Laravel Hack Code

 

buat helper.php pada folder Helpers

Pada composer tanbahkan pada bagian autoload

    "autoload": {

        "psr-4": {

            "App\\": "app/"

        },

        "classmap": [

            "database/seeds",

            "database/factories"

        ],

"files":  [ 

"app/Helpers/helper.php"

]

    },

jalankan perintah pada terminal

composer update -vvv 

atau

composer dump-autoload

<?php

//$username=Session::get('key');

//https://laravel.com/docs/8.x/queries#aggregates

//https://blog.quickadminpanel.com/5-ways-to-use-raw-database-queries-in-laravel/

function getListMasuk($kode){ 

$sql= "SELECT `mdetail`.`id_barang`,`mdetail`.`jumlah`,`mdetail`.`subtotal` FROM `pemasukan`,`mdetail` WHERE `pemasukan`.`id_pemasukan`=`mdetail`.`id_pemasukan` and `pemasukan`.`id_pemasukan`= '$kode'";

    $results = DB::select($sql);

$gab="";

$total=0;

foreach($results as $i){

$id_barang= $i->id_barang;

$jumlah= $i->jumlah;

$subtotal= $i->subtotal;

$nb=getNamaBarang($id_barang);

$gab.="$nb ($jumlah),";

$total+=$subtotal;

}

$gab.="Total:".RP($total);

return $gab;

}

function getNamaBarang($kode){ 

//ModelName::find(id)->value('column_name');

$hasil=\App\Barang::find($kode)->value('nama_barang');//BEST

//$results = DB::select('select `nama_barang` from `barang` where `id_barang` = ?', [$kode]);

//$hasil=$results[0]->nama_barang;

//$sql= "SELECT `nama_barang` FROM `barang` WHERE `id_barang`= '".$kode."'";

    //$results = DB::select($sql);

//$hasil=$results[0]->nama_barang;

//$results = DB::table('barang')->select('nama_barang')->where('id_barang', '=', $kode)->orderBy('id_barang','asc')->get();//ARRAY

//$hasil=$results[0]->nama_barang;

//foreach($results as $i){echo $i->user_id;}

//$results = DB::table('barang')->select('nama_barang')->where('id_barang','=', $kode)->first();

//$hasil=$results->nama_barang;

//$results = DB::table('barang')->select('nama_barang')->where('id_barang', $kode)->first();//first=return no array

//$hasil=$results->nama_barang;

//$hasil=DB::table('barang')->where('id_barang', $kode)->value('nama_barang');//L5

//$hasil=DB::table('barang')->where('id_barang', $kode)->pluck('nama_barang');//L4

//$hasil = DB::table('barang')->where('id_barang', $kode)->select('nama_barang')->pluck('nama_barang')->first();

//$hasil=DB::table('barang')->where('id_barang', $kode)->orderBy('id_barang', 'desc')->value('nama_barang');

//$hasil =\App\Barang::where('id_barang', $kode)->first()->nama_barang;

//$hasil = \App\Barang::where('id_barang',$kode)->value('nama_barang');

return $hasil;

}

//exe

//DB::statement('UPDATE users SET role_id = 1 WHERE role_id IS NULL AND YEAR(created_at) > 2020');

//DB::statement('DROP TABLE users');

//DB::statement('ALTER TABLE projects AUTO_INCREMENT=123');

//LIBRARY SQL //RAW

//\App\User::whereIn('mobile',['971700000', '965000000'])->select('id')->pluck('id')->all();

/*

$users = DB::table('users')

    ->selectRaw('count(*) as user_count, status')

    ->where('status', '<>', 1)

    ->groupBy('status')

    ->get();

$products = DB::table('products')

    ->leftjoin('category','category.product_id','=','products.id')

    ->selectRaw('COUNT(*) as nbr', 'products.*')

    ->groupBy('products.id')

    ->get();

$salaries = DB::table('salaries')

    ->selectRaw('companies.name as company_name, avg(salary) as avg_salary, count(*) as people_count')

    ->join('companies', 'salaries.company_id', '=', 'companies.id')

    ->groupBy('companies.id')

    ->orderByDesc('avg_salary')

