Untitled

<?php

require_once("config.php");

if(isset($_POST['login'])){
    $ip_user = $_SERVER['REMOTE_ADDR'];
    $username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_STRING);
    $password = filter_input(INPUT_POST, 'password', FILTER_SANITIZE_STRING);

    $sql = "SELECT * FROM users WHERE username=:username OR email=:email";
    $stmt = $db->prepare($sql);

    // bind parameter ke query
    $params = array(
        ":username" => $username,
        ":email" => $username
    );

    $stmt->execute($params);

    $user = $stmt->fetch(PDO::FETCH_ASSOC);

    // jika user terdaftar
    if($user){
        // verifikasi password
        if(password_verify($password, $user["password"])){
            $sql_insert= "INSERT INTO session (`ip_user`) VALUES (:ip_user)";
            $sql_update = "UPDATE users SET ip_user=:ip_user WHERE username=:username";
            $stmt_insert = $db->prepare($sql_insert);
            $stmt_update = $db->prepare($sql_update);
            $params_update = array(
                ":username" => $username,
                ":ip_user" => $ip_user
            );
            $params_insert = array(

                ":ip_user" => $ip_user
            );
            $saved = $stmt_update->execute($params_update);
            $saved = $stmt_insert->execute($params_insert);
            //buat Session
            session_start();
            $_SESSION["user"] = $user;
            //login sukses, alihkan ke halaman timelin
            echo "ISO";
	        if($saved) header("Location: timeline.php");
        }
        else{
            echo "GAGAL";
        }
    }
}
?>


<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>Login Filkom</title>

    <link rel="stylesheet" href="css/bootstrap.min.css" />
</head>
<body class="bg-light">

<div class="container mt-5">
    <div class="row">
        <div class="col-md-6">

        <p>&larr; <a href="index.php">Home</a>

        <h4>Masuk ke FILKOM</h4>
        <p>Belum punya akun? <a href="register.php">Daftar di sini</a></p>

        <form action="" method="POST">

            <div class="form-group">
                <label for="username">Username</label>
                <input class="form-control" type="text" name="username" placeholder="Username atau email" />
            </div>


            <div class="form-group">
                <label for="password">Password</label>
                <input class="form-control" type="password" name="password" placeholder="Password" />
            </div>

            <input type="submit" class="btn btn-success btn-block" name="login" value="Masuk" />

        </form>

        </div>

        <div class="col-md-6">
            <!-- isi dengan sesuatu di sini -->
        </div>

    </div>
</div>

</body>
</html>