<?php
if($_GET['act']=='login'){
	if((!isset($_POST['username'])) and (!isset($_POST['password'])) ){
		session_destroy();
		header('location:login.php');	
	}else{
				
		
		$username = trim(aInj($_POST['username']));
		$password = aInj($_POST['password']);
			$stmt = $conn->prepare("SELECT * FROM pengguna WHERE pnUserName=:username and pnBolehAkses=1 limit 1"); 
			$stmt->bindParam(':username', $username);	
			//$stmt->bindParam(':password', $password);	
			$stmt->execute();
			$user=$stmt->fetchAll();
			$stmt->closeCursor();
			if (!empty($user)){
				$stored_hash = $user[0]['pnPassword'];
				if (password_verify($password, $stored_hash)) {
					$_SESSION['userid'] = $user[0]['pnID'];
					$_SESSION['username'] = $user[0]['pnUserName'];
					$_SESSION['password'] = $user[0]['pnPassword'];
					$_SESSION['levelakses'] =$user[0]['pnLevelAkses'];	
					header('location:index.php');
				} else {
					header('location:login.php?e=1');
				}
			}else{	
				header('location:login.php?e=1');
			}
	}
}elseif($_GET['act']=='logout'){
	session_destroy();
	header('location:login.php');
}

if(isset($_SESSION) AND ($_SESSION['levelakses']=='Administrator') ){


	if($_GET['act']=='updateUser'){
			$stmt = $conn->prepare("UPDATE pengguna SET
									pnNama=:namaLengkap,
									pnNIP=:nip,
									pnEmail=:email,
									pnTeleponMobile=:noHP
									WHERE pnID=:ID
									"); 
			$data = array(
						':namaLengkap'=>aInj($_POST['namaLengkap']),
						':nip'=>aInj($_POST['nip']),
						':email'=>aInj($_POST['email']),
						':noHP'=>aInj($_POST['noHP']),
						':ID'=>aInj($_POST['ID']),
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=setting&e=0');
				}else{
				header('location:index.php?page=setting&e=1');
				}
	}elseif($_GET['act']=='updatePassword'){
				if(($_SESSION['password']==md5(aInj($_POST['passLama']))) and ($_SESSION['userid']==aInj($_POST['ID']))){
					$stmt = $conn->prepare("UPDATE pengguna SET pnPassword=:password WHERE pnID=:ID "); 
					$data = array(
						':password'=>md5(aInj($_POST['passBaru'])),
						':ID'=>$_SESSION['userid']
						);
					if ($stmt->execute($data)) {
						$userid=$_SESSION['userid'];
						$username=$_SESSION['username'];
						$levelakses=$_SESSION['levelakses'];				
						session_destroy();
						session_start();
						$_SESSION['userid'] = $userid;
						$_SESSION['username'] = $username;
						$_SESSION['password'] = md5(aInj($_POST['passBaru']));
						$_SESSION['levelakses'] =$levelakses;
						header('location:index.php?e=0');
						}else{
						header('location:index.php?e=1');
						}
				}else{
						header('location:index.php?page=setting&e=3');			
				}

	}elseif($_GET['act']=='updatePhoto'){
			if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=setting&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
							$stmt = $conn->prepare("UPDATE pengguna SET pnPhoto=:photo WHERE pnID=:ID "); 
							$data = array(
										':photo'=>$new_file_name,
										':ID'=>aInj($_POST['ID'])
										);
							if ($stmt->execute($data)) { 
								header('location:index.php?page=setting&e=0');
								}else{
								header('location:index.php?page=setting&e=1');
								}
					}
				}else{
					header('location:index.php?page=setting&e=7');	
				}
			}

	}elseif($_GET['act']=='addUser'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=users&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
						$stmt = $conn->prepare("INSERT INTO `tbl_user` 
												(`username`, `group`, `password`, `namaLengkap`, `nip`,  `email`, `created_on`, `active`, `photo`, `alamat`, `noHP`) 
												VALUES (:username, :group, :password, :namaLengkap, :nip,  :email, :created_on, :active, :photo, :alamat, :noHP)");
							$data = array(
										':username'=>$_POST['username'],
										':group'=>$_POST['group'],
										':password'=>md5(sha1($_POST['password'])),
										':namaLengkap'=>$_POST['namaLengkap'],
										':nip'=>$_POST['nip'],
										':email'=>$_POST['email'],
										':created_on'=>date('Y-m-d H:i:s'),
										':active'=>$_POST['active'],
										':photo'=>$new_file_name,
										':alamat'=>$_POST['alamat'],
										':noHP'=>$_POST['noHP']
										);
							if ($stmt->execute($data)) {
								header('location:index.php?page=users&e=0');
								}else{
								//print_r($stmt->pdo->errorInfo());exit;
								header('location:index.php?page=users&e=1');
								}
					}
				}else{
					header('location:index.php?page=users&e=7');	
				}
			}else{
			$stmt = $conn->prepare("INSERT INTO `tbl_user` 
									(`username`, `group`, `password`, `namaLengkap`, `nip`,  `email`, `created_on`, `active`, `photo`, `alamat`, `noHP`) 
									VALUES (:username, :group, :password, :namaLengkap, :nip, :email, :created_on, :active, :photo, :alamat, :noHP)"); 
			$data = array(
						':username'=>$_POST['username'],
						':group'=>$_POST['group'],
						':password'=>md5(sha1($_POST['password'])),
						':namaLengkap'=>$_POST['namaLengkap'],
						':nip'=>$_POST['nip'],
						':email'=>$_POST['email'],
						':created_on'=>date('Y-m-d h:i:s'),
						':active'=>$_POST['active'],
						':photo'=>'nopic.jpg',
						':alamat'=>$_POST['alamat'],
						':noHP'=>$_POST['noHP']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=users&e=0');
				}else{
				print_r($stmt->errorInfo());exit;
				header('location:index.php?page=users&e=1');
				}
			}
			
