Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- include "../config/koneksi.php";
- function antiinjection($data){
- $filter_sql = mysql_real_escape_string(stripslashes(strip_tags(htmlspecialchars($data,ENT_QUOTES))));
- return $filter_sql;
- }
- $username = antiinjection($_POST[username]);
- $pass = antiinjection(md5($_POST[password]));
- $login=mysql_query("SELECT * FROM admins WHERE username='$username' AND password='$pass' AND blokir='N'");
- $ketemu=mysql_num_rows($login);
- $r=mysql_fetch_array($login);
- // Apabila username dan password ditemukan
- if ($ketemu > 0){
- session_start();
- session_register("namauser");
- session_register("namalengkap");
- session_register("passuser");
- session_register("leveluser");
- $_SESSION[namauser] = $r[username];
- $_SESSION[namalengkap] = $r[nama_lengkap];
- $_SESSION[passuser] = $r[password];
- $_SESSION[leveluser] = $r[level];
- header('location:media.php?module=home');
- }
- else{
- echo "<link href=../config/adminstyle.css rel=stylesheet type=text/css>";
- echo "<center>LOGIN GAGAL! <br>
- Username atau Password Anda tidak benar.<br>
- Atau account Anda sedang diblokir.<br>";
- echo "<a href=index.php><b>ULANGI LAGI</b></a></center>";
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement