Untitled

<?php

if (isset($_POST['login'])) {
include "conf/koneksi.php";

$username = $_POST['_username'];
$pass     = md5($_POST['_password']);

$login=mysqli_query($konek, "SELECT * FROM tb_user WHERE username ='$username' AND password = '$pass'");
$ketemu=mysqli_num_rows($login);
$r=mysqli_fetch_array($login);

// Apabila username dan password ditemukan
if ($ketemu > 0){

if($r['blocked'] == 'yes'){
echo "<br/><br/><br/><center><b>AKUN ANDA DIBLOKIR!!!</b></center>";
} else {


  session_start();


  if($r['level'] == "admin"){
$_SESSION['adminx']=$username;
$_SESSION['userx'] = $r['username'];
$_SESSION['namax'] = $r['username'];
$_SESSION['passwordx'] = $r['password'];
$_SESSION['levelx'] = $r['level'];

echo "<br><br><center>
<br/>
<img src='img/loading.gif'/><br/>
Mohon tunggu sebentar...";
echo "<meta http-equiv='refresh' content='5;url=admin/home.php?menu=beranda'>";


} else if($r['level'] == "siswa"){

$galak = $r['no_register'];
$kering=mysqli_query($konek, "SELECT * FROM tb_register WHERE no_register ='$galak'");
$xxx=mysqli_fetch_array($kering);


$_SESSION['siswax']=$username;
$_SESSION['userx'] = $r['username'];
$_SESSION['registerx'] = $r['no_register'];
$_SESSION['namax'] = $xxx['nama'];
$_SESSION['passwordx'] = $r['password'];
$_SESSION['levelx'] = $r['level'];

echo "<br><br><center>
<br/>
<img src='img/loading.gif'/><br/>
Mohon tunggu sebentar...";
echo "<meta http-equiv='refresh' content='5;url=siswa/home.php?menu=beranda'>";

} else {
echo '<script language="javascript">alert("Level anda tidak diketahui!"); document.location="index.php";</script>';
}

}
}
else{

   echo "
  <link href='css/zalstyle.css' rel='stylesheet' type='text/css'>";

  echo "
  </head>
  <center>
  <body class='special-page'>
  <div id='container'>
  <section id='error-number'>
  <br/><br/>
  <img src='img/lock.png'>
  <h1>LOGIN GAGAL</h1>

  <p><span class style=\"font-size:14px; color:#ccc;\">Username atau Password anda tidak sesuai.<br>
  Atau akun anda sedang diblokir.</p></span><br/>

  </section>

  <section id='error-text'>
  <p><a class='button' href='index.php'>&nbsp;&nbsp; <b>ULANGI LAGI</b> &nbsp;&nbsp;</a></p>
  </section>
  </div>
</center>

";

}
}
mysqli_close($konek);
?>