<?php

session_name('sirat');
session_set_cookie_params(2*7*24*60*60);//2 minggu
session_start();


?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Surat Masuk</title>
<meta name="keywords" content="free web templates, red top, services, vertical menu with icons, CSS, HTML" />
<meta name="description" content="Red Top Services - free web template from templatemo.com for everyone." />
<link href="templatemo_style.css" rel="stylesheet" type="text/css" />

</head>
<body>

<div id="templatemo_wrapper">
	<div id="templatemo_header">
    	<div id="site_title">
		<img src="images/logo.jpg" alt="image" class="image_wrapper image_fl" />
		<b><H1> Badan Perencanaan dan Pembangunan Daerah</b></h1>
	    	<h2>( Bappeda )</h2></a>
        </div>
    </div> <!-- end of header -->
    
    <div id="templatemo_main">
        <div id="templatemo_sidebar">
        
        	<div id="templatemo_menu">
                <ul>
                    <li><a href="index.php" class="home">Home</a></li>
                    <li><a href="surat_masuk.php" class="services current_services">Surat Masuk</a></li>
                    <li><a href="surat_keluar.php" class="gallery">Surat Keluar</a></li>
                </ul>    	
            </div> <!-- end of templatemo_menu -->
            
            <div class="sidebar_box">
                <h4>Blog Posts</h4>
                <div class="sidebar_news_box">
                    <a href="#"><strong>www.BappedaKampar.blogspot.com </strong></a>
                    <p>silahkan kunjungi Blog Bappeda</p>
          		</div>
            </div>
            
          <div class="sidebar_box">
              <h4>Bappeda Address</h4>
                Jalan Lingkar Batu belah, <br />
                Kompleks kantor Bupati Kampar<br />
                Bangkinang<br />
            <a href="#">info@Bappeda.com</a>
            </div>

        </div> <!-- end of sidebar -->
        
        <div id="templatemo_content_wrapper">
        	
            <div id="social_box">
            	<ul>
                	<li><a href="-www.twitter.com" class="twitter"></a></li>
                    <li><a href="http://www.facebook.com/" class="facebook"></a></li>
                    
				</ul>
                <div class="cleaner"></div>
            </div> <!-- end of social box -->
            
            <div id="page_intro">
			<h1>Surat Masuk</h1>
               	<p>Alur yang dilakukan pada sistem informasi ini berawal dari surat masuk yang telah didisposisikan oleh agenda, di delivery ke sekretaris untuk di validasi, kemudian dikirimkan ke  sub bidang yang sesuai dan dapat meneruskan dari hasil yang telah di validasi sekretaris.</p>
            	 <a href="#"></a> 
            </div> <!-- end of page intro -->
            
            <div id="templatmeo_content">
			<div class="content_box"

<?php

//hanya yang sudah login yang bisa masuk ke halaman ini.
if($_SESSION['id']){
	//echo 'Anda telah login, jadi .... boleh lah di sini';
	echo "<h2><a href=\"user/logout.php\">Logout | </a>"
		."<a href=\"$PHP_SELF?op=read\"> Baca | </a>"
		."<a href=\"$PHP_SELF?op=delete\"> Hapus| </a>"
		."</h2>";
		?>
		<br><br>
		<?
}else{
	die('<br><center><h3> Maaf,  Anda harus <a href="./user/index.php">login</a> dahulu<h3></center>');
}

switch ($_GET['op']){
	case "create": 
		create_surat_masuk($_SESSION['id']); 
		break;
	case "read": 
		read_surat_masuk($_SESSION['id']); 
		break;
	case "read_detail": 
		read_surat_masuk_detail($_GET["kd_Surat_Masuk"]); 
		break;
	case "update": 
		update_surat_masuk($_GET['kd_Surat_Masuk']); 
		break;
	case "delete": 
		delete_surat_masuk($_SESSION['id']); 
		break;
	default: 
		create_surat_masuk($_SESSION['id']);
}


//create surat_masuk
//@input $id adalah orang yang membuat
function create_surat_masuk($id){
	
	//check dulu apakah ID ini adalah ID agenda?
	if($id != 1) die("<br/><br/>Maaf Anda tidak boleh membuat surat masuk. Hanya Orang Agenda yang boleh buat surat masuuuuuuuuuuuuuuuuuuk!!!");
	
	if($_POST['no_agenda']){
		
		include_once "koneksi.php";
		
