<?php
session_start();

if (isset($_SESSION['username']))
	{
	header("Location: home.php");
	die();
	}

error_reporting(E_ALL ^ (E_NOTICE | E_WARNING));
include 'koneksi.php';

$username = mysqli_real_escape_string($koneksi, $_POST['username']);
$password = mysqli_real_escape_string($koneksi, $_POST['password']);
$query = mysqli_query($koneksi, "SELECT * FROM tb_user WHERE username = '$username'");

if (mysqli_num_rows($query) == 0)
	{
	echo "<script>
		alert('Username atau Password Salah !!');
		document.location.href = 'login.php';
		</script>";
	}
  else
	{
	$data = mysqli_fetch_assoc($query);
	if ($password == $data['password'])
		{
		$_SESSION['username'] = $data['username'];
		$_SESSION['password'] = $data['password'];
		if ($data)
			{
			header("Location: home.php");
			}
		}
	  else
		{
	echo "
		<script>
		alert('Username atau Password Salah !!');
		document.location.href = 'login.php';
		</script>";
		}
	}
?>