<?php
if($_GET['act']=='login'){
session_start();
	if ($_SERVER['REQUEST_METHOD'] == 'POST') {
		$username = trim($_POST['username']);
		$password_input = $_POST['password'];

		$stmt = $conn->prepare("SELECT * FROM pengguna WHERE pnUserName=:username AND pnBolehAkses=1 LIMIT 1");
		$stmt->bindParam(':username', $username);
		$stmt->execute();
		$user = $stmt->fetch(PDO::FETCH_ASSOC);
		$stmt->closeCursor();

		$login_sukses = false;
		$perlu_rehash = false; 

		if ($user) {
			$stored_hash = $user['pnPassword'];

			if ($stored_hash === md5($password_input)) {
				$login_sukses = true;
				$perlu_rehash = true; 
			} 

			elseif (password_verify($password_input, $stored_hash)) {
				$login_sukses = true;
			}
		}

		if ($login_sukses) {
			if ($perlu_rehash) {
				$new_hash = password_hash($password_input, PASSWORD_DEFAULT);
				$update = $conn->prepare("UPDATE pengguna SET pnPassword = :pass WHERE pnID = :id");
				$update->bindParam(':pass', $new_hash);
				$update->bindParam(':id', $user['pnID']);
				$update->execute();
				$user['pnPassword'] = $new_hash;
			}

			$_SESSION['userid']     = $user['pnID'];
			$_SESSION['username']   = $user['pnUserName'];
			$_SESSION['password']   = $user['pnPassword'];
			$_SESSION['levelakses'] = $user['pnLevelAkses'];
			
			header('location:index.php');
			exit;
		} else {
			header('location:login.php?e=1');
			exit;
		}
	}
}elseif($_GET['act']=='logout'){
	session_destroy();
	header('location:login.php');
}elseif($_GET['act']=='updateUser'){
		$stmt = $conn->prepare("UPDATE pengguna SET
								pnNama=:namaLengkap,
								pnNIP=:nip,
								pnEmail=:email,
								pnTeleponMobile=:noHP
								WHERE pnID=:ID
								"); 
		$data = array(
					':namaLengkap'=>$_POST['namaLengkap'],
					':nip'=>$_POST['nip'],
					':email'=>$_POST['email'],
					':noHP'=>$_POST['noHP'],
					':ID'=>$_POST['ID'],
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=setting&e=0');
			}else{
			header('location:index.php?page=setting&e=1');
			}
}elseif($_GET['act']=='updatePassword'){
			if(($_SESSION['password']==md5($_POST['passLama'])) and ($_SESSION['userid']==$_POST['ID'])){
				$stmt = $conn->prepare("UPDATE pengguna SET pnPassword=:password WHERE pnID=:ID "); 
				$data = array(
					':password'=>md5($_POST['passBaru']),
					':ID'=>$_SESSION['userid']
					);
				if ($stmt->execute($data)) {
					$userid=$_SESSION['userid'];
					$username=$_SESSION['username'];
					$levelakses=$_SESSION['levelakses'];				
					session_destroy();
					session_start();
					$_SESSION['userid'] = $userid;
					$_SESSION['username'] = $username;
					$_SESSION['password'] = md5($_POST['passBaru']);
					$_SESSION['levelakses'] =$levelakses;
					header('location:index.php?e=0');
					}else{
					header('location:index.php?e=1');
					}
			}else{
					header('location:index.php?page=setting&e=3');			
			}

}elseif($_GET['act']=='updatePhoto'){
		if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=setting&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
						$stmt = $conn->prepare("UPDATE pengguna SET pnPhoto=:photo WHERE pnID=:ID "); 
						$data = array(
									':photo'=>$new_file_name,
									':ID'=>$_POST['ID']
									);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=setting&e=0');
							}else{
							header('location:index.php?page=setting&e=1');
							}
				}
			}else{
				header('location:index.php?page=setting&e=7');	
			}
		}

