MINI

C:/xampp/htdocs/hnj/htdocs/htdocs/.frontend/controller/
files >> C:/xampp/htdocs/hnj/htdocs/htdocs/.frontend/controller/loginback.php
 <?php
if(isset($_POST['act'])){
	if($_POST['act']==='login'){
		try {
			$login = $sambungan->prepare("
			SELECT a.* FROM bet_account a
			WHERE a.username=:inputan AND a.id_account != 0
			");
			$login->bindValue(':inputan', $_POST['email'], PDO::PARAM_STR);
			$login->execute();
			$hlogin= $login->fetch(PDO::FETCH_ASSOC);
			
			if (password_verify($_POST['password'], $hlogin['password'])){
				if($hlogin['blocked']==1){
					$result = array(
						'status'=>'warning',
						'message'=>'Akun anda di blokir',
						'redirect'=>'reload'
					);
					echo json_encode($result);
					exit;					
				}
				
				if($hlogin['active']!=1){
					$result = array(
						'status'=>'warning',
						'message'=>'Akun anda belum aktif',
						'redirect'=>'reload'
					);
					echo json_encode($result);
					exit;					
				}
				
				$_SESSION['AccountId'] = $hlogin['id_account'];
				$_SESSION['KelurahanId'] = $hlogin['id_kelurahan'];
				$_SESSION['AccountUserName'] = $hlogin['username'];
				$_SESSION['AccountName'] = $hlogin['name'];
				$_SESSION['AccountPosition'] = $hlogin['jabatan'];
				$_SESSION['AccountLevel'] = $hlogin['account_level'];
				$_SESSION['AccountFoto'] = $hlogin['foto'];
				$_SESSION['ExpireTime'] = time() + (60 * 30);
				$_SESSION['LastSession'] = md5(md5($_SERVER['REMOTE_ADDR']).time());
								
				$waktu = time();
				
				$chat = $sambungan->prepare("UPDATE bet_account SET lasttime = :lasttime, is_login = 1 WHERE id_account = :id_account");
				$chat->bindValue(':lasttime', time(), PDO::PARAM_STR);
				$chat->bindValue(':id_account',$_SESSION['AccountId'], PDO::PARAM_INT);
				$chat->execute();
				
				$q_modules = $sambungan->prepare("SELECT bm.name_mod FROM bet_access AS ba LEFT OUTER JOIN bet_modules bm ON bm.id_mod = ba.id_mod WHERE ba.id_account = :id_account AND ba.access_mod=1");
				$q_modules->bindValue(':id_account',$_SESSION['AccountId'], PDO::PARAM_INT);
				$q_modules->execute();
				$modules = $q_modules -> fetchAll(PDO::FETCH_COLUMN, 0);
				$_SESSION['AccountModules'] = $modules;
				
				$result = array(
					'status'=>'success',
					'message'=>'Sukses login',
					'redirect'=>'reload'
				);
				echo json_encode($result);
			}
			else{
				$result = array(
					'status'=>'danger',
					'message'=>'Login failed, please try again'
				);
				echo json_encode($result);
				exit;					
			}
		}
		catch(PDOException $e)
		{
			$result = array(
				'status'=>'danger',
				'message'=>$e->getMessage()
			);
		}
	}
	else{
		$result = array(
			'status'=>'danger',
			'message'=>'Unknown action'
		);
		echo json_encode($result);
		exit;					
	}
}
else{
	echo 'Invalid action';
	echo json_encode($result);
	exit;					
}
?>