From c05bb99805268c57f8265ae5e4b28ed6935a2d8c Mon Sep 17 00:00:00 2001
From: freedomfeather <fadlurohmanakmal@rocketmail.com>
Date: Wed, 4 Oct 2017 18:42:15 +0700
Subject: [PATCH] Memperbaiki prosedur koneksi ke database menjadi mysqli

---
 database/dbconnect.php          |   4 ++--
 login/login.php                 |   8 ++++----
 login/sign_up.php               |  18 +++++++++---------
 profile_page/browse.png         | Bin 3242 -> 0 bytes
 profile_page/edit_profile.php   |   8 ++++----
 profile_page/getProfilePict.php |   6 +++---
 profile_page/profile.php        |   8 ++++----
 7 files changed, 26 insertions(+), 26 deletions(-)
 delete mode 100644 profile_page/browse.png

diff --git a/database/dbconnect.php b/database/dbconnect.php
index f0c1c235..214e5be2 100644
--- a/database/dbconnect.php
+++ b/database/dbconnect.php
@@ -3,6 +3,6 @@
     define('dbuser', 'root');
     define('dbpass', '');
     define('dbname', 'PR_Ojek');
-    mysql_connect(dbserver, dbuser, dbpass) or die(mysql_error());
-    mysql_select_db(dbname) or die('Could not select database '.mysql_error());
+    $con=mysqli_connect(dbserver, dbuser, dbpass) or die(mysql_error());
+    mysqli_select_db($con,dbname) or die('Could not select database '.mysql_error());
 ?>
diff --git a/login/login.php b/login/login.php
index 8a6b420c..47470d9c 100755
--- a/login/login.php
+++ b/login/login.php
@@ -4,12 +4,12 @@
             include '../database/dbconnect.php';
             $username = $_POST['user_name'];
             $password = $_POST['user_password'];
-            $query = mysql_query("SELECT * FROM user WHERE username='".$username."' AND password='".$password."'") or die(mysql_error());
+            $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$username."' AND password='".$password."'") or die(mysql_error());
             
-            $numrows=mysql_num_rows($query);
+            $numrows=mysqli_num_rows($query);
             if($numrows!=0)
             {
-                while($row=mysql_fetch_assoc($query))
+                while($row=mysqli_fetch_assoc($query))
                 {
                     $dbusername=$row['username'];
                     $dbpassword=$row['password'];
@@ -27,7 +27,7 @@
                 </script>";
                 header("Location: login.html");
             }
-            mysql_close();
+            mysqli_close($con);
         }
     }
 ?>
diff --git a/login/sign_up.php b/login/sign_up.php
index f8e287cd..3859b1a4 100644
--- a/login/sign_up.php
+++ b/login/sign_up.php
@@ -23,11 +23,11 @@
                 $status = 'customer';
             }
             
-            $query = mysql_query("INSERT INTO user (name,email,phone,username,password,status,pict) VALUES ('$fullname', '$email', '$phone', '$username', '$password', '$status',DEFAULT)") or die(mysql_error());
+            $query = mysqli_query($con,"INSERT INTO user (name,email,phone,username,password,status,pict) VALUES ('$fullname', '$email', '$phone', '$username', '$password', '$status',DEFAULT)") or die(mysql_error());
             if($query)
             {
-                $getUserID = mysql_query("SELECT user_id FROM user WHERE username='".$username."'") or die(mysql_error());
-                $row=mysql_fetch_assoc($getUserID);
+                $getUserID = mysqli_query($con,"SELECT user_id FROM user WHERE username='".$username."'") or die(mysql_error());
+                $row=mysqli_fetch_assoc($getUserID);
                 $user_id=$row['id'];
                 if ($status == "customer") {
                     header("Location: ../order/order.php?id=?$user_id&username=$username");
@@ -35,7 +35,7 @@
                     header("Location: ../profile_page/profile.php?id=?$user_id%26&username=$username");
                 }
             }
-            mysql_close();
+            mysqli_close($con);
         }
         else {
             include("sign_up.html");
@@ -52,18 +52,18 @@
             include '../database/dbconnect.php';
             
