function createUser($x, $y)
{
include "connection.php";
$sql = "INSERT INTO usertable VALUE( NULL , \"" . $x . "\" , \"" . $y . "\")";
if ($conn->query($sql) === TRUE) {
return loginDB($x, $y);
} else {
echo "Error: " . $sql . "<br>" . $conn->error;
}
$conn->close();
}
include './connection.php';
// include('cookie.php');
$mail = $pass = "";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
$mail = test_input($_POST["mail"]);
$pass = test_input($_POST["pass"]);
}
$conn = 'connection';
$conn = connectionDB();
/* if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
$emailErr = "Invalid email format";
print $emailErr;
}*/
$uid = loginDB($mail, $pass, $conn);
if ($uid != false) {
$cname = '_uid';
$cvalue = $uid;
setcookie($cname, $cvalue, time() + 3600 * 10, "/");
$uks = setRandKey($uid, $conn);
$cname = '_uks';
setcookie($cname, $uks, time() + 3600 * 10, "/");
echo json_encode(array("uid" => $uid, "uks" => $uks));
} else {
echo json_encode(array("uid" => "error", "uks" => "error"));
}
closeDB($conn);
function test_input($data)
{
$data = trim($data);
<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta charset="utf-8">
<!-- Bootstrap -->
<link rel="icon" type="image/png" href="http://ardassets.com/wp-content/themes/assets/images/favicon.png" />
<link href="http://ardassets.com/wp-content/themes/assets/dist/css/bootstrap.min.css" rel="stylesheet" media="screen">
<link rel="stylesheet" href="http://ardassets.com/wp-content/themes/assets/css/swiper.min.css">