Penyimpanan File Pribadi User Berbasis Web Cloud

(1)

1.tugasakhir/index.php

<?php

include "header.php"; ?>

<h3><b>Hello, Welcome To Upload & Download!</b></h3>

<p>Selamat datang di website Upload & Download , website ini adalah tempat Upload Dan Download file pribadi anda tanpa bisa di download oleh orang lain hanya account anda saja yang bisa

mendownload ketika anda mengupload disini.</p> </div>

</div>

<div class="col-md-6"> <?php

error_reporting(0);

$notif = $_GET['notif'];

if ($notif == "invalid_data") {

echo '<div class="alert alert-danger" role="alert">

<button type="button" class="close" data-dismiss="alert" label="Close"><span

aria-hidden="true">×</span></button><span class="glyphicon glyphicon-warning-sign"></span>

Your Username or Password Was Incorrect </div>';

} ?>

<label for="InputUsername">Username</label>

<label for="InputPassword">Password</label>

</div>

<input type="checkbox"class="pull-left"> Remember me </label>

<a href="register/">Don't Have Account?</a> or <a href="lostpassword/">Lost Password?</a>

</p> </div>

</form> </div> </div>

(2)

$('#defaultForm') .bootstrapValidator({

message: 'This value is not valid', //live: 'submitted',

feedbackIcons: {

valid: 'glyphicon glyphicon-ok',

invalid: 'glyphicon glyphicon-remove', validating: 'glyphicon glyphicon-refresh' },

fields: { username: {

message: 'The username is not valid', validators: {

notEmpty: {

message: 'The username is required and can\'t be empty' },

stringLength: { min: 6,

max: 30,

message: 'The username must be more than 6 and less than 30 characters long'

},

/*remote: {

url: 'remote.php',

message: 'The username is not available' },*/

regexp: {

regexp: /^[a-zA-Z0-9_\.]+$/,

message: 'The username can only consist of alphabetical, number, dot and underscore'

} } },

password: { validators: { notEmpty: {

message: 'The password is required and can\'t be empty' },

max: 12,

message: 'The password must be more than 6 and less than 30 characters long'

} } } } }); });

</script> </div>

<?php

(3)

2.tugasakhir/login.php

<?php

$pesanerror="";

include('koneksi/koneksi.php');

// membaca username dan password dari form login $username = $_POST['username'];

$password = $_POST['password'];

// mencari data user yang login tujuannya untuk mendapatkan password dari database

$hasil = mysqli_query($koneksi,"SELECT * FROM user WHERE username = '$username'");

$data = mysqli_fetch_array($hasil);

// mencocokkan password user dari database dengan password dari form

if ($password == $data['password']) {

// jika kedua password sama, maka login berhasil // simpan username ke dalam session

session_start();

$_SESSION['username'] = $username; echo "<h1>Login Sukses</h1>"; header('Location: upload/'); }

else {

// jika kedua password tidak cocok, maka login gagal header("location:index.php?notif=invalid_data"); }

?>

3.tugasakhir/header.php

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml">

<head>

<title>Upload & Download</title>

src="assets/js/bootstrap.js"></script>

src="assets/js/dropdown.js"></script>

src="assets/js/popover.js"></script>

(4)

src="assets/js/collapse.js"></script>

href="../vendor/bootstrap/css/bootstrap.css"/> <link rel="stylesheet"

href="css/dist/css/bootstrapValidator.css"/>

src="css/dist/js/bootstrapValidator.js"></script>

<body>

<div class="navbar-header">

<span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span>

</div>

</ul>

<?php

session_start();

$username = $_SESSION['username'];

if(!empty($username)) {

header("location:upload/"); }

?>

<li><a href="register/">Register</a></li>

<li><a href="lostpassword/">Lost Password</a></li> </ul>

</div> </div> </nav>

(5)

4.tugasakhir/headerindex.php

<head>

src="../assets/js/bootstrap.js"></script> <script type="text/javascript"

src="../assets/js/jquery.js"></script> <script type="text/javascript"

src="../assets/js/alert.js"></script> <script type="text/javascript"

src="../assets/js/button.js"></script> <script type="text/javascript"

src="../assets/js/dropdown.js"></script> <script type="text/javascript"

src="../assets/js/modal.js"></script>

src="../assets/js/popover.js"></script> <script type="text/javascript"

src="../assets/js/collapse.js"></script>

href="../css/dist/css/bootstrapValidator.css"/>

src="../css/dist/js/bootstrapValidator.js"></script>

<body>

<a href="../"><img src="../images/logo.png" width="82px"

height="40px" alt="Upload & Download" title="Upload & Download" /></a>  

</div>

(6)