             if ($key == "username") {
-                $query = mysql_query("SELECT * FROM user WHERE username='".$value."'") or die(mysql_error());
-                $numrows=mysql_num_rows($query);
+                $query = mysqli_query($con,"SELECT * FROM user WHERE username='".$value."'") or die(mysql_error());
+                $numrows=mysqli_num_rows($query);
             } else if ($key == "user_email") {
-                $query = mysql_query("SELECT * FROM user WHERE email='".$value."'") or die(mysql_error());
-                $numrows=mysql_num_rows($query);
+                $query = mysqli_query($con,"SELECT * FROM user WHERE email='".$value."'") or die(mysql_error());
+                $numrows=mysqli_num_rows($query);
             }
             if ($numrows != 0) {
                 echo " X";
             } else {
                 echo " Ok";
             }
-            mysql_close();
+            mysqli_close($con);
         }
     }
 ?>
diff --git a/profile_page/browse.png b/profile_page/browse.png
deleted file mode 100644
index 096065635aa31d1f51e34c61742d439bfb00c2be..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 3242
zcmb_fS5p&=5~T@AC=yDjQW8oK1w${=LzCVFY0?Suff!0eAhc*glctCS=^&th3ZfM0
zAffk;^j<_j2q1F#9_}x=_hI+U&Yazuo!Ol|8)Is$%Lw8IQBY7Y>gyrRFERhpbOE%N
z-n-_Q?Gh;c&2=>?%KLaXE(4&S-aUT`3J#WkjnXrF=rV=DL?5YP`IvIY-ZP2a3ZlxO
zxR&V;Cn?^siPS_>+WE%V;o4uyQ19|P2mx4xqJ_<xr>Gu@35y1jZY{$N`Yzc=p_sXi
z+Tqy)Ua`4)d9?9pe%-_Mkh86ySph^rb2Az?N^Nzp>3<;#megZ)J``B?DptK1?5DuV
zzL|XZH&$H}thX@k*I({{ZMQ7~{P6`?mYTQwOOD3#=~W5X1K?b(PwSs=X{eLdBa!qi
zPa{$g_MKZ_`DkAJ-w92}tWqZLtl^JO55;~bJTE%nkZ9X@b2}K_l?<a>=}pChI3x^r
zra$MuzgOAemCsQjN+k$e%5BAq1$9I2Tbg9u-gwdfXH$Ihq?vByWES&AN+nnY4B+C*
zRtw)1u&wZQcyiDy-}_s7Ed5o5eXdH#@lcjZ$ofJnUM6Tp;ktPNV6?)ze<NSCg8#B`
zKBN2OC-)LpJX27zVzx9!B7sl3BQudl&5^XOvHtryz?<UW73N1S)fEtDo5>p`_p0Ts
zD~+mU3F>($oe=f2+xI@XSyrLUlrX!z-$GAPBphnp%6H_7r>n!1**mkdAB+?`Pn9`V
zKCAYfy#sjWG_^HS;)+46UAB?C^gVHS0j9gYKA8VP&d2t;W4*%5rV1pmWujVO-uCxW
zA`WYH-CE8!+Cg&7vp=hFM>)v!^l+nO!|q}5E^OykqyJhz5g~5%9^T#u_KzZ>HxIp9
zCZ2-Wp<ku7Cmetx$3N%ZUhv)4!!uoz`kH(H^-v*jOw^$^pt)8j)WL=X2=M(;zY&3h
zPv4xo*rV>vP$BM1b8+mSL_|`1jh0#&SFVWP9Z(W^ds7*+TaZY{kkkE2a=N`QcxUSK
z#&C1Am}g(6F<0og3HgT&n-y7&K1{{G$ig!_-uWVEwl=T`&T(AP(-zqME#$b^I$QN{
zds14<h8WN3NhW}++&0WH^4!uvHv)Hto}QxbtKDnFsxU4G&(#KYTO@dLAwm_b-r0^?
zys`wfJSYNN@h@93l{kJ=a_>n;z<mJ$I0A|Y)dnScoIV-5vH2q(uZ2WCFES!>4;ARA
zcFd^B$)za;Y`Rs&F{F!Gh?LsoM%B!8H;=xl!xVNYM%ho_Gl+XX_d&yWi8q&h5Mthl
zJy!^X={yf0*u0Wek^+Wr{g_2PMx7?`$ai>2a#$1@7d9Xe&j<pJ-CyR48XGTEWxdCG
zP;Kw5E6lGpIDSMI2I!-|e?WC`NIDMu2s=YDSD=xzw{kDYd#yS1&A9%vUFEJMLFxpz
zUaHii^+8xvg&5Va{7IZ-e2~^Inkw~6o;%c;iS8<wW_Oz8+vzV4d5mQII~X>M8F}Pn