	}elseif($_GET['act']=='editUser'){
			if($_SESSION['levelakses']=='Administrator'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=users&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], 'assets/upload/'.$new_file_name);
						if(isset($_POST['password'])){
								$stmt = $conn->prepare("UPDATE `tbl_user` SET 
								`username`=:username, `group`=:group, `password`=:password, `namaLengkap`=:namaLengkap, `nip`=:nip,`email`=:email, `active`=:active, `photo`=:photo, `alamat`=:alamat, `noHP`=:noHP
								WHERE ID=:ID
								");
									$data = array(
												':username'=>$_POST['username'],
												':group'=>$_POST['group'],
												':password'=>md5(sha1($_POST['password'])),
												':namaLengkap'=>$_POST['namaLengkap'],
												':nip'=>$_POST['nip'],
												':email'=>$_POST['email'],
												':active'=>$_POST['active'],
												':photo'=>$new_file_name,
												':alamat'=>$_POST['alamat'],
												':noHP'=>$_POST['noHP'],
												':ID'=>$_POST['ID']
												);
									if ($stmt->execute($data)) {							
										header('location:index.php?page=users&e=0');
										}else{
										print_r($stmt->pdo->errorInfo());exit;
										header('location:index.php?page=users&e=1');
										}
						}else{
							$stmt = $conn->prepare("UPDATE `tbl_user` SET 
								`username`=:username, `group`=:group, `namaLengkap`=:namaLengkap, `nip`=:nip,  `email`=:email, `active`=:active, `photo`=:photo, `alamat`=:alamat, `noHP`=:noHP
								WHERE ID=:ID
								");
									$data = array(
												':username'=>$_POST['username'],
												':group'=>$_POST['group'],
												':namaLengkap'=>$_POST['namaLengkap'],
												':nip'=>$_POST['nip'],
												':email'=>$_POST['email'],
												':active'=>$_POST['active'],
												':photo'=>$new_file_name,
												':alamat'=>$_POST['alamat'],
												':noHP'=>$_POST['noHP'],
												':ID'=>$_POST['ID']
												);
									if ($stmt->execute($data)) {							
										header('location:index.php?page=users&e=0');
										}else{
										print_r($stmt->pdo->errorInfo());exit;
										header('location:index.php?page=users&e=1');
										}						
							}
										
					}
				}else{
					header('location:index.php?page=users&e=7');	
				}
			}else{
			if(isset($_POST['password'])){
				$stmt = $conn->prepare("UPDATE `tbl_user` SET 
							`username`=:username, `group`=:group, `password`=:password, `namaLengkap`=:namaLengkap, `nip`=:nip,`email`=:email, `active`=:active, `alamat`=:alamat, `noHP`=:noHP
							WHERE ID=:ID
							"); 
				$data = array(
							':username'=>$_POST['username'],
							':group'=>$_POST['group'],
							':password'=>md5(sha1($_POST['password'])),
							':namaLengkap'=>$_POST['namaLengkap'],
							':nip'=>$_POST['nip'],
							':email'=>$_POST['email'],
							':active'=>$_POST['active'],
							':alamat'=>$_POST['alamat'],
							':noHP'=>$_POST['noHP'],
							':ID'=>$_POST['ID']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=users&e=0');
					}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=users&e=1');
					}
			}else{
				$stmt = $conn->prepare("UPDATE `tbl_user` SET 
							`username`=:username, `group`=:group, `namaLengkap`=:namaLengkap, `nip`=:nip, `email`=:email, `active`=:active, `alamat`=:alamat, `noHP`=:noHP
							WHERE ID=:ID
							"); 
				$data = array(
							':username'=>$_POST['username'],
							':group'=>$_POST['group'],
							':namaLengkap'=>$_POST['namaLengkap'],
							':nip'=>$_POST['nip'],
							':email'=>$_POST['email'],
							':active'=>$_POST['active'],
							':alamat'=>$_POST['alamat'],
							':noHP'=>$_POST['noHP'],
							':ID'=>$_POST['ID']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=users&e=0');
					}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=users&e=1');
					}
			
