 






    } 


  }
}
?>