<?php

session_start();

$username = $_SESSION['username'];

if(!empty($username)) {

header("location:../upload/"); }

?>

<li><a href="../register">Register</a></li>

<li><a href="../lostpassword">Lost Password</a></li> </ul>

5.tugasakhir/headerlog.php

<head>

src="../assets/js/scriptsearch.js"></script> <script type="text/javascript"

src="../assets/js/bootstrap.js"></script> <script type="text/javascript"

src="../assets/js/jquery.js"></script> <script type="text/javascript"

src="../assets/js/alert.js"></script> <script type="text/javascript"

src="../assets/js/button.js"></script> <script type="text/javascript"

src="../assets/js/dropdown.js"></script> <script type="text/javascript"

src="../assets/js/modal.js"></script>

(7)

src="../assets/js/collapse.js"></script> <script type="text/javascript"

src="../assets/js/browse.js"></script>

</head> <body>

<a href="#"><img src="../images/logo.png" width="82px"

height="40px" alt="Upload & Download" title="Upload & Download" /></a>  

</div>

<li><a href="../upload/"><i class="fa fa-upload" aria-hidden="true"></i> Upload</a></li>

<li><a href="../myfiles/"><i class="fa fa-folder" aria-hidden="true"></i> My Files</a></li>

<?php

session_start();

// membaca nama user yang tersimpan dalam session $username = $_SESSION['username'];

echo "

<a href=\"#\" class=\"dropdown-toggle\" data-toggle=\"dropdown\" role=\"button\" aria-haspopup=\"true\" aria-expanded=\"false\"><i class=\"fa fa-user\" aria-hidden=\"true\"></i> $username <span class=\"caret\"></span></a>

<li><a href=\"../changepassword/\"><i class=\"fa fa-key\" aria-hidden=\"true\"></i> Change Password</a></li>

<li><a href=\"../changeprofile/\"><i class=\"fa fa-gear\" aria-hidden=\"true\"></i> Edit Profile</a></li>

<li><a href=\"../logout\"><i class=\"fa fa-power-off\" aria-hidden=\"true\"></i> Logout</a></li>

</ul> </li>";

if(empty($username)){

(8)

header("location:../"); }

?> </ul>

6.tugasakhir/footer.php

Design & Code by <a href="https://www.facebook.com/pupunnnn" target="_blank">Pupun</a>

</center>

</footer> </div> </div>

7.tugasakhir/upload/index.php

<?php

include "../headerlog.php"; ?>

<?php

$pesanerror="";

// untuk keamanan, kita juga includekan cek.php include('../koneksi/koneksi.php');

if(isset($_POST['upload'])){

// membaca nama file

$fileName = $_FILES['userfile']['name']; // membaca nama file temporary

$tmpName = $_FILES['userfile']['tmp_name']; // membaca size file

$fileSize = $_FILES['userfile']['size']; // membaca tipe file

$fileType = $_FILES['userfile']['type'];

// username ini sekaligus menyatakan informasi pemilik file

// langkah membaca isi file yang diupload $fp = fopen($tmpName, 'r+');

$content = fread($fp, filesize($tmpName)); $content = addslashes($content);

fclose($fp);

// koneksi ke mysql

include_once("../koneksi/koneksi.php");

(9)

mysqli_query($koneksi,"INSERT INTO upload (name, size, type, content, username, dates)

VALUES ('$fileName', '$fileSize', '$fileType', '$content', '$username', NOW())");

// konfirmasi

$pesanerror = " <div class='alert success alert-dismissible fade in' role='alert'>

<button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button> <meta http-equiv='refresh' content='10000; url=../myfiles/' /><p>File <b>".$fileName."</b> telah terupload</p>

</div>"; }

?>

<?php echo $pesanerror; ?> </div>

<h2>Welcome Back, <?php echo $username; ?></h2>

<h4>Select files from your computer</h4>

<input type="hidden" name="MAX_FILE_SIZE" value="2000000000000"> Browse… <input type="file" style="display: none;"

id="userfile" required name="userfile"> </span>

</label>

<button name="upload" type="submit" class="btn btn-success"> <span class="glyphicon glyphicon-floppy-disk"></span> Upload </button>

