01.<?php
02.require 'connectdb.php';
03.
04.$login_username = mysqli_real_escape_string($dbcon,$_POST['username']);
05.$login_password = mysqli_real_escape_string($dbcon,$_POST['password']);
06.
07. $salt ='tikde78uj4ujuhlaoikiksakeidke';
08. $hash_login_password = hash_hmac('sha256', $login_password,$salt);
09.
10. $sql = "SELECT * FROM tb_login WHERE login_username=? AND login_password=?";
11. $stmt = mysqli_prepare($dbcon, $sql);
12. mysqli_stmt_bind_param($stmt,"ss",$login_username,$hash_login_password);
13. mysqli_execute($stmt);
14. $result_user = mysqli_stmt_get_result($stmt);
15.
16.
17. if ($result_user->num_rows == 1) {
18. session_start();
19. $row_user = mysqli_fetch_array($result_user,MYSQLI_ASSOC);
20. $_SESSION['login_id'] = $row_user['login_id'];
21. if ($row_user['login_status'] == 500){
22. $_SESSION['is_admin'] = 500;
23. header("Location: main.php");
24. } else {
25. $_SESSION['is_member'] = 0;
26. $_SESSION['login_username'] = $row_user['login_username'];
27. header("Location: frm_rnt.php");
28. }
29. if ($row_user['login_status'] == 100){
30. $_SESSION['is_emp'] = 100;
31. header("Location: frm_emp.php");
32. }
33. } else {
34. echo "ผู้ใช้หรือรหัสผ่านไม่ถูกต้อง";
35. }
