login.php

<?php
session_start();
require 'assets/functions.php';

//cek cookie
if ( isset ($_COOKIE['id']) && isset($_COOKIE['key']) ) {
  $id = $_COOKIE['id'];
  $key = $_COOKIE['key'];

  //ambil username berdasarkan id
  $result = mysqli_query ($conn, "SELECT username FROM user WHERE id = $id");
  $row = mysqli_fetch_assoc($result);

  //cek cooki dan username
  if ( $key === hash('sha256', $row['username']) ) {
    $_SESSION['login'] =true;
  }


}

if ( isset($_SESSION["login"]) ){
  header("Location: admin/index.php");
  exit;
}




if ( isset($_POST["login"]) ) {
  $username = $_POST["username"];
  $password = $_POST["password"];

  $result = mysqli_query ($conn, "SELECT * FROM user WHERE username = '$username'");
  //cek username
  if ( mysqli_num_rows($result) ===1 ) {
    //cek password
    $row = mysqli_fetch_assoc($result);
    if  (password_verify($password, $row["password"]) ) {
      // set session
      $_SESSION["login"] = true;

      //cek remember me
      if ( isset($_POST['remember']) ){
        //buat cookie
        setcookie('id', $row['id'], time()+60);
        setcookie('key', hash('sha256', $row['username']), time()+60 );
      }

      header("Location: admin/index.php");
      exit;
    }
  }

  $error =true;

}

 ?>