</div> </form>

</div></center> </div>

<?php

include "../footer.php"; ?>

8.tugasakhir/register/index.php

<?php

include "../headerindex.php"; ?>

(10)

<?php

include('../koneksi/koneksi.php'); if(isset($_POST['regis'])){

$pesanerror="";

$username = $_POST['username']; $password = $_POST['password']; $password2 = $_POST['password2']; $email = $_POST['email']; $fullname = $_POST['fullname'];

// cek kesamaan username dan email

$cek_username=mysqli_num_rows(mysqli_query($koneksi,"SELECT username FROM user WHERE username='$username'"));

$cek_email=mysqli_num_rows(mysqli_query($koneksi,"SELECT email FROM user WHERE email='$email'"));

// cek kesamaan password if($password == $password2) {

if($cek_username > 0){

$pesanerror = '<div class="alert alert-danger" role="alert" align="center">

<span class="glyphicon glyphicon-warning-sign"></span> Oh no... Your Username Already Exist

</div>'; }

else if($cek_email > 0){

<span class="glyphicon glyphicon-warning-sign"></span> Oh no... Your E-Mail Already Exist

</div>'; }

else{

mysqli_query($koneksi,"INSERT INTO user

VALUES('idu','$username','$fullname','$password', '$email')");

$pesanerror = ' <div class="alert alert-success" role="alert" align="center">

<span class="glyphicon glyphicon-ok"></span> Register Success

</div>'; }

} else{

<span class="glyphicon glyphicon-warning-sign"></span> Oh no..., Your Password not Match

</div>'; }

} ?>

(11)

</div>

</div>

<label for="InputCPassword">Confirm Password</label>

</div>

</form> </div>

<div class="col-md-6"> <div class="jumbotron"> <h3><b>Terms of Use</b></h3>

<p>By accessing this web site, you are agreeing to be bound by these web site Terms and Conditions of Use, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws. If you do not agree with any of these terms, you are prohibited from using or accessing this site. The materials contained in this web site are protected by

applicable copyright and trade mark law.</p> </div>

</div> </div>

.bootstrapValidator({

feedbackIcons: {

fields: {

(12)

username: {

notEmpty: {

max: 16,

},

/*remote: {

url: 'remote.php',

regexp: {

regexp: /^[a-zA-Z0-9]+$/,

message: 'The username can only consist of alphabetical, and number'

} } },

fullname: {

notEmpty: {

message: 'The fullname is required and can\'t be empty' },

max: 50,

},

regexp: {

regexp: /^[a-zA-Z. ]+$/,

message: 'The fullname can only consist of alphabetical and dot' }

}

},

max: 12,

},

identical: {

field: 'password2',

message: 'The password and its confirm are not the same' }

(13)

password2: { validators: { notEmpty: {

max: 12,

},

identical: {

field: 'password',

} },

email: { validators: { notEmpty: {

message: 'The email address is required and can\'t be empty' },

emailAddress: {

message: 'The input is not a valid email address' }

/*remote: {

url: 'remote.php',

message: 'The email is not available' }*/

} } } }); });

</script> </div>

<?php

9.tugasakhir/register/index.php

<?php

include('../koneksi/koneksi.php'); if(isset($_POST['regis'])){

$pesanerror="";

(14)

</div>'; }

else{

</div>'; }

} else{

</div>'; }

} ?>

</div>

(15)

</div>

</form> </div>

<div class="col-md-6"> <div class="jumbotron"> <h3><b>Terms of Use</b></h3>

<p>By accessing this web site, you are agreeing to be bound by these web site Terms and Conditions of Use, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws. If you do not agree with any of these terms, you are prohibited from using or accessing this site. The materials contained in this web site are protected by

applicable copyright and trade mark law.</p> </div>

</div> </div>

feedbackIcons: {

fields: { username: {

notEmpty: {

max: 16,

},

/*remote: {

url: 'remote.php',

(16)

regexp: {

regexp: /^[a-zA-Z0-9]+$/,

message: 'The username can only consist of alphabetical, and number'

} } },

fullname: {

notEmpty: {

max: 50,

},

regexp: {

message: 'The fullname can only consist of alphabetical and dot' }

}

},

max: 12,

},

identical: {

field: 'password2',

} },

max: 12,

},

identical: {

field: 'password',

(17)