z%v4v|>VhkS2aScZw=Y&Wp6ty>T2y%ri^T3ukJqH7GE!=4YiqXyyUP6_&c9NGize^S
zg(RLLYW`8|_XxZAdwx0GYC+qaMpt`SB}i~AHe?}7)&JR(-@86NM`R#t@uPg57fOK-
z`oo~#1k7ZX8rS;YR_{y`?{CTZ6ho+|3canBS_N8kGumr9h6?XoX$R3nuBJDc$rAvP
zMdB7k@xu>?mPyYDaB_;i7c1CZ%%Z5kSqslS$2zV&kr{0YWu)E^wXZlHG_|u29)=lW
z3rc1_#l$d_*q5-llTzACI$Xe!@8%(2p}j<T3<oQK_E-=Gff8Ma1eAUH=Ws(OGtL%C
z$L$(jbGROxlqS7K^aAD?H3bb23fFp~+w=Lw*|j=E<kCTm#GY{?svv`Ry(#yYl|~}m
zgZ1Vox%rC)ZhGoE&7@vKbCjQ*6ISq60#xp`*)umaLy-coH{1?wqgtv`KHCw7jShPt
zi0Mwd3EahH%lOVr+_*b(ZFycq>`q>~7b;Ut)@yOzKaK>fq{s6v&yd2K^9;WD%6Kgz
zOPd>9Lx<8nKM19=5Qb)0l+WstA3zCXK3;7_Pmbj028@_kn0OV`SGr%xj}ly*iv-^&
zc*eF<_cHNcwab83_v1q*&FgItsa-AU2dlmLXO}JfjMj-ax%Eu1IqFJ6h~W6H>(M`x
z>mW&7Ww|H%OWep7QqYx@A`E;tbrVsKQSmtq$Y@R$|I_H49i}r^sgGAYFN=B+r<YY9
zyfShOIABV}ydp&$#@*cG(a-@<u?a3Q8Lu^2sn3CU*98i31?P~lv^{P2J|1ch{tcKs
ziP=wZai@1s>ireyW?^?47($0G$BJD)t5M}w$=ExS{V2`WI3|~}nct$wRnLn|-EYag
z67+3x?gTtcSbKD4iS19%A^|i?+tWbrfh(<yh_m8E#&pzIpn&7IrZHivjM+L2(Qc;3
zAAj`7iT07VwngW~i|{4JjQ&U)p0WMMSaOtrp9zzCE!r~d*P^!9gXc&7?(P@Tl9E+U
zjiL7ZJyC5n!8iw@SPzDyp1p-q>vyZj<nJb#IT^Cvv|EdIo@?-jGhY{`bwC;s-s9!3
z4JIj5l#oq~+%h@Zagf&|S34stV`(I%zLaLh;nHwAbY96xx?OsIddQuGN9dI<Z7o{H
zJk(eceK0R-Vr#sD_>@rmcsEmV^#_WGZ}er^7_Z>}>^pi#;==FyhX*<utQ*{5Qa>qB
zGjSpptPv}e-c*tDh&iUVFqz#7rmnHi8wn{0DzjZpzixHibCBQ#F#>&hDQ?|YMSo->
zcl0Z1*|BS|f?Ol2a9kU-WBb;wxhY5tv}mxXoRCV^M<xySm9e{so?Fq7e3IGg#aRs@
zb|qKUhDKak^s|`6_{dL_wkIozWyqQ@%m7jdjWEmaDKV%Q&o<$<cl=9#Tp;sD*<+8f
z`fxX(GFSNNiKi{=0L@;EI?fu5%t)z=4oY7Bbmpi>8P=VAgGOYazcK3MWpLB&hk)&>
z5p>PfBhiO?cMRs|jW;@ZO%nw=O|on^B*-}E-hCpC6nM{QwnWH_W1C<|QEl~6dFAf}
z*LhA%W2RKQ(4X1kW<K(W*Dy->=XTRKV4+ZKKY?Is$i=s+`0%B}@<?B`&oqEvg@E)A
zV1(9}I?2;udE5lf+y?GGP9`fXa-X@?DJpQc4;ClUHm9Q0kJE3BPDJZO>}QX@Gy2SI
zITh7ICR6ddbvjDhKPRJeVLAy?Sa|hC(q@zn&MB)nx(ToIX$B%xh2Z!K8QhjX+MG<a
ztwL$kOkRs<GEwO{F<O?e-fuV;GEOmQVEb*er-f&1EqNrby5ax_liLvIXT<I+^c+Jb
zV-0Gc3sT6Rypm+WCP_;cDJhXk4~B@nIFmi|)5_QT!{)z!{}TT`F3ul*m^`_v<#KHb
zq=qb8gyr#<gKt;u>&uhEz-<wn1GIVIBtr~+6|58Pv$?;UR1iGlGkjnz+sQc}&2S^_
zav^x2k<3GlSLtq%Q%Dfhxk)-3?DYr2Us2->H>`l_2dyR#@0st3{L{0fqugAYe?H0z
zL&W@|)fk#Hx1Ss`3Ug_B6dC+F;u~VXQb`G%w&Q^V#&M7vInS>tpUMWx2<O>TlD;_S
zd|;hhvwLp*YvC!1PY{ZZgI{p0fiExp_DN?;gJcvv;tZ~P3XF`g%L)E<8+tRe`k<g3
zQ{gyL?qhf0OzkMcaxu}+8jKJTILZVMkoAdUWkyVp`#s%nUC2rRBrQ01VL?YA5xDK6
zK}%udl;s;<&HK~R*-U+&dYaP}aVO-U;e8nP>~G_EO<9wl$r2lKYVNQ@)PlmU^W^~k
zyFo)!aNWT_v<Lo{8EW?%a6y4nf{KjN1Qm~ZUbRR$O2n;3Tn~6zu~`FTj}Mrk(*Q-~
z&p{_x)q25Lwx8pku8k~|ncv_u$C@sDYJ#8Y`1)Tf`g>qL)-c^&n--*eIyQG0q#kHY
zbq-632R@ebNoix=gSmG01hBN~yyc<1RK&1(;dQpZi4iGgubC15#;aEA$QSWlk%UW`
z%!#Pb6wPz9WI{4f-RU3%vnzpx^U(q>%%)O0J?{o$$i8&fZ^WuYq4R#GvaZm)axF2c
l*a&D20RBIKB-I7=8@CTkfo#2ZFaHe+eQjf8xu#Rpe*jGE44wc0

