MINI

files >> C:/xampp/htdocs/vot/login.php
 <!-- ==================== LOGIN.PHP ==================== -->
<?php
session_start();
include "config.php";

if(isset($_SESSION['admin_login'])){
    header("Location: admin_pemilih.php");
    exit;
}

$error = "";
if(isset($_POST['login'])){
    $user = $_POST['username'];
    $pass = $_POST['password'];

    $stmt = $conn->prepare("SELECT * FROM admin WHERE username=? LIMIT 1");
    $stmt->bind_param("s", $user);
    $stmt->execute();
    $result = $stmt->get_result();

    if($result->num_rows === 1){
        $data = $result->fetch_assoc();
        if(password_verify($pass, $data['password'])){
            $_SESSION['admin_login'] = $data['username'];
            header("Location: admin_pemilih.php");
            exit;
        } else { $error = "Password salah!"; }
    } else { $error = "Username tidak ditemukan!"; }
}
?>
<!DOCTYPE html>
<html><head><meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css"></head>
<body class="bg-light d-flex justify-content-center align-items-center" style="height:100vh;">
<div class="card shadow p-4" style="width:360px; border-radius:15px;">
<h4 class="text-center mb-3">🔐 Login Admin</h4>
<?php if($error): ?><div class="alert alert-danger"><?= $error ?></div><?php endif; ?>
<form method="POST">
<div class="mb-3"><label>Username</label><input type="text" name="username" class="form-control" required></div>
<div class="mb-3"><label>Password</label><input type="password" name="password" class="form-control" required></div>
<button class="btn btn-primary w-100" name="login">LOGIN</button>
</form></div></body></html>


<!-- ==================== LOGOUT.PHP ==================== -->
<?php
session_start();
session_destroy();
header("Location: login.php");
exit;
?>


<!-- ==================== PROTECT.PHP (Include di setiap halaman admin) ==================== -->
<?php
session_start();
if(!isset($_SESSION['admin_login'])){
    header("Location: login.php");
    exit;
}
?>


<!-- ==================== ADMIN_PEMILIH.PHP (Contoh halaman yang dilindungi) ==================== -->
<?php
include "protect.php";   // WAJIB
include "config.php";

// Isi halaman admin Anda di sini (sudah otomatis aman)
?>
<!DOCTYPE html>
<html><head><meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css"></head>
<body class="bg-light">
<div class="container py-4">
<h3>Dashboard Admin</h3>
<a href="logout.php" class="btn btn-danger">Logout</a>
<hr>
<!-- lanjutkan isi halaman admin -->
</div></body></html>