}elseif($_GET['act']=='addUser'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=users&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
					$stmt = $conn->prepare("INSERT INTO `tbl_user` 
											(`username`, `group`, `password`, `namaLengkap`, `nip`,  `email`, `created_on`, `active`, `photo`, `alamat`, `noHP`) 
											VALUES (:username, :group, :password, :namaLengkap, :nip,  :email, :created_on, :active, :photo, :alamat, :noHP)");
						$data = array(
									':username'=>$_POST['username'],
									':group'=>$_POST['group'],
									':password'=>md5(sha1($_POST['password'])),
									':namaLengkap'=>$_POST['namaLengkap'],
									':nip'=>$_POST['nip'],
									':email'=>$_POST['email'],
									':created_on'=>date('Y-m-d H:i:s'),
									':active'=>$_POST['active'],
									':photo'=>$new_file_name,
									':alamat'=>$_POST['alamat'],
									':noHP'=>$_POST['noHP']
									);
						if ($stmt->execute($data)) {
							header('location:index.php?page=users&e=0');
							}else{
							//print_r($stmt->pdo->errorInfo());exit;
							header('location:index.php?page=users&e=1');
							}
				}
			}else{
				header('location:index.php?page=users&e=7');	
			}
		}else{
		$stmt = $conn->prepare("INSERT INTO `tbl_user` 
								(`username`, `group`, `password`, `namaLengkap`, `nip`,  `email`, `created_on`, `active`, `photo`, `alamat`, `noHP`) 
								VALUES (:username, :group, :password, :namaLengkap, :nip, :email, :created_on, :active, :photo, :alamat, :noHP)"); 
		$data = array(
					':username'=>$_POST['username'],
					':group'=>$_POST['group'],
					':password'=>md5(sha1($_POST['password'])),
					':namaLengkap'=>$_POST['namaLengkap'],
					':nip'=>$_POST['nip'],
					':email'=>$_POST['email'],
					':created_on'=>date('Y-m-d h:i:s'),
					':active'=>$_POST['active'],
					':photo'=>'nopic.jpg',
					':alamat'=>$_POST['alamat'],
					':noHP'=>$_POST['noHP']
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=users&e=0');
			}else{
			print_r($stmt->errorInfo());exit;
			header('location:index.php?page=users&e=1');
			}
		}
		
}elseif($_GET['act']=='editUser'){
		if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=users&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
					if(isset($_POST['password'])){
							$stmt = $conn->prepare("UPDATE `tbl_user` SET 
							`username`=:username, `group`=:group, `password`=:password, `namaLengkap`=:namaLengkap, `nip`=:nip,`email`=:email, `active`=:active, `photo`=:photo, `alamat`=:alamat, `noHP`=:noHP
							WHERE ID=:ID
							");
								$data = array(
											':username'=>$_POST['username'],
											':group'=>$_POST['group'],
											':password'=>md5(sha1($_POST['password'])),
											':namaLengkap'=>$_POST['namaLengkap'],
											':nip'=>$_POST['nip'],
											':email'=>$_POST['email'],
											':active'=>$_POST['active'],
											':photo'=>$new_file_name,
											':alamat'=>$_POST['alamat'],
											':noHP'=>$_POST['noHP'],
											':ID'=>$_POST['ID']
											);
								if ($stmt->execute($data)) {							
									header('location:index.php?page=users&e=0');
									}else{
									print_r($stmt->pdo->errorInfo());exit;
									header('location:index.php?page=users&e=1');
									}
					}else{
						$stmt = $conn->prepare("UPDATE `tbl_user` SET 
							`username`=:username, `group`=:group, `namaLengkap`=:namaLengkap, `nip`=:nip,  `email`=:email, `active`=:active, `photo`=:photo, `alamat`=:alamat, `noHP`=:noHP
							WHERE ID=:ID
							");
								$data = array(
											':username'=>$_POST['username'],
											':group'=>$_POST['group'],
											':namaLengkap'=>$_POST['namaLengkap'],
											':nip'=>$_POST['nip'],
											':email'=>$_POST['email'],
											':active'=>$_POST['active'],
											':photo'=>$new_file_name,
											':alamat'=>$_POST['alamat'],
											':noHP'=>$_POST['noHP'],
											':ID'=>$_POST['ID']
											);
								if ($stmt->execute($data)) {							
									header('location:index.php?page=users&e=0');
									}else{
									print_r($stmt->pdo->errorInfo());exit;
									header('location:index.php?page=users&e=1');
									}						
						}
									
				}
			}else{
				header('location:index.php?page=users&e=7');	
			}
		}else{
		if(isset($_POST['password'])){
			$stmt = $conn->prepare("UPDATE `tbl_user` SET 
						`username`=:username, `group`=:group, `password`=:password, `namaLengkap`=:namaLengkap, `nip`=:nip,`email`=:email, `active`=:active, `alamat`=:alamat, `noHP`=:noHP
						WHERE ID=:ID
						"); 
			$data = array(
						':username'=>$_POST['username'],
						':group'=>$_POST['group'],
						':password'=>md5(sha1($_POST['password'])),
						':namaLengkap'=>$_POST['namaLengkap'],
						':nip'=>$_POST['nip'],
						':email'=>$_POST['email'],
						':active'=>$_POST['active'],
						':alamat'=>$_POST['alamat'],
						':noHP'=>$_POST['noHP'],
						':ID'=>$_POST['ID']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=users&e=0');
				}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=users&e=1');
				}
		}else{
			$stmt = $conn->prepare("UPDATE `tbl_user` SET 
						`username`=:username, `group`=:group, `namaLengkap`=:namaLengkap, `nip`=:nip, `email`=:email, `active`=:active, `alamat`=:alamat, `noHP`=:noHP
						WHERE ID=:ID
						"); 
			$data = array(
						':username'=>$_POST['username'],
						':group'=>$_POST['group'],
						':namaLengkap'=>$_POST['namaLengkap'],
						':nip'=>$_POST['nip'],
						':email'=>$_POST['email'],
						':active'=>$_POST['active'],
						':alamat'=>$_POST['alamat'],
						':noHP'=>$_POST['noHP'],
						':ID'=>$_POST['ID']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=users&e=0');
				}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=users&e=1');
				}
		
