HeroKyou/webgis_geospesial
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: absolute path for upload dir and strict exception handling

Browse Source
This commit is contained in:
Rayhan NuerJamman
2026-06-12 12:49:22 +07:00
parent b81a0166fa
commit c507033b9e
5 changed files with 47 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kemiskinan/penduduk_miskin/simpan.php
+11 -5
View File
@@ -50,7 +50,7 @@ function uploadFoto($file_input_name) {
if ($file_size <= $max_size) { if ($file_size <= $max_size) {
$file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION)); $file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
$new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension; $new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension;
$upload_file_dir = '../uploads/'; $upload_file_dir = __DIR__ . '/../uploads/';
if (!is_dir($upload_file_dir)) { if (!is_dir($upload_file_dir)) {
@mkdir($upload_file_dir, 0777, true); @mkdir($upload_file_dir, 0777, true);
} }
@@ -58,16 +58,22 @@ function uploadFoto($file_input_name) {
if (@move_uploaded_file($file_tmp_path, $dest_path)) { if (@move_uploaded_file($file_tmp_path, $dest_path)) {
return $new_file_name; return $new_file_name;
} else {
throw new Exception("Gagal memindahkan file upload ke: " . $dest_path);
} }
} else {
throw new Exception("Ukuran file melebihi batas 10MB.");
} }
} else if (isset($_FILES[$file_input_name]) && $_FILES[$file_input_name]['error'] !== UPLOAD_ERR_NO_FILE) {
throw new Exception("Error upload PHP: " . $_FILES[$file_input_name]['error']);
} }
return null; return null;
} }
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
try { try {
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$stmt = $pdo->prepare( $stmt = $pdo->prepare(
"INSERT INTO penduduk_miskin (nama, nik, keterangan, alamat, latitude, longitude, status_jangkauan, fasilitas_publik_id, foto_rumah, foto_kk, status_bantuan) "INSERT INTO penduduk_miskin (nama, nik, keterangan, alamat, latitude, longitude, status_jangkauan, fasilitas_publik_id, foto_rumah, foto_kk, status_bantuan)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)" VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
@@ -80,7 +86,7 @@ try {
$data = $stmtSelect->fetch(PDO::FETCH_ASSOC); $data = $stmtSelect->fetch(PDO::FETCH_ASSOC);
echo json_encode(['status'=>'success','data'=>$data]); echo json_encode(['status'=>'success','data'=>$data]);
} catch (PDOException $e) { } catch (Exception $e) {
echo json_encode(['status'=>'error','message'=>$e->getMessage()]); echo json_encode(['status'=>'error','message'=>$e->getMessage()]);
} }
?> ?>
kemiskinan/penduduk_miskin/update.php
+12 -6
View File
@@ -47,7 +47,7 @@ function uploadFoto($file_input_name) {
if ($file_size <= $max_size) { if ($file_size <= $max_size) {
$file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION)); $file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
$new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension; $new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension;
$upload_file_dir = '../uploads/'; $upload_file_dir = __DIR__ . '/../uploads/';
if (!is_dir($upload_file_dir)) { if (!is_dir($upload_file_dir)) {
@mkdir($upload_file_dir, 0777, true); @mkdir($upload_file_dir, 0777, true);
} }
@@ -55,18 +55,24 @@ function uploadFoto($file_input_name) {
if (@move_uploaded_file($file_tmp_path, $dest_path)) { if (@move_uploaded_file($file_tmp_path, $dest_path)) {
return $new_file_name; return $new_file_name;
} else {
throw new Exception("Gagal memindahkan file upload ke: " . $dest_path);
} }
} else {
throw new Exception("Ukuran file melebihi batas 10MB.");
} }
} else if (isset($_FILES[$file_input_name]) && $_FILES[$file_input_name]['error'] !== UPLOAD_ERR_NO_FILE) {
throw new Exception("Error upload PHP: " . $_FILES[$file_input_name]['error']);
} }
return null; return null;
} }
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$alamat = trim($_POST['alamat'] ?? ''); $alamat = trim($_POST['alamat'] ?? '');
try { try {
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$query = "UPDATE penduduk_miskin SET nama=?, nik=?, keterangan=?, alamat=?, latitude=?, longitude=?, status_jangkauan=?, fasilitas_publik_id=?, status_bantuan=?"; $query = "UPDATE penduduk_miskin SET nama=?, nik=?, keterangan=?, alamat=?, latitude=?, longitude=?, status_jangkauan=?, fasilitas_publik_id=?, status_bantuan=?";
$params = [$nama, $nik, $keterangan, $alamat, $latitude, $longitude, $status_jangkauan, $fp_id, $status_bantuan]; $params = [$nama, $nik, $keterangan, $alamat, $latitude, $longitude, $status_jangkauan, $fp_id, $status_bantuan];
@@ -90,7 +96,7 @@ try {
$data = $stmtSelect->fetch(PDO::FETCH_ASSOC); $data = $stmtSelect->fetch(PDO::FETCH_ASSOC);
echo json_encode(['status'=>'success','data'=>$data]); echo json_encode(['status'=>'success','data'=>$data]);
} catch (PDOException $e) { } catch (Exception $e) {
echo json_encode(['status'=>'error','message'=>$e->getMessage()]); echo json_encode(['status'=>'error','message'=>'Gagal memperbarui: '.$e->getMessage()]);