				}		
			}
		}else{ 	 header('location:index.php');}
	}elseif($_GET['act']=='deleteUser'){
			if($_SESSION['levelakses']=='Administrator'){
				$stmt = $conn->prepare("DELETE FROM tbl_user WHERE ID=:ID"); 
				$data = array(
							':ID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=users&e=5');
					}else{
					header('location:index.php?page=users&e=4');
					}
			}else{  header('location:index.php');}
	}elseif($_GET['act']=='addJabatan'){
			if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("INSERT INTO jabatan
									(jbtnNama, jbtnParentID) 
									VALUES (:jbtnNama, :jbtnParentID) 
									"); 
			$data = array(
						':jbtnNama'=>$_POST['jbtnNama'],
						':jbtnParentID'=>$_POST['jbtnParentID']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=jabatan&e=0');
				}else{
				header('location:index.php?page=jabatan&e=1');
				}
			}else{  header('location:index.php');}
	}elseif($_GET['act']=='deleteJabatan'){
			if($_SESSION['levelakses']=='Administrator'){
				$stmt = $conn->prepare("DELETE FROM jabatan WHERE jbtnID=:ID"); 
				$data = array(
							':ID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=jabatan&e=5');
					}else{
					header('location:index.php?page=jabatan&e=4');
					}
			}else{  header('location:index.php');}	
	}elseif($_GET['act']=='editJabatan'){
		if($_SESSION['levelakses']=='Administrator'){
			$stmt = $conn->prepare("UPDATE jabatan SET
									jbtnNama=:jbtnNama,
									jbtnParentID=:jbtnParentID
									WHERE jbtnID=:jbtnID
									"); 
			$data = array(
						':jbtnNama'=>$_POST['jbtnNama'],
						':jbtnParentID'=>$_POST['jbtnParentID'],
						':jbtnID'=>$_POST['jbtnID']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=jabatan&e=0');
				}else{
				header('location:index.php?page=jabatan&e=1');
				}
			}else{  header('location:index.php');}				
	}elseif($_GET['act']=='addArtikel'){
			if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = md5(strtolower(str_replace(' ','_',$_FILES['photo']['name']))); //rename and enkripsi nama file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=artikel&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/post/'.$new_file_name);
							$stmt = $conn->prepare("INSERT INTO tbl_post
														(post_author, post_date, post_content,post_title, post_status, post_type, post_image , post_counter	) 
														VALUES (:post_author, :post_date, :post_content,:post_title, :post_status, :post_type, :post_image , :post_counter	) 
														"); 
							$data = array(
										':post_author'=>$_SESSION['userid'],
										':post_date'=>date('Y-m-d H:i:s'),
										':post_content'=>$_POST['post_content'],
										':post_title'=>$_POST['post_title'],
										':post_status'=>$_POST['post_status'],
										':post_type'=>$_POST['post_type'],
										':post_image'=>$new_file_name,
										':post_counter'=>0
										);
							if ($stmt->execute($data)) { 
									header('location:index.php?page=artikel&e=0');
									}else{
									//print_r($stmt->pdo->errorInfo());exit;
									header('location:index.php?page=artikel&e=1');
									}															
					}
				}else{
					header('location:index.php?page=artikel&e=7');	
				}
			}else{
				$stmt = $conn->prepare("INSERT INTO tbl_post
											(post_author, post_date, post_content,post_title, post_status, post_type, post_image , post_counter	) 
											VALUES (:post_author, :post_date, :post_content,:post_title,:post_status, :post_type, :post_image , :post_counter	) 
											"); 
				$data = array(
							':post_author'=>$_SESSION['userid'],
							':post_date'=>date('Y-m-d H:i:s'),
							':post_content'=>$_POST['post_content'],
							':post_title'=>$_POST['post_title'],
							':post_status'=>$_POST['post_status'],
							':post_type'=>$_POST['post_type'],
							':post_image'=>'no_image_available.jpeg',
							':post_counter'=>0
							);
				if ($stmt->execute($data)) {
						header('location:index.php?page=artikel&e=0');
						}else{
						print_r($stmt->pdo->errorInfo());exit;
						header('location:index.php?page=artikel&e=1');
						}			
			}