			}		
		}
	}else{ 	 header('location:index.php');}
}elseif($_GET['act']=='deleteUser'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("DELETE FROM tbl_user WHERE ID=:ID"); 
			$data = array(
						':ID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=users&e=5');
				}else{
				header('location:index.php?page=users&e=4');
				}
		}else{  header('location:index.php');}
}elseif($_GET['act']=='addJabatan'){
		if($_SESSION['levelakses']=='Administrator'){
		$stmt = $conn->prepare("INSERT INTO jabatan
								(jbtnNama, jbtnParentID) 
								VALUES (:jbtnNama, :jbtnParentID) 
								"); 
		$data = array(
					':jbtnNama'=>$_POST['jbtnNama'],
					':jbtnParentID'=>$_POST['jbtnParentID']
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=jabatan&e=0');
			}else{
			header('location:index.php?page=jabatan&e=1');
			}
		}else{  header('location:index.php');}
}elseif($_GET['act']=='deleteJabatan'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("DELETE FROM jabatan WHERE jbtnID=:ID"); 
			$data = array(
						':ID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=jabatan&e=5');
				}else{
				header('location:index.php?page=jabatan&e=4');
				}
		}else{  header('location:index.php');}	
}elseif($_GET['act']=='editJabatan'){
	if($_SESSION['levelakses']=='Administrator'){
		$stmt = $conn->prepare("UPDATE jabatan SET
								jbtnNama=:jbtnNama,
								jbtnParentID=:jbtnParentID
								WHERE jbtnID=:jbtnID
								"); 
		$data = array(
					':jbtnNama'=>$_POST['jbtnNama'],
					':jbtnParentID'=>$_POST['jbtnParentID'],
					':jbtnID'=>$_POST['jbtnID']
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=jabatan&e=0');
			}else{
 			header('location:index.php?page=jabatan&e=1');
			}
		}else{  header('location:index.php');}				
}elseif($_GET['act']=='addArtikel'){
		if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=artikel&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/post/'.$new_file_name);
						$stmt = $conn->prepare("INSERT INTO tbl_post
													(post_author, post_date, post_content,post_title, post_status, post_type, post_image , post_counter	) 
													VALUES (:post_author, :post_date, :post_content,:post_title, :post_status, :post_type, :post_image , :post_counter	) 
													"); 
						$data = array(
									':post_author'=>$_SESSION['userid'],
									':post_date'=>date('Y-m-d H:i:s'),
									':post_content'=>$_POST['post_content'],
									':post_title'=>$_POST['post_title'],
									':post_status'=>$_POST['post_status'],
									':post_type'=>$_POST['post_type'],
									':post_image'=>$new_file_name,
									':post_counter'=>0
									);
						if ($stmt->execute($data)) { 
								header('location:index.php?page=artikel&e=0');
								}else{
								//print_r($stmt->pdo->errorInfo());exit;
								header('location:index.php?page=artikel&e=1');
								}															
				}
			}else{
				header('location:index.php?page=artikel&e=7');	
			}
		}else{
			$stmt = $conn->prepare("INSERT INTO tbl_post
										(post_author, post_date, post_content,post_title, post_status, post_type, post_image , post_counter	) 
										VALUES (:post_author, :post_date, :post_content,:post_title,:post_status, :post_type, :post_image , :post_counter	) 
										"); 
			$data = array(
						':post_author'=>$_SESSION['userid'],
						':post_date'=>date('Y-m-d H:i:s'),
						':post_content'=>$_POST['post_content'],
						':post_title'=>$_POST['post_title'],
						':post_status'=>$_POST['post_status'],
						':post_type'=>$_POST['post_type'],
						':post_image'=>'no_image_available.jpeg',
						':post_counter'=>0
						);
			if ($stmt->execute($data)) {
					header('location:index.php?page=artikel&e=0');
					}else{
					print_r($stmt->pdo->errorInfo());exit;
					header('location:index.php?page=artikel&e=1');
					}			
		}