    ->get();

$results = User::selectRaw('YEAR(birth_date) as year, COUNT(id) as amount')

    ->groupByRaw('YEAR(birth_date)')

    ->havingRaw('YEAR(birth_date) > 2000')

    ->orderByRaw('YEAR(birth_date)')

    ->get();

$products = Product::select('id', 'name')

    ->selectRaw('price - discount_price AS discount')

    ->get();

$users = DB::table('users')

    ->select('name', 'surname')  

    ->selectRaw("(CASE WHEN (gender = 1) THEN 'M' ELSE 'F' END) as gender_text")

    ->get();

 

https://laravel.com/docs/8.x/requests

use Illuminate\Http\Request;

public function store(Request $request){

$name = $request->input('name');

$uri = $request->path();

$url = $request->url();

$urlWithQueryString = $request->fullUrl();

$request->fullUrlWithQuery(['type' => 'phone']);

$method = $request->method();

if ($request->isMethod('post')) {}

$value = $request->header('X-Header-Name');

$value = $request->header('X-Header-Name', 'default');

if ($request->hasHeader('X-Header-Name')) {}

$token = $request->bearerToken();

$ipAddress = $request->ip();

$contentTypes = $request->getAcceptableContentTypes();

if ($request->accepts(['text/html', 'application/json'])) {}

$preferred = $request->prefers(['text/html', 'application/json']);

if ($request->expectsJson()) {}

$input = $request->all();

$input = $request->collect();

$request->collect('users')->each(function ($user) {});

$name = $request->input('name');

$name = $request->input('name', 'Sally');

$name = $request->input('products.0.name');

$names = $request->input('products.*.name');

$input = $request->input();

$name = $request->query('name');

$name = $request->query('name', 'Helen');

$query = $request->query();

$name = $request->input('user.name');

$archived = $request->boolean('archived');

$name = $request->name;

$input = $request->only(['username', 'password']);

$input = $request->only('username', 'password');

$input = $request->except(['credit_card']);

$input = $request->except('credit_card');

if ($request->has('name')) {}

if ($request->has(['name', 'email'])) {}

$request->whenHas('name', function ($input) {});

if ($request->hasAny(['name', 'email'])) {}

if ($request->filled('name')) {}

$request->whenFilled('name', function ($input) {});

if ($request->missing('name')) {}

$request->flash();

$request->flashOnly(['username', 'email']);

$request->flashExcept('password');

return redirect('form')->withInput();

return redirect()->route('user.create')->withInput();

return redirect('form')->withInput(

$request->except('password')

);

$username = $request->old('username');

<input type="text" name="username" value="{{ old('username') }}">

$value = $request->cookie('name');

$file = $request->file('photo');

$file = $request->photo;

if ($request->hasFile('photo')) {}

if ($request->file('photo')->isValid()) {}

$path = $request->photo->path();

$extension = $request->photo->extension();

$path = $request->photo->store('images');

$path = $request->photo->store('images', 's3');

$path = $request->photo->storeAs('images', 'filename.jpg');

$path = $request->photo->storeAs('images', 'filename.jpg', 's3');

https://laravel.com/docs/8.x/requests

}//public

*/

function RP($angka){ 

    $hasil =  number_format($angka,0, ',' , '.'); 

    return $hasil.";"; 

}

function terbilang($i){

  $huruf = array("", "Satu", "Dua", "Tiga", "Empat", "Lima", "Enam", "Tujuh", "Delapan", "Sembilan", "Sepuluh", "Sebelas");

  

  if ($i < 12) return " " . $huruf[$i];

  elseif ($i < 20) return terbilang($i - 10) . " Belas";

  elseif ($i < 100) return terbilang($i / 10) . " Puluh" . terbilang($i % 10);

  elseif ($i < 200) return " Seratus" . terbilang($i - 100);

  elseif ($i < 1000) return terbilang($i / 100) . " Ratus" . terbilang($i % 100);

  elseif ($i < 2000) return " Seribu" . terbilang($i - 1000);

  elseif ($i < 1000000) return terbilang($i / 1000) . " Ribu" . terbilang($i % 1000);

  elseif ($i < 1000000000) return terbilang($i / 1000000) . " Juta" . terbilang($i % 1000000);    

