<?php
include "koneksi.php";

$username = $_POST['username'];
$password = $_POST['password'];

$query = mysqli_query($conn, "SELECT * FROM users WHERE username='$username'");
$user = mysqli_fetch_assoc($query);

if (!$user) {
    echo json_encode(["status" => "error", "msg" => "Username tidak ditemukan"]);
    exit;
}

if ($user["password"] !== $password) {
    echo json_encode(["status" => "error", "msg" => "Password salah"]);
    exit;
}

echo json_encode([
    "status" => "success",
    "id" => $user["id"],
    "username" => $user["username"],
    "email" => $user["email"],
    "role" => $user["role"]
]);
?>