<?php
require 'koneksi.php';
session_start();
$username = $_POST['username'];
$password = $_POST['password'];

//buat query mengambil data dari database kolom usernamedan password
$result = mysqli_query($koneksi ,"SELECT * FROM staff WHERE username = '$username' AND password = '$password'");
//ambil data dan pecah jadi array
$row = mysqli_fetch_assoc($result);
// var_dump($row);
if ($row['username'] == $username AND $row['password'] == $password) {
	if($row['jabatan'] == "Kasubbag")
	{
		session_start();
		$_SESSION['id_staff'] = $row['id_staff'] ;
		$_SESSION['nama']     = $row['nama'];
		$_SESSION['user']     = $username;
		$_SESSION['pass']     = $password;
		$_SESSION['jabatan']  = $row['jabatan'] ;
		$_SESSION['gmbar']    = $row['foto'];

		header("Location: ../view/kasubbag/index.php");
	}
	else if($row['jabatan'] == "Staff")
	{
		session_start();
		$_SESSION['id_staff'] = $row['id_staff'] ;
		$_SESSION['nip'] = $row['nip'] ;
		$_SESSION['nama']     = $row['nama'];
		$_SESSION['user']     = $username;
		$_SESSION['pass']     = $password;
		$_SESSION['jabatan']  = $row['jabatan'] ;
		$_SESSION['gmbar']    = $row['foto'];
		header("Location: ../view/staff/index.php");
	}
}else{
	?> <script> alert('Username / Password Anda salah');
	document.location= '../login/login';
	</script> <?php
}

?>