<?php
if(!defined("CMSBalitbang")) {
die("<h1>Permission Denied</h1>You don't have permission to access the this page.");
}
/*********************************************************** berita ***************************************/
function berita() {
include "koneksi.php";
$kd=$_GET['kode'];
$hal=$_GET['hal'];
if ($kd=='') $kd=$_POST['kode'];

if ($kd=='') {
$brs=30;
$kol=10;
$byk_result=mysql_query("select * from t_news");
$byk=mysql_num_rows($byk_result);
if ($byk<=$brs)
$jml=0;
else
{
$jml=floor($byk / $brs);
$sisa= $byk % $brs;
if ($sisa!=0)
$jml++;
}
if ($hal=="")
$awal=0;
else
$awal=$brs*($hal-1);

if ($hal=="") $hal=1;
$back=$hal-1;
$next=$hal+1;
if ($hal==1) $back=1;
if ($hal==$jml) $next=$jml;
$mulai=1;
$batas=$jml;
if ($jml>$kol)
$batas=$kol;

if ($hal>$kol) {
$mulai=1+$hal-$kol;
$batas=$hal;
}

$query = "SELECT * FROM t_news order by id DESC LIMIT ".$awal.",".$brs."";
$query_result_handle = mysql_query ($query)
or die (mysql_error());

// check that there is news
$num_of_rows = mysql_num_rows ($query_result_handle) ;
// tambah alan untuk delete multiple
$berita .= "<table width='100%' border='0' align=center >";
if ($jml!=0) {
$berita .= "<tr><td colspan=2 ><center><font class='ver10'><a href='index.php?id=berita&hal=1' style='color:000000;text-decoration:none' title='Hal 1'>Awal </a>
<a href='index.php?id=berita&hal=$back' style='color:000000;text-decoration:none' title='$back'>Sebelum </a> |";
for($i=$mulai;$i<=$batas;$i++)
{
if ($i==$hal)
$berita .= "<b><a href='index.php?id=berita&hal=$i' style='color:000000;text-decoration:none' title='Hal $i dari $byk Data'> $i </a></b> |";
else
$berita .= "<a href='index.php?id=berita&hal=$i' style='color:000000;text-decoration:none' title='Hal $i dari $byk Data'> $i </a> |";
}
$berita .= "<a href='index.php?id=berita&hal=$next' style='color:000000;text-decoration:none' title='$next'> Lanjut</a>
<a href='index.php?id=berita&hal=$jml' style='color:000000;text-decoration:none' title='Hal $jml'> Akhir</a></font></center></td></tr>";
}
$berita .="<tr ><td ><ul>";
while ($row = mysql_fetch_array($query_result_handle))
{
$subject = $row[subject];
$berita .= "<li><a href='index.php?id=berita&kode=$row[id]' class='ver10'>$subject</a></li>";
}
$berita .= "</ul></td></tr></table>";
}
else {
$query1 = "SELECT visits FROM t_news WHERE id='". mysql_real_escape_string($kd)."'";
$result = mysql_query($query1) or die("Query failed test ");

$rows = mysql_fetch_array($result);

$visits = $rows[visits] + 1;
$query = "UPDATE t_news SET visits='$visits' WHERE id='". mysql_real_escape_string($kd)."'";
$result = mysql_query($query) or die("Query failed 1");

$sql2="select * from t_news where id='".mysql_real_escape_string($kd)."'";
if(!$alan=mysql_query($sql2)) die ("Pengambilan gagal 1");
if($row=mysql_fetch_array($alan)) {

