feat: add error 403 FORBIDDEN

23b4bbc0 · Hidayatullah Wildan Ghaly Buchary · 92412ac7 · 23b4bbc0 · 23b4bbc0 · 23b4bbc0
Commit 23b4bbc0 authored 1 year ago by Hidayatullah Wildan Ghaly Buchary
--- a/.htaccess
+++ b/.htaccess
 ErrorDocument 404 "/error/404.php"
\ No newline at end of file
+ErrorDocument 403 /error/403.php
\ No newline at end of file
--- a/app/views/admin-achievement/index.php
+++ b/app/views/admin-achievement/index.php
@@ -4,6 +4,16 @@ if (!isset($_SESSION['username'])) {
    header('Location: ../login');
    return;
 }
+if (!isset($_SESSION['isAdmin'])) {
+    header('Location: ../my-achievement');
+    return;
+}
+if ($_SESSION['isAdmin'] == 0) {
+    // Masuk ke FORBIDDEN
+    http_response_code(403);
+    header('Location: /error/403.php');
+    exit();
+}
 ?>
 <!DOCTYPE html>

--- a/error/403.php
+++ b/error/403.php
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <title>Error 403</title>
+  <link rel="stylesheet" type="text/css" href="/public/css/error.css">
+</head>
+<body>
+    <section>
+    <?php for ($i = 0; $i < 260; $i++) { ?>
+        <span></span>
+    <?php } ?>
+    <div class="random404">
+        <h1>403</h1>
+    </div>
+    <div class="mahasiswa">
+        <h1>Mahasiswa</h1>
+        <h1>Leveling</h1>
+    </div>
+    <div class="error404">
+        <div class="error404-content">
+        <h2>Access Denied</h2>
+        <p>You do not have permission to access this resource.</p>
+        <button id="btn" class="btn" onclick="window.location.href='/app/views/landing/'">Back to Home</button>
+        </div>
+    </div>
+    </section>
+</body>
+</html>
\ No newline at end of file
--- a/error/404.php
+++ b/error/404.php
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
  <title>Error 404</title>
-  <link rel="stylesheet" type="text/css" href="/public/css/error404.css">
+  <link rel="stylesheet" type="text/css" href="/public/css/error.css">
 </head>
 <body>
    <section>

--- a/public/css/error404.css
+++ b/public/css/error404.css