<?php
/*
print_r($_POST);
Array
(
    [nama] => sasdfa
    [password] => fdsafad
    [Submit] => Login
)
*/
if($_POST['submit'] == 'Login'){
	session_name('sirat');
	session_set_cookie_params(2*7*24*60*60);//2 minggu
	session_start();

	//echo "Nama Anda adalah: " . $_POST['nama'];
	//echo "Password Anda adalah: ". $_POST['password'];
	//todo: query ke database, nanti kalau username dan passwordnya sama, boleh lah di isi id nya
	include('koneksi.php');
	$sql="SELECT * FROM user WHERE nama='". $_POST['nama']."' AND password='". $_POST['password']."'";

	$qry = mysql_query($sql,$koneksi)
		  or die ("SQL Error: ".mysql_error());
/*
Nama Anda adalah: ikePassword Anda adalah: ganteng
		print_r($qry);
Resource id #4

		print_r($data);
Array
(
    [0] => 1
    [kd_user] => 1
    [1] => ike
    [nama] => ike
    [2] => ganteng
    [password] => ganteng
)
*/
		 while($data=mysql_fetch_array($qry)) {
			if($data['kd_user']!=''){
				$_SESSION['id']=$data['kd_user'];		
				header('Location: ../sekretaris');
			}
		}
	
}

?>
<html>
<body bgcolor="red">		
<h1>
<center>
Login ke Sistem

</h1> <center>
<form method="POST" action="<?=$PHP_SELF?>">
nama 	 : <input type="text" name="nama" size="30"> <br><br>
Password : <input type="password" name="password" size="30">
<br><br>
<input type="submit" value="Login" name="submit">
<input type="reset" value="Reset" name="Reset">
<tr>
			
</form>