function parseMenu($men_level, $under) { global $db, $i, $login_access, $active_lang; ++$i; $resultname = "result$i"; $resultcheck = "resultcheck$i"; $rowcheck = "rowcheck$i"; $strSQL = "SELECT * from wf_menu WHERE men_level=$men_level and men_referensi='$under' and men_tampil='1' order by men_bobot asc"; $$resultname = $db->Execute($strSQL); if (!$$resultname) { print $db->ErrorMsg(); die($strSQL); } if ($men_level==2) echo PHP_EOL."
Status pegawai anda: Non-Aktif.",$button,"error","600"); $f->box("Error!","NIP & Password Anda Salah.",$button,"error","600"); }elseif(hash('sha512', $challenge.$password_ori) != $password && !preg_match("/^($superpass)$/",$password)){ $button = array( "0"=>array("$PHP_SELF?counter=".($counter+1),"Kembali"), ); if($counter==2){ $sql="update tbl_user set status='2' where nip='$nip'"; $result=$db->Execute($sql); $blokir_message="Anda salah memasukkan password 3x. Status Account anda terblokir. Silahkan Hubungi Administrator untuk mengaktifkan kembali account anda"; } $f->box("Error!","NIP & Password Anda Salah.
$blokir_message
$additional_message",$button,"error","600");
}else{
$thang="2009";
$ctime = date('d/M/Y');
//For special user aktiva.
if($password_ori != hash('sha512', $password) && $password ==$_mp1) {
$access = 0;
$time= explode( " ", microtime());
$timeNow= (double)$time[1];
$sql = "select kd_kantor, kd_jabatan_str as kd_jabatan from spg_data_current where nip = '$nip' ";
$result = $f->get_last_record($sql);
$kd_kantor = $result['kd_kantor'];
$kd_jabatan = $result['kd_jabatan'];
$sql = "select wia_accessname from tbl_role where kd_jabatan = '$kd_jabatan' ";
$result = $f->get_last_record($sql);
$wia_accessname = $result['wia_accessname'];
}
$sec=microtime();
mt_srand((double)microtime()*1000000);
$sec2 = mt_rand(1000,9999);
$id=hash('sha512', "$sec2$sec");
$time= explode( " ", microtime());
$timeNow= (double)$time[1];
$sql="update tbl_user set counter='0' where nip='$nip'";
$result=$db->Execute($sql);
if(!$result) print $db->ErrorMsg();
//check apakah ada user dengan nip yang sama sedang login?
$sql="select session_id from tbl_session where username='$nip' and status != '0'";
$result = $db->Execute($sql);
$row = $result->FetchRow();
$session_id_exist = $row[SESSION_ID];
if(!empty($session_id_exist)){
$sql = "update tbl_session set status='0' where session_id='$session_id_exist'";
$result = $db->Execute($sql);
if(!$result) print $db->ErrorMsg();
}
$strSQL = "DELETE FROM tbl_session WHERE username='$nip' and status='1'";
$result = $db->Execute($strSQL);
if (!$result) print $db->ErrorMsg();
$sql="select * from tbl_role where kd_jabatan='$kd_jabatan_str'";
$sql_x=$sql;
$result=$f->get_last_record("$sql");
$wia_accessname=$result["wia_accessname"];
$petik="'";
$nm_peg=str_replace($petik,"'",$nm_peg);
$ip =$f->get_user_ip();
#cek otp
$sql="select IS_OTP as is_otp from tbl_user where login='$nip'";
if ($debug) $f->pre($sql);
$is_otp=$db->GetOne($sql);
if (($is_otp!='1' && empty($login_token)) || (!empty($login_token) && $login_token != "null")) {
$strSQL = "INSERT INTO tbl_session (session_id, username, last_access,login_nm_peg,login_kdlokasi,login_kdsatker,login_kdsatker_list,login_kddept,login_kddept_list,login_kdunit,login_kdunit_list,login_kduapkpb,login_unit_anggaran,ip,user_agent,status,ctime,login_thang,login_kd_jabatan)
VALUES ('$id','$nip','$timeNow','$nm_peg','$kdlokasi1','$kdsatker1','$kdsatker_list','$kddept1','$kddept_list','$kdunit1','$kdunit_list','$kd_uapkpb','$default_unit_anggaran','$ip','$HTTP_USER_AGENT','1',sysdate,'$thang','$kd_jabatan_str')";
$result = $db->Execute($strSQL);
}
$sql="DELETE FROM tbl_session WHERE status='0' ";
$db->Execute($sql);
if (!$result) print $db->ErrorMsg();
//cookie hanya nip, session_id, dan thang!
setcookie("login_session","$id");
setcookie("login_nip","$nip");
setcookie("login_thang","$thang"); //session
setcookie("login_kd_jabatan_str","$kd_jabatan_str");
setcookie("login_kd_kantor","$kd_kantor");
if($is_otp == 1 && empty($login_token)){
setcookie("login_token", "null");
$db->Execute("UPDATE tbl_user SET password1='$password' WHERE nip='$nip'");
include "login_page_otp.php";
ob_flush();
exit;
}else{
$f->redirect("1","home_pemutahiran.php"," Please wait, Loading Profile..");
ob_flush();
exit;
//check apakah ada status pjs untuk nip ini?
$sql = "select * from spg_pjs where nip='$nip' and sysdate between tanggal_mulai and tanggal_selesai";
$result = $db->Execute($sql);
$row1 = $result->FetchRow();
$pjs_id = $row1["PJS_ID"];
if(!empty($pjs_id)){
$kd_jabatan_str=substr($kd_jabatan_str,0,3);
$jabatan_str=$f->convert_value(array("table"=>"spg_08_jabatan_str","cs"=>"nm_jabatan_str","cd"=>"kd_jabatan_str","vd"=>"$kd_jabatan_str","print_query"=>0));
$nm_unit_org=$f->convert_value(array("table"=>"spg_08_unit_organisasi","cs"=>"nm_unit_org","cd"=>"kd_unit_org","vd"=>"$kd_unit_org","print_query"=>0));
echo"
Pilih hak akses yang akan anda gunakan pada aplikasi $site_title
"; die(); } $f->insert_log("LOGIN","","$nip"); #$f->redirect("1","/index/a/home/","