	}elseif($_GET['act']=='deleteArtikel'){
				$stmt = $conn->prepare("DELETE FROM tbl_post WHERE post_ID=:post_ID"); 
				$data = array(
							':post_ID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=artikel&e=5');
					}else{
					header('location:index.php?page=artikel&e=4');
					}
	}elseif($_GET['act']=='editArtikel'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						writeLog('Warning','size Photo yang diupload lebih dari 1 MB ',$_SESSION['userid']);
						header('location:index.php?page=artikel&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/post/'.$new_file_name);
							$stmt = $conn->prepare("UPDATE tbl_post SET
														post_author=:post_author , post_content=:post_content ,post_title=:post_title , post_status=:post_status , post_type=:post_type, post_image=:post_image WHERE post_ID=:post_ID
														"); 
							$data = array(
										':post_author'=>$_SESSION['userid'],
										':post_content'=>$_POST['post_content'],
										':post_title'=>$_POST['post_title'],
										':post_status'=>$_POST['post_status'],
										':post_type'=>$_POST['post_type'],
										':post_image'=>$new_file_name,
										':post_ID'=>$_POST['post_ID']
										);
							if ($stmt->execute($data)) { 
									header('location:index.php?page=artikel&e=0');
									}else{
									//print_r($stmt->pdo->errorInfo());exit;
									header('location:index.php?page=artikel&e=1');
									}														
					}
				}else{
					header('location:index.php?page=artikel&e=7');
				}
			}else{
							$stmt = $conn->prepare("UPDATE tbl_post SET
														post_author=:post_author , post_content=:post_content ,post_title=:post_title , post_status=:post_status , post_type=:post_type WHERE post_ID=:post_ID
														"); 
							$data = array(
										':post_author'=>$_SESSION['userid'],
										':post_content'=>$_POST['post_content'],
										':post_title'=>$_POST['post_title'],
										':post_status'=>$_POST['post_status'],
										':post_type'=>$_POST['post_type'],
										':post_ID'=>$_POST['post_ID']
										);
							if ($stmt->execute($data)) { 
									header('location:index.php?page=artikel&e=0');
									}else{
									//print_r($stmt->pdo->errorInfo());exit;
									header('location:index.php?page=artikel&e=1');
									}			
			}
	}elseif($_GET['act']=='editAbout'){
			$stmt = $conn->prepare("UPDATE about SET
									akun=:akun
									WHERE aboutID=:aboutID
									"); 
			$data = array(
						':akun'=>$_POST['alamat'],
						':aboutID'=>'alamat'
						);
			$stmt->execute($data);
			$data =	array(
						':akun'=>$_POST['phone'],
						':aboutID'=>'phone'
						);
			$stmt->execute($data);
			$data = array(
						':akun'=>$_POST['email'],
						':aboutID'=>'email'
						);
			$stmt->execute($data);
			$data = array(
						':akun'=>$_POST['facebook'],
						':aboutID'=>'facebook'
						);
			$stmt->execute($data);
			$data = array(
						':akun'=>$_POST['twitter'],
						':aboutID'=>'twitter'
						);
			$stmt->execute($data);
			$data = array(
						':akun'=>$_POST['youtube'],
						':aboutID'=>'youtube'
						);
			$stmt->execute($data);
			$data = array(
						':akun'=>$_POST['website'],
						':aboutID'=>'website'
						);			

			if ($stmt->execute($data)) { 
				header('location:index.php?page=about&e=0');
				}else{
				header('location:index.php?page=about&e=1');
				}
	}elseif($_GET['act']=='addPerizinan'){
			if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['file']['name']){
				if(!$_FILES['file']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['file']['name'])); //rename file
					if($_FILES['file']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=perizinan&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['file']['tmp_name'], '../assets/sop/'.$new_file_name);
																
					}
				}else{
					header('location:index.php?page=perizinan&e=7');	
				}
			}else{
				$new_file_name='';
			}
			
			if($_FILES['formulir']['name']){
				if(!$_FILES['formulir']['error']){
				$valid_file = true;
					$formulir = strtolower(str_replace(' ','_',$_FILES['formulir']['name'])); //rename file
					if($_FILES['formulir']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=perizinan&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['formulir']['tmp_name'], '../assets/sop/'.$formulir);
																
					}
				}else{
					header('location:index.php?page=perizinan&e=7');	
				}
				
			}else{
				$formulir='';
			}		
			
			$stmt = $conn->prepare("INSERT INTO jenislayanan (judul, deskripsi, jenis,tampil,sop,formulir) VALUES (:judul , :deskripsi , :jenis, :tampil, :sop, :formulir) "); 
			$data = array(
						':judul'=>$_POST['judul'],
						':deskripsi'=>$_POST['deskripsi'],
						':jenis'=>$_POST['jenis'],
						':tampil'=>1,
						':sop'=>$new_file_name,
						':formulir'=>$formulir
						);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=perizinan&e=0');
				}else{
					header('location:index.php?page=perizinan&e=1');
				}		
			
				
			}else{  header('location:index.php');}
	}elseif($_GET['act']=='deletePerizinan'){
			if($_SESSION['levelakses']=='Administrator'){
				$stmt = $conn->prepare("DELETE FROM jenislayanan WHERE id=:ID"); 
				$data = array(
							':ID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=perizinan&e=5');
					}else{
					header('location:index.php?page=perizinan&e=4');
					}
			}else{  header('location:index.php');}	
	}elseif($_GET['act']=='editPerizinan'){
		if($_SESSION['levelakses']=='Administrator'){		
			if($_FILES['file']['name']){
				if(!$_FILES['file']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['file']['name'])); //rename file
					if($_FILES['file']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=perizinan&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['file']['tmp_name'], '../assets/sop/'.$new_file_name);
							$stmt = $conn->prepare("UPDATE jenislayanan SET sop=:sop WHERE id=:id "); 
							$data = array(
										':sop'=>$new_file_name,
										':id'=>$_POST['id']
										);
						if (!$stmt->execute($data)) { header('location:index.php?page=perizinan&e=1');}															
					}
				}else{
					header('location:index.php?page=perizinan&e=7');	
				}
			}
			
			if($_FILES['formulir']['name']){
				if(!$_FILES['formulir']['error']){
				$valid_file = true;
					$formulir = strtolower(str_replace(' ','_',$_FILES['formulir']['name'])); //rename file
					if($_FILES['formulir']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=perizinan&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['formulir']['tmp_name'], '../assets/sop/'.$formulir);
							$stmt = $conn->prepare("UPDATE jenislayanan SET formulir=:formulir WHERE id=:id "); 
							$data = array(
										':formulir'=>$formulir,
										':id'=>$_POST['id']
										);
						if (!$stmt->execute($data)) { header('location:index.php?page=perizinan&e=1');}															
					}
				}else{
					header('location:index.php?page=perizinan&e=7');	
				}
			}		
			