diff --git a/profile_page/edit_profile.php b/profile_page/edit_profile.php
index 203a9409..9331cad5 100755
--- a/profile_page/edit_profile.php
+++ b/profile_page/edit_profile.php
@@ -69,12 +69,12 @@
         
         $username = $_GET['username'];
         $user_id = $_GET['id'];
-        $query=mysql_query("SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
+        $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
     
-        $numrows=mysql_num_rows($query);
+        $numrows=mysqli_num_rows($query);
         if($numrows!=0)
         {
-            while($row=mysql_fetch_assoc($query))
+            while($row=mysqli_fetch_assoc($query))
             {
                 echo "<script>document.getElementById('current_name').value = '".$row['name']."'</script>";
                 echo "<script>document.getElementById('current_phone').value = '".$row['phone']."'</script>";
@@ -83,7 +83,7 @@
                 }
             }
         }
-        mysql_close();
+        mysqli_close($con);
     ?>
     <script>
         function showFileName(inputFile) {
diff --git a/profile_page/getProfilePict.php b/profile_page/getProfilePict.php
index 42ec84f7..ac181620 100644
--- a/profile_page/getProfilePict.php
+++ b/profile_page/getProfilePict.php
@@ -1,9 +1,9 @@
 <?php
     $user = $_GET['username'];
     include '../database/dbconnect.php';
-    $query=mysql_query("SELECT pict FROM user WHERE username='".$user."'") or die(mysql_error());
-    $row=mysql_fetch_assoc($query);
-    mysql_close();
+    $query=mysqli_query($con,"SELECT pict FROM user WHERE username='".$user."'") or die(mysql_error());
+    $row=mysqli_fetch_assoc($query);
+    mysqli_close($con);
     if (isset($row['pict'])) {
         header("Content-type: image/jpeg");
         echo $row['pict'];        
diff --git a/profile_page/profile.php b/profile_page/profile.php
index 8bb39a14..ddd785ca 100755
--- a/profile_page/profile.php
+++ b/profile_page/profile.php
@@ -28,12 +28,12 @@
             <?php
                 include '../database/dbconnect.php';
                 
-                $query=mysql_query("SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
+                $query=mysqli_query($con,"SELECT * FROM user WHERE username='".$username."'") or die(mysql_error());
     
-                $numrows=mysql_num_rows($query);
+                $numrows=mysqli_num_rows($query);
                 if($numrows!=0)
                 {
-                    while($row=mysql_fetch_assoc($query))
+                    while($row=mysqli_fetch_assoc($query))
                     {
                         echo "</br><strong>".$row['username']."</strong></br>";
                         echo $row['name']."</br>";
@@ -47,7 +47,7 @@
                         }
                     }
                 }
-                mysql_close();
+                mysqli_close($con);
             ?>
         </div>
     </div>
-- 
GitLab