ceklogin

<?php
include "../config/koneksi.php";

$username = $_POST['username'];
$password = md5($_POST['password']);


  $query  = "SELECT * FROM admin WHERE username='$username' AND password='$password' AND blokir='N'";
  $login  = mysqli_query($konek, $query);
  $ketemu = mysqli_num_rows($login);
  $r      = mysqli_fetch_array($login);

  // Apabila username dan password ditemukan (benar)
  if ($ketemu > 0){
  //  session_start();

    // bikin variabel session
    $_SESSION['namauser']    = $r['username'];
    $_SESSION['passuser']    = $r['password'];
    $_SESSION['namalengkap'] = $r['nama'];
    $_SESSION['leveluser']   = $r['level'];

    // bikin id_session yang unik dan mengupdatenya agar slalu berubah
    // agar user biasa sulit untuk mengganti password Administrator
 //   $sid_lama = session_id();
	//  session_regenerate_id();
 //   $sid_baru = session_id();
  //  mysqli_query($konek, "UPDATE users SET id_session='$sid_baru' WHERE username='$username'");

    header("location:home.php");
  }
  else{
	  echo '<link href="css/style_login.css" rel="stylesheet" type="text/css" />';
    echo "<div id=\"login\"><h1 class=\"fail\">Login Gagal! Username & Password salah.</h1>";
    echo "<p class=\"fail\"><a href=\"index.php\">Ulangi Lagi</a></p></div>";
  }
?>