<?php

    session_start();
    require_once 'config.php';
    if(isset($_POST["submit"])) {
        $username = $_POST["username"];
        $password = $_POST["password"];
        $query = mysqli_query($conn, "SELECT id, password, level, role FROM tbl_users WHERE username = '$username'");
        $result = mysqli_fetch_assoc($query);
        if(password_verify($password, $result["password"]) && mysqli_affected_rows($conn) > 0) {
            $id = $_SESSION["id"] = (int) $result["id"];
            $_SESSION["level"] = (int) $result["level"];
            $_SESSION["role"] = $result["role"];
            mysqli_query($conn, "UPDATE tbl_users SET login = 1 WHERE id = $id");
            header("Location: index.php");
        } else {
            echo "<script>alert('Username dan Password Salah!');</script>";
        }
    }

?>