<?php
    session_start();
?>
<form method="post" action="">
<table>
    <tr>
    <td>Username</td>
    <td>:</td>
    <td><input type="text" name="us"></td>
    </tr>
    <tr>
    <td>Password</td>
    <td>:</td>
    <td><input type="password" name="pass"></td>
    </tr>
    <tr>
    <td><input type="submit" name="login" value="Log in"></td>
    <td></td>
    <td align="right"><a href="member_baru.php">Daftar</a></td>
    </tr>
</table>
</form>

<?php
    if (isset($_REQUEST['login'])){
    include "../conf/koneksi.php";

    $us=mysql_real_escape_string($_REQUEST['user']);
    $pass=md5(mysql_real_escape_string($_REQUEST['pass']));
    echo $pass;

    $result=mysql_query("select * from tb_member where user= '$us' and pass= '$pass'") or die(mysql_error());
    //mengecek apakah data user ada atau tidak
    if(mysql_num_rows($result)==1){
        $_SESSION['user']['name']       =$us;
        $_SESSION['user']['is_logged']  = 1;
        $_SESSION['user']['time']       = date ('Y-m-d');
        //trus terserah mau lari kemana
        echo "<script> alert ('login berhasil !') </script>";
        echo "<script> location.href='testing_login.php'</script>";
    }

    }
?>