			$stmt = $conn->prepare("UPDATE jenislayanan SET
									judul=:judul,
									deskripsi=:deskripsi,
									jenis=:jenis
									WHERE id=:id
									"); 
			$data = array(
						':judul'=>$_POST['judul'],
						':deskripsi'=>$_POST['deskripsi'],
						':jenis'=>$_POST['jenis'],
						':id'=>$_POST['id']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=perizinan&e=0');
				}else{
				header('location:index.php?page=perizinan&e=1');
			}		
			
			}else{  header('location:index.php');}				
			
	}elseif($_GET['act']=='addPartner'){
			if($_SESSION['levelakses']=='Administrator'){
			if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=Partner&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../images/partner/'.$new_file_name);
						$stmt = $conn->prepare("INSERT INTO partner
												(nama, logo, link, ket) 
												VALUES (:nama, :logo, :link, :ket) 
												"); 
						$data = array(
									':nama'=>$_POST['nama'],
									':logo'=>$new_file_name,
									':link'=>$_POST['link'],
									':ket'=>$_POST['ket']
									);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=Partner&e=0');
							}else{
							header('location:index.php?page=Partner&e=1');
							}															
					}
				}else{
					header('location:index.php?page=Partner&e=7');	
				}
			}					
			
			}else{  header('location:index.php');}
	}elseif($_GET['act']=='deletePartner'){
			if($_SESSION['levelakses']=='Administrator'){
				$stmt = $conn->prepare("DELETE FROM partner WHERE no=:ID"); 
				$data = array(
							':ID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=Partner&e=5');
					}else{
					header('location:index.php?page=Partner&e=4');
					}
			}else{  header('location:index.php');}	
	}elseif($_GET['act']=='editPartner'){
		if($_SESSION['levelakses']=='Administrator'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=Partner&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../images/partner/'.$new_file_name);
						$stmt = $conn->prepare("UPDATE partner SET nama=:nama, logo=:logo, link=:link, ket=:ket WHERE no=:no "); 
						$data = array(
									':nama'=>$_POST['nama'],
									':logo'=>$new_file_name,
									':link'=>$_POST['link'],
									':ket'=>$_POST['ket'],
									':no'=>$_POST['no']
									);
						if ($stmt->execute($data)) { 
							header('location:index.php?page=Partner&e=0');
							}else{
							header('location:index.php?page=Partner&e=1');
							}															
					}
				}else{
					header('location:index.php?page=Partner&e=7');	
				}
			}else{		
			$stmt = $conn->prepare("UPDATE partner SET nama=:nama, link=:link, ket=:ket WHERE no=:no "); 
			$data = array(
						':nama'=>$_POST['nama'],
						':link'=>$_POST['link'],
						':ket'=>$_POST['ket'],
						':no'=>$_POST['no']
						);
			if ($stmt->execute($data)) { 
				header('location:index.php?page=Partner&e=0');
				}else{
				header('location:index.php?page=Partner&e=1');
				}	
			}
		}else{  header('location:index.php');}						
	}elseif($_GET['act']=='updateStruktur'){
			if($_SESSION['levelakses']=='Administrator'){

			if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=struktur&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/'.$new_file_name);
							$stmt = $conn->prepare("UPDATE about SET akun=:photo WHERE aboutID=:ID "); 
							$data = array(
										':photo'=>$new_file_name,
										':ID'=>'zstruktur'
										);
							if ($stmt->execute($data)) { 
								header('location:index.php?page=struktur&e=0');
								}else{
								header('location:index.php?page=struktur&e=1');
								}
					}
				}else{
					header('location:index.php?page=struktur&e=7');	
				}
			}
		}else{ header('location:index.php');}

	}elseif($_GET['act']=='editPejabat'){
			if($_SESSION['levelakses']=='Administrator'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=struktur&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/pejabat/'.$new_file_name);

