<?php
 error_reporting(0);
$page = "login";
mysql_connect("localhost","absensi","absensi09");
mysql_select_db("absensi");
require('libs/Smarty.class.php');
$smarty = new Smarty;

$module = $_GET['module'];
$message = $_GET['message'];


if ($module == 'logged_in'){
	$username	= $_POST['username'];
	$password	= $_POST['pass'];
	$password1	= md5($_POST['pass']);

$qu = mysql_query("SELECT * FROM admin_prodi WHERE PStudiID = '$username'");
			$num = mysql_num_rows($qu);
			$dat = mysql_fetch_array($qu);
if ($num >0){
				$passs=md5($password);
				$qu1 = mysql_query("SELECT * FROM admin_prodi WHERE PStudiID = '$username' and Password='$password1'");
				$num1 = mysql_num_rows($qu1);
				$dat1 = mysql_fetch_array($qu1);
	if ($num1 >0){
					$username	= $_POST['username'];
					$password	= $_POST['password'];
					$level		= "Admmin_prodi";
					$user_id	= $dat1['PStudiID'];
					$name		= $dat1['PStudiNama'];
					$id		= $dat1['PStudiID'];
					setcookie("id", $id);
					setcookie("username", $username);
					setcookie("password", $password);
					setcookie("level", $level);
					setcookie("user_id", $id);
					setcookie("name", $name);
					setcookie("hak", $level);
					$_COOKIE['id'] = $id;
					$_COOKIE['hak'] = $level;
					$_COOKIE['username'] = $username;
					$_COOKIE['password'] = $password;
					$_COOKIE['level'] = $level;
					$_COOKIE['user_id'] = $id;
					$_COOKIE['name'] = $name;

					header("location: index.php");
	}else{
					$smarty->assign('error', 'error');
		}
}elseif ($num_rows3==0) {
// 	$url = "http://localhost/samplesiaka/serviceprodi.php?username=".$username."&password=".$password;

// 	// mengirim GET request ke sistem A dan membaca respon XML dari sistem A
// 	$bacaxml = simplexml_load_file($url);

// 	// membaca data XML hasil dari respon sistem A
// foreach($bacaxml->response as $respon);
// {
// if ($respon == "TRUE"){

// 		foreach($bacaxml->nama as $nama);
// 		foreach($bacaxml->PStudiID as $StudiID);
// 		$username	= $_POST['username'];
// 		$password	= $_POST['username'];
// 		$level		= "Admmin_prodi";
// 		$user_id	= $StudiID;
// 		$name		= $nama;
// 		$PStudiID		= $StudiID;
// 		$id		= $StudiID;
// 		setcookie("id", $id);
// 		setcookie("username", $username);
// 		setcookie("password", $password);
// 		setcookie("level", $level);
// 		setcookie("PStudiID", $StudiID);
// 		setcookie("user_id", $user_id);
// 		setcookie("name", $name);
// 		setcookie("hak", $level);

// 		$_COOKIE['id'] = $id;
// 		$_COOKIE['hak'] = $level;
// 		$_COOKIE['username'] = $username;
// 		$_COOKIE['password'] = $password;
// 		$_COOKIE['level'] = $level;
// 		$_COOKIE['PStudiID'] = $StudiID;
// 		$_COOKIE['user_id'] = $user_id;
// 		$_COOKIE['name'] = $name;
// 		header("location: index.php");
// 		/////////////////////////////save nip n password////////////
// 		$pass=md5($user_id);
// 		//,alamat,tempat,tanggallahir,jeniskelamin,telepon,bidang,status,agama,gelar)
// 		mysql_query("INSERT INTO admin_prodi (PstudiID,PStudiNama,Password)
// 		 				   VALUES('$user_id','$name','$pass')");
// 	}
// 	elseif ($respon=="FALSE") {


	///admin
		$sql = mysql_query("SELECT * FROM tbadmmin WHERE username = '$username' AND password = '$password1' ");
		$num_rows = mysql_num_rows($sql);
		$data = mysql_fetch_array($sql);
	///prodi
		$sql1 = mysql_query("SELECT * FROM userprodi WHERE nip = '$username' AND pass = '$password1' ");
		$num_rows1 = mysql_num_rows($sql1);
		$data1 = mysql_fetch_array($sql1);
	/// ketua kelas
		$sql2 = mysql_query("SELECT * FROM ketuakelas WHERE stb = '$username' AND password = '$password1' ");
		$num_rows2 = mysql_num_rows($sql2);
		$data2 = mysql_fetch_array($sql2);
		if ($num_rows > 0) {
			$username	= $_POST['username'];
			$password	= $_POST['password'];
			$level		= "Admin";

			$user_id	= $data['id'];
			$photo	= $data[photo];
			$name		= $nama;
			$id		= $data['id'];

			setcookie("id", $id);
			setcookie("username", $username);
			setcookie("password", $password);
			setcookie("level", $level);
			setcookie("user_id", $id);
			setcookie("name", $username);
			setcookie("photo", $photo);
			setcookie("hak", $level);
			$_COOKIE['id'] = $id;
			$_COOKIE['hak'] = $level;
			$_COOKIE['username'] = $username;
			$_COOKIE['password'] = $password;
			$_COOKIE['level'] = $level;
			$_COOKIE['user_id'] = $id;
			$_COOKIE['name'] = $username;
			$_COOKIE['photo'] = $photo;
			header("location: index.php");
		}elseif ($num_rows1 > 0) {
			$username	= $_POST['username'];
			$password	= $_POST['password'];
			$level		= "Prodi";
			$user_id	= $data1['id'];
			$photo	= $data1[photo];
			$name		= $nama;
			$id		= $data1['id'];
			$prodi = $data1['prog_studiID'];
			setcookie("id", $id);
			setcookie("username", $username);
			setcookie("password", $password);
			setcookie("level", $level);
			setcookie("user_id", $id);
			setcookie("name", $username);
			setcookie("photo", $photo);
			setcookie("hak", $level);
			setcookie("prodi", $prodi);
			$_COOKIE['id'] = $id;
			$_COOKIE['hak'] = $level;
			$_COOKIE['username'] = $username;
			$_COOKIE['password'] = $password;
			$_COOKIE['level'] = $level;
			$_COOKIE['user_id'] = $id;
			$_COOKIE['name'] = $username;
			$_COOKIE['photo'] = $photo;
			$_COOKIE['prodi'] = $prodi;
			header("location: index.php");
		}elseif ($num_rows2 > 0) {
			$username	= $_POST['username'];
			$password	= $_POST['password'];
			$level		= "KetuaKelas";
			$user_id	= $data2['id'];
			$photo	= $data2[photo];
			$name		= $data2['nama'];
			$id		= $data2['id'];
			$pst = $data2['pst'];
			setcookie("id", $id);
			setcookie("username", $username);
			setcookie("password", $password);
			setcookie("level", $level);
			setcookie("user_id", $id);
			setcookie("name", $name);
			setcookie("photo", $photo);
			setcookie("hak", $level);
			setcookie("pst", $pst);
			$_COOKIE['id'] = $id;
			$_COOKIE['hak'] = $level;
			$_COOKIE['username'] = $username;
			$_COOKIE['password'] = $password;
			$_COOKIE['level'] = $level;
			$_COOKIE['user_id'] = $id;
			$_COOKIE['name'] = $name;
			$_COOKIE['photo'] = $photo;
			$_COOKIE['pst'] = $pst;
			header("location: index.php");
		}else{
			$sql3 = mysql_query("SELECT * FROM mdosen WHERE NIP = '$username'");
			$num_rows3 = mysql_num_rows($sql3);
			$data3 = mysql_fetch_array($sql3);
			if ($num_rows3 >0){
				$passs=md5($password);
				$sql4 = mysql_query("SELECT * FROM mdosen WHERE NIP = '$username' and Password='$password1'");
				$num_rows4 = mysql_num_rows($sql4);
				$data4 = mysql_fetch_array($sql4);
				if ($num_rows4 >0){
					$username	= $_POST['username'];
					$password	= $_POST['password'];
					$level		= "Dosen";
					$user_id	= $data4['NODOS'];
					$photo	= $data4[photo];
					$name		= $data4['NMDOS'];
					$id		= $data4['NODOS'];
					setcookie("id", $id);
					setcookie("username", $username);
					setcookie("password", $password);
					setcookie("level", $level);
					setcookie("user_id", $id);
					setcookie("name", $name);
					setcookie("photo", $photo);
					setcookie("hak", $level);
					setcookie("prodi", $prodi);
					$_COOKIE['id'] = $id;
					$_COOKIE['hak'] = $level;
					$_COOKIE['username'] = $username;
					$_COOKIE['password'] = $password;
					$_COOKIE['level'] = $level;
					$_COOKIE['user_id'] = $id;
					$_COOKIE['name'] = $name;
					$_COOKIE['photo'] = $photo;
					$_COOKIE['prodi'] = $prodi;
					header("location: index.php");
				}else{
					$smarty->assign('error', 'error');
				}
			}elseif ($num_rows3==0) {
				include 'logindosen.php';
			}
		}
  }
// }
// }
}elseif ($module == 'logout'){
	setcookie("username", "");
	setcookie("password", "");
	setcookie("level", "");
	header('location: login.php?message=Anda telah logout.');
}


if(!empty($message)){
	$smarty->assign('error', 'logout');
	$smarty->assign('message', $message);
}
$smarty->display("login.tpl");
?>