<?php
include('database/koneksi.php');
if(isset($_POST['submit'])){
  $user = mysql_real_escape_string(htmlentities($_POST['username']));
  $pass = mysql_real_escape_string(htmlentities(md5($_POST['password'])));

  $sql = mysql_query("SELECT * FROM user WHERE username='$user' AND password='$pass'") or die(mysql_error());
  if(mysql_num_rows($sql) == 0){
    echo 'Username atau Password anda salah <br>';
	echo '<META HTTP-EQUIV="Refresh" Content="2; URL=index.php">';
  }
  $row = mysql_fetch_assoc($sql);
    if($row['level'] == 1){
      $_SESSION['admin']=$user;
      echo '<script language="javascript">alert("Anda berhasil Login Admin!"); document.location="administrator.php";</script>';
    }else{
    $row = mysql_fetch_assoc($sql);
    if($row['level'] == 1){
      $_SESSION['admin']=$user;
      echo '<script language="javascript">alert("Anda berhasil Login Admin!"); document.location="administrator.php";</script>';
    }
  }
}
?>