<?php
        if(@$_POST['login']) {
            $user = @$_POST['user'];
            $pass = @$_POST['password'];
            if($user == '' || $pass == "") {
                ?>
                <script type="text/javascript">alert("Username / Password tidak boleh kosong");</script>
                <?php
            } else {
                $log = $db->prepare("SELECT * FROM user where username = ? and password = md5(?)") or die ($db->error);
                $log->bind_param('ss', $user, $pass);
                $log->execute();
                $log->store_result();
                $cek = $log->num_rows;
                $log->bind_result($id, $username, $password, $nama_lengkap);
                $log->fetch();
                if($cek > 0) {
                    @$_SESSION['admin'] = $id;
                    @$_SESSION['user'] = $username;
                    @$_SESSION['password'] = $password;
                    @$_SESSION['nama_lengkap'] = $nama_lengkap;
                    header("location:../index.php");
                } else {
                    ?>
                <script type="text/javascript">alert("Login gagal, silahkan ulangi kembali");</script>
                <?php
                }
            }
        }
        ?>