403Webshell
Server IP : 216.106.184.20  /  Your IP : 216.73.216.234
Web Server : LiteSpeed
System : Linux asmodeus.in-hell.com 5.14.0-570.58.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Oct 29 06:24:11 EDT 2025 x86_64
User : sekoaid1 ( 1891)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/sekoaid1/spp.raudhatulfalah.sch.id/tes/bendahara/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/sekoaid1/spp.raudhatulfalah.sch.id/tes/bendahara/keuangan_pembayaran_bebas.php
<?php if ($_GET[act] == '') { ?>
	<div class="col-xs-4">
		<div class="box box-info box-solid">
			<div class="box-header with-border">
				<h3 class="box-title">Informasi Tagihan</h3>
			</div><!-- /.box-header -->
			<div class="box-body">
				<?php
				$sqlInfoTagihanSiswa = mysql_query("SELECT tagihan_bebas.*,
					siswa.nisSiswa,
					siswa.nisnSiswa,
					siswa.nmSiswa,
					kelas_siswa.nmKelas,
					jenis_bayar.idPosBayar,
					jenis_bayar.idTahunAjaran,
					jenis_bayar.nmJenisBayar,
					jenis_bayar.tipeBayar,
					pos_bayar.nmPosBayar,
					siswa.jkSiswa,
					tahun_ajaran.nmTahunAjaran
					FROM
					tagihan_bebas
					INNER JOIN siswa ON tagihan_bebas.idSiswa = siswa.idSiswa
					INNER JOIN kelas_siswa ON tagihan_bebas.idKelas = kelas_siswa.idKelas
					INNER JOIN jenis_bayar ON tagihan_bebas.idJenisBayar = jenis_bayar.idJenisBayar
					INNER JOIN pos_bayar ON jenis_bayar.idPosBayar = pos_bayar.idPosBayar
					INNER JOIN tahun_ajaran ON jenis_bayar.idTahunAjaran = tahun_ajaran.idTahunAjaran
					WHERE tagihan_bebas.idTagihanBebas='$_GET[tagihan]'");
				$dtInfo = mysql_fetch_array($sqlInfoTagihanSiswa);

				?>
				<table class="table table-striped">
					<tr>
						<td>Jenis</td>
						<td>:</td>
						<td><?php echo $dtInfo['nmJenisBayar']; ?></td>
					</tr>
					<tr>
						<td>Tahun Ajaran</td>
						<td>:</td>
						<td><?php echo $dtInfo['nmTahunAjaran']; ?></td>
					</tr>
					<tr>
						<td>NIS</td>
						<td>:</td>
						<td><?php echo $dtInfo['nisSiswa']; ?></td>
					</tr>
					<tr>
						<td>NISN</td>
						<td>:</td>
						<td><?php echo $dtInfo['nisnSiswa']; ?></td>
					</tr>
					<tr>
						<td>Nama Siswa</td>
						<td>:</td>
						<td><?php echo $dtInfo['nmSiswa']; ?></td>
					</tr>
					<tr>
						<td>Kelas</td>
						<td>:</td>
						<td><?php echo $dtInfo['nmKelas']; ?></td>
					</tr>
					<tr class="warning">
						<td>Total Tagihan</td>
						<td>:</td>
						<td><b><?php echo buatRp($dtInfo['totalTagihan']); ?></b></td>
					</tr>
				</table>
			</div>
			<div class="box-footer">
				<a href="index-bendahara.php?view=pembayaran&siswa=<?php echo $dtInfo['idSiswa']; ?>&cari=Cari+Siswa" class="btn btn-primary pull-right"><span class="fa fa-reply"></span> Kembali</a>
			</div>
		</div>
	</div>
	<div class="col-xs-8">
		<div class="box box-warning box-solid">
			<div class="box-header with-border">
				<h3 class="box-title">Pembayaran Tagihan</h3>
			</div><!-- /.box-header -->
			<div class="box-body">
				<?php