$berita .= "<h3><center>$row[subject]</center></h3>
Tanggal : $row[postdate], $row[posttime], dibaca $row[visits] kali.<hr style='border: dashed 1px;'> ";
$file = "../images/berita/gb$row[id].jpg";
if (file_exists(''.$file.'')) {
$size = getimagesize($file);
$lebar = 260;
$tinggi = round(($size[1]*$lebar)/$size[0],0);
$berita .="<a href='$file' title='lihat gambar' target='_blank'><img src='$file' align='left' hspace='5' width='$lebar' height='$tinggi' ></a>";
}
$berita .= " $row[isi]<br><br><a href='index.php?id=berita&kode=$kd' style='color:000000'>Kembali ke Atas</a><br>";
}
$berita .="<table border=0 width=95% align=center ><tr><td><hr><br>
<b>Berita Lainnya :</b><br><ul>";
$sql="select * from t_news where id<>'".mysql_real_escape_string($kd)."' order by id desc limit 0,5";
if(!$query=mysql_query($sql)) die ("Pengambilan gagal1 berita 1");
while ($row=mysql_fetch_array($query)) {
$berita .="<li><a href='index.php?id=berita&kode=$row[id]' class='ver10'>$row[subject]</a></li>";
}
$berita .="</ul></td></tr></table>";
$berita .="<table width='100%' cellspacing='0' cellpadding='0' >
<tr><td >&nbsp;<b>Silahkan Isi Komentar dari tulisan berita diatas</b><br>
<form action='index.php' method='post' >
<table><tr><td ><font class='ver10'>Nama</font></td><td><input type='text' name='nama' maxlenght=20 size=30 id='editbox'></td></tr>
<tr><td ><font class='ver10'>E-mail</font></td><td><input type='text' name='email' maxlenght=20 size=30 id='editbox'></td></tr>
<tr><td VALIGN=TOP ><font class='ver10'>Komentar</font></td><td><textarea name='komentar' cols='55' rows='5' id='editbox'></textarea></td></tr>
<tr><td VALIGN=TOP ><font class='ver10'></font></td><td><img src='../functions/captcha/captcha.php'><br>
Kode Verifikasi <br><input type='text' name='code' size='12' id='editbox' ></td></tr>
<input type='hidden' name='id' value='simkom_berita'><input type='hidden' name='kode' value='$kd'>
</table>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<input type='submit' name='submit' value='Kirim' class='art-button'>&nbsp;<input type='reset' class='art-button' name='reset' value='Ulang'></form></td></tr></table>";
$berita .="</center><h2>Komentar :</h2></div>";
$sql="select * from t_news_kom where id='". mysql_real_escape_string($kd)."' order by idkom desc limit 0,10";
if(!$query=mysql_query($sql)) die ("Pengambilan gagal1 berita");
while ($row=mysql_fetch_array($query)) {
$berita .="<table class='art-article' width=100% ><tr><td><img src='../images/buku.gif' style='border:0;margin:0;' > Pengirim : $row[nama] -
<img src='../images/email2.gif' style='border:0;margin:0;' >&nbsp;<i>[$row[email]]</i>&nbsp;&nbsp;Tanggal : $row[tgl]<br>$row[komentar]</td></tr></table><br>";
}
$berita .="<br>&nbsp;&nbsp;&nbsp;<a href='index.php?id=berita&kode=$kd' class='ver10'>Kembali ke Atas</a><br><br>";
}

//$berita .= "</font>";

return $berita;
}

function simkom_berita() {
include "koneksi.php";
include ("../functions/fungsi_filter.php");

$nama = filter($_POST['nama'],"lcase ucase space");
$email= filter($_POST['email'],"lcase ucase num space symbol");
$komentar=$_POST['komentar'];
$kd=$_POST['kode'];
if ($nama == '' ) {
die ("<body onload=\"alert('Nama masih kosong');window.history.back()\">");
}

if ($komentar == '' ) {
die ("<body onload=\"alert('Komentar masih kosong');window.history.back()\">");
}
session_start();

$code = $_POST['code'];
if ($code != $_SESSION['captcha']) {
die ("<body onload=\"alert('Kode keamanan salah');window.history.back()\">");
}

if ($email == '' ) {
die ("<body onload=\"alert('email masih kosong');window.history.back()\">");
}
else {
if (preg_match("/^[^@]+@[a-zA-Z0-9._-]+\.[a-zA-Z]+$/",$email)) $a="";
else die ("<body onload=\"alert('Email yang dimasukan tidak valid');window.history.back()\">");

$postdate = date("d/m/Y");

$komentar = htmlentities($komentar);
$komentar = nl2br($komentar);
$a = substr($komentar,0,100);
$b = strstr($a," ");

if ($b=='') $komentar = "";

$sql="INSERT INTO t_news_kom (id,nama,email,komentar,tgl) values ('". mysql_escape_string($kd)."','".mysql_escape_string($nama)."','".mysql_escape_string($email)."','".mysql_escape_string($komentar)."','$postdate')";
if(!$result = mysql_query($sql)) {
die("Pengisian komentar berita tidak berhasil, data ada yang salah coba kembali dan pilih Back ! <BR><BR>$mysql_error()</td></tr></table> "); }

}

}
?>