Files
webgis-poverty-pontianak/api/login.php
T

56 lines
1.7 KiB
PHP

<?php
header('Content-Type: application/json; charset=UTF-8');
require_once 'db_connect.php';
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
$data = json_decode(file_get_contents('php://input'), true);
$username = trim($data['username'] ?? '');
$password = trim($data['password'] ?? '');
if (empty($username) || empty($password)) {
echo json_encode(['status' => 'error', 'message' => 'Username dan password wajib diisi']);
exit;
}
// Cari user di database
$sql = "SELECT u.*, ri.nama as nama_ibadah
FROM users u
LEFT JOIN rumah_ibadah ri ON u.ibadah_id = ri.id
WHERE u.username = ?";
$stmt = $conn->prepare($sql);
$stmt->bind_param('s', $username);
$stmt->execute();
$result = $stmt->get_result();
if ($result->num_rows === 1) {
$user = $result->fetch_assoc();
// Verifikasi password
if (password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username'];
$_SESSION['role'] = $user['role'];
$_SESSION['ibadah_id'] = $user['ibadah_id'];
$_SESSION['nama_ibadah'] = $user['nama_ibadah'];
echo json_encode([
'status' => 'success',
'message' => 'Login berhasil',
'data' => [
'id' => intval($user['id']),
'username' => $user['username'],
'role' => $user['role'],
'ibadah_id' => $user['ibadah_id'] ? intval($user['ibadah_id']) : null,
'nama_ibadah' => $user['nama_ibadah']
]
]);
exit;
}
}
echo json_encode(['status' => 'error', 'message' => 'Username atau password salah']);
$conn->close();
?>