				if (isset($_POST['simpanBayar'])) {
					$tagihan = $_POST['idTagihanBebas'];
					if ($_POST['jumlahBayar'] > $_POST['sisa']) {
						echo "<div class='alert alert-danger alert-dismissible fade in' role='alert'> 
						<button type='button' class='close' data-dismiss='alert' aria-label='Close'>
						<span aria-hidden='true'>×</span></button> <strong>Gagal</strong> - Pembeyaran yang anda masukkan melebihi total tagihan!!!
						</div>";
					} else {
						$qBayar = mysql_query("INSERT INTO tagihan_bebas_bayar(idTagihanBebas,tglBayar,jumlahBayar,ketBayar,caraBayar)
							VALUES('$tagihan','$_POST[tglBayar]','$_POST[jumlahBayar]','$_POST[ketBayar]','$_POST[caraBayar]')");
						if ($qbayar) {
							echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$tagihan';</script>";
						} else {
							echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$tagihan';</script>";
						}
					}
				}
				if (isset($_GET['ok'])) {
					$url_sms = 'https://gsm.zenziva.net/api/balance/?userkey=vmezut&passkey=ceabd0a34bde5902f2c8a2da';
					$get_content_sms = file_get_contents($url_sms);
					$json = json_decode($get_content_sms, TRUE);
					$credit_sms = $json['credit'];
					echo "<div class='alert alert-success'><b>SUKSES</b> - SMS ke Orang Tua Berhasil dikirimkan! <b style='float:right'>(Sisa Kuota $credit_sms SMS)</b></div>";
				} elseif (isset($_GET['err'])) {
					echo "<div class='alert alert-danger'><b>GAGAL</b> - Notifikasi SMS Gagal Terkirim, Cek Lagi No Tujuan!</div>";
				}
				?>
				<table class="table table-bordered table-striped">
					<thead>
						<tr>
							<th>No</th>
							<th>Tanggal</th>
							<th>Jumlah Bayar</th>
							<th>Opsi</th>
							<th>Keterangan</th>
							<th>#</th>
						</tr>
					</thead>
					<tbody>
						<?php
						$sqlSiswa1 = mysql_query("SELECT siswa.*,kelas_siswa.nmKelas FROM siswa
											INNER JOIN kelas_siswa ON siswa.idKelas = kelas_siswa.idKelas
											WHERE siswa.idSiswa='$siswa'");
						$dts = mysql_fetch_array($sqlSiswa1);
						$sqlBayarTB = mysql_query("SELECT * FROM tagihan_bebas_bayar WHERE idTagihanBebas='$_GET[tagihan]' ORDER BY idTagihanBebasBayar ASC");
						$no = 1;
						while ($r = mysql_fetch_array($sqlBayarTB)) {
							echo "<tr><td>$no</td>
							<td>" . tgl_indo($r['tglBayar']) . "</td>
							<td align=right>" . buatRp($r[jumlahBayar]) . "</td>
							<td>$r[caraBayar]</td>
							<td>$r[ketBayar]</td>
							<td><center>
							<a class='btn btn-danger btn-xs' title='Delete Data' href='?view=angsuran&tagihan=$r[idTagihanBebas]&act=hapus&id=$r[idTagihanBebasBayar]' onclick=\"return confirm('Apa anda yakin untuk hapus Data ini?')\"><span class='glyphicon glyphicon-remove'></span></a>
							<a class='btn btn-success btn-xs' title='Cetak Slip' target='_blank' href='./slip_bebas_persiswa_perbayar.php?idtbb=$r[idTagihanBebasBayar]'><span class='glyphicon glyphicon-print'></span></a>
							
							</center></td>";
							echo "</tr>";
							$no++;
						}

						$sqlTotalBayar = mysql_query("select sum(jumlahBayar) as totalDibayar from tagihan_bebas_bayar where idTagihanBebas='$_GET[tagihan]'");
						$totalDibayar = mysql_fetch_array($sqlTotalBayar);

						$sisa = $dtInfo['totalTagihan'] - $totalDibayar['totalDibayar'];
						$sisaRp = buatRp($sisa);