} }
?> ?>
kemiskinan/test.php
+1
View File
@@ -0,0 +1 @@
<?php require 'koneksi.php'; print_r($pdo->query('SELECT id, nama, foto_rumah, foto_kk FROM penduduk_miskin ORDER BY id DESC LIMIT 5')->fetchAll(PDO::FETCH_ASSOC));
publik/penduduk_miskin/simpan.php
+11 -5
View File
@@ -50,7 +50,7 @@ function uploadFoto($file_input_name) {
if ($file_size <= $max_size) { if ($file_size <= $max_size) {
$file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION)); $file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
$new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension; $new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension;
$upload_file_dir = '../../kemiskinan/uploads/'; $upload_file_dir = __DIR__ . '/../../kemiskinan/uploads/';
if (!is_dir($upload_file_dir)) { if (!is_dir($upload_file_dir)) {
@mkdir($upload_file_dir, 0777, true); @mkdir($upload_file_dir, 0777, true);
} }
@@ -58,16 +58,22 @@ function uploadFoto($file_input_name) {
if (@move_uploaded_file($file_tmp_path, $dest_path)) { if (@move_uploaded_file($file_tmp_path, $dest_path)) {
return $new_file_name; return $new_file_name;
} else {
throw new Exception("Gagal memindahkan file upload ke: " . $dest_path);
} }
} else {
throw new Exception("Ukuran file melebihi batas 10MB.");
} }
} else if (isset($_FILES[$file_input_name]) && $_FILES[$file_input_name]['error'] !== UPLOAD_ERR_NO_FILE) {
throw new Exception("Error upload PHP: " . $_FILES[$file_input_name]['error']);
} }
return null; return null;
} }
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
try { try {
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$stmt = $pdo->prepare( $stmt = $pdo->prepare(
"INSERT INTO penduduk_miskin (nama, nik, keterangan, alamat, latitude, longitude, status_jangkauan, fasilitas_publik_id, foto_rumah, foto_kk, status_bantuan) "INSERT INTO penduduk_miskin (nama, nik, keterangan, alamat, latitude, longitude, status_jangkauan, fasilitas_publik_id, foto_rumah, foto_kk, status_bantuan)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)" VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
@@ -80,7 +86,7 @@ try {
$data = $stmtSelect->fetch(PDO::FETCH_ASSOC); $data = $stmtSelect->fetch(PDO::FETCH_ASSOC);
echo json_encode(['status'=>'success','data'=>$data]); echo json_encode(['status'=>'success','data'=>$data]);
} catch (PDOException $e) { } catch (Exception $e) {
echo json_encode(['status'=>'error','message'=>$e->getMessage()]); echo json_encode(['status'=>'error','message'=>$e->getMessage()]);
} }
?> ?>
publik/penduduk_miskin/update.php
+12 -6
View File
@@ -47,7 +47,7 @@ function uploadFoto($file_input_name) {
if ($file_size <= $max_size) { if ($file_size <= $max_size) {
$file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION)); $file_extension = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
$new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension; $new_file_name = uniqid($file_input_name . '_', true) . '.' . $file_extension;
$upload_file_dir = '../../kemiskinan/uploads/'; $upload_file_dir = __DIR__ . '/../../kemiskinan/uploads/';
if (!is_dir($upload_file_dir)) { if (!is_dir($upload_file_dir)) {
@mkdir($upload_file_dir, 0777, true); @mkdir($upload_file_dir, 0777, true);
} }
@@ -55,18 +55,24 @@ function uploadFoto($file_input_name) {
if (@move_uploaded_file($file_tmp_path, $dest_path)) { if (@move_uploaded_file($file_tmp_path, $dest_path)) {
return $new_file_name; return $new_file_name;
} else {
throw new Exception("Gagal memindahkan file upload ke: " . $dest_path);
} }
} else {
throw new Exception("Ukuran file melebihi batas 10MB.");
} }
} else if (isset($_FILES[$file_input_name]) && $_FILES[$file_input_name]['error'] !== UPLOAD_ERR_NO_FILE) {
throw new Exception("Error upload PHP: " . $_FILES[$file_input_name]['error']);
} }
return null; return null;
} }
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$alamat = trim($_POST['alamat'] ?? ''); $alamat = trim($_POST['alamat'] ?? '');
try { try {
$foto_rumah = uploadFoto('foto_rumah');
$foto_kk = uploadFoto('foto_kk');
$query = "UPDATE penduduk_miskin SET nama=?, nik=?, keterangan=?, alamat=?, latitude=?, longitude=?, status_jangkauan=?, fasilitas_publik_id=?, status_bantuan=?"; $query = "UPDATE penduduk_miskin SET nama=?, nik=?, keterangan=?, alamat=?, latitude=?, longitude=?, status_jangkauan=?, fasilitas_publik_id=?, status_bantuan=?";
$params = [$nama, $nik, $keterangan, $alamat, $latitude, $longitude, $status_jangkauan, $fp_id, $status_bantuan]; $params = [$nama, $nik, $keterangan, $alamat, $latitude, $longitude, $status_jangkauan, $fp_id, $status_bantuan];
@@ -90,7 +96,7 @@ try {
$data = $stmtSelect->fetch(PDO::FETCH_ASSOC); $data = $stmtSelect->fetch(PDO::FETCH_ASSOC);
echo json_encode(['status'=>'success','data'=>$data]); echo json_encode(['status'=>'success','data'=>$data]);
} catch (PDOException $e) { } catch (Exception $e) {
echo json_encode(['status'=>'error','message'=>$e->getMessage()]); echo json_encode(['status'=>'error','message'=>'Gagal memperbarui: '.$e->getMessage()]);
} }
?> ?>