<?php
        include "koneksi.php";

        if (isset($_POST['login'])){
            $user = $_POST['user'];
            $pass = md5($_POST['pass']);

            $login=mysql_query("SELECT * FROM phpmu_user WHERE username='$user' AND password='$pass' AND status='Y'")or die(mysql_error());

            $cocok=mysql_num_rows($login);
            $r=mysql_fetch_array($login);

            if ($cocok > 0){
                $_SESSION[login]        = $r[id_user];
                $_SESSION[username]     = $r[username];
                $_SESSION[namalengkap]  = $r[nama_lengkap];
                $_SESSION[password]     = $r[password];
                $_SESSION[level]        = $r[level];
                $_SESSION[unit]         = $r[unit_kerja];

                header('location:index.php');
            }else{
                echo "<script>window.alert('Maaf, Anda Tidak Memiliki akses');
                        window.location=('index.php')</script>";
            }
        }

        if (isset($_POST['aksidaftar'])){
                $waktu = date("Y-m-d H:i:s");
                $pass = md5($_POST[b]);
                mysql_query("INSERT INTO phpmu_user (username, password, nama_lengkap, alamat_email, no_telpon, alamat_lengkap, level, status, waktu_daftar, unit_kerja)
                                             VALUES ('$_POST[a]','$pass','$_POST[c]','$_POST[d]','$_POST[e]','$_POST[f]','user_biasa','N','$waktu','$_POST[unit]')");
                header('location:index.php?daftar=success');

        }
?>