		$kd_Surat_Masuk = $_POST['kd_Surat_Masuk'];
		$no_agenda=$_POST['no_agenda'];
		$no_disposisi=$_POST['no_disposisi'];
		$tgl_surat=$_POST['tgl_surat'];//
		$pengirim=$_POST['pengirim'];
		$perihal=$_POST['perihal'];
		$tgl_disposisi=$_POST['tgl_disposisi'];//ALTER TABLE `surat masuk` CHANGE `tgl_disposisi` `tgl_disposisi` TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP 
		$tujuan=$_POST['tujuan'];
		$Keterangan=$_POST['Keterangan'];
		$scan= $_FILES['scan']['name'];
		
		
		$submit= "INSERT INTO `surat masuk` values (
			NULL,
			'$no_agenda',
			'$no_disposisi',
			'$tgl_surat',
			'$pengirim',
			'$perihal',
			CURRENT_TIMESTAMP,
			'$tujuan',
			'$Keterangan',
			'$scan')
		";
		
		$move1 = move_uploaded_file($_FILES['scan']['tmp_name'], 'scan/'.$scan);
		$ok=mysql_query($submit);
		print_r ($_sql);
		if($ok and $move1)
			{echo "<b>DATA SUDAH TERKIRIM, !</b>" ;}
		else
			{echo "data gagal disimpan";}
		echo"<a href='surat_masuk.php'<br><br><br>Back </a>";
		
	}
	
	include_once "koneksi.php";
	//PRINT_R ($sql);
	
	$sql =  "SELECT * from `surat masuk` where no_agenda =".$id .";$SQL ";

	$qry = mysql_query($sql,$koneksi)
		or die ("SQL Error: $sql".mysql_error());
	$data=mysql_fetch_array($qry)	

	?>
			<center>
			<h2> Tambah Surat Masuk </h2>
	<table>
			
			<form action="surat_masuk.php?op=create" method="POST" enctype="multipart/form-data">
			<td>
			<tr align="center" bgcolor="#D5EDB3">
			<br>
			<td colspan="2"><b><font face="Comic Sans MS" size="2"> Masukkan Item Disposisi untuk surat Masuk </font></td></b>
			</tr></br>
		<tr>
			<td><input type="hidden" name="kd_Surat_Masuk" VALUE="<?= $kd_Surat_Masuk; ?>"><!--  --></td>
		</tr>
		<tr>
			<td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"> <br>no Agenda:</br></font></b></td>
			<td><input name="no_agenda"type="text" value="<?= $no_agenda; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>no disposisi </br></font></b></td>
		  <td><input name="no_disposisi"type="text" value="<?= $no_disposisi; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>tanggal Surat</br></font></b></td>
		  <td><input name="tgl_surat" type="text" value="<?= $tgl_surat; ?>" size="35" maxlength="60"></td>	
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Pengirim</br></font></b></td>
		  <td><input name="pengirim" type="text" value="<?= $pengirim; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Perihal</br></font></b></td>
		  <td><input name="perihal" type="text" value="<?= $perihal; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		<!--tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Tanggal Disposisi</br></font></b></td>
		  <td><input name="tgl_disposisi" type="text" value="<?= $tgl_disposisi; ?>" size="35" maxlength="60"></td>
		</tr>
		</tr-->
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Tujuan</br></font></b></td>
		  <td><input name="tujuan" type="text" value="<?= $tujuan; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Keterangan</br></font></b></td>
		  <td><input name="Keterangan" type="text" value="<?= $Keterangan; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
			<td align="center"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Scan Surat Masuk</br></font></b></td>
			<td>
			<input type="file" name="scan" accept="image/jpeg"></td>
		</tr>
		<tr>
				  <td>&nbsp;</td>
		    
		  <td><br><input type="submit" name="Submit" value="Kirim Disposisi" ><input type="reset" value="Batal" name="Reset"></td></br>
		</tr>
		</center>
		</form>
  </table>
 
<?

	
	
}
		
/**
 * Fungsi untuk membuat daftar semua surat masuk untuk user yang sedang login ini.
 * @input $id adalah user ID / kd_user / user ID di tabel user
 
*/
function read_surat_masuk($id){
//check dulu apakah ID ini adalah ID agenda?
	if ($id != 1 && $id != 2 && $id !=3) die("selain agenda dan sekretaris tidak boleh akses ini yahh!!!" . $id);

	include_once "koneksi.php";
	//echo "<div>ID Anda adalah: $id</div>";
	
	$sql ="SELECT COUNT(*) FROM `disposisi` WHERE kd_user=".$id." ; ";

	$result = mysql_query($sql);
	if (!$result) {
		echo 'Could not run query: '. $sql.'<br />' . mysql_error();
		exit;
	}
	$row = mysql_fetch_row($result);
	$jumlah_surat_masuk = $row[0];
	
	echo "[<a href='surat_masuk.php?op=create'>Buat Surat Masuk </a>] &nbsp;&nbsp;&nbsp;"; 
	echo "<br><br><br><U><B>ANDA MEMILIKI $jumlah_surat_masuk surat masuk <br/><br/></U></B>";
	
	
	//tampilkan tabel surat masuk 
	//lakukan JOIN tabel
	$sql="SELECT m.kd_Surat_Masuk, m.pengirim, m.perihal FROM  `surat masuk` as m , disposisi as d 
			WHERE d.kd_user=".$id." AND m.kd_Surat_Masuk = d.kd_Surat_Masuk ;";
	

	/*$sql = "SELECT m.kd_Surat_Masuk, m.pengirim, m.perihal FROM `surat masuk` as m , disposisi as d 
		WHERE d.kd_user=".$_SESSION['id'] ." AND m.kd_Surat_Masuk = d.kd_Surat_Masuk ;";		
	
	echo "<div>SQL:".$sql."</div>";
	*/
	$result = mysql_query($sql);
	?>
		<table border=1><br>
		<tr bgcolor=purple>
		<th width=100>Pengirim</th>
			<th width=150>Perihal</th>
			<th width=150>Operasi</th>
		</tr>
	<?
	while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
		
		?>
			
		<tr>
			<center>
			<td><?=$row['pengirim']?></td>
			<td><?=$row['perihal']?></td>
			<td width=100>
				<a href='<?$_SERVER['PHP_SELF']?>?op=read_detail&kd_Surat_Masuk=<?=$row['kd_Surat_Masuk']?>'>BACA </a> 
				<a href='<?$_SERVER['PHP_SELF']?>?op=update&kd_Surat_Masuk=<?=$row['kd_Surat_Masuk']?>'>EDIT </a> 
				<a href='<?$_SERVER['PHP_SELF']?>?op=delete&kd_Surat_Masuk=<?=$row['kd_Surat_Masuk']?>'>DELETE </a> 
			</td>
		 </tr>	
		
		</center>
		<?
	}
	?>
		</table>
	<?
}


function read_surat_masuk_detail($kd_surat_masuk){
	
	?>
	<center>
	<h4> Baca Lebih Detail </h4>
	<?
	include_once "koneksi.php";
	
	
	//ubah dahulu status bacanya ...
	$sql="UPDATE `disposisi` SET `status_baca` = 'sudah' WHERE `kd_Surat_Masuk`=$kd_surat_masuk AND `kd_user` =".$_SESSION ['id'].";";
	$result = mysql_query($sql,$koneksi);
	echo $sql;
	$sql = "SELECT * FROM `surat masuk` where kd_Surat_Masuk=$kd_surat_masuk";
	
	$result = mysql_query($sql,$koneksi);
	while ($row = mysql_fetch_array($result, MYSQL_ASSOC)){
		/*
		print_r($row);
			Array
			(
				[kd_Surat_Masuk] => 1
				[no_agenda] => 13
				[no_disposisi] => 1
				[tgl_surat] => 2012-09-12 13:14:40
				[pengirim] => pertanahan
				[perihal] => sosialisasi
				[tgl_disposisi] => 2012-09-22 13:15:00
				[tujuan] => ke user kasubag
				[Keterangan] => telah saya kirim
				[scan] => 
			)
		*/
		?>
		
		<table border=0>
		<tr>
		<td></td>
		<td></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>Kd_surat_Masuk</td>
		<td><?=$row['kd_Surat_Masuk'] ?></td>
		</tr>	
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>no_agenda</td>
		<td><?=$row['no_agenda'] ?></td>
		</tr>	
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>no_disposisi</td>
		<td><?=$row['no_disposisi'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>tgl_surat</td>
		<td><?=$row['tgl_surat'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>pengirim</td>
		<td><?=$row['pengirim'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>perihal</td>
		<td><?=$row['perihal'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>tgl_disposisi</td>
		<td><?=$row['tgl_disposisi'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>tujuan</td>
		<td><?=$row['tujuan'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td>keterangan</td>
		<td><?=$row['Keterangan'] ?></td>
		</tr>
		
		<tr>
		<tr align="left" bgcolor="#D5EDB3">
		<td width="112">hasil scan</td>
		<td><a href="<?='scan/'.$row['scan'];?>"><img src="<?='scan/'.$row['scan'];?>" width=80 HEIGHT=10%></a></td>
		
		</td>
		</tr>
		</table>
		
		<?
		echo "<a href=surat_masuk.php <br><br><br>Back ";
		?>
		</center>
		<?
		
	}
}
	
function update_surat_masuk($kd_Surat_Masuk){
	include_once "koneksi.php";
	
	?>
	<h4>Ubah Surat Masuk</h4>
	<?
	
	//jika id user nya bukan 2 maka proses ini tidak boleh dilaksanakan.
	if($_SESSION['id'] != 2) 
	//if ($_SESSION['id'] != 1 && !=2)
		die( 'Maaf, jangan diedit suratnya, kasihan SEKRETARISnya ...<br/> Hanya SEKRETARIS yang boleh mengedit surat ini.');
	
	
	if($_POST['no_agenda']){
		//update tabel surat_masuk
		//ubah surat masuk yang id nya kd_Surat_Masuk
		$kd_surat_masuk =$_POST['kd_surat_masuk'];
		$no_agenda=$_POST['no_agenda'];
		$no_disposisi=$_POST['no_disposisi'];
		$tgl_surat=$_POST['tgl_surat'];
		$pengirim=$_POST['pengirim'];
		$perihal=$_POST['perihal'];
		$tujuan=$_POST['tujuan'];
		$Keterangan=$_POST['Keterangan'];
		$scan = $_FILES['scan']['name'];
		
		$submit= "UPDATE `surat masuk` SET 
			`no_agenda`= '$no_agenda',
			`no_disposisi` = '$no_disposisi',
			`tgl_surat` = '$tgl_surat',
			`pengirim` = '$pengirim',
			`perihal` = '$perihal',
			`tujuan` = '$tujuan',
			`Keterangan` = '$Keterangan',
			`scan` = '$scan',
			WHERE `kd_Surat_Masuk` =$kd_Surat_Masuk;
		";
		
						
		$move1 = move_uploaded_file($_FILES['scan']['tmp_name'], 'scan/'.$scan);
		$ok=mysql_query($submit);
		if($ok) echo "Data tersimpan.";
		if($ok and $move1){
			echo "<b>DATA SUDAH TERKIRIM, !</b>" ;}
		else{
			echo "data gagal disimpan". mysql_error() .$submit;
		}
		echo"<a href='surat_masuk.php'<br><br><br>Back </a>";
	}
	
	
	//check apakah ada update DISPOSISI
	if($_POST['disposisi']){
	
		//hapus dulu semua yang lama
		$sql = "DELETE FROM disposisi WHERE kd_Surat_Masuk=$kd_Surat_Masuk";
		mysql_query($sql);
		
		//print_r($_POST['disposisi']); //Array ( [1] => on [3] => on [6] => on ) 
		//print_r($_POST);
		
		foreach(array_keys($_POST['disposisi']) as $disposisi){
		
	
		//$check = array($_SESSION['id']);
		//if (in_array($_SESSION['id']$check)){
		//echo checked=true
//}//
		
			//untuk masing-masing yang on
			//$sql ="SELECT * FROM disposisi WHERE kd_Surat_Masuk=$kd_Surat_Masuk AND kd_user=$disposisi";
			//print_r($sql);
			/*
			INSERT INTO `bappeda`.`disposisi` (
				`kd_disposisi` ,
				`kd_Surat_Masuk` ,
				`kd_user` ,
				`status_baca` ,
				`komentar`
				)
				VALUES (
				NULL , '1', '1', 'belum', ''
				);
			*/
			$sql= "INSERT INTO disposisi VALUES(NULL,$kd_Surat_Masuk,$disposisi,'belum','" . $_POST['komentar'] . "');";
			print_r($sql);
			mysql_query($sql);
		}
		
	}

	include_once "koneksi.php";
	$sql =  "SELECT * from `surat masuk` where kd_Surat_Masuk=".$kd_Surat_Masuk."; ";
	
	$qry = mysql_query($sql,$koneksi)
		  or die ("SQL Error: $sql ".mysql_error());
	$data=mysql_fetch_array($qry);		
		//print_r($data);
?>
		<form action="surat_masuk.php?op=update&kd_Surat_Masuk=<?php echo $kd_Surat_Masuk;?>" method="POST" enctype="multipart/form-data">
		<tr align="center" bgcolor="#D5EDB3">
		
