From b0a28b1dfa585a3be045ab4bdaea9726552f32de Mon Sep 17 00:00:00 2001
From: freedomfeather <fadlurohmanakmal@rocketmail.com>
Date: Wed, 4 Oct 2017 18:55:11 +0700
Subject: [PATCH] Memperbaiki prosedur koneksi ke database menjadi mysqli
---
login/login.php | 2 +-
login/sign_up.php | 6 +++---
profile_page/edit_profile.php | 2 +-
profile_page/getProfilePict.php | 2 +-
profile_page/profile.php | 2 +-
profile_page/update_profile.php | 4 ++--
6 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/login/login.php b/login/login.php
index 47470d9c..2321c7a5 100755
--- a/login/login.php
+++ b/login/login.php
@@ -4,7 +4,7 @@
include '../database/dbconnect.php';
$username = $_POST['user_name'];
$password = $_POST['user_password'];
- $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$username."' AND password='".$password."'") or die(mysql_error());
+ $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$username."' AND password='".$password."'") or die(mysqli_error());
$numrows=mysqli_num_rows($query);
if($numrows!=0)
diff --git a/login/sign_up.php b/login/sign_up.php
index 3859b1a4..bce711db 100644
--- a/login/sign_up.php
+++ b/login/sign_up.php
@@ -23,7 +23,7 @@
$status = 'customer';
}
- $query = mysqli_query($con,"INSERT INTO user (name,email,phone,username,password,status,pict) VALUES ('$fullname', '$email', '$phone', '$username', '$password', '$status',DEFAULT)") or die(mysql_error());
+ $query = mysqli_query($con,"INSERT INTO user (name,email,phone,username,password,status,pict) VALUES ('$fullname', '$email', '$phone', '$username', '$password', '$status',DEFAULT)") or die(mysqli_error());
if($query)
{
$getUserID = mysqli_query($con,"SELECT user_id FROM user WHERE username='".$username."'") or die(mysql_error());
@@ -52,10 +52,10 @@
include '../database/dbconnect.php';
if ($key == "username") {
- $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$value."'") or die(mysql_error());
+ $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$value."'") or die(mysqli_error());
$numrows=mysqli_num_rows($query);
} else if ($key == "user_email") {
- $query = mysqli_query($con,"SELECT * FROM user WHERE email='".$value."'") or die(mysql_error());
+ $query = mysqli_query($con,"SELECT * FROM user WHERE email='".$value."'") or die(mysqli_error());
$numrows=mysqli_num_rows($query);
}
if ($numrows != 0) {
diff --git a/profile_page/edit_profile.php b/profile_page/edit_profile.php
index 9331cad5..6df332de 100755
--- a/profile_page/edit_profile.php
+++ b/profile_page/edit_profile.php
@@ -69,7 +69,7 @@
$username = $_GET['username'];
$user_id = $_GET['id'];
- $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
+ $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysqli_error());
$numrows=mysqli_num_rows($query);
if($numrows!=0)
diff --git a/profile_page/getProfilePict.php b/profile_page/getProfilePict.php
index ac181620..c4c1c6c8 100644
--- a/profile_page/getProfilePict.php
+++ b/profile_page/getProfilePict.php
@@ -1,7 +1,7 @@
<?php
$user = $_GET['username'];
include '../database/dbconnect.php';
- $query=mysqli_query($con,"SELECT pict FROM user WHERE username='".$user."'") or die(mysql_error());
+ $query=mysqli_query($con,"SELECT pict FROM user WHERE username='".$user."'") or die(mysqli_error());
$row=mysqli_fetch_assoc($query);
mysqli_close($con);
if (isset($row['pict'])) {
diff --git a/profile_page/profile.php b/profile_page/profile.php
index ddd785ca..689591bf 100755
--- a/profile_page/profile.php
+++ b/profile_page/profile.php
@@ -28,7 +28,7 @@
<?php
include '../database/dbconnect.php';
- $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
+ $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysqli_error());
$numrows=mysqli_num_rows($query);
if($numrows!=0)
diff --git a/profile_page/update_profile.php b/profile_page/update_profile.php
index fa53b43a..043ff964 100644
--- a/profile_page/update_profile.php
+++ b/profile_page/update_profile.php
@@ -42,13 +42,13 @@
{
$fileName = addslashes($fileName);
}
- $query=mysql_query("UPDATE user set name='".$new_name."',phone='".$new_phone."',status='".$status."',pict='".$content."'WHERE username='".$username."'") or die(mysql_error());
+ $query=mysqli_query($con,"UPDATE user set name='".$new_name."',phone='".$new_phone."',status='".$status."',pict='".$content."'WHERE username='".$username."'") or die(mysqli_error());
}
if($query)
{
header("Location: profile.php");
}
- mysql_close();
+ mysqli_close($con);
}
}
?>
--
GitLab