27 lines
632 B
PHP

<?php
session_start();
include "koneksi.php";
$username = $_POST['username'];
$password = $_POST['password'];
$enc = md5($password);
$stmt = mysqli_prepare($conn, "SELECT * FROM user WHERE username=? AND password=?");
mysqli_stmt_bind_param($stmt, "ss", $username, $enc);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
if ($row = mysqli_fetch_assoc($result)) {
$_SESSION['username'] = $row['username'];
$_SESSION['email'] = $row['email'];
header("Location: mainboard.html");
exit;
} else {
echo "<script>alert('Username atau password salah!'); window.history.back();</script>";
}
?>