require("connect.inc.php");
if (!$_POST['tambah']) {
$query = "select nik,nama,hak_akses from profile where nik='".$_GET['nik']."'";
$hasil = mysql_db_query($db, $query, $koneksi) or
die("Kesalahan pada query!");
list($nik,$nama,$hak_akses) = mysql_fetch_row($hasil);
$query1 = "select username,password from users where username='".$_GET['nik']."'";
$hasil1 = mysql_db_query($db, $query1, $koneksi) or
die("Kesalahan pada query!");
list($username,$password) = mysql_fetch_row($hasil1);
?>
}
else
{
//echo $nama1;
$query = "Update profile set
nama='".addslashes($_POST[nama1])."',
hak_akses='".addslashes($_POST[hak_akses])."'
where nik = '".$_POST[userid]."'";
//echo $query;
// lakukan proses query
$hasil = mysql_db_query($db,$query,$koneksi)
or die('Kesalahan pada proses query!');
//$pwd = md5($_POST['passwd']);
$query2 = "select username,password from users where username='".$_POST['userid']."'";
$hasil2 = mysql_db_query($db, $query2, $koneksi) or
die("Kesalahan pada query!");
list($username,$password) = mysql_fetch_row($hasil2);
//echo $password."
";
// echo $_POST[passwd];
// die;
if ($_POST[passwd]==$password){
$pwd = $password;
} else {
$pwd = md5($_POST['passwd']);
}
$q1 = "Update users set
password='".addslashes($pwd)."'
where username = '".$_POST[userid]."'";
//echo $query;
// lakukan proses query
$hasil1 = mysql_db_query($db,$q1,$koneksi)
or die('Kesalahan pada proses query!');
echo "Update Sukses
";
?>
}
?>