Untitled

<?php
session_start();
include "connection.php";
?>

<!DOCTYPE html>
<html>
<head>
    <title></title>    <link href="css/bootstrap.min.css" rel="stylesheet">
</head>
<body >
<div style="width:100%;height:800px;background-color:gray;">
    <div align="center"> <a href="index.php"><img src="images/header.jpg" width="70%;" height="130px;"></a></div>
    <div style="width:70%;height:auto;background-color:lavender;margin-left:auto;margin-right:auto;" align="center"><b><h2>FORM LOGIN</h2></b></div>
        <div style="width:70%;height:400px;;background-color:lavender;margin-left:auto;margin-right:auto;margin-top:10px;" align="center">
        <div align="center"  style="width:30%;">
        <br/><br/><br/>
           <form method="post" action="login.php">
                              <table>
                                <tr>
                                  <td><input type="text" name="user" class="form form-control" placeholder="Username"></td>
                                </tr>
                                <tr>
                                  <td><input type="password" placeholder="Password" name="pass" class="form form-control"></td>
                                </tr>
                                <tr>
                                  <td><input type="submit" name="login" value="login" class="btn tbn-success"></td>
                                </tr>

                              </table>
                            </form>
                            <br/>
                                <p><a href="ceckvalid.php"><u>Lupa Password</u></a></p>

        </div>
        </div>
</div>
</body>
</html>

<?php

if (isset($_POST['login'])) {
    # code...
    $username   = $_POST['user'];
    $password   = $_POST['pass'];
    $pass=md5($password);

    $kueri=mysqli_query($connection,"SELECT * FROM pemilikkost WHERE username='$username' AND password='$pass'");
    if(mysqli_num_rows($kueri) == 0)
    {
        $kueri1=mysqli_query($connection,"SELECT * FROM member WHERE username='$username' AND password='$pass'");
        $row1=mysqli_fetch_array($kueri1);
        $user1 = $row1['username'];
        $pass2 =$row1['password'];
        $n1=$row1['id_member'];
        $n2=$row1['nama_lengkap'];

        if ($username == $user1 && $pass == $pass2) {
            $_SESSION['login'] = true;
            $_SESSION['username'] = $user1;
            $_SESSION['id_member'] =$n1;
            $_SESSION['nama_lengkap'] =$n2;

            header("location:Member/index.php");
        }else{
                $kueri3=mysqli_query($connection,"SELECT * FROM admin WHERE username='$username' AND password='$pass'");
                $row3=mysqli_fetch_array($kueri3);
                $user1 = $row3['username'];
                $pass2 =$row3['password'];

                    if ($username == $user1 && $pass == $pass2) {
                        $_SESSION['login'] = true;
                        $_SESSION['username'] = $user1;
                        header("location:Admin/index.php");
                    }
             }
    }else
    $kueri=mysqli_query($connection,"SELECT * FROM pemilikkost WHERE username='$username' AND password='$pass'");
    $row4=mysqli_fetch_array($kueri);
    $user1 = $row4['username'];
    $pass2 =$row4['password'];
    $namapk =$row4['nama_pk'];
    $idpemilik=$row4['id_pemilik'];

        if ($username == $user1 && $pass == $pass2) {
            $_SESSION['login'] = true;
            $_SESSION['username'] = $user1;
            $_SESSION['nama_pk'] = $namapk;
            $_SESSION['id_pemilik'] =$idpemilik;
            header("location:User/index.php");
        }else{
            echo "<script>alert('Username atau Password Anda Salah')
        window.location ='index.php';</script>";
        }
}
?>