						if ($totalDibayar['totalDibayar'] == 0) {
							mysql_query("update tagihan_bebas set statusBayar='0' where idTagihanBebas='$_GET[tagihan]'");
							$statusBayar = "<b>Tunggakan : $sisaRp</b>";
							$notif = '';
							$notifs = '';
						} elseif ($totalDibayar['totalDibayar'] < $dtInfo['totalTagihan']) {
							mysql_query("update tagihan_bebas set statusBayar='1' where idTagihanBebas='$_GET[tagihan]'");
							$statusBayar = "<b>Tunggakan : $sisaRp</b>";
							$notif = "<a class='btn btn-info btn-xs' title='Kirimkan Notifikasi Angsuran' href='index-bendahara.php?view=angsuran&tagihan=$_GET[tagihan]&siswa=$dtInfo[idSiswa]&ket=$dtInfo[nmJenisBayar]&sms'><span class='fa fa-comments-o'></span> SMS</a>";
							$notifs = "<a class='btn btn-info btn-xs' title='Kirimkan Notifikasi Lunas' href='https://api.whatsapp.com/send?phone=$dts[noHpOrtu]&text=Assalamualaikum, Terima Kasih pembayaran Tagihan $dtInfo[nmJenisBayar] sebesar *" . buatRp($totalDibayar[totalDibayar]) . "* anak anda yang bernama *$dtInfo[nmSiswa]* telah di Bayarkan Terima kasih (Keuangan Smk Aswaja).' target='_blank'><span class='fa fa-comments'></span> WA</a>";
						} else {
							mysql_query("update tagihan_bebas set statusBayar='2' where idTagihanBebas='$_GET[tagihan]'");
							$statusBayar = "<span class='label label-success'>Lunas</span>";
							$notif = "<a class='btn btn-info btn-xs' title='Kirimkan Notifikasi Lunas' href='index-bendahara.php?view=angsuran&tagihan=$_GET[tagihan]&siswa=$dtInfo[idSiswa]&ket=$dtInfo[nmJenisBayar]&sms'><span class='fa fa-comments-o'></span> SMS</a>";
							$notifs = "<a class='btn btn-info btn-xs' title='Kirimkan Notifikasi Lunas' href='https://api.whatsapp.com/send?phone=$dts[noHpOrtu]&text=Assalamualaikum, Terima Kasih pembayaran Tagihan $dtInfo[nmJenisBayar] sebesar  *" . buatRp($totalDibayar[totalDibayar]) . "* anak anda yang bernama *$dtInfo[nmSiswa]* telah di Bayarkan  Terima kasih (Keuangan Smk Aswaja).' target='_blank'><span class='fa fa-comments'></span> WA</a>";
						}
						?>
						<tr class="success">
							<td colspan="2"><b>Total Bayar</b></td>
							<td align="right"><b><?php echo buatRp($totalDibayar['totalDibayar']); ?></b></td>
							<td colspan="3" class="text-center"><?php echo "$statusBayar $notif $notifs"; ?></td>
						</tr>
						<?php
						if ($totalDibayar['totalDibayar'] < $dtInfo['totalTagihan']) {
						?>
							<tr class="warning">
								<td colspan="6"><b>Tambah Pembayaran</b></td>
							</tr>
							<tr>
								<td colspan="2">Tanggal Bayar</td>
								<td>Jumlah Bayar</td>
								<td>Cara Bayar</td>
								<td>Keterangan</td>
								<td>Bayar</td>
							</tr>
							<tr>
								<form method="POST" action="" class="form-horizontal">
									<input type="hidden" class="form-control" name="idTagihanBebas" value="<?php echo $_GET['tagihan']; ?>">
									<td colspan="2"><input type="text" class="form-control datepicker" name="tglBayar" value="<?php echo date('Y-m-d'); ?>" readonly></td>
									<td>
										<input type="hidden" id="sisa" name="sisa" value="<?php echo $sisa; ?>">
										<input type="text" id="hitungBayaran" class="form-control harusAngka" name="jumlahBayar" value="<?php echo $sisa; ?>" required>
									</td>
									<td>
										<select name="caraBayar" class="form-control">
											<option value="Tunai">Tunai</option>
											<option value="Transfer">Transfer</option>
										</select>
									</td>
									<td>
										<select class="form-control" name="ketBayar" required>
											<option value="Lunas">Lunas</option>
											<option value="Angsuran 1">Angsuran 1</option>
											<option value="Angsuran 2">Angsuran 2</option>
											<option value="Angsuran 3">Angsuran 3</option>
											<option value="Angsuran 4">Angsuran 4</option>
											<option value="Angsuran 5">Angsuran 5</option>
										</select>
									</td>
									<td><input type="submit" class="btn btn-danger" name="simpanBayar" value="Bayar"></td>
								</form>
							</tr>

						<?php
						}
						if (isset($_GET['sms'])) {
							$row = mysql_fetch_array(mysql_query("SELECT * FROM siswa where idSiswa='$_GET[siswa]'"));
							if ($row['noHpOrtu'] == '') {
								echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$_GET[tagihan]&err';</script>";
							} else {
								$userkey = "vmezut";
								$passkey = "ceabd0a34bde5902f2c8a2da";
								$telepon = $row['noHpOrtu'];
								$message = "Assalamualaikum, Pembayaran Tagihan $_GET[ket] anak anda $row[nmSiswa] telah di Bayarkan, Terima kasih.";
								$url = "https://gsm.zenziva.net/api/sendsms/";
								$curlHandle = curl_init();
								curl_setopt($curlHandle, CURLOPT_URL, $url);
								curl_setopt($curlHandle, CURLOPT_HEADER, 0);
								curl_setopt($curlHandle, CURLOPT_RETURNTRANSFER, 1);
								curl_setopt($curlHandle, CURLOPT_SSL_VERIFYHOST, 2);
								curl_setopt($curlHandle, CURLOPT_SSL_VERIFYPEER, 0);
								curl_setopt($curlHandle, CURLOPT_TIMEOUT, 30);
								curl_setopt($curlHandle, CURLOPT_POST, 1);
								curl_setopt($curlHandle, CURLOPT_POSTFIELDS, array(
									'userkey' => $userkey,
									'passkey' => $passkey,
									'nohp' => $telepon,
									'pesan' => $message
								));
								$results = json_decode(curl_exec($curlHandle), true);
								curl_close($curlHandle);
								echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$_GET[tagihan]&ok';</script>";
							}
						}
						?>
					</tbody>
				</table>

			</div><!-- /.box-body -->
			<div class="box-footer">

			</div>
		</div><!-- /.box -->
	</div>
<?php
} elseif ($_GET['act'] == 'hapus') {
	$tagihan = $_GET['tagihan'];
	$qHapus = mysql_query("DELETE FROM tagihan_bebas_bayar WHERE idTagihanBebasBayar='$_GET[id]'");
	if ($qHapus) {
		echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$tagihan';</script>";
	} else {
		echo "<script>document.location='index-bendahara.php?view=angsuran&tagihan=$tagihan';</script>";
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit