<?php
if (!isset($_SESSION)) {
session_start();
}
$error=''; // Variabel untuk menyimpan pesan error
if (isset($_POST['submit'])) {
if (empty($_POST['username']) || empty($_POST['password'])) {
$error = "Username or Password is invalid";
}
else
{
// Variabel username dan password
$username=$_POST['username'];
$password=$_POST['password'];
// Membangun koneksi ke database
$connection = mysqli_connect("localhost", "root", "");
// Mencegah MySQL injection
$username = stripslashes($username);
$password = stripslashes($password);
$username = mysqli_real_escape_string($connection,$username);
$password = mysqli_real_escape_string($connection,$password);
// Seleksi Database
$db = mysqli_select_db($connection,"siakad_smp");
// SQL query untuk memeriksa apakah karyawan terdapat di database?
$query = mysqli_query($connection,"select * from siswa where password='$password' AND no_induk='$username'");
$rows = mysqli_num_rows($query);
if ($rows == 1) {
$_SESSION['login_user']=$username;// Membuat Sesi/session
header("location: home.php"); // Mengarahkan ke halaman profil
} else {
	$pesan = 'login gagal, silahkan ulangi lagi.';
echo '<script language="javascript">';
echo 'alert("'.$pesan.'")';
echo '</script>';
$error = "Username atau Password belum terdaftar";
}
mysqli_close($connection); // Menutup koneksi
}
}
?>