}elseif($_GET['act']=='deleteArtikel'){
			$stmt = $conn->prepare("DELETE FROM tbl_post WHERE post_ID=:post_ID"); 
			$data = array(
						':post_ID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=artikel&e=5');
				}else{
				header('location:index.php?page=artikel&e=4');
				}
}elseif($_GET['act']=='editArtikel'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					writeLog('Warning','size Photo yang diupload lebih dari 1 MB ',$_SESSION['userid']);
					header('location:index.php?page=artikel&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/post/'.$new_file_name);
						$stmt = $conn->prepare("UPDATE tbl_post SET
													post_author=:post_author , post_content=:post_content ,post_title=:post_title , post_status=:post_status , post_type=:post_type, post_image=:post_image WHERE post_ID=:post_ID
													"); 
						$data = array(
									':post_author'=>$_SESSION['userid'],
									':post_content'=>$_POST['post_content'],
									':post_title'=>$_POST['post_title'],
									':post_status'=>$_POST['post_status'],
									':post_type'=>$_POST['post_type'],
									':post_image'=>$new_file_name,
									':post_ID'=>$_POST['post_ID']
									);
						if ($stmt->execute($data)) { 
								header('location:index.php?page=artikel&e=0');
								}else{
								//print_r($stmt->pdo->errorInfo());exit;
								header('location:index.php?page=artikel&e=1');
								}														
				}
			}else{
				header('location:index.php?page=artikel&e=7');
			}
		}else{
						$stmt = $conn->prepare("UPDATE tbl_post SET
													post_author=:post_author , post_content=:post_content ,post_title=:post_title , post_status=:post_status , post_type=:post_type WHERE post_ID=:post_ID
													"); 
						$data = array(
									':post_author'=>$_SESSION['userid'],
									':post_content'=>$_POST['post_content'],
									':post_title'=>$_POST['post_title'],
									':post_status'=>$_POST['post_status'],
									':post_type'=>$_POST['post_type'],
									':post_ID'=>$_POST['post_ID']
									);
						if ($stmt->execute($data)) { 
								header('location:index.php?page=artikel&e=0');
								}else{
								//print_r($stmt->pdo->errorInfo());exit;
								header('location:index.php?page=artikel&e=1');
								}			
		}
}elseif($_GET['act']=='editAbout'){
		$stmt = $conn->prepare("UPDATE about SET
								akun=:akun
								WHERE aboutID=:aboutID
								"); 
		$data = array(
					':akun'=>$_POST['alamat'],
					':aboutID'=>'alamat'
					);
		$stmt->execute($data);
		$data =	array(
					':akun'=>$_POST['phone'],
					':aboutID'=>'phone'
					);
		$stmt->execute($data);
		$data = array(
					':akun'=>$_POST['email'],
					':aboutID'=>'email'
					);
		$stmt->execute($data);
		$data = array(
					':akun'=>$_POST['facebook'],
					':aboutID'=>'facebook'
					);
		$stmt->execute($data);
		$data = array(
					':akun'=>$_POST['twitter'],
					':aboutID'=>'twitter'
					);
		$stmt->execute($data);
		$data = array(
					':akun'=>$_POST['youtube'],
					':aboutID'=>'youtube'
					);
		$stmt->execute($data);
		$data = array(
					':akun'=>$_POST['website'],
					':aboutID'=>'website'
					);			

		if ($stmt->execute($data)) { 
			header('location:index.php?page=about&e=0');
			}else{
			header('location:index.php?page=about&e=1');
			}
}elseif($_GET['act']=='addPerizinan'){
		if($_SESSION['levelakses']=='Administrator'){
		if($_FILES['file']['name']){
			if(!$_FILES['file']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['file']['name'])); //rename file
				if($_FILES['file']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=perizinan&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['file']['tmp_name'], '../assets/sop/'.$new_file_name);
															
				}
			}else{
				header('location:index.php?page=perizinan&e=7');	
			}
		}else{
			$new_file_name='';
		}
		
		if($_FILES['formulir']['name']){
			if(!$_FILES['formulir']['error']){
			$valid_file = true;
				$formulir = strtolower(str_replace(' ','_',$_FILES['formulir']['name'])); //rename file
				if($_FILES['formulir']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=perizinan&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['formulir']['tmp_name'], '../assets/sop/'.$formulir);
															
				}
			}else{
				header('location:index.php?page=perizinan&e=7');	
			}
			
		}else{
			$formulir='';
		}		
		
		$stmt = $conn->prepare("INSERT INTO jenislayanan (judul, deskripsi, jenis,tampil,sop,formulir) VALUES (:judul , :deskripsi , :jenis, :tampil, :sop, :formulir) "); 
		$data = array(
					':judul'=>$_POST['judul'],
					':deskripsi'=>$_POST['deskripsi'],
					':jenis'=>$_POST['jenis'],
					':tampil'=>1,
					':sop'=>$new_file_name,
					':formulir'=>$formulir
					);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=perizinan&e=0');
			}else{
				header('location:index.php?page=perizinan&e=1');
			}		
		