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"> <br>Kd Surat Masuk:</br></font></b></td>
		  <td><input name="kd_Surat_Masuk" type="text" value="<?= $data['kd_Surat_Masuk']; ?>" size="35" maxlength="60" ></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"> <br>no Agenda:</br></font></b></td>
		  <td><input name="no_agenda"type="text" value="<?= $data['no_agenda']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>no disposisi </br></font></b></td>
		  <td><input name="no_disposisi"type="text" value="<?= $data['no_disposisi']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>tanggal Surat</br></font></b></td>
		  <td><input name="tgl_surat" type="text" value="<?= $data['tgl_surat']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Pengirim</br></font></b></td>
		  <td><input name="pengirim" type="text" value="<?= $data['pengirim']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Perihal</br></font></b></td>
		  <td><input name="perihal" type="text" value="<?= $data['perihal']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Tanggal Disposisi</br></font></b></td>
		  <td><input name="tgl_disposisi" type="text" value="<?= $data['tgl_disposisi']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Tujuan</br></font></b></td>
		  <td><input name="tujuan" type="text" value="<?= $data['tujuan']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
		  <td align="right"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Keterangan</br></font></b></td>
		  <td><input name="Keterangan" type="text" value="<?= $data['Keterangan']; ?>" size="35" maxlength="60"></td>
		</tr>
		<tr>
			<td align="center"bgcolor="#D5EDB3"><b><font face="Comic Sans MS" size="2"><br>Scan Surat Masuk</br></font></b></td>
			<td>
			<input type="file" name="scan" accept="image/jpeg"></td>
		</tr>
		<tr>
				  <td>&nbsp;</td>
		    
		  <td><br><input type="submit"name="Submit" value="simpan" > <input type="reset" value="Batal" name="Reset"></td></br>
		
		</tr>
		</table>
		</form>
 <br><br><br>
 <table>
 <td>
 DI Disposisikan ke: <BR>
	<form action="surat_masuk.php?op=update&kd_Surat_Masuk=<?php echo $kd_Surat_Masuk;?>" method="POST"> 
 <?php
 
	//tambahkan daftar semua user ke dalam lembaran disposisi
	
	$check_penerima_disposisi = "SELECT kd_user from disposisi WHERE kd_Surat_Masuk=$kd_Surat_Masuk;";
	
	$penerima_disposisi = array(); //variable untuk menyimpan siapa saja yang menerima disposisi
	$qry = mysql_query($check_penerima_disposisi,$koneksi);
	while($penerima = mysql_fetch_array($qry, MYSQL_ASSOC)){
		array_push($penerima_disposisi,$penerima['kd_user']);
	}
	
	//echo "<textarea>";
	//print_r($penerima_disposisi);
	//echo "</textarea>";
 	$sql =  "SELECT * from `USER` ; ";
	
	$qry = mysql_query($sql,$koneksi)
		  or die ("SQL Error: $sql ".mysql_error());

	while ($user = mysql_fetch_array($qry, MYSQL_ASSOC)){
	//echo "<textarea>";
	//print_r($user);
	//echo "</textarea>";
		
		echo "<Input type=\"checkbox\" name=\"disposisi[".$user["kd_user"]."]\" ID=\"disposisi_".$user["kd_user"]."\"";
		if(in_array($user["kd_user"],$penerima_disposisi)) echo " checked='true' ";
		echo "><LABEL FOR=\"disposisi_".$user["kd_user"]."\">".$user["nama"]."</LABEL><BR>";
	}
 ?>

	
	<p>
	</td>
	</table>
	<br>
	</p>
	KOMENTAR :
	<Textarea rows="4" cols="40" name="komentar">
	</Textarea>
	<p>
	<td><br><input type="submit"name="Submit" value="Kirim Disposisi" > <input type="reset" value="Batal" name="Reset"></br>
	</p>
	</form>
 
<?
 } 
 
 
function delete_surat_masuk($kd){
	?><h2>Hapus Surat Masuk</h2>
	
	<?
	//check dulu apakah user yang menghapus ini adalah seorang SEKRETARIS
	if($_SESSION['id'] != 2 && $id != 2) die( 'Maaf, jangan dihapus suratnya, kasihan SEKRETARISnya ...<br/> Hanya SEKRETARIS yang boleh menghapus surat ini.');
	
	include_once "koneksi.php";
	$sql = "DELETE FROM `surat masuk` where kd_Surat_Masuk ='$kd'";
	mysql_query($sql,$koneksi)
	or die ("SQL Error:".mysql_error());
	echo "<center>Data berhasil dihapus"; 
	echo "<a href='surat_masuk.php'<br><br><br>Back ";
	
	
	
}
?>
	<?
     ?>
</body>
</html>