}

?>

<?php function RP2($rupiah){return number_format($rupiah,"2",",",".");}?>

<?php

function WKT($sekarang){

if($sekarang=="0000-00-00"){$sekarang=date("Y-m-d");}

$tanggal = substr($sekarang,8,2)+0;

$bulan = substr($sekarang,5,2);

$tahun = substr($sekarang,0,4);

$judul_bln=array(1=> "Januari", "Februari", "Maret", "April", "Mei","Juni", "Juli", "Agustus", "September","Oktober", "November", "Desember");

$wk=$tanggal." ".$judul_bln[(int)$bulan]." ".$tahun;

return $wk;

}

?>

<?php

function WKTP($sekarang){

$tanggal = substr($sekarang,8,2)+0;

$bulan = substr($sekarang,5,2);

$tahun = substr($sekarang,2,2);

$judul_bln=array(1=> "Jan", "Feb", "Mar", "Apr", "Mei","Jun", "Jul", "Agu", "Sep","Okt", "Nov", "Des");

$wk=$tanggal." ".$judul_bln[(int)$bulan]."'".$tahun;

return $wk;

}

?>

<?php

function BAL($tanggal){

$arr=explode(" ",$tanggal);

if($arr[1]=="Januari"||$arr[1]=="January"){$bul="01";}

else if($arr[1]=="Februari"||$arr[1]=="February"){$bul="02";}

else if($arr[1]=="Maret"||$arr[1]=="March"){$bul="03";}

else if($arr[1]=="April"){$bul="04";}

else if($arr[1]=="Mei"||$arr[1]=="May"){$bul="05";}

else if($arr[1]=="Juni"||$arr[1]=="June"){$bul="06";}

else if($arr[1]=="Juli"||$arr[1]=="July"){$bul="07";}

else if($arr[1]=="Agustus"||$arr[1]=="August"){$bul="08";}

else if($arr[1]=="September"){$bul="09";}

else if($arr[1]=="Oktober"||$arr[1]=="October"){$bul="10";}

else if($arr[1]=="November"){$bul="11";}

else if($arr[1]=="Nopember"){$bul="11";}

else if($arr[1]=="Desember"||$arr[1]=="December"){$bul="12";}

return "$arr[2]-$bul-$arr[0]";

}

?>

<?php

function BALP($tanggal){

$arr=split(" ",$tanggal);

if($arr[1]=="Jan"){$bul="01";}

else if($arr[1]=="Feb"){$bul="02";}

else if($arr[1]=="Mar"){$bul="03";}

else if($arr[1]=="Apr"){$bul="04";}

else if($arr[1]=="Mei"){$bul="05";}

else if($arr[1]=="Jun"){$bul="06";}

else if($arr[1]=="Jul"){$bul="07";}

else if($arr[1]=="Agu"){$bul="08";}

else if($arr[1]=="Sep"){$bul="09";}

else if($arr[1]=="Okt"){$bul="10";}

else if($arr[1]=="Nov"){$bul="11";}

else if($arr[1]=="Nop"){$bul="11";}

else if($arr[1]=="Des"){$bul="12";}

return "$arr[2]-$bul-$arr[0]";

}

?>

CodeigNeter SQL Inject

URI SEGMENT
 ucfirst($this->uri->segment(1));

 ucfirst($this->uri->segment(2));

LIBRARY

public function __construct(){
        parent::__construct();
        $this->load->model("admin_model");

$this->load->model("periode_model");

$this->load->library('session');

                $this->load->library('form_validation');

    }

    public function index() { 

        $this->load->view("login1/index1");//halaman_login 

    } 

public function Kembali() { 

     redirect(base_url()); 

    } 

function getGuru($db,$kode){
$out=$kode;
if(strlen($kode)>0){
$field="nama_guru";
$sql="Select `$field` from `tb_guru` where `nip`='$kode'";    
$query = $db->query($sql);
$arr= $query->row();//result_array
$out= $arr->$field;
}
return $out;
}