			
		}else{  header('location:index.php');}
}elseif($_GET['act']=='deletePerizinan'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("DELETE FROM jenislayanan WHERE id=:ID"); 
			$data = array(
						':ID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=perizinan&e=5');
				}else{
				header('location:index.php?page=perizinan&e=4');
				}
		}else{  header('location:index.php');}	
}elseif($_GET['act']=='editPerizinan'){
	if($_SESSION['levelakses']=='Administrator'){		
		if($_FILES['file']['name']){
			if(!$_FILES['file']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['file']['name'])); //rename file
				if($_FILES['file']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=perizinan&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['file']['tmp_name'], '../assets/sop/'.$new_file_name);
						$stmt = $conn->prepare("UPDATE jenislayanan SET sop=:sop WHERE id=:id "); 
						$data = array(
									':sop'=>$new_file_name,
									':id'=>$_POST['id']
									);
					if (!$stmt->execute($data)) { header('location:index.php?page=perizinan&e=1');}															
				}
			}else{
				header('location:index.php?page=perizinan&e=7');	
			}
		}
		
		if($_FILES['formulir']['name']){
			if(!$_FILES['formulir']['error']){
			$valid_file = true;
				$formulir = strtolower(str_replace(' ','_',$_FILES['formulir']['name'])); //rename file
				if($_FILES['formulir']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=perizinan&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['formulir']['tmp_name'], '../assets/sop/'.$formulir);
						$stmt = $conn->prepare("UPDATE jenislayanan SET formulir=:formulir WHERE id=:id "); 
						$data = array(
									':formulir'=>$formulir,
									':id'=>$_POST['id']
									);
					if (!$stmt->execute($data)) { header('location:index.php?page=perizinan&e=1');}															
				}
			}else{
				header('location:index.php?page=perizinan&e=7');	
			}
		}		
		
		$stmt = $conn->prepare("UPDATE jenislayanan SET
								judul=:judul,
								deskripsi=:deskripsi,
								jenis=:jenis
								WHERE id=:id
								"); 
		$data = array(
					':judul'=>$_POST['judul'],
					':deskripsi'=>$_POST['deskripsi'],
					':jenis'=>$_POST['jenis'],
					':id'=>$_POST['id']
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=perizinan&e=0');
			}else{
			header('location:index.php?page=perizinan&e=1');
		}		
		
		}else{  header('location:index.php');}				
		
}elseif($_GET['act']=='addPartner'){
		if($_SESSION['levelakses']=='Administrator'){
		if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=Partner&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../images/partner/'.$new_file_name);
					$stmt = $conn->prepare("INSERT INTO partner
											(nama, logo, link, ket) 
											VALUES (:nama, :logo, :link, :ket) 
											"); 
					$data = array(
								':nama'=>$_POST['nama'],
								':logo'=>$new_file_name,
								':link'=>$_POST['link'],
								':ket'=>$_POST['ket']
								);
					if ($stmt->execute($data)) { 
						header('location:index.php?page=Partner&e=0');
						}else{
						header('location:index.php?page=Partner&e=1');
						}															
				}
			}else{
				header('location:index.php?page=Partner&e=7');	
			}
		}					
		
		}else{  header('location:index.php');}
}elseif($_GET['act']=='deletePartner'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("DELETE FROM partner WHERE no=:ID"); 
			$data = array(
						':ID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=Partner&e=5');
				}else{
				header('location:index.php?page=Partner&e=4');
				}
		}else{  header('location:index.php');}	
}elseif($_GET['act']=='editPartner'){
	if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=Partner&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../images/partner/'.$new_file_name);
					$stmt = $conn->prepare("UPDATE partner SET nama=:nama, logo=:logo, link=:link, ket=:ket WHERE no=:no "); 
					$data = array(
								':nama'=>$_POST['nama'],
								':logo'=>$new_file_name,
								':link'=>$_POST['link'],
								':ket'=>$_POST['ket'],
								':no'=>$_POST['no']
								);
					if ($stmt->execute($data)) { 
						header('location:index.php?page=Partner&e=0');
						}else{
						header('location:index.php?page=Partner&e=1');
						}															
				}
			}else{
				header('location:index.php?page=Partner&e=7');	
			}
		}else{		
		$stmt = $conn->prepare("UPDATE partner SET nama=:nama, link=:link, ket=:ket WHERE no=:no "); 
		$data = array(
					':nama'=>$_POST['nama'],
					':link'=>$_POST['link'],
					':ket'=>$_POST['ket'],
					':no'=>$_POST['no']
					);
		if ($stmt->execute($data)) { 
			header('location:index.php?page=Partner&e=0');
			}else{
			header('location:index.php?page=Partner&e=1');
			}	
		}
	}else{  header('location:index.php');}						
}elseif($_GET['act']=='updateStruktur'){
		if($_SESSION['levelakses']=='Administrator'){

		if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=struktur&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../home/assets/'.$new_file_name);
						$stmt = $conn->prepare("UPDATE about SET akun=:photo WHERE aboutID=:ID "); 
						$data = array(
									':photo'=>$new_file_name,
									':ID'=>'zstruktur'
									);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=struktur&e=0');
							}else{
							header('location:index.php?page=struktur&e=1');
							}
				}
			}else{
				header('location:index.php?page=struktur&e=7');	
			}
		}
	}else{ header('location:index.php');}

}elseif($_GET['act']=='editPejabat'){
		if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=struktur&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../home/assets/pejabat/'.$new_file_name);

