login

if (isset($_POST['login'])) {
    $username    = $_POST['username'];
    $password    = $_POST['password'];

    $get_data = mysqli_query($db, "SELECT * FROM pengguna WHERE username='$username'");
    $row_data = mysqli_num_rows($get_data);

    if ($row_data > 0){
      while($data = mysqli_fetch_array($get_data)){
        $db_id            = $data['id'];
        $db_username      = $data['username'];
        $db_password      = $data['password'];
        $db_role          = $data['role'];
      }
      if ($username==$db_username && $password==$db_password){
        if ($db_role=='admin') {
          $_SESSION['profil-id']         = $db_id;
          $_SESSION['profil-username']   = $username;
          $_SESSION['profil-role']       = $db_role;

          header('location:index.php');
        }
      } else {
        echo "<script>alert('Password salah !')</script>";
      }
    } else {
      echo "<script>alert('Username tidak terdaftar !')</script>";
    }
  }
  ?>