isenk

<?php
include 'koneksi.php';
$username = $_POST['username'];
$password = $_POST['password'];
$sql="SELECT * FROM user WHERE username='$username' AND password='$password'";
$login=mysql_query($sql);
if(!$login){
   die( mysql_error()."<br/>$sql"); //error krn salah ada disini
}

$ketemu=mysql_num_rows($login);
$r=mysql_fetch_array($login);

if($ketemu > 0) {
session_start();
$_SESSION['namauser'] = $r['username'];
$_SESSION['passuser'] = $r['password'];
$_SESSION['leveluser'] = $r['level'];
if ($r[level]===1){
        $_SESSION['admin']=$username;
        echo '<script language="javascript">alert("Anda berhasil Login Admin!"); document.location="admin.php";</script>';
    }
    else {
        $_SESSION['member']=$username;
        echo '<script language="javascript">alert("Anda berhasil Login member!"); document.location="member.php";</script>';



    header('location:member.php');

       }
}
else {

    echo "<center>LOGIN GAGAL <br>

            Username atau Password Anda Tidak benar <br>

            Atau Acount Anda Sedang Di blokir <br>";

    echo "<a href='index.php'>Ulangi Lagi</a>";

}