						$stmt = $conn->prepare("UPDATE `pejabat` SET 
							`nama`=:nama, `jabatan`=:jabatan, `photo`=:photo
							WHERE no=:no
							");
								$data = array(
											':nama'=>$_POST['nama'],
											':jabatan'=>$_POST['jabatan'], 
											':photo'=>$new_file_name,
											':no'=>$_POST['no']
											);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=struktur&e=0');
							}else{
							header('location:index.php?page=struktur&e=1');
							}												
				}
			}else{
				header('location:index.php?page=struktur&e=7');	
			}
		}else{
			$stmt = $conn->prepare("UPDATE `pejabat` SET 
						`nama`=:nama, `jabatan`=:jabatan
						WHERE no=:no
						"); 
			$data = array(
						':nama'=>$_POST['nama'],
						':jabatan'=>$_POST['jabatan'],
						':no'=>$_POST['no']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=struktur&e=0');
				}else{
				//print_r($stmt->errorInfo());exit;
				header('location:index.php?page=struktur&e=1');
				}	
		}
	}else{ 	header('location:index.php');}
}elseif($_GET['act']=='deletePejabat'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("DELETE FROM pejabat WHERE no=:no"); 
			$data = array(
						':no'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=struktur&e=5');
				}else{
				header('location:index.php?page=struktur&e=4');
				}
		}else{  header('location:index.php');}	
}elseif($_GET['act']=='addPejabat'){
		if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['photo']['name']){
			if(!$_FILES['photo']['error']){
			$valid_file = true;
				$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
				if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=struktur&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/pejabat/'.$new_file_name);
						$stmt = $conn->prepare("INSERT INTO `pejabat` (`nama`, `jabatan`, `photo`) 
						VALUES (:nama, :jabatan, :photo) ");
								$data = array(
											':nama'=>$_POST['nama'],
											':jabatan'=>$_POST['jabatan'], 
											':photo'=>$new_file_name
											);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=struktur&e=0');
							}else{
							header('location:index.php?page=struktur&e=1');
							}												
				}
			}else{
				header('location:index.php?page=struktur&e=7');	
			}
		}else{
			$stmt = $conn->prepare("INSERT INTO `pejabat` (`nama`, `jabatan`, `photo`) VALUES (:nama, :jabatan, :photo) ");
			$data = array(
						':nama'=>$_POST['nama'],
						':jabatan'=>$_POST['jabatan'],
						':photo'=>"nopic.jpg"
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=struktur&e=0');
				}else{
				//print_r($stmt->errorInfo());exit;
				header('location:index.php?page=struktur&e=1');
				}	
		}
	}else{ header('location:index.php');}
}elseif($_GET['act']=='deleteUMKM'){
			$stmt = $conn->prepare("DELETE FROM tbl_umkm WHERE umkmID=:umkmID"); 
			$data = array(
						':umkmID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=promosi&tipe=umkm&e=5');
				}else{
				header('location:index.php?page=promosi&tipe=umkm&e=4');
				}
}elseif($_GET['act']=='deleteUB'){
			$stmt = $conn->prepare("DELETE FROM tbl_ub WHERE ubID=:ubID"); 
			$data = array(
						':ubID'=>$_GET['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=promosi&tipe='.$_GET['tipe'].'&e=5');
				}else{
				header('location:index.php?page=promosi&tipe='.$_GET['tipe'].'&e=4');
				}
}elseif($_GET['act']=='addUMKM'){

		$stmt = $conn->prepare("INSERT INTO `tbl_umkm` 
								(`umkmNama`, `umkmPemilik`,  `umkmHP`, `umkmJenis`,  `umkmAlamat`,  `umkmKBLI`, `umkmNIB`, `umkmModal`, `umkmKekayaan`, `umkmTenagaKerja`, `umkmVideo`, `umkmKoor`, `umkmTglInput`) 
								VALUES (:umkmNama, :umkmPemilik, :umkmHP, :umkmJenis, :umkmAlamat, :umkmKBLI, :umkmNIB, :umkmModal, :umkmKekayaan, :umkmTenagaKerja, :umkmVideo, :umkmKoor, :umkmTglInput)"); 
		$data = array(
					':umkmNama'=>$_POST['umkmNama'],
					':umkmPemilik'=>$_POST['umkmPemilik'],
					':umkmHP'=>$_POST['umkmHP'],
					':umkmJenis'=>$_POST['umkmJenis'],
					':umkmAlamat'=>$_POST['umkmAlamat'],
					':umkmKBLI'=>$_POST['umkmKBLI'],
					':umkmNIB'=>$_POST['umkmNIB'],
					':umkmModal'=>$_POST['umkmModal'],
					':umkmKekayaan'=>$_POST['umkmKekayaan'],
					':umkmTenagaKerja'=>$_POST['umkmTenagaKerja'],
					':umkmVideo'=>$_POST['umkmVideo'],
					':umkmKoor'=>$_POST['umkmKoor'],
					':umkmTglInput'=>date('Y-m-d')					
					);
		if ($stmt->execute($data)) { 
				header('location:index.php?page=promosi&tipe=umkm&e=0');
			}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=promosi&tipe=umkm&e=1');
			}	
}elseif($_GET['act']=='editUMKM'){

