admin.js

// login admin
router.post('/login', function(req, res){
    const username = req.body.username;
    const password = req.body.password;

    conn.query('SELECT username, password FROM user WHERE username = "'+username+'" AND level = "admin"', function(err, result){
        if(result.length > 0){
            if(password === result[0].password){

                req.session.username = result[0].username;
                req.session.user = true;

                res.json({
                    status: true
                })

                console.log(req.session)
            }else{
                res.json({
                    message: "Password salah !"
                })
            }
        }else{
            res.json({
                message: "Username salah !"
            })
        }
    })
})