[ Mini Kiebo ]

Server: Windows NT AKFAR_SERVER 10.0 build 26200 (Windows 10) AMD64 Path: D:/xampp/htdocs/pmb/ [ Home ]
File: ceklogin.php
<?php
session_start();
include'config.php';

function filter($login){
  $anti_inject  = stripslashes(strip_tags(htmlspecialchars($login,ENT_QUOTES)));
  return $anti_inject;
}

$username = filter ($_POST['username']);
$password = filter (md5($_POST['password']));

$antiinject_username = mysqli_real_escape_string($koneksi, $username);
$antiinject_password = mysqli_real_escape_string($koneksi, $password);

if (!ctype_alnum($antiinject_username) OR !ctype_alnum($antiinject_password)){
  include "404.php";
}
else{

if (empty($username)){
  echo "Anda belum mengisikan Username<br />
  	      <a href=admin.php><b>Ulangi Lagi</b>";
}
elseif (empty($password)){
  echo "Anda belum mengisikan Password<br />
  	      <a href=admin.php><b>Ulangi Lagi</b>";
}
else{
 
// menyeleksi data admin dengan username dan password yang sesuai
$data = mysqli_query($koneksi,"select * from admin where username='$username' and password='$password'");
 
// menghitung jumlah data yang ditemukan
$cek = mysqli_num_rows($data);

if($cek > 0){
	$_SESSION['username'] = $username;
	$_SESSION['password'] = "$password";
	header("location:homeadmin.php");
}
else{
    echo"<b>username</b> atau <b>password</b> tidak terdaftar!";
}
}
}
?>