LAMPIRAN A : TAMPILAN PROGRAM

Ukuran: px

Mulai penontonan dengan halaman:

Download "LAMPIRAN A : TAMPILAN PROGRAM"

Yuliana Dharmawijaya
7 tahun lalu
Tontonan:

1 LAMPIRAN A : TAMPILAN PROGRAM Tampilan Halaman Utama (Home) Tampilan Halaman Pengumuman

2 Tampilan Halaman Profile Visi dan Misi Tampilan Halaman Profile Struktur Organisasi

3 Tampilan Halaman Profile Sarana dan Prasarana Tampilan Halaman Agenda

4 Tampilan Halaman Berita Kebersihan Tampilan Halaman Berita Teknologi

5 Tampilan Halaman Berita Tokoh Tampilan Halaman Berita Ketertiban

6 Tampilan Halaman Akademik Data Guru Tampilan Halaman Akademik Data Siswa

7 Tampilan Halaman Akademik Data Pegawai Tampilan Halaman Akademik Mata Pelajaran

8 Tampilan Halaman Akademik Nilai Siswa Tampilan Halaman Download

9 Tampilan Halaman Galeri Foto Tampilan Halaman Hubungi Kami

10 Tampilan Halaman Administrator

11 LAMPIRAN B : LISTING PROGRAM Listing adminweb/index.php <html> <head> <title>administrator Portal Web SMA N 1 NA IX-X</title> <script language="javascript"> function validasi(form){ if (form.username.value == ""){ alert("anda belum mengisikan Username."); form.username.focus(); return (false); if (form.password.value == ""){ alert("anda belum mengisikan Password."); form.password.focus(); return (false); return (true); </script> <link href="style.css" rel="stylesheet" type="text/css" /> </head> <body OnLoad="document.login.username.focus();"> <div id="header"> <div id="content"> <h2>login</h2>

12 <img src="images/login-welcome.gif" width="97" height="105" hspace="10" align="left"> <form name="login" action="cek_login.php" method="post" onsubmit="return validasi(this)"> <table> <tr><td>username</td><td> : <input type="text" name="username"></td></tr> <tr><td>password</td><td> : <input type="password" name="password"></td></tr> <tr><td colspan="2"><input type="submit" value="login"></td></tr> </table> </form> <p> </p> </div> <div id="footer"> Copyright 2012 by sma negeri 1 na ix-x. All rights reserved. </div> </div> </body> </html> Listing simpan komentar.php <?php session_start(); include "config/koneksi.php"; include "config/library.php"; $nama=trim($_post['nama_komentar']); $komentar=trim($_post['isi_komentar']);

13 if (empty($nama)){ echo "Anda belum mengisikan NAMA<br /> <a href=javascript:history.go(-1)><b>ulangi Lagi</b>"; elseif (empty($komentar)){ echo "Anda belum mengisikan KOMENTAR<br /> <a href=javascript:history.go(-1)><b>ulangi Lagi</b>"; elseif (strlen($_post['isi_komentar']) > 1000) { echo "KOMENTAR Anda kepanjangan, dikurangin atau dibagi jadi beberapa bagian.<br /> <a href=javascript:history.go(-1)><b>ulangi Lagi</b>"; else{ function antiinjection($data){ $filter_sql = mysql_real_escape_string(stripslashes(strip_tags(htmlspecialchars($data,ent_quot ES)))); return $filter_sql; $nama_komentar = antiinjection($_post['nama_komentar']); $url = antiinjection($_post['url']); $isi_komentar = antiinjection($_post['isi_komentar']); if(!empty($_post['kode'])){ if($_post['kode']==$_session['captcha_session']){ // Mengatasi input komentar tanpa spasi $split_text = explode(" ",$isi_komentar); $split_count = count($split_text); $max = 57;

