proses_login.php

<?php
include('koneksi.php');

$username = $_POST['username'];
$password = $_POST['password'];

if (empty($username)) {
    echo "<script>alert('Username belum diisi')</script>";
    echo "<script>window.history.back()</script>";
    }elseif (empty($password)) {
    echo "<script>alert('Password belum diisi')</script>";
    echo "<script>window.history.back()</script>";
    }else{
        session_start();
        $login = $db->query("SELECT * FROM kasir WHERE username = '$username' AND password=md5('$password')");
        if ($login->num_rows > 0) {
            $row = $login->fetch_assoc();
            $_SESSION['username'] = $row['username'];
            $_SESSION['akses'] = $row['akses'];
            $use_id  = $row['id_kasir'];
            $_SESSION['id_kasir'] = $row['id_kasir'];
            $ganti = date();
            $waktu = $db->query("UPDATE `kasir` SET `bala`= '$ganti' WHERE id_kasir='$use_id'");
            $tampwaktu = $db->query("SELECT curr_login from kasir WHERE username = '$username'");
            $_SESSION['waktulogin'] = $row['curr_login'];
            if ($row['akses'] == 1) {
        header('location:../administrator/index.php');
        }else{ ?>
            <script>
            window.location.href ='../index.php';
            </script>
<?php
        }

    }else{
        echo "<script>alert('Username atau password salah')</script>";
        echo "<meta http-equiv='refresh' content='1 url=../login.php'>";
    }
}
?>