LOGIN FILE

<?php
session_start();
if(isset($_SESSION['username'])){
    header('Location:index.php');
}

?>

LOGOUT FILE

<?php
session_start();
unset($_SESSION['username']);
unset($_SESSION['image']);
unset($_SESSION['date']);
    header('Location:login.php');
?>

INDEX FILE

<?php
session_start();
if (!isset($_SESSION['username'])) {
  header('Location:login.php');
  die();
}

?>

IMAGES

 <img src="<?php echo "uploads/". $_SESSION ['image'] ?>

LOGIN API

function login($conn){
    extract($_POST);
    $data = array();
    $array_data = array();
   $query ="call login('$username','$password')";
    $result = $conn->query($query);


    if($result){

        $row = $result->fetch_assoc();

        if(isset($row ['message'])){
            if ($row['message'] == "deny"){
                $data = array("status" => false, "data" => "username or password is incorrect");

            }else {
                $data = array("status" => false, "data" => "username is locked by administrator"); 

            }

        }else{
            foreach($row as $key => $values){
                $_SESSION [$key] = $values;
            }
            $data = array("status" => true, "data" => "success");
        }

    }else{
        $data = array("status" => false, "data"=> $conn->error);

    }

    echo json_encode($data);
}

login js

$("#login").on("submit", function(event){

    event.preventDefault();

    let username = $("#username").val();
    let password = $("#password").val();


    let sendingData ={


      "action": "login",
      "username": username,
      "password": password
  }

  $.ajax({
    method: "POST",
    dataType: "JSON",
    url: "api/login_api.php",
    data : sendingData,

      success : function(data){
          let status= data.status;
          let response= data.data;


          if(status){

            window.location.href = "index.php"
            console.log("welcome")
  
          }else{
            console.log("unsuccess login")

            displaymessagee("error", response);
          }

      },
      error: function(data){

      }

  })
    });

PROCTURE

BEGIN

if exists( select * from user where username = _username and password = md5(_password))then
if exists( select * from user where username = _username and status = 'active')then

select * from user where username = _username ;
else

select 'locked 'message;

end if;

else
select 'deny 'message;
end if;
END

total user

function get_total_user($conn){
    extract($_POST);
    $data = array();
    $array_data = array();
   $query ="select count(user_id) as user  from user";
    $result = $conn->query($query);


    if($result){
        $row = $result->fetch_assoc();

        $data = array("status" => true, "data" => $row);


    }else{
        $data = array("status" => false, "data"=> $conn->error);

    }

    echo json_encode($data);
}

total user js

function totaluser(){

  let sendingData ={
    "action": "get_total_user",
}

$.ajax({
  method: "POST",
  dataType: "JSON",
  url: "api/user_api.php",
  data : sendingData,

    success : function(data){
        let status= data.status;
        let response= data.data;


        if(status){

            document.querySelector("#totaluser").innerText = response['user']

        }else{
          displaymessagee("error", response);
        }

    },
    error: function(data){

    }

})
}