<?php
include "config/koneksi.php";

function antiinjection($data){
  $filter_sql = $db->real_escape_string(stripslashes(strip_tags(htmlspecialchars($data, ENT_QUOTES))));
  return $filter_sql;
}

$username = $_POST['username'];
$pass     = md5($_POST['password']);


$login = $db->query("SELECT * FROM admins WHERE username='$username' AND password='$pass'");
$ketemu= $login->num_rows;
$r     = $login->fetch_array();

// Apabila username dan password ditemukan
if ($ketemu > 0){
  session_start();

  $_SESSION[namauser]     = $r[username];
  $_SESSION[namalengkap]  = $r[nama_lengkap];
  $_SESSION[passuser]     = $r[password];
  $_SESSION[leveluser]    = $r[level];

  echo "Anda berhasil login";
  // header('location:media.php?module=home');
} else {
    echo "<link href=../config/adminstyle.css rel=stylesheet type=text/css>";
    echo "<center>LOGIN GAGAL! <br>
          Username atau Password Anda tidak benar.<br>
          Atau account Anda sedang diblokir.<br>";
    echo "<a href=index-admin.php><b>ULANGI LAGI</b></a></center>";
}
?>