<?php
session_start();
require 'setting/config.php';
error_reporting(0);
    $username  =  $_POST['username'];
    $password  =  $_POST['password'];
    $login     =  $_POST['login'];
    if(isset($login)){
      $res = $conn->query("SELECT * FROM login where username='$username' and password='$password'");
      $row = $res->fetch_assoc();
      $name = $row['name'];
      $user = $row['username'];
      $pass = $row['password'];
      $type = $row['type_login'];

      if($user==$username && $pass=$password){
        $_SESSION['sess_user_id'] = $row['name_login'];
        $_SESSION['sess_username'] = $row['username'];
        $_SESSION['sess_userrole'] = $row['type_login'];


     if($type=="admin"){
      $_SESSION['mysesi']=$name;
      $_SESSION['mytype']=$type;
      echo "<script>window.location.assign('index.php')</script>";

    } else if($type=="user"){
      $_SESSION['mysesi']=$name;
      $_SESSION['mytype']=$type;
      echo "<script>window.location.assign('index.php')</script>";

      } else if($type=="super"){
      $_SESSION['mysesi']=$name;
      $_SESSION['mytype']=$type;
      echo "<script>window.location.assign('super.php')</script>";

    } else{
        $msg="your Login successfully !";
     }
  } else{
      $msg="your usernamae and password worng please try again!";
       }
}
?>

<?php
session_start();
require 'setting/config.php';

if (!isset($_SESSION['mysesi']) && !isset($_SESSION['mytype'])=='admin')
{
  echo "<script>window.location.assign('sign-in.php')</script>";
}
?>