cek.php

<?php
/* Check User Script */
error_reporting (1);
session_start();  // Start Session
include 'koneksi.php';
// Conver to simple variables
$username = $_POST['username'];
$password = $_POST['password'];

if((!$username) || (!$password)){
    echo "<script language='javascript'>
    alert ('User dan Password Kosong');
    location.href='index.php';
</script>";
}

// Convert password to md5 hash
$password = md5($password);

// check if the user info validates the db
$sql =  "SELECT count(*) FROM tabel_user WHERE username='$username' AND password='$password'" ;
$q=$pdo->query($sql);
if ($q->fetchColumn() > 0) {
    $login_check=1;
}else{
    $login_check=0;
}
/*
 tidak ada fungsi untuk hitung berapa jumlah data yang muncul.
*/
if($login_check > 0){
    $sql =  "SELECT * FROM tabel_user WHERE username='$username' AND password='$password'" ;
    $q=$pdo->query($sql);
    while($row =   $q->fetch(PDO::FETCH_ASSOC))
    {
        // Register some session variables!
        $_SESSION['username'] = $row ['username'];
        $_SESSION['password'] = $row ['password'];
        $_SESSION['nama'] = $row ['nama'];
        $_SESSION['email'] = $row ['email'];
        $_SESSION['status'] = $row ['status'];

if ($row ['status'] == "Admin"){
echo "<script language='javascript'>
  location.href='admin/index2.php'</script>";
 }
if ($row ['status'] == "User"){
echo "<script language='javascript'>
  location.href='user/user.php'</script>";
    }
  }
} else {

    echo "
    <script language='javascript'>
    alert ('User atau Password Salah');
    location.href='index.php';
</script>";
}
?>