} } },

emailAddress: {

/*remote: {

url: 'remote.php',

} } } }); });

</script> </div>

<?php

10.tugasakhir/register/register.php

<?php

include('../koneksi/koneksi.php');

$pesanerror="";

</div>'; }

(18)

</div>'; }

else{

</div>'; }

} else{

</div>'; }

?>

11.tugasakhir/myfiles/index.php

<?php

href="//cdn.datatables.net/1.10.15/css/jquery.dataTables.css"> <script type="text/javascript" charset="utf8"

src="//cdn.datatables.net/1.10.15/js/jquery.dataTables.js"></scrip t>

margin: 20px; }

.icon-input-btn{

display: inline-block; position: relative; }

.icon-input-btn input[type="submit"]{ padding-left: 2em;

}

.icon-input-btn .glyphicon{ display: inline-block; position: absolute; left: 0.65em;

top: 30%; }

</style>

$(".icon-input-btn").each(function(){

(19)

$(this).find(".glyphicon").css("top", "24%"); }

}); });

</script>

</script>

<?php

// query untuk mencari file yang telah diupload milik si user yang sedang login

// menampilkan nama-nama file yang telah diupload si user yang sedang login

$hasil = mysqli_query($koneksi,"SELECT * FROM upload WHERE username = '$username'");

?>

<pre>My Files</pre>

<tr>

<th>File</th> <th>Size</th> <th>Type</th> <th>Date</th> <th>Action</th> </tr>

</thead> <tbody> <?php

while ($data = mysqli_fetch_array($hasil)) {

?> <tr>

<td><?php echo" <a

href='download.php?id=".$data['id']."'>".$data['name']."</a> ";?></td>

<td><?php echo" ".$data['dates']." ";?></td> <td><?php echo"

<span class=\"glyphicon glyphicon-download-alt\"></span> <input type=\"submit\" class=\"btn btn-success\"

value=\"Download\"

onclick=\"location.href='download.php?id=".$data['id']."';\"> </span>

(20)

";?> </td> </tr> <?php }?> </table>

<?php

12.tugasakhir/myfiles/download.php

<?php

session_start();

// sisipkan cek.php untuk keamanan include('../koneksi/koneksi.php');

// membaca nilai ID file yang berasal dari link download.php?id=...

$id = $_GET['id'];

// membaca username yang sedang login melalui session $username = $_SESSION['username'];

// query untuk mencari data file yang akan didownload dalam database

$hasil = mysqli_query($koneksi,"SELECT * FROM upload WHERE id = $id");

// mencocokkan username pemilik file dengan username yang sedang login

if ($username == $data['username']) {

// bila usernamenya cocok maka file boleh didownload header("Content-length: ".$data['size']);

header("Content-type: ".$data['type']); header("Content-Disposition:

attachment; filename=".$data['name']);

echo $data['content']; }

else {

// bila tidak sama maka file tidak boleh didownload echo "<h1>Acces Denied</h1>";

} ?>

13.tugasakhir/myfiles/delete.php

<?php

(21)

?>

<?php

// membaca id file yang akan dihapus $id = $_GET['id'];

// mencari username pemilik file yang akan dihapus

$hasil = mysqli_query($koneksi,"SELECT username FROM upload WHERE id = $id");

if ($username == $data['username']) {

// jika cocok maka hapus file ;

mysqli_query($koneksi,"DELETE FROM upload WHERE id = $id");

header("location:../myfiles/");

} else {

// jika tidak cocok maka tolak

echo "<h1>Maaf Anda tidak berhak menghapus file ini</h1>"; }

?>

<?php

include "../../footer.php"; ?>

14.tugasakhir/myfiles/delete_confirm.php

<?php

// membaca id file yang akan dihapus $id = $_GET['id'];

// mencari username pemilik file yang akan dihapus

$hasil = mysqli_query($koneksi,"SELECT * FROM upload WHERE id = $id");

echo"

(22)

<form action=\"delete.php?id=".$data['id']."\" method=\"post\"> <h1><p><span class=\"glyphicon glyphicon-alert\"></span> Delete File</h1></p>

Do you want <b>".$data['name']."</b> to be deleted from this wesbsite ?

