validasi.php

<?php
//Mengambil File Koneksi Database.
include 'config/koneksi.php';
session_start();
//Ambil Data dari FORM
$username = $_POST["username"];
$password = md5($_POST["password"]);
//Untuk Mencegah SQL Injection
mysql_escape_string($username);
mysql_escape_string($password);
//Query SELECT dari DB
$query = "SELECT * FROM user WHERE username= '$username' AND password = '$password'";
$hasil = mysql_query($query);
if(mysql_num_rows($hasil) >= 1) {
  while($data=mysql_fetch_array($hasil)) {
    $_SESSION["username"] = $data["username"];
    $_SESSION["nama"] = $data["nama"];
    $_SESSION["email"] = $data["email"];
  }
  header('Location: home.php');
}else {
  header('Location: index.php?status=gagal ');
}
?>