<?php
/*
print_r($_POST);
Array
(
    [nama] => sasdfa
    [password] => fdsafad
    [Submit] => Login
)
*/
if($_POST['submit'] == 'Login'){
	session_name('sirat');
	session_set_cookie_params(2*7*24*60*60);//2 minggu
	session_start();

	//echo "Nama Anda adalah: " . $_POST['nama'];
	//echo "Password Anda adalah: ". $_POST['password'];
	//todo: query ke database, nanti kalau username dan passwordnya sama, boleh lah di isi id nya
	include('koneksi.php');
	$sql="SELECT * FROM user WHERE nama='". $_POST['nama']."' AND password='". $_POST['password']."'";

	$qry = mysql_query($sql,$koneksi)
		  or die ("SQL Error: ".mysql_error());
	/*
	Nama Anda adalah: ikePassword Anda adalah: ganteng
			print_r($qry);
	Resource id #4

			print_r($data);
	Array
	(
		[0] => 1
		[kd_user] => 1
		[1] => ike
		[nama] => ike
		[2] => ganteng
		[password] => ganteng
	)
	*/
	while($data=mysql_fetch_array($qry)) {
		if($data['kd_user']!=''){
			$_SESSION['id']=$data['kd_user'];
			
			
			
			//jika ID nya 1, masuk admin
			if($data['kd_user']=='1')
				header('Location: ../surat_masuk.php'); //header — Send a raw HTTP header
				$_SESSION['id']=$data['kd_user'];
				
	}
	{
			//jika ID nya 2, masuk sekretaris
			if($data['kd_user']=='2')
				header('Location: ../surat_masuk.php');
				$_SESSION['id']=$data['kd_user'];
	}
		{
			//jika ID nya 3, masuk KEPALA	
			if($data['kd_user']=='3')
				header('Location: ../surat_masuk.php');
				$_SESSION['id']=$data['kd_user'];
		}
	{	
			//jika ID nya 4, masuk pegawai	
			if($data['kd_user']=='4')
				header('Location: ../surat_keluar.php');
				$_SESSION['id']=$data['kd_user'];
		}
	{
			//jika ID nya 5, masuk pegawai	
			if($data['kd_user']=='5')
				header('Location: ../surat_keluar.php');
				$_SESSION['id']=$data['kd_user'];
		}
		
	}
}
?>

<html>
<head>
<body>
<img src="user/loggin.jpg">
<h1>
<center>

Login ke Sistem
</h1>
<center>
<form method="POST" action="<?=$PHP_SELF?>"> 
nama 	 : <input type="text" name="nama" size="30"><br><br>
Password : <input type="password" name="password" size="30">
<br><br>
<input type="submit" value="Login" name="submit">
<input type="reset" value="Reset" name="Reset">
</form>
</center>
			
</form>
</body>
</html>