</p> </div>

<input type=\"submit\" value=\"No\"> </form>";

?>

<?php

15.tugasakhir/lostpassword/index.php

<?php

if(isset($_POST['lost'])){

$email = $_POST['email'];

function randomPassword() {

// function untuk membuat password random 6 digit karakter

$digit = 12; $karakter =

"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

srand((double)microtime()*1000000); $i = 0;

$pass = "";

while ($i <= $digit-1) {

$num = rand() % 76;

$tmp = substr($karakter,$num,1); $pass = $pass.$tmp;

$i++; }

return $pass; }

// membuat password baru secara random -> memanggil function randomPassword

(23)

// mengenkripsi password dengan md5() dan pengacak $newPasswordEnkrip = ($newPassword);

// mencari alamat email si user

$hasil = mysqli_query($koneksi,"SELECT * FROM user WHERE email = '$email'");

$data = mysqli_fetch_array($hasil); $alamatEmail = $data['email'];

// title atau subject email $title = "New Password";

// isi pesan email disertai password

$pesan = "Username Anda : ".$data['username'].". \nPassword Anda yang baru adalah :".$newPassword;

// header email berisi alamat pengirim $header = "From: admin@updo.wc.lt";

// mengirim email

$kirimEmail = mail($alamatEmail, $title, $pesan, $header);

// cek status pengiriman email if ($kirimEmail) {

// update password baru ke database (jika pengiriman email sukses) $hasil = mysqli_query($koneksi,"UPDATE user SET password =

'$newPasswordEnkrip' WHERE email = '$email'");

if ($hasil)

<span class="glyphicon glyphicon-ok"></span> Reset Password Succes, Check Your Email! </div>';

}

<span class="glyphicon glyphicon-warning-sign"></span> Reset Password Fail!

</div>'; }

?>

website ini masih dalam perkembangan, bila terjadi bug/error dsb. harap maklum

</div>

<?php echo $pesanerror; ?>

(24)

</div>

<a href="../">Have Account?</a> or <a href="../register">Didn't have account?</a>

</p> </div>

</form> </div>

<h3><b>Forgot Password</b></h3>

<p>When you fill in your registered E-Mail, We will be sent new password to your email.</p>

</div> </div> </div>

feedbackIcons: {

fields: { email: { validators: { notEmpty: {

emailAddress: {

/*remote: {

url: 'remote.php',

} } } }); });

</script>

</div>

(25)

16.tugasakhir/lostpassword/lostpassword_sent.php

<?php

<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button> website ini masih dalam perkembangan, bila terjadi bug/error dsb. harap maklum

</div> <?php

$email = $_POST['email'];

function randomPassword() {

// function untuk membuat password random 6 digit karakter

$digit = 12; $karakter =

"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

srand((double)microtime()*1000000); $i = 0;

$pass = "";

while ($i <= $digit-1) {

$num = rand() % 76;

$tmp = substr($karakter,$num,1); $pass = $pass.$tmp;

$i++; }

return $pass; }

// membuat password baru secara random -> memanggil function randomPassword

$newPassword = randomPassword();

// mengenkripsi password dengan md5() dan pengacak $newPasswordEnkrip = ($newPassword);

// mencari alamat email si user

$hasil = mysqli_query($koneksi,"SELECT * FROM user WHERE email = '$email'");

$data = mysqli_fetch_array($hasil); $alamatEmail = $data['email'];

// title atau subject email $title = "New Password";

(26)

// isi pesan email disertai password

$pesan = "Username Anda : ".$data['username'].". \nPassword Anda yang baru adalah :".$newPassword;

// header email berisi alamat pengirim $header = "From: admin@updo.wc.lt";

// mengirim email

$kirimEmail = mail($alamatEmail, $title, $pesan, $header);

// cek status pengiriman email if ($kirimEmail) {

// update password baru ke database (jika pengiriman email sukses) $hasil = mysqli_query($koneksi,"UPDATE user SET password =

'$newPasswordEnkrip' WHERE email = '$email'");

if ($hasil) echo "<div class='alert success alert-dismissible fade in' role='alert'>

Pengiriman Password Berhasil <span class=\"glyphicon glyphicon-remove\"></span>

<br>

<a href=\"../\" class=\"btn btn-danger\">Go To Login/a></div>"; }

else echo "<div class='alert alert-danger alert-dismissible fade in' role='alert'>