14 for($i = 0; $i <= $split_count; $i++){ if(strlen($split_text[$i]) >= $max){ for($j = 0; $j <= strlen($split_text[$i]); $j++){ $char[$j] = substr($split_text[$i],$j,1); if(($j % $max == 0) && ($j!= 0)){ $v_text.= $char[$j]. ' '; else{ $v_text.= $char[$j]; else{ $v_text.= " ". $split_text[$i]. " "; $sql = mysql_query("insert INTO komentar(nama_komentar,url,isi_komentar,id_berita,tgl,jam_komentar) VALUES('$nama_komentar','$url','$v_text','$_POST[id]','$tgl_sekarang','$jam_sekara ng')"); echo "<meta http-equiv='refresh' content='0; url=berita-$_post[id].html'>"; else{ echo "Kode yang Anda masukkan tidak cocok<br /> <a href=javascript:history.go(-1)><b>ulangi Lagi</b></a>"; else{ echo "Anda belum memasukkan kode<br /> <a href=javascript:history.go(-1)><b>ulangi Lagi</b></a>";

15 ?> Listing Download.php <?php include "config/koneksi.php"; $direktori = "files/"; // folder tempat penyimpanan file yang boleh didownload $filename = $_GET['file']; $file_extension = strtolower(substr(strrchr($filename,"."),1)); switch($file_extension){ case "pdf": $ctype="application/pdf"; break; case "exe": $ctype="application/octet-stream"; break; case "zip": $ctype="application/zip"; break; case "rar": $ctype="application/rar"; break; case "doc": $ctype="application/msword"; break; case "xls": $ctype="application/vnd.ms-excel"; break; case "ppt": $ctype="application/vnd.ms-powerpoint"; break; case "gif": $ctype="image/gif"; break; case "png": $ctype="image/png"; break; case "jpeg": case "jpg": $ctype="image/jpg"; break; default: $ctype="application/proses"; if ($file_extension=='php'){ echo "<h1>access forbidden!</h1> <p>maaf, file yang Anda download sudah tidak tersedia atau filenya (direktorinya) telah diproteksi. <br />

16 Silahkan hubungi <a exit; else{ mysql_query("update download set hits=hits+1 where nama_file='$filename'"); header("content-type: octet/stream"); header("pragma: private"); header("expires: 0"); header("cache-control: must-revalidate, post-check=0, pre-check=0"); header("cache-control: private",false); header("content-type: $ctype"); header("content-disposition: attachment; filename=\"".basename($filename)."\";" ); header("content-transfer-encoding: binary"); header("content-length: ".filesize($direktori.$filename)); readfile("$direktori$filename"); exit();?> Listing Akademik.php <?php include "../config/koneksi.php"; if ($_SESSION['leveluser']=='admin'){ $sql=mysql_query("select * from modul where aktif='y' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>";

17 elseif ($_SESSION['leveluser']=='pegawai'){ $sql=mysql_query("select * from modul where status='pegawai' or status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>"; elseif ($_SESSION['leveluser']=='guru'){ $sql=mysql_query("select * from modul where status='guru' or status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>"; elseif ($_SESSION['leveluser']=='siswa'){ $sql=mysql_query("select * from modul where status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>";?> Listing fungsi Kalender.php <?php include "../config/koneksi.php"; if ($_SESSION['leveluser']=='admin'){ $sql=mysql_query("select * from modul where aktif='y' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>"; elseif ($_SESSION['leveluser']=='pegawai'){ $sql=mysql_query("select * from modul where status='pegawai' or status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){

18 echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>"; elseif ($_SESSION['leveluser']=='guru'){ $sql=mysql_query("select * from modul where status='guru' or status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>"; elseif ($_SESSION['leveluser']=='siswa'){ $sql=mysql_query("select * from modul where status='siswa' order by urutan"); while ($m=mysql_fetch_array($sql)){ echo "<li><a href='$m[link]'>» $m[nama_modul]</a></li>";?>

dokumen-dokumen yang mirip

ANTIINJECTION NOVA ROCHAYATI MANAJEMEN INFORMATIKA

ANTIINJECTION NOVA ROCHAYATI MANAJEMEN INFORMATIKA ROCHAYATI 3093311030 ANTIINJECTION Menurut Wikipedia Xss injection adalah salah satu jenis serangan injeksi code (code injection attack) Html. Jadi inti dari XSS Injection adalah serangan menggunakan HTML