<?php
	include ('config.php');
	error_reporting(E_ALL ^ (E_NOTICE | E_WARNING));
	session_start();
	if(isset($_POST['login'])){
		$user = $_POST['username'];
		$pass = md5($_POST['password']);
		$status =strip_tags($_POST['status']);
		$status =strip_tags($_REQUEST['status']);

		if($status =="admin"){
		$sql = mysql_query("SELECT * FROM admin WHERE username = '$user' AND password = '$pass'");
		$cek = mysql_num_rows($sql);
		$result = mysql_fetch_array($sql);
		$id =strip_tags($result['kd_admin']);
		if($cek){
			$_SESSION['username'] =$user;
			$_SESSION['status'] = $status;
			$_SESSION['kd_admin'] = $id;
			header("location:admin/akses_admin.php");
		}
		}
		else{
			echo"gagal";
		}

		if($status =="member"){
			$sql = mysql_query("SELECT * FROM pelanggan WHERE username='$user' AND password='$pass'");
			$cek = mysql_num_rows($sql);
			$result = mysql_fetch_array($sql);
			$id= strip_tags($result['kd_pelanggan']);
			if($cek){
				$_SESSION['username'] =$user;
				$_SESSION['kd_pelanggan'] = $id;
				$_SESSION['status']=$status;
				header("location:pelanggan/akses_pelanggan.php");
			}
		}
		else"gagal";
	}
?>