<?php
session_start();
if(isset($_POST['username']) && ($_POST['password'])) {
$error='';

include "koneksi.php";

if(isset($_POST['login'])){
    $username   = mysqli_real_escape_string($koneksi, $_POST['username']);
    $password   = mysqli_real_escape_string($koneksi, $_POST['password']);


    $query = mysqli_query($koneksi, "SELECT * FROM login WHERE username='$username' AND password='$password'");
    if(mysqli_num_rows($query) == 0)
    {
         echo "<script>alert('Anda Gagal Login')</script>";
      echo "<meta http-equiv='refresh' content='0 url=index.php'>";
    }
    else
    {
        $row = mysqli_fetch_array($query);
        $_SESSION['username']=$row['username'];
        $_SESSION['password'] = $row['password'];
        $_SESSION['level'] = $row['level'];



        if($row['level'] == "admin")
        {

            header("Location: log_admin/halaadmin.php");
        }
        else if($row['level'] =="pembimbing")
        {
            header("Location: log_member/halamember.php");
        }
        else if($row['level'] == "siswa")
        {

            header("Location: log_visitor/index_siswa.php");
        }
        else
        {
            $error = "Failed Login";
        }
    }
}
}

?>