<?php

if(isset($_POST['btnLogin'])){
	#baca variabel form
	$txtUser		= $_POST['txtUser'];
	$txtUser		= str_replace("'","&acute;",$txtUser);

	$txtPassword	= $_POST['txtPassword'];
	$txtPassword	= str_replace("'","&acute;",$txtPassword);

	#validasi form
	$pesanError		= array();
	if (trim($txtUser)==""){
		$pesanError[] = "Data <b> Username </b> tidak boleh kosong !";
	}
	if (trim($txtPassword)==""){
		$pesanError[] = "Data <b> password </b> tidak boleh kosong !";
	}

	#jika ada pesan eror dari validasi
	if (count ($pesanError) >=1) {
		echo "<div class='mssgBox'>";
		echo "<img src='images/attention.png'> <br> <hr>";
			$noPesan= 0;
			foreach ($pesanError as $indeks=>$pesan_tampil) {
				$noPesan++;
				echo "&nbsp;&nbsp; $noPesan.$pesan_tampil<br>";
			}
		echo "</div> <br>";

		//Tampilkan lagi form login
		include "Login.php";
	}
	else{
		#Login cek ke tabel user login
		$loginSql = "SELECT * FROM user WHERE username='$txtUser' AND password='".md5($txtPassword)."'";
		$loginQry = mysql_query ($loginSql, $koneksidb) or die ("Query Salah : ".mysql_error());

		#jika login sukses
		if (mysql_num_rows($loginQry)>=1){
			$loginData = mysql_fetch_array($loginQry);
			$_SESSION['SES_LOGIN'] = $loginData['kode_user'];
			$_SESSION['SES_ADMIN'] = "Admin";

			//refresh
			echo "<meta http-equiv ='refresh' content='0; url=?open=Halaman-Utama'>";

		}
	}
}

//end post
?>