<?php
include "../config/koneksi.php";
//enkrip password
$pass=md5($_POST[tpass]);
$id=$_POST[tuser];
 
if(empty($id) || (empty($pass))){  
echo "<center><strong>Data Yang Anda Masukan Belum Lengkap</strong><br/>";
echo "<strong><a href=../index.php>Ulangi</a></strong></center>";
 
}
else{
$mlebu=mysql_query("SELECT * FROM tb_siswa WHERE nis='$id' AND password='$pass'");
$ketemu=mysql_num_rows($mlebu);
/*
if($_POST[combo]=="GURU")
{
$q=mysql_query("select * FROM tb_guru");
....
}else{
$q=mysql_query("SELECT * FROM SISWA");
...
}
*/
// Apabila username dan password ditemukan
if ($ketemu > 0){
  $r=mysql_fetch_array($mlebu);
  session_start();
  session_register("nisuser");
  session_register("passuser");
  session_register("pic");
  session_register("namauser");
  session_register("sp");
  
  $_SESSION[nisuser] = $r[nis];
  $_SESSION[passuser] = $r[password];
  $_SESSION[pic]=$r[foto_siswa];  
  $_SESSION[namauser]=$r[nama_siswa];
  $_SESSION[sp]=0;
  header('location:../index.php'); 
  }
else
{
  $mlebu=mysql_query("SELECT * FROM tb_guru WHERE nip='$id' AND password='$pass'");
  $ketemu=mysql_num_rows($mlebu);
  if($ketemu>0)
  {
  $r=mysql_fetch_array($mlebu);
  $sp = '1'; 
  session_start();
  session_register("nisuser");
  session_register("passuser");
  session_register("pic");
  session_register("namauser");
  session_register("userguru");
  session_register("sp");
  
  $_SESSION[nisuser] = $r[nip];
  $_SESSION[passuser] = $r[password];
  $_SESSION[pic]=$r[foto_guru];  
  $_SESSION[namauser]=$r[nama_lengkap];
  $_SESSION[userguru]=$r['username'];
  $_SESSION[sp]=$sp;
 
  header('location:../index.php');
	}else{
  
  echo "<center>Login gagal! username & password tidak benar<br>";
  echo "<b>SILAHKAN ULANGI LAGI</b></a></center>";
 echo "<meta http-equiv=refresh content=2;url=../index.php>";
	}
	}
}
 
?>