							$stmt = $conn->prepare("UPDATE `pejabat` SET 
								`nama`=:nama, `jabatan`=:jabatan, `photo`=:photo
								WHERE no=:no
								");
									$data = array(
												':nama'=>$_POST['nama'],
												':jabatan'=>$_POST['jabatan'], 
												':photo'=>$new_file_name,
												':no'=>$_POST['no']
												);
							if ($stmt->execute($data)) { 
								header('location:index.php?page=struktur&e=0');
								}else{
								header('location:index.php?page=struktur&e=1');
								}												
					}
				}else{
					header('location:index.php?page=struktur&e=7');	
				}
			}else{
				$stmt = $conn->prepare("UPDATE `pejabat` SET 
							`nama`=:nama, `jabatan`=:jabatan
							WHERE no=:no
							"); 
				$data = array(
							':nama'=>$_POST['nama'],
							':jabatan'=>$_POST['jabatan'],
							':no'=>$_POST['no']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=struktur&e=0');
					}else{
					//print_r($stmt->errorInfo());exit;
					header('location:index.php?page=struktur&e=1');
					}	
			}
		}else{ 	header('location:index.php');}
	}elseif($_GET['act']=='deletePejabat'){
			if($_SESSION['levelakses']=='Administrator'){
				$stmt = $conn->prepare("DELETE FROM pejabat WHERE no=:no"); 
				$data = array(
							':no'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=struktur&e=5');
					}else{
					header('location:index.php?page=struktur&e=4');
					}
			}else{  header('location:index.php');}	
	}elseif($_GET['act']=='addPejabat'){
			if($_SESSION['levelakses']=='Administrator'){
				if($_FILES['photo']['name']){
				if(!$_FILES['photo']['error']){
				$valid_file = true;
					$new_file_name = strtolower(str_replace(' ','_',$_FILES['photo']['name'])); //rename file
					if($_FILES['photo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=struktur&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['photo']['tmp_name'], '../assets/pejabat/'.$new_file_name);
							$stmt = $conn->prepare("INSERT INTO `pejabat` (`nama`, `jabatan`, `photo`) 
							VALUES (:nama, :jabatan, :photo) ");
									$data = array(
												':nama'=>$_POST['nama'],
												':jabatan'=>$_POST['jabatan'], 
												':photo'=>$new_file_name
												);
							if ($stmt->execute($data)) { 
								header('location:index.php?page=struktur&e=0');
								}else{
								header('location:index.php?page=struktur&e=1');
								}												
					}
				}else{
					header('location:index.php?page=struktur&e=7');	
				}
			}else{
				$stmt = $conn->prepare("INSERT INTO `pejabat` (`nama`, `jabatan`, `photo`) VALUES (:nama, :jabatan, :photo) ");
				$data = array(
							':nama'=>$_POST['nama'],
							':jabatan'=>$_POST['jabatan'],
							':photo'=>"nopic.jpg"
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=struktur&e=0');
					}else{
					//print_r($stmt->errorInfo());exit;
					header('location:index.php?page=struktur&e=1');
					}	
			}
		}else{ header('location:index.php');}
	}elseif($_GET['act']=='deleteUMKM'){
				$stmt = $conn->prepare("DELETE FROM tbl_umkm WHERE umkmID=:umkmID"); 
				$data = array(
							':umkmID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe=umkm&e=5');
					}else{
					header('location:index.php?page=promosi&tipe=umkm&e=4');
					}
	}elseif($_GET['act']=='deleteUB'){
				$stmt = $conn->prepare("DELETE FROM tbl_ub WHERE ubID=:ubID"); 
				$data = array(
							':ubID'=>$_GET['id']
							);
				if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe='.$_GET['tipe'].'&e=5');
					}else{
					header('location:index.php?page=promosi&tipe='.$_GET['tipe'].'&e=4');
					}
	}elseif($_GET['act']=='addUMKM'){

			$stmt = $conn->prepare("INSERT INTO `tbl_umkm` 
									(`umkmNama`, `umkmPemilik`,  `umkmHP`, `umkmJenis`,  `umkmAlamat`,  `umkmKBLI`, `umkmNIB`, `umkmModal`, `umkmKekayaan`, `umkmTenagaKerja`, `umkmVideo`, `umkmKoor`, `umkmTglInput`) 
									VALUES (:umkmNama, :umkmPemilik, :umkmHP, :umkmJenis, :umkmAlamat, :umkmKBLI, :umkmNIB, :umkmModal, :umkmKekayaan, :umkmTenagaKerja, :umkmVideo, :umkmKoor, :umkmTglInput)"); 
			$data = array(
						':umkmNama'=>$_POST['umkmNama'],
						':umkmPemilik'=>$_POST['umkmPemilik'],
						':umkmHP'=>$_POST['umkmHP'],
						':umkmJenis'=>$_POST['umkmJenis'],
						':umkmAlamat'=>$_POST['umkmAlamat'],
						':umkmKBLI'=>$_POST['umkmKBLI'],
						':umkmNIB'=>$_POST['umkmNIB'],
						':umkmModal'=>$_POST['umkmModal'],
						':umkmKekayaan'=>$_POST['umkmKekayaan'],
						':umkmTenagaKerja'=>$_POST['umkmTenagaKerja'],
						':umkmVideo'=>$_POST['umkmVideo'],
						':umkmKoor'=>$_POST['umkmKoor'],
						':umkmTglInput'=>date('Y-m-d')					
						);
			if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe=umkm&e=0');
				}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=promosi&tipe=umkm&e=1');
				}	
	}elseif($_GET['act']=='editUMKM'){

