2025-12-16 01:20:04 +07:00

82 lines
2.7 KiB
PHP

<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);
include 'db.php';
session_start();
$err = '';
$username_input = '';
if (isset($_POST['login'])) {
$username_input = trim($_POST['username'] ?? '');
$pass = $_POST['password'] ?? '';
if ($username_input === '' || $pass === '') {
$err = "Username dan password harus diisi.";
} else {
// 1. Ambil data user berdasarkan username
// Menggunakan Prepared Statement MySQLi
$stmt = mysqli_prepare($conn, "SELECT id, username, password FROM users WHERE username = ?");
mysqli_stmt_bind_param($stmt, "s", $username_input);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
$user_data = mysqli_fetch_assoc($result);
// 2. Verifikasi Password
if ($user_data && password_verify($pass, $user_data['password'])) {
session_regenerate_id(true);
$_SESSION['user_id'] = $user_data['id'];
$_SESSION['username'] = $user_data['username'];
$_SESSION['login'] = true;
header("Location: sudoku.php");
exit();
} else {
$err = "Username atau password salah.";
}
mysqli_stmt_close($stmt);
}
}
?>
<html>
<head>
<title>Login</title>
<style>
body { font-family: Arial; background:aliceblue; display:flex; height:100vh; justify-content:center; align-items:center; margin:0; }
.card { width:350px; background:white; padding:20px; border-radius:10px; box-shadow:0 6px 20px rgba(0,0,0,0.1); }
.input { width:100%; padding:10px; margin:8px 0; border:1px solid lightgray; border-radius:8px; box-sizing: border-box; }
.btn { width:100%; padding:12px; background:dodgerblue; color:white; border:none; border-radius:8px; cursor:pointer; }
.btn:hover { background:mediumblue; }
.err { color:firebrick; margin-bottom:10px; text-align:center; background: mistyrose; padding: 5px; border-radius: 5px;}
.link { text-align:center; margin-top:10px; }
a { text-decoration: none; color: dodgerblue; }
</style>
</head>
<body>
<div class="card">
<h2 style="text-align: center">Login</h2>
<?php if ($err): ?>
<div class="err"><?= htmlspecialchars($err) ?></div>
<?php endif; ?>
<form method="POST" action="login.php">
<input class="input" type="text" name="username" placeholder="Masukkan Username" value="<?= htmlspecialchars($username_input) ?>" required>
<input class="input" type="password" name="password" placeholder="Masukkan Password" required>
<button class="btn" type="submit" name="login">Masuk</button>
</form>
<div class="link">
Belum punya akun? <a href="register.php">Daftar</a>
</div>
</div>
</body>
</html>