 SeTTING SESSION

 public function proses_login() { 

        $user = $this->input->post("username");
        $pass = $this->input->post("password"); 

$loginSiswa = $this->siswa_model->cek_login($user, $pass);
if (!empty($loginSiswa)) { 

$NISN=$loginSiswa["nisn"];

$ar = $this->periode_model->getAktif();
                        $id_periode=$ar->id_periode;
                        $nama_periode=$ar->nama_periode; 

$sql1="select * from `tb_peserta`,`tb_kelas` where `tb_peserta`.`id_periode`='$id_periode' and `tb_peserta`.`nisn`='$NISN' and  `tb_peserta`.`id_kelas`=`tb_kelas`.`id_kelas` ";

$ARRAY=$this->periode_model->getSQL($sql1);
                                        $id_kelas=($ARRAY["id_kelas"]) +0; 

$this->session->set_userdata('nisn',$NISN);
$this->session->set_userdata('id_periode',$id_periode)$this->session->set_userdata('nama_periode',$nama_periode);

$this->session->set_userdata('level',$level);
                        $this->session->set_userdata('kelas',$kelas);
                        $this->session->set_userdata('id_kelas',$id_kelas);
                        $this->session->set_userdata('nama_kelas',$nama_kelas);

            $this->session->set_userdata($ar1); 

            redirect(base_url("index.php/admin")); 

        } 

else { 

            $this->session->set_flashdata("gagal", "Username atau Password Salah!"); 

            redirect(base_url()); 

} 

Menangkap Session

$_level=$this->session->userdata("level");
$_nip=$this->session->userdata("nip");

$_id_periode=$this->session->userdata("id_periode");
$_nama_periode=$this->session->userdata("nama_periode");
$_id_kelas=$this->session->userdata("id_kelas");
$_nama_kelas=$this->session->userdata("nama_kelas"); 

$nama=getGuru($this->db,$_nip);

if($_level=="Administrator"){$this->load->view("admin/_partials/sidebaradmin.php") ;}

else if($_level=="Wali Kelas"){$this->load->view("admin/_partials/sidebarwali.php") ; }

else if($_level=="Kepala Sekolah"){$this->load->view("admin/_partials/sidebarkepsek.php"); }

else if($_level=="Guru"){$this->load->view("admin/_partials/sidebarguru.php") ;}

else if($_level=="Siswa"){$this->load->view("admin/_partials/sidebarsiswa.php") ;}

/////////////
MODEL:

public function getSQL($sql)  {

return $this->db->query($sql)->row_array();

    }

public function getSQLALL($sql)  {

return $this->db->query($sql)->result();

    }

Mmebuat Array UNIQUE

 

function getUNIX($arRS){

$ar=array();

for($i=1;$i<count($arRS);$i++){//dari 1 krn 0 u jumlah ada

$ar[$i-1]=$arRS[$i];

}

$unique = array();

foreach($ar as $v){

  isset($k[$v]) || ($k[$v]=1) && $unique[] = $v;

  }

$gab="";   

for($i=0;$i<count($unique);$i++){

$gab.=$unique[$i].",";

}

$gab=substr($gab,0,strlen($gab)-1);

return $gab;

}

PHP Cek Usia

 

function cekUsia($tgl){

$awal  = date_create($tgl);

$akhir = date_create(); 

$diff  = date_diff( $awal, $akhir );

return $diff->y;

}

Read Write SM

 <?php

$token = "1893725977:AAHyteFgCs_A73IyjSBIIXpsADIGANTENG";

$data = [

    'text' => 'halo apa kabar .... here',

    'chat_id' => '1308416385'

];

//file_get_contents("https://api.telegram.org/bot$token/sendMessage?" . http_build_query($data) );

$URI="https://api.telegram.org/bot1893725977:AAHyteFgCs_A73IyjSBIIADIGANTENG/getUpdates?offset=0";

//$ar=file_get_contents($URI );

//var_dump($ar);

//call api

$json = file_get_contents($URI);

//var_dump($json);

$json = json_decode($json,true);

//var_dump($json);

//$lat = $json->message[0]->message_id;

//$lng = $json->message[0]->from->first_name;

