<?php
session_start(); //memulai session
if(isset($_POST['login']))
{
    //memanggil file confi.php dan dbfunctions.php
    include "../config.php";
    include "../dbfunctions.php";
    //memanggil variabel kios_user dan kios_pass dari hal index1.php
    $nama_get= $_POST['kios_user'];
    $pass_get= $_POST['kios_pass'];
    //
    $username = strip_tags($nama_get);
    $password = strip_tags($pass_get);
    //membuka database untuk memeriksa username dan password yang login dari tabel user
    opendb();
    $query=("SELECT * FROM $tb_user WHERE nama='$username' and pass=password('$password')");
    $hasil=querydb($query);
    closedb();
    $data=mysql_fetch_array($hasil);

    $nama=$data[nama];
    $pass=$data[pass];
    if ($username!==$nama || $username=="" || $password!==$pass||$password=="")
        {
            //header ("location: index.php?warn=try");
            echo "<meta http-equiv='refresh' content='0; url=index1.php?warn=try'>";
            exit;
        }
    else {
        //header("location: kios_home.php?nama_get=$nama_get");
        $_SESSION['username']=$nama;
        $_SESSION['password']=$pass;
        echo "<meta http-equiv=\"refresh\" content=\"0; url=kios_home.php\">";
        exit;
         }
}

?>