<?php
	session_start();
	if($_SESSION['validUser'] !== TRUE)
	{
		header("location: ./index.php");
		exit();
	}
?>
<?php

if(isset($_REQUEST['status']) && $_REQUEST['status'] == 'ok') {
	if ($_REQUEST['operation'] == 'carikary') {		
		cari_kary($_REQUEST['txtcari']);
	} elseif ($_REQUEST['operation'] == 'ambilkary') {		
		ambil_kary($_REQUEST['id_kary']);
	} elseif ($_REQUEST['operation'] == 'transaksikary') {
		transaksi_kary($_REQUEST['nik']);
	} elseif ($_REQUEST['operation'] == 'hapuskary') {
		hapus_kary($_REQUEST['id_kary']);
	}
}

function cari_kary($nama) {
	if($nama != "") {		
		$harray = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);
		$nama = addslashes($nama);
		$data = $mysqli->query("SELECT nik,nama,id_pekerjaan FROM karyawan WHERE nama LIKE '%".$nama."%' ORDER BY nik");		
		if($data->num_rows > 0) {
			$idx = 0;
			while($a = $data->fetch_array(MYSQLI_ASSOC)) {
				$harray[$idx] = array(
					'nik' => $a['nik'], 
					'nama' => stripcslashes($a['nama']), 
					'id_pekerjaan' => $a['id_pekerjaan']
				);
				$idx++;
			}
			/* tutup hasil query */
			$data->close();
		}
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		echo json_encode($harray);
	}else{
			$harray = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);
		$nama = addslashes($nama);
		$data = $mysqli->query("SELECT nik,nama,id_pekerjaan FROM karyawan ORDER BY nik");		
		if($data->num_rows > 0) {
			$idx = 0;
			while($a = $data->fetch_array(MYSQLI_ASSOC)) {
				$harray[$idx] = array(
					'nik' => $a['nik'], 
					'nama' => stripcslashes($a['nama']), 
					'id_pekerjaan' => $a['id_pekerjaan']
				);
				$idx++;
			}
			/* tutup hasil query */
			$data->close();
		}
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		echo json_encode($harray);
	}
}

function ambil_kary($id_kary) {
	if ($id_kary != "") {
		$array_data = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);
		$data = $mysqli->query("SELECT * FROM karyawan WHERE nik = '".$id_kary."' ORDER BY nik");		
		if($data->num_rows > 0) {
			$idx = 0;
			while($a = $data->fetch_array(MYSQLI_ASSOC)) {	
				$array_data[$idx] = array(
					'nik' => $a['nik'],					 
					'nama' => $a['nama'], 
					'username' => $a['username'],
					'password' => $a['password'], 
					'id_pekerjaan' => $a['id_pekerjaan'],					
					'id_department' => $a['id_department'],
				);
				$idx++;
			}
			/* tutup hasil query */
			$data->close();
		}
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		echo json_encode($array_data);
	}
}

function hapus_kary($id_kary){
	if ($id_kary != "") {
		$array_data = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);		
		$query 	= "DELETE FROM karyawan WHERE nik = '".$id_kary."' LIMIT 1"; 
		$stmt 	= $mysqli->prepare($query);
		$stmt->execute();
		if($stmt->affected_rows > 0) {
			$array_data[0] = 1;
		} else {
			$array_data[0] = 0;
		}
		$stmt->close();
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		//echo count($array_data);
		echo json_encode($array_data);
	}	
}


function transaksi_kary($id_kary) {
	if($id_kary != ""){
		// cek data		
		$nik = $_POST['nik'];
    $username = $_POST['uname'];
    $passwdlama = MD5($_POST['passwdlama']);
    
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);
		$data = $mysqli->query("SELECT nik,username,password FROM karyawan WHERE nik = '".$id_kary."' ORDER BY nik");		
		$dt = $data->fetch_array(MYSQLI_ASSOC);
                if ($dt['password']=='')
                { $pass = MD5($dt['password']); }
                else
                { $pass = $dt['password']; }
                if ($dt['username']=='')
                { $uname = $username ; }
                else
                { $uname = $dt['username']; }
                $nomor_induk = $dt['nik']; 
    
    if($data->num_rows > 0) {
			/* tutup hasil query */
			$data->close();
			/* tutup koneksi */
			$mysqli->close();
			
      /* update data kary */
			if ($nik==$nomor_induk && $passwdlama==$pass)
        {	
          update_kary();
        }
      else 
        { 
          alert_error(); 
        }        
			
		} else {
			/* tutup hasil query */
			$data->close();
			/* tutup koneksi */
			$mysqli->close();
			/* simpan data kary baru */
			simpan_kary();
			
		}
	}
}

function alert_error(){
  $array_data = array();
  $array_data[0] = 0;
  echo json_encode($array_data);
}

function update_kary(){
	if(isset($_POST)) {
		$kode_kary = $_POST['nik'];
		$nama_kary = $_POST['namakary'];
		$uname = $_POST['uname'];
		$passwdlama = $_POST['passwdlama'];
		$passwd = MD5($_POST['passwd']);
		$job = $_POST['job'];
		$department = $_POST['department'];
		
		$array_data = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);		
		$query 	= "UPDATE karyawan SET "; 
		$query	.= "nama = ?, ";
		$query	.= "username = ?, ";
		$query	.= "password = ?, ";
		$query	.= "id_pekerjaan = ?, ";
		$query	.= "id_department = ? ";
		$query	.= "WHERE nik = ?";		
		
		$stmt 	= $mysqli->prepare($query);
		$stmt->bind_param("ssssss", $nama_kary, $uname, $passwd, $job, $department, $kode_kary);
		$stmt->execute();
		if($stmt->affected_rows > 0) {
			$array_data[0] = 1;
		} else {
			$array_data[0] = 0;
		}
		$stmt->close();
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		//echo count($array_data);
		echo json_encode($array_data);
	}	
}

function simpan_kary() {
	if(isset($_POST)) {
		$kode_kary = $_POST['nik'];
		$nama_kary = $_POST['namakary'];
		$uname = $_POST['uname'];
		$passwd = MD5($_POST['passwd']);
		$job = $_POST['job'];
		$department = $_POST['department'];
		$last_login = '0000-00-00 00:00:00';
		
		$array_data = array();
		require_once 'db_login.inc.php';
		$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE);		
		$query 	= "INSERT INTO karyawan VALUES (?, ?, ?, ?, ?, ?, ?)";
		$stmt 	= $mysqli->prepare($query);
		$stmt->bind_param("sssssss", $kode_kary, $nama_kary, $uname, $passwd, $job, $department, $last_login);
		$stmt->execute();
		if($stmt->affected_rows > 0) {
			$array_data[0] = 1;
		} else {
			$array_data[0] = 0;
		}
		$stmt->close();
		/* tutup koneksi */
		$mysqli->close();
		/* cetak hasil */
		//echo count($array_data);
		echo json_encode($array_data);
	}	
}
?>