Untitled

<?php
 ob_start(); session_start(); if(isset($_SESSION['npsn'])){ header("Location: admin.php"); die(); } require('include/cekkoneksi.php'); ?>
<!doctype html>
<html class="no-js" lang="">
<head>
  <meta charset="utf-8">
  <title>ONLINE CBT SERVER</title>
  <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1, maximum-scale=1">
  <meta property="og:site_name" content="INDOCBT" />
  <meta property="og:description" content="Indocbt adalah aplikasi ujian berbasis komputer yang sengaja di rancang mirip aplikasi unbk, berguna untuk melatih siswa menghadapi ujian nasional.Aplikasi dapat digunakan oleh semua jenjang sekolah, baik SD,MI,SMP,MTS,SMA,SMK dan MA" />
 <link rel="icon" href="images/logo-white.png" type="image/x-icon" />
  <link rel="shortcut icon" href="images/logo-white.png" type="image/x-icon" />
  <link rel="stylesheet" href="styles/webfont.css">
  <link rel="stylesheet" href="styles/climacons-font.css">
  <link rel="stylesheet" href="vendor/bootstrap/dist/css/bootstrap.css">
  <link rel="stylesheet" href="styles/font-awesome.css">
  <link rel="stylesheet" href="styles/card.css">
  <link rel="stylesheet" href="styles/sli.css">
  <link rel="stylesheet" href="styles/animate.css">
  <link rel="stylesheet" href="styles/app.css">
  <link rel="stylesheet" href="styles/app.skins.css">
  <!-- endbuild -->
</head>
<body class="">
  <div class="app signin usersession">
    <div class="session-wrapper">
      <div class="page-height-o row-equal align-middle">
        <div class="column">
          <div class="card bg-white no-border">
            <div class="card-block">
			<?php
 $sqltahun = mysqli_query($koneksi, "select * from wp_setid where XStatus = '1'"); $st = mysqli_fetch_array($sqltahun); $tahun = $st['XKodeAY']; $semester = $st['semester']; if(isset($_REQUEST['submit'])){ if($_REQUEST['username'] == "" || $_REQUEST['password'] == ""){ echo '<div class="upss red-text"><i class="material-icons">error_outline</i> <strong>ERROR!</strong> Username dan Password wajib diisi.
                                <a class="btn-large waves-effect waves-light blue-grey col s11" href="./" style="margin: 20px 0 0 5px;"><i class="material-icons md-24">arrow_back</i> Kembali ke login form</a></div>'; } else { $username = trim(htmlspecialchars(mysqli_real_escape_string($koneksi, $_REQUEST['username']))); $password = trim(htmlspecialchars(mysqli_real_escape_string($koneksi, $_REQUEST['password']))); date_default_timezone_set("Asia/Jakarta"); $tanggal_login = date("G:i d/m/Y"); mysqli_query($koneksi, "UPDATE wp_admin SET XWarnafooter='$tanggal_login' WHERE Username='$_REQUEST[username]'"); mysqli_query($koneksi, "UPDATE wp_admin SET online='on' WHERE Username='$_REQUEST[username]'"); $query = mysqli_query($koneksi, "SELECT Urut, Username, XAdmin, XNIPAdmin, XKodeSekolah, XTingkat, XSekolah, login,XLogo,XPicAdmin,online,XWarnafooter,btnnext,btnlogin,XAlamat,XTelp,XFax,XEmail,XWeb,XKepSek,XNIPKepsek,XWarnabody,HP,XProp,XKab,XKec,lokasi_kode,daftarsoal,btnback,kelamin FROM wp_admin WHERE Username=BINARY'$username' AND Password=MD5('$password') AND XLogin=''"); if(mysqli_num_rows($query) > 0){ list($id_user, $username, $nama, $nip, $npsn, $jenjang, $sekolah, $login, $logo, $foto, $online, $tgllogin, $proktor, $teknisi, $alamat, $telepon, $fax, $email, $web, $kepsek, $kepseknip, $kodebersama, $hp, $propinsi, $kabupaten, $kecamatan, $lokasi_kode, $hpteknisi, $namateknisi, $kelamin) = mysqli_fetch_array($query); session_start(); $_SESSION['id_user'] = $id_user; $_SESSION['username'] = $username; $_SESSION['nama'] = $nama; $_SESSION['nip'] = $nip; $_SESSION['npsn'] = $npsn; $_SESSION['jenjang'] = $jenjang; $_SESSION['sekolah'] = $sekolah; $_SESSION['login'] = $login; $_SESSION['logo'] = $logo; $_SESSION['foto'] = $foto; $_SESSION['online'] = $online; $_SESSION['tgllogin'] = $tgllogin; $_SESSION['proktor'] = $proktor; $_SESSION['teknisi'] = $teknisi; $_SESSION['alamat'] = $alamat; $_SESSION['telepon'] = $telepon; $_SESSION['email'] = $email; $_SESSION['fax'] = $fax; $_SESSION['web'] = $web; $_SESSION['kepsek'] = $kepsek; $_SESSION['kepseknip'] = $kepseknip; $_SESSION['kodebersama'] = $kodebersama; $_SESSION['hp'] = $hp; $_SESSION['propinsi'] = $propinsi; $_SESSION['kabupaten'] = $kabupaten; $_SESSION['kecamatan'] = $kecamatan; $_SESSION['lokasi_kode'] = $lokasi_kode; $_SESSION['hpteknisi'] = $hpteknisi; $_SESSION['namateknisi'] = $namateknisi; $_SESSION['kelamin'] = $kelamin; $_SESSION['tahun'] = $tahun; $_SESSION['semester'] = $semester; header("Location: admin.php"); die(); } else { $_SESSION['errLog'] = '<center>Username & Password tidak ditemukan!</center>'; header("Location: index.php"); die(); } } } else { ?>

              <form role="form" class="form-layout" action="login.php">
			  <?php
 if(isset($_SESSION['errLog'])){ $errLog = $_SESSION['errLog']; echo '<div id="alert-message" class="alert alert-warning"><div class="center"><i class="material-icons">error_outline</i> <strong>LOGIN GAGAL!</strong></div>
............................................................................
.........................................
..............