else {
    // 2B## kalo sudah diset username dan passwed CEK DATANYA VALID ATAU TIDAK
    require '../functions/koneksi.php';
    include "../functions/fungsi_pass.php";
    include "login/head.php";

    $username = addslashes($_POST['username']);
    $password = hex(addslashes($_POST['password']),82);
    $ret = mysql_query("SELECT * FROM user WHERE username =
    '".mysql_escape_string($username)."' AND password = '". mysql_escape_string($password) ."' and status='1' limit 0,1");
    if (@mysql_num_rows($ret) != 0)
    {
      //2B.1 kalo data valid tampilkan welcome message
      // redirect ke halaman administrator
      $ret = mysql_fetch_array($ret);
      $_SESSION['Admin'] = $ret;
      $timeout = 9000;
        $_SESSION["expires_by"] = time() + $timeout;
      $username = $_SESSION['Admin']['username'];
      $kunjung = strval($_SESSION['Admin']['kunjung']) + 1;
      $tgl = date("H:i:s")." ".date("d/m/Y");
      $q=mysql_query("update user set waktu='$tgl',ip='".$_SERVER['REMOTE_ADDR']."',kunjung='$kunjung' where username='$username' ");
      include "login/login_sukses.php";

      echo "<meta http-equiv=\"refresh\" content=\"1;url=admin.php\">\n";

    }