<?php

require_once $_SERVER["DOCUMENT_ROOT"] . '/project-school/config/init.php';
session_start();

error_reporting(E_ALL);
ini_set('display_errors', 'On');


if (isset($_POST['submit-admin-login']))
{
	$username=db_escape($koneksi, $_POST['username']);
	$password=db_escape($koneksi, md5($_POST['password']));

	if (empty($username && $password))
		{
			$_SESSION['pesan'] = '1';
			$_SESSION['alert'] = 'danger';
			header('location:../login.php');
		}
		elseif(empty($username))
		{
			$_SESSION['pesan'] = '2';
			$_SESSION['alert'] = 'danger';
			header('location:../login.php');
		}
		elseif(empty($password))
		{
			$_SESSION['pesan'] = '3';
			$_SESSION['alert'] = 'danger';
			header('location:../login.php');
		}
		else
		{
			$sqladmin= "SELECT * FROM admin WHERE username='$username' AND password='$password'";
			$query= mysqli_query($koneksi, $sqladmin) or die(mysqli_error($koneksi));
			$resultadmin= mysqli_num_rows($query);

			$sqlpengajar= "SELECT * FROM pengajar WHERE username_login='$username' AND password_login='$password'";
			$query= mysqli_query($koneksi, $sqlpengajar) or die(mysqli_error($koneksi));
			$resultpengajar= mysqli_num_rows($query);

			if($resultadmin > 0)
		    {
		    	$row = mysqli_fetch_assoc($query);
		        $_SESSION['admin'] = $row['username'];
		        $_SESSION['level'] = $row['level'];
		        header('Location: ../view/admin-dashboard.php');
		    }
			elseif($resultpengajar > 0)
		    {
		    	$row = mysqli_fetch_assoc($query);
		        $_SESSION['pengajar'] = $row['nama'];
		        $_SESSION['level'] = $row['level'];
		        header('Location: ../view/pengajar-dashboard.php');
		    }
			else
			{
				$_SESSION['pesan'] = 'Username atau Password Anda Salah';
				$_SESSION['alert'] = 'danger';
				header('Location: ../login.php');
			}
		}
}