prepare("SELECT * FROM users WHERE username = ? AND password = ?"); $stmt->bind_param("ss", $username, $password); $stmt->execute(); $result = $stmt->get_result(); if ($result->num_rows > 0) { $_SESSION['user'] = $result->fetch_assoc(); header("Location: dashboard.php"); exit(); } else { $error = "Username atau password salah!"; } } ?>