//echo "Latitude: " . $lat . ", Longitude: " . $lng;

cetak( $json["ok"]);

cetak( $json["result"][0]["update_id"]);

cetak( $json["result"][0]["message"]["message_id"]);

cetak( $json["result"][0]["message"]["from"]["id"]);

cetak( $json["result"][0]["message"]["from"]["first_name"]);

cetak( $json["result"][0]["message"]["from"]["last_name"]);

cetak( $json["result"][0]["message"]["from"]["language_code"]);

cetak( $json["result"][0]["message"]["chat"]["id"]);

cetak( $json["result"][0]["message"]["chat"]["first_name"]);

cetak( $json["result"][0]["message"]["chat"]["last_name"]);

cetak( $json["result"][0]["message"]["chat"]["type"]);

cetak( $json["result"][0]["message"]["date"]);

cetak( $json["result"][0]["message"]["text"]);

function cetak($v){

    echo"$v<hr>";

}

/*

string(331) "{"ok":true,"result":[{"update_id":42342343423, "message":{"message_id":8,"from":{"id":4324234234234,"is_bot":false,

    "first_name":"adi","last_name":"adiarray",

    "language_code":"en"},

    "chat":{"id":2342343,

        "first_name":"adi","last_name":"adiarray","type":"private"},"date":1624708793,

        "text":"Piye kabare ...masih enak zaman ku to?"}}]}

*/

?>

Import Tanggal Dari Excell

 function fromExcelToLinux($excel_time) {
    return ($excel_time-25569)*86400;
}

                $TGL_EXCEL = fromExcelToLinux($mulai_kerja); 
		$mulai_kerja= date("Y-m-d",$TGL_EXCEL);
		$TGL_EXCEL = fromExcelToLinux($tgl_lahir); 
		$tgl_lahir= date("Y-m-d",$TGL_EXCEL);

AJAX DOM RADIO BUTTON

<script type="text/javascript">
var xmlHttp;

function showUp1(str){
xmlHttp=GetXmlHttpObject()
if (xmlHttp==null){
 alert ("Browser tidak support HTTP Request");
 return;
 } 

var url="getUp1.php";

url=url+"?q="+str;

url=url+"&sid="+Math.random();

xmlHttp.onreadystatechange=SC1;

xmlHttp.open("GET",url,true);

xmlHttp.send(null);

}

function SC1() { 

if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 

 document.getElementById("txt1").innerHTML=xmlHttp.responseText ;

 } 

}

function showUp2(str1){ 

xmlHttp=GetXmlHttpObject()

if (xmlHttp==null){

 alert ("Browser tidak support HTTP Request");

 return;

 } 

 

//var str2= document.getElementById("poliklinik").value; 

var str2=  findSelection("poliklinik");

 

alert(str1+"#"+str2);

var url="getUp2.php";

url=url+"?t="+str1+"&p="+str2;

url=url+"&sid="+Math.random();

xmlHttp.onreadystatechange=SC2;

xmlHttp.open("GET",url,true);

xmlHttp.send(null);

}

function SC2() { 

if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 

 document.getElementById("txt2").innerHTML=xmlHttp.responseText ;

 } 

}

function findSelection(field) {

    var test = document.myForm.poliklinik;

    var sizes = test;

        for (i=0; i < sizes.length; i++) {

            if (sizes[i].checked==true) {   

            return sizes[i].value;

        }

    }

}

function showUp3(str){ 

xmlHttp=GetXmlHttpObject()

if (xmlHttp==null){

 alert ("Browser tidak support HTTP Request");

 return;

 } 

var url="getUp3.php";

url=url+"?q="+str;

url=url+"&sid="+Math.random();

xmlHttp.onreadystatechange=SC3;

xmlHttp.open("GET",url,true);

xmlHttp.send(null);

}

function SC3() { 

if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 

 document.getElementById("txt3").innerHTML=xmlHttp.responseText ;

 } 

}

function GetXmlHttpObject(){

var xmlHttp=null;

try{xmlHttp=new XMLHttpRequest();}

catch (e){

try{xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");}

  catch (e){xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");}

 }

return xmlHttp;

}

</script>

****************************

 