Pengiriman Password Gagal <span class=\"glyphicon glyphicon-remove\"></span>

<br>

<a href=\"../lostpassword\" class=\"btn btn-danger\">Back To Reset Password</a></div>";

?> </div> </div>

<h3><b>Forgot Password</b></h3>

<p>When you fill in your registered E-Mail, We will be sent new password to your email.</p>

</div> </div> </div> </div>

<?php

17.tugasakhir/logout/index.php

(27)

</div>

<div id="centerbar"><center> <?php

// menghapus session session_destroy();

echo "<h2>Thank You, Good Bye</h2>"; ?>

<?php

18.tugasakhir/koneksi/koneksi.php

<?php

$koneksi = mysqli_connect("localhost","root","","tugasakhir");

function formatBytes($bytes, $precision = 2) { $units = array('B', 'KB', 'MB', 'GB', 'TB');

$bytes = max($bytes, 0);

$pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1);

$bytes /= pow(1024, $pow);

return round($bytes, $precision) . ' ' . $units[$pow]; }

?>

19.tugasakhir/changeprofile/index.php

<?php

<link rel="stylesheet"

<?php

$pesanerror="";

$username = $_SESSION['username']; if(isset($_POST['profilechange'])){

(28)

// membaca nama user yang tersimpan dalam session $password = $_POST['password'];

$fullname = $_POST['fullname']; $email = $_POST['email'];

if ($data['password'] == ($password)) {

$hasil = mysqli_query($koneksi,"UPDATE user SET fullname ='$fullname', email='$email' WHERE username = '$username' "); if ($hasil){

$pesanerror = " <div class='alert success alert-dismissible fade in' role='alert'>

Edit Profile Succes </div>";

}

} else{

$pesanerror = " <div class='alert alert-danger alert-dismissible fade in' role='alert'>

Incorrect Password </div>";

} }

?>

<?php

// cek benar tidaknya password yang lama

$data = mysqli_fetch_array($hasil); echo "

<h1>Edit Profile</h1> <br>

$pesanerror </div>

(29)

<label for='InputUsername'>Username</label>

</div>

<label for='InputFullname'>Fullname</label>

</div>

</div> "; ?>

<label for='InputUsername'>Current Password</label>

</div>

</form>

feedbackIcons: {

fields: { fullname: {

notEmpty: {

max: 50,

},

regexp: {

message: 'The fullname can only consist of alphabetical' }

}

},

(30)

max: 12,

} } },

emailAddress: {

/*remote: {

url: 'remote.php',

} } } }); });

</script>

<?php

20.tugasakhir/changepassword/index.php

<?php

<link rel="stylesheet"

<?php

$pesanerror="";

// membaca nama user yang tersimpan dalam session $username = $_SESSION['username'];

(31)

$password = $_POST['passwordold']; $passwordbaru1 = $_POST['password1']; $passwordbaru2 = $_POST['password2'];

// cek benar tidaknya password yang lama

if ($data['password'] == ($password)) {

// jika password lama benar, maka cek kesesuaian password baru 1 dan 2

if ($passwordbaru1 == $passwordbaru2) {

// jika password baru 1 dan 2 sama, maka proses update password dilakukan

$passwordbaruenkrips = ($passwordbaru1);

$hasil = mysqli_query($koneksi,"UPDATE user SET password = '$passwordbaruenkrips' WHERE username = '$username' "); if($hasil)

{

$pesanerror = "<div class='alert alert-success alert-dismissible fade in' role='alert'>

Update Password Succes </div>";

} } else {

$pesanerror = "<div class='alert alert-danger alert-dismissible fade in' role='alert'>

Your Password Doesn't Match </div>";

} } else {

$pesanerror = " <div class='alert alert-danger alert-dismissible fade in' role='alert'>

Your Old Password Is Incorrect </div>";

} } ?>

<h1 align="center">Change Password</h1>

(32)

<?php echo $pesanerror; ?> </div>

<br>

<label for="InputCurrentPassword">Current Password</label>

</div>

</div>

feedbackIcons: {

fields: { passwordold: { validators: { notEmpty: {

max: 12,

} } },

(33)

min: 6, max: 12,

},

identical: {

1field: 'password2',

} },

max: 12,

},

identical: {

field: 'password1',

} },

} }); });

</script> </div> </div> </center>

<?php

(34)

(35)

(36)

(37)

(38)