			$stmt = $conn->prepare("UPDATE `tbl_umkm` SET
									`umkmNama`=:umkmNama, `umkmPemilik`=:umkmPemilik,  `umkmHP`=:umkmHP, `umkmJenis`=:umkmJenis,  `umkmAlamat`=:umkmAlamat,  `umkmKBLI`=:umkmKBLI, `umkmNIB`=:umkmNIB, `umkmModal`=:umkmModal, `umkmKekayaan`=:umkmKekayaan, `umkmTenagaKerja`=:umkmTenagaKerja, `umkmVideo`=:umkmVideo, `umkmKoor`=:umkmKoor
									WHERE `umkmID`=:umkmID"); 
			$data = array(
						':umkmID'=>$_POST['umkmID'],
						':umkmNama'=>$_POST['umkmNama'],
						':umkmPemilik'=>$_POST['umkmPemilik'],
						':umkmHP'=>$_POST['umkmHP'],
						':umkmJenis'=>$_POST['umkmJenis'],
						':umkmAlamat'=>$_POST['umkmAlamat'],
						':umkmKBLI'=>$_POST['umkmKBLI'],
						':umkmNIB'=>$_POST['umkmNIB'],
						':umkmModal'=>$_POST['umkmModal'],
						':umkmKekayaan'=>$_POST['umkmKekayaan'],
						':umkmTenagaKerja'=>$_POST['umkmTenagaKerja'],
						':umkmVideo'=>$_POST['umkmVideo'],
						':umkmKoor'=>$_POST['umkmKoor']				
						);
			if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe=umkm&e=0');
				}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=promosi&tipe=umkm&e=1');
				}	
	}elseif($_GET['act']=='addUB'){
			if($_FILES['ubLogo']['name']){
				if(!$_FILES['ubLogo']['error']){
				$valid_file = true;
					$ubLogo = strtolower(str_replace(' ','_',$_FILES['ubLogo']['name'])); //rename file
					if($_FILES['ubLogo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=artikel&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['ubLogo']['tmp_name'], '../assets/post/'.$ubLogo);
						$stmt = $conn->prepare("INSERT INTO `tbl_ub` 
												(`ubSektor`, `ubSubSektor`,  `ubNama`, `ubNegara`,  `ubAlamat`,  `ubEmail`, `ubBidangUsaha`, `ubLokasi`, `ubNoIzin`, `ubInvestasi`, `ubVideo`, `ubKoor`, `ubTipe`, `ubTglInput`, `ubLogo`, `ubTampil`) 
												VALUES (:ubSektor, :ubSubSektor, :ubNama, :ubNegara, :ubAlamat, :ubEmail, :ubBidangUsaha, :ubLokasi, :ubNoIzin, :ubInvestasi, :ubVideo, :ubKoor, :ubTipe, :ubTglInput, :ubLogo, :ubTampil)"); 
						$data = array(
									':ubSektor'=>$_POST['ubSektor'],
									':ubSubSektor'=>$_POST['ubSubSektor'],
									':ubNama'=>$_POST['ubNama'],
									':ubNegara'=>$_POST['ubNegara'],
									':ubAlamat'=>$_POST['ubAlamat'],
									':ubEmail'=>$_POST['ubEmail'],
									':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
									':ubLokasi'=>$_POST['ubLokasi'],
									':ubNoIzin'=>$_POST['ubNoIzin'],
									':ubInvestasi'=>$_POST['ubInvestasi'],
									':ubVideo'=>$_POST['ubVideo'],
									':ubKoor'=>$_POST['ubKoor'],
									':ubTipe'=>$_POST['ubTipe'],
									':ubTglInput'=>date('Y-m-d'),
									':ubLogo'=>$ubLogo,
									':ubTampil'=>$_POST['ubTampil']
									);
						if ($stmt->execute($data)) { 
								header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
							}else{
								print_r($stmt->errorInfo());exit;
								header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
							}															
					}
				}else{
					header('location:index.php?page=artikel&e=7');	
				}
			}else{
				$stmt = $conn->prepare("INSERT INTO `tbl_ub` 
										(`ubSektor`, `ubSubSektor`,  `ubNama`, `ubNegara`,  `ubAlamat`,  `ubEmail`, `ubBidangUsaha`, `ubLokasi`, `ubNoIzin`, `ubInvestasi`, `ubVideo`, `ubKoor`, `ubTipe`, `ubTglInput`, `ubLogo`, `ubTampil`) 
										VALUES (:ubSektor, :ubSubSektor, :ubNama, :ubNegara, :ubAlamat, :ubEmail, :ubBidangUsaha, :ubLokasi, :ubNoIzin, :ubInvestasi, :ubVideo, :ubKoor, :ubTipe, :ubTglInput, :ubLogo, :ubTampil)"); 
				$data = array(
							':ubSektor'=>$_POST['ubSektor'],
							':ubSubSektor'=>$_POST['ubSubSektor'],
							':ubNama'=>$_POST['ubNama'],
							':ubNegara'=>$_POST['ubNegara'],
							':ubAlamat'=>$_POST['ubAlamat'],
							':ubEmail'=>$_POST['ubEmail'],
							':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
							':ubLokasi'=>$_POST['ubLokasi'],
							':ubNoIzin'=>$_POST['ubNoIzin'],
							':ubInvestasi'=>$_POST['ubInvestasi'],
							':ubVideo'=>$_POST['ubVideo'],
							':ubKoor'=>$_POST['ubKoor'],
							':ubTipe'=>$_POST['ubTipe'],
							':ubTglInput'=>date('Y-m-d'),
							':ubLogo'=>'company_logo.png',
							':ubTampil'=>$_POST['ubTampil']
							);
				if ($stmt->execute($data)) { 
						header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
					}else{
						print_r($stmt->errorInfo());exit;
						header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
					}			
			}
		