<form action="" name="myForm" method="post" enctype="multipart/form-data">

<input type="text" name="nomor_rm" id="nomor_rm" value="" placeholder="Nomor Rekammendis"  title="Nomor Rekammendis" onChange="showUp1(this.value)">

++++++++++++++++++++++++++++++++++

<input type="radio" name="poliklinik" id="poliklinik"  checked="checked" value="POLI UMUM"/>POLI UMUM

<input type="radio" name="poliklinik" id="poliklinik" value="POLI GIGI" />POLI GIGI

<input type="date" name="tanggal_kunjungan"  class="form-control form-control-user" id="tanggal_kunjungan" value="" placeholder="Tanggal Kunjungan"  title="Tanggal Kunjungan" onChange="showUp2(this.value)">

</form>

getUp1.php

<?php

require_once"konmysqli.php";

$nomor_rm=$_GET["q"];

if(strlen($nomor_rm)>5){

$sql="select * from `$tbpasien` where `nomor_rm`='$nomor_rm'";

$d=getFieldM($conn,$sql);

$id_pasien=$d["id_pasien"];

$nama_pasien=$d["nama_pasien"];

$no_identitas=$d["no_identitas"];

$tanggal_lahir=$d["tanggal_lahir"];

$jenis_kelamin=$d["jenis_kelamin"];

$alamat=$d["alamat"];

$email=$d["email"];

$telepon=$d["telepon"];

$username=$d["username"];

$password=$d["password"];

$nomor_rm=$d["nomor_rm"];

$asuransi=$d["asuransi"];

$awal  = date_create($tanggal_lahir);

$akhir = date_create(); 

$diff  = date_diff( $awal, $akhir );

$usia=$diff->y ;

echo "<b>$nama_pasien (NIK $no_identitas)</b><br>Alamat: $alamat, Telp $telepon |$jenis_kelamin #$usia Thn";

}

?>

###############################

getUp2.php

<?php

require_once"konmysqli.php";

$tanggal=$_GET["t"];

$poliklinik=$_GET["p"];

$id_jadwal="";

$hr=date('l', strtotime($tanggal));

$hari="Minggu";

if($hr=="Sunday"){$hari="Minggu";}

else if($hr=="Monday"){$hari="Senin";}

else if($hr=="Tuesday"){$hari="Selasa";}

else if($hr=="Wednesday"){$hari="Rabu";}

else if($hr=="Thrusday"){$hari="Kamus";}

else if($hr=="Friday"){$hari="Jumat";}

else if($hr=="Saturday"){$hari="Sabtu";}

?>

<select class="form-control" name="id_jadwal" onChange="showUp3(this.value)">

<option disabled>Pilih Jadwal <?php echo  $poliklinik;?> + <?php echo  $hari;?></option>

<?php

$s="select * from `tb_jadwal` where `poliklinik`='$poliklinik' and `hari`='$hari' order by `jam` asc";

$q=getDataM($conn,$s);

foreach($q as $d){

$id_jadwal0=$d["id_jadwal"];

$jam=$d["jam"];

$poliklinik=$d["poliklinik"];

$hari=$d["hari"];

$dokter=$d["dokter"];

echo"<option value='$id_jadwal0' ";if($id_jadwal0==$id_jadwal){echo"selected";} echo">$poliklinik $dokter |$hari $jam </option>";

}

?>

</select>

######################################

getUp3.php

<?php

require_once"konmysqli.php";

$id_jadwal=$_GET["q"];

$tanggal_kunjungan=$_GET["t"];

$tgl=WKTM($tanggal_kunjungan);

$sql="select `nomor_antrian` from `$tbkunjungan` where `id_jadwal`='$id_jadwal' and `tanggal_kunjungan`='$tanggal_kunjungan' order by `id_kunjungan` desc";

$ada=getJumM($conn,$sql);

if($ada>0){

$d=getFieldM($conn,$sql);

$nomor_antrian=$d["nomor_antrian"]+1;

}

else{

$nomor_antrian=1;

}

echo "<b><i>Nomor Antrian Anda Untuk $tgl : </i><h2><font color='blue'>No. $nomor_antrian</font></h2></b>";

?>