session toko

<?php
session_start();
include('../koneksi/koneksi.php');
if(isset($_POST['button_login'])){
    $kd_toko=$_POST['kd_toko'];
    $password_digunakan=$_POST['password'];
    error_log("\npost=".json_encode($_REQUEST),3,'gun.log');

    $query_cek_toko="SELECT * FROM tabel_toko WHERE kd_toko like '".$kd_toko."'";
    $cek_toko=mysql_query($query_cek_toko);
    $count=mysql_num_rows($cek_toko);
    error_log("\nsql=".$query_cek_toko,3,'gun.log');

    if($count>0){
        $toko=mysql_fetch_array($cek_toko);
        $kd_toko=$toko['kd_toko'];
        $status=$toko['status'];
        $password_database=$toko['password'];
        error_log("\ntoko=".json_encode($toko),3,'gun.log');

        if($password_database==md5($password_digunakan)){
            $_SESSION['kd_toko']=$kd_toko;
            $_SESSION['status_toko']=$status;
            header('location:login_user.php');
        }
        else{
            error_log("\nstat:not match[{$password_database}][".md5($password_digunakan)."]" ,3,'gun.log');
            header('location:login_toko.php?stat=noMatch');
        }

    }
    else{
        header('location:login_toko.php?stat=noToko');
    }
}
else{
    header('location:login_toko.php');
}