	}elseif($_GET['act']=='editUB'){
		
			if($_FILES['ubLogo']['name']){
				if(!$_FILES['ubLogo']['error']){
				$valid_file = true;
					$ubLogo = strtolower(str_replace(' ','_',$_FILES['ubLogo']['name'])); //rename file
					if($_FILES['ubLogo']['size'] > (1024000)) //can't be larger than 1 MB
					{
						$valid_file = false;
						header('location:index.php?page=artikel&e=6');	
					}
					if($valid_file)
					{
						move_uploaded_file($_FILES['ubLogo']['tmp_name'], '../assets/post/'.$ubLogo);
						$stmt = $conn->prepare("UPDATE `tbl_ub` SET
									`ubSektor`=:ubSektor,`ubSubSektor`=:ubSubSektor, `ubNama`=:ubNama, `ubNegara`=:ubNegara,
									`ubAlamat`=:ubAlamat,`ubEmail`=:ubEmail,`ubBidangUsaha`=:ubBidangUsaha,
									`ubLokasi`=:ubLokasi,`ubNoIzin`=:ubNoIzin,`ubInvestasi`=:ubInvestasi,
									`ubVideo`=:ubVideo,`ubKoor`=:ubKoor,`ubLogo`=:ubLogo,`ubTampil`=:ubTampil							
									WHERE `ubID`=:ubID"); 
						$data = array(
									':ubSektor'=>$_POST['ubSektor'],
									':ubSubSektor'=>$_POST['ubSubSektor'],
									':ubNama'=>$_POST['ubNama'],
									':ubNegara'=>$_POST['ubNegara'],
									':ubAlamat'=>$_POST['ubAlamat'],
									':ubEmail'=>$_POST['ubEmail'],
									':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
									':ubLokasi'=>$_POST['ubLokasi'],
									':ubNoIzin'=>$_POST['ubNoIzin'],
									':ubInvestasi'=>$_POST['ubInvestasi'],
									':ubVideo'=>$_POST['ubVideo'],
									':ubKoor'=>$_POST['ubKoor'],
									':ubTipe'=>$_POST['ubTipe'],
									':ubTglInput'=>date('Y-m-d'),
									':ubLogo'=>$ubLogo,
									':ubTampil'=>$_POST['ubTampil']
									);
						if ($stmt->execute($data)) { 
								header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
							}else{
								print_r($stmt->errorInfo());exit;
								header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
							}															
					}
				}else{
					header('location:index.php?page=artikel&e=7');	
				}
			}else{
			$stmt = $conn->prepare("UPDATE `tbl_ub` SET
									`ubSektor`=:ubSektor,`ubSubSektor`=:ubSubSektor, `ubNama`=:ubNama, `ubNegara`=:ubNegara,
									`ubAlamat`=:ubAlamat,`ubEmail`=:ubEmail,`ubBidangUsaha`=:ubBidangUsaha,
									`ubLokasi`=:ubLokasi,`ubNoIzin`=:ubNoIzin,`ubInvestasi`=:ubInvestasi,
									`ubVideo`=:ubVideo,`ubKoor`=:ubKoor,`ubTampil`=:ubTampil							
									WHERE `ubID`=:ubID"); 
			$data = array(
						':ubSektor'=>$_POST['ubSektor'],
						':ubSubSektor'=>$_POST['ubSubSektor'],
						':ubNama'=>$_POST['ubNama'],
						':ubNegara'=>$_POST['ubNegara'],
						':ubAlamat'=>$_POST['ubAlamat'],
						':ubEmail'=>$_POST['ubEmail'],
						':ubBidangUsaha'=>$_POST['ubBidangUsaha'],
						':ubLokasi'=>$_POST['ubLokasi'],
						':ubNoIzin'=>$_POST['ubNoIzin'],
						':ubInvestasi'=>$_POST['ubInvestasi'],
						':ubVideo'=>$_POST['ubVideo'],
						':ubKoor'=>$_POST['ubKoor'],
						':ubID'=>$_POST['ubID'],
						':ubTampil'=>$_POST['ubTampil']					
						);
			if ($stmt->execute($data)) { 
					header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=0');
				}else{
					print_r($stmt->errorInfo());exit;
					header('location:index.php?page=promosi&tipe='.strtolower($_POST['ubTipe']).'&e=1');
				}				
			}	


	}

	
}else{
	header('location:login.php');
}
?>