		$stmt = $conn->prepare("UPDATE `tbl_umkm` SET
								`umkmNama`=:umkmNama, `umkmPemilik`=:umkmPemilik,  `umkmHP`=:umkmHP, `umkmJenis`=:umkmJenis,  `umkmAlamat`=:umkmAlamat,  `umkmKBLI`=:umkmKBLI, `umkmNIB`=:umkmNIB, `umkmModal`=:umkmModal, `umkmKekayaan`=:umkmKekayaan, `umkmTenagaKerja`=:umkmTenagaKerja, `umkmVideo`=:umkmVideo, `umkmKoor`=:umkmKoor
								WHERE `umkmID`=:umkmID"); 
		$data = array(
					':umkmID'=>$_POST['umkmID'],
					':umkmNama'=>$_POST['umkmNama'],
					':umkmPemilik'=>$_POST['umkmPemilik'],
					':umkmHP'=>$_POST['umkmHP'],
					':umkmJenis'=>$_POST['umkmJenis'],
					':umkmAlamat'=>$_POST['umkmAlamat'],
					':umkmKBLI'=>$_POST['umkmKBLI'],
					':umkmNIB'=>$_POST['umkmNIB'],
					':umkmModal'=>$_POST['umkmModal'],
					':umkmKekayaan'=>$_POST['umkmKekayaan'],
					':umkmTenagaKerja'=>$_POST['umkmTenagaKerja'],
					':umkmVideo'=>$_POST['umkmVideo'],
					':umkmKoor'=>$_POST['umkmKoor']				
					);
		if ($stmt->execute($data)) { 
				header('location:index.php?page=promosi&tipe=umkm&e=0');
			}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=promosi&tipe=umkm&e=1');
			}	
}elseif($_GET['act']=='addUB'){
		if($_FILES['ubLogo']['name']){
			if(!$_FILES['ubLogo']['error']){
			$valid_file = true;
				$ubLogo = strtolower(str_replace(' ','_',$_FILES['ubLogo']['name'])); //rename file
				if($_FILES['ubLogo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=artikel&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['ubLogo']['tmp_name'], '../assets/post/'.$ubLogo);
					$stmt = $conn->prepare("INSERT INTO `tbl_ub` 
											(`ubSektor`, `ubSubSektor`,  `ubNama`, `ubNegara`,  `ubAlamat`,  `ubEmail`, `ubBidangUsaha`, `ubLokasi`, `ubNoIzin`, `ubInvestasi`, `ubVideo`, `ubKoor`, `ubTipe`, `ubTglInput`, `ubLogo`, `ubTampil`) 
											VALUES (:ubSektor, :ubSubSektor, :ubNama, :ubNegara, :ubAlamat, :ubEmail, :ubBidangUsaha, :ubLokasi, :ubNoIzin, :ubInvestasi, :ubVideo, :ubKoor, :ubTipe, :ubTglInput, :ubLogo, :ubTampil)"); 
					$data = array(
								':ubSektor'=>$_POST['ubSektor'],
								':ubSubSektor'=>$_POST['ubSubSektor'],
								':ubNama'=>$_POST['ubNama'],
								':ubNegara'=>$_POST['ubNegara'],
								':ubAlamat'=>$_POST['ubAlamat'],
								':ubEmail'=>$_POST['ubEmail'],
								':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
								':ubLokasi'=>$_POST['ubLokasi'],
								':ubNoIzin'=>$_POST['ubNoIzin'],
								':ubInvestasi'=>$_POST['ubInvestasi'],
								':ubVideo'=>$_POST['ubVideo'],
								':ubKoor'=>$_POST['ubKoor'],
								':ubTipe'=>$_POST['ubTipe'],
								':ubTglInput'=>date('Y-m-d'),
								':ubLogo'=>$ubLogo,
								':ubTampil'=>$_POST['ubTampil']
								);
					if ($stmt->execute($data)) { 
							header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
						}else{
							print_r($stmt->errorInfo());exit;
							header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
						}															
				}
			}else{
				header('location:index.php?page=artikel&e=7');	
			}
		}else{
			$stmt = $conn->prepare("INSERT INTO `tbl_ub` 
									(`ubSektor`, `ubSubSektor`,  `ubNama`, `ubNegara`,  `ubAlamat`,  `ubEmail`, `ubBidangUsaha`, `ubLokasi`, `ubNoIzin`, `ubInvestasi`, `ubVideo`, `ubKoor`, `ubTipe`, `ubTglInput`, `ubLogo`, `ubTampil`) 
									VALUES (:ubSektor, :ubSubSektor, :ubNama, :ubNegara, :ubAlamat, :ubEmail, :ubBidangUsaha, :ubLokasi, :ubNoIzin, :ubInvestasi, :ubVideo, :ubKoor, :ubTipe, :ubTglInput, :ubLogo, :ubTampil)"); 
			$data = array(
						':ubSektor'=>$_POST['ubSektor'],
						':ubSubSektor'=>$_POST['ubSubSektor'],
						':ubNama'=>$_POST['ubNama'],
						':ubNegara'=>$_POST['ubNegara'],
						':ubAlamat'=>$_POST['ubAlamat'],
						':ubEmail'=>$_POST['ubEmail'],
						':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
						':ubLokasi'=>$_POST['ubLokasi'],
						':ubNoIzin'=>$_POST['ubNoIzin'],
						':ubInvestasi'=>$_POST['ubInvestasi'],
						':ubVideo'=>$_POST['ubVideo'],
						':ubKoor'=>$_POST['ubKoor'],
						':ubTipe'=>$_POST['ubTipe'],
						':ubTglInput'=>date('Y-m-d'),
						':ubLogo'=>'company_logo.png',
						':ubTampil'=>$_POST['ubTampil']
						);
			if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
				}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
				}			
		}
	
}elseif($_GET['act']=='editUB'){
	
		if($_FILES['ubLogo']['name']){
			if(!$_FILES['ubLogo']['error']){
			$valid_file = true;
				$ubLogo = strtolower(str_replace(' ','_',$_FILES['ubLogo']['name'])); //rename file
				if($_FILES['ubLogo']['size'] > (1024000)) //can't be larger than 1 MB
				{
					$valid_file = false;
					header('location:index.php?page=artikel&e=6');	
				}
				if($valid_file)
				{
					move_uploaded_file($_FILES['ubLogo']['tmp_name'], '../assets/post/'.$ubLogo);
					$stmt = $conn->prepare("UPDATE `tbl_ub` SET
								`ubSektor`=:ubSektor,`ubSubSektor`=:ubSubSektor, `ubNama`=:ubNama, `ubNegara`=:ubNegara,
								`ubAlamat`=:ubAlamat,`ubEmail`=:ubEmail,`ubBidangUsaha`=:ubBidangUsaha,
								`ubLokasi`=:ubLokasi,`ubNoIzin`=:ubNoIzin,`ubInvestasi`=:ubInvestasi,
								`ubVideo`=:ubVideo,`ubKoor`=:ubKoor,`ubLogo`=:ubLogo,`ubTampil`=:ubTampil							
								WHERE `ubID`=:ubID"); 
					$data = array(
								':ubSektor'=>$_POST['ubSektor'],
								':ubSubSektor'=>$_POST['ubSubSektor'],
								':ubNama'=>$_POST['ubNama'],
								':ubNegara'=>$_POST['ubNegara'],
								':ubAlamat'=>$_POST['ubAlamat'],
								':ubEmail'=>$_POST['ubEmail'],
								':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
								':ubLokasi'=>$_POST['ubLokasi'],
								':ubNoIzin'=>$_POST['ubNoIzin'],
								':ubInvestasi'=>$_POST['ubInvestasi'],
								':ubVideo'=>$_POST['ubVideo'],
								':ubKoor'=>$_POST['ubKoor'],
								':ubTipe'=>$_POST['ubTipe'],
								':ubTglInput'=>date('Y-m-d'),
								':ubLogo'=>$ubLogo,
								':ubTampil'=>$_POST['ubTampil']
								);
					if ($stmt->execute($data)) { 
							header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
						}else{
							print_r($stmt->errorInfo());exit;
							header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
						}															
				}
			}else{
				header('location:index.php?page=artikel&e=7');	
			}
		}else{
		$stmt = $conn->prepare("UPDATE `tbl_ub` SET
								`ubSektor`=:ubSektor,`ubSubSektor`=:ubSubSektor, `ubNama`=:ubNama, `ubNegara`=:ubNegara,
								`ubAlamat`=:ubAlamat,`ubEmail`=:ubEmail,`ubBidangUsaha`=:ubBidangUsaha,
								`ubLokasi`=:ubLokasi,`ubNoIzin`=:ubNoIzin,`ubInvestasi`=:ubInvestasi,
								`ubVideo`=:ubVideo,`ubKoor`=:ubKoor,`ubTampil`=:ubTampil							
								WHERE `ubID`=:ubID"); 
		$data = array(
					':ubSektor'=>$_POST['ubSektor'],
					':ubSubSektor'=>$_POST['ubSubSektor'],
					':ubNama'=>$_POST['ubNama'],
					':ubNegara'=>$_POST['ubNegara'],
					':ubAlamat'=>$_POST['ubAlamat'],
					':ubEmail'=>$_POST['ubEmail'],
					':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
					':ubLokasi'=>$_POST['ubLokasi'],
					':ubNoIzin'=>$_POST['ubNoIzin'],
					':ubInvestasi'=>$_POST['ubInvestasi'],
					':ubVideo'=>$_POST['ubVideo'],
					':ubKoor'=>$_POST['ubKoor'],
					':ubID'=>$_POST['ubID'],
					':ubTampil'=>$_POST['ubTampil']					
					);
		if ($stmt->execute($data)) { 
				header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
			}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
			}				
		}	


}

?>