proseslogin.php

<?php

if(isset($_POST['username']) && ($_POST['password'])){

    session_start();

    include('./database/connect.php'); //Database Connection File

    $username = $mysqli->real_escape_string($_POST['username']);
    $password = $mysqli->real_escape_string($_POST['password']);

    $queryShowUser = $mysqli -> query("select * from user where username = '{$username}'");
    $queryFetchShowUser = $queryShowUser -> fetch_array(MYSQLI_ASSOC); //Fetch Data

    //Save user information
    $saveid = $queryFetchShowUser['id'];
    $saveusername = $queryFetchShowUser['username'];
    $savepassword = $queryFetchShowUser['password'];
    $namapenuh = $queryFetchShowUser['fullname'];
    $jawatan = $queryFetchShowUser['jawatan'];

    $_SESSION['username'] = $saveusername;
    $_SESSION['id'] = $saveid;
    $_SESSION['fullname'] = $namapenuh;
    $_SESSION['jawatan'] = $jawatan;

        if(($_POST['password']) == $savepassword){ //Compare Password User Entered In Database if True

        /*
        Jawatan :
        -admin
        -pekerja
        -pegawai
        */

        if($jawatan == 'pekerja'){ echo "<script>location.href = 'user/index.php'</script>"; }

        else if($jawatan == 'pegawai' || $jawatan == 'admin'){ echo "<script>location.href = 'admin/index.php'</script>"; }


        }else {

            echo "Nama atau Kata Laluan Salah !";
        }

  }

?>