Config.php

@@ -1,13 +1,12 @@
 <?php
-
 $host = "localhost";
 $user = "root";
 $password = "";
 $database = "users_db";
 
-$conn = new mysqli($host, $user, $password, $database);
+$conn = mysqli_connect($host, $user, $password, $database);
 
-if ($conn->connect_error) {
-    die("Koneksi gagal: " . $conn->connect_error);
+if (!$conn) {
+    die("Koneksi gagal: " . mysqli_connect_error());
 }
 ?>

auth.php

@@ -1,18 +1,8 @@
 <?php
 session_start();
-require_once "config.php";
+require_once "Config.php";
 
-/* =====================================================
-   JANGAN AKSES auth.php LANGSUNG
-===================================================== */
-if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
-    header("Location: index.php");
-    exit;
-}
-
-/* =====================================================
-   REGISTER
-===================================================== */
+// ===================== REGISTER =====================
 if (isset($_POST['btn-register'])) {
 
     $username = trim($_POST['username']);
@@ -20,73 +10,71 @@ if (isset($_POST['btn-register'])) {
     $password = $_POST['password'];
     $confirm  = $_POST['confirm_password'];
 
-    // Validasi sederhana
-    if (empty($username) || empty($email) || empty($password) || empty($confirm)) {
-        $_SESSION['error'] = "Semua kolom wajib diisi!";
-        header("Location: index.php");
+    // validasi
+    if (!$username || !$email || !$password || !$confirm) {
+        header("Location: index.php?error=kosong");
+        exit;
+    }
+
+    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
+        header("Location: index.php?error=email");
+        exit;
+    }
+
+    if (strlen($password) < 6) {
+        header("Location: index.php?error=pass");
         exit;
     }
 
     if ($password !== $confirm) {
-        $_SESSION['error'] = "Konfirmasi password tidak cocok!";
-        header("Location: index.php");
+        header("Location: index.php?error=confirm");
         exit;
     }
 
-    // Cek user sudah ada atau belum
-    $cek = $conn->prepare("SELECT id FROM users WHERE username=? OR email=?");
-    $cek->bind_param("ss", $username, $email);
-    $cek->execute();
-    $cek->store_result();
+    // cek user
+    $cek = mysqli_prepare($conn, "SELECT id FROM users WHERE username=? OR email=?");
+    mysqli_stmt_bind_param($cek, "ss", $username, $email);
+    mysqli_stmt_execute($cek);
+    mysqli_stmt_store_result($cek);
 
-    if ($cek->num_rows > 0) {
-        $_SESSION['error'] = "Username atau Email sudah terdaftar!";
-        header("Location: index.php");
+    if (mysqli_stmt_num_rows($cek) > 0) {
+        header("Location: index.php?error=exist");
         exit;
     }
-    $cek->close();
 
-    // Insert ke database
+    mysqli_stmt_close($cek);
+
+    // simpan
     $hash = password_hash($password, PASSWORD_DEFAULT);
-    $insert = $conn->prepare("INSERT INTO users (username, email, password) VALUES (?, ?, ?)");
-    $insert->bind_param("sss", $username, $email, $hash);
+    $insert = mysqli_prepare($conn, "INSERT INTO users (username,email,password) VALUES (?,?,?)");
+    mysqli_stmt_bind_param($insert, "sss", $username, $email, $hash);
+    mysqli_stmt_execute($insert);
+    mysqli_stmt_close($insert);
 
-    if ($insert->execute()) {
-        $_SESSION['success'] = "Registrasi berhasil! Silakan login.";
-    } else {
-        $_SESSION['error'] = "Terjadi kesalahan sistem: " . $conn->error;
-    }
-
-    $insert->close();
-    header("Location: index.php"); // Kembali ke index
+    header("Location: index.php?success=register");
     exit;
 }
 
-/* =====================================================
-   LOGIN
-===================================================== */
+// ===================== LOGIN =====================
 if (isset($_POST['btn-login'])) {
 
-    $username = trim($_POST['username']);
+    $username = $_POST['username'];
     $password = $_POST['password'];
 
-    $stmt = $conn->prepare("SELECT * FROM users WHERE username=?");
-    $stmt->bind_param("s", $username);
-    $stmt->execute();
+    $stmt = mysqli_prepare($conn, "SELECT * FROM users WHERE username=?");
+    mysqli_stmt_bind_param($stmt, "s", $username);
+    mysqli_stmt_execute($stmt);
 
-    $result = $stmt->get_result();
-    $user = $result->fetch_assoc();
+    $result = mysqli_stmt_get_result($stmt);
+    $user = mysqli_fetch_assoc($result);
+
+    if (!$user || !password_verify($password, $user['password'])) {
+        header("Location: index.php?error=login");
+        exit;
+    }
 
-    if ($user && password_verify($password, $user['password'])) {
-        // Login Sukses
     $_SESSION['user'] = $user;
-        header("Location: mainboard.php"); // Pastikan file ini ada!
-        exit;
-    } else {
-        // Login Gagal
-        $_SESSION['error'] = "Username atau Password salah!";
-        header("Location: index.php");
+
+    header("Location: mainboard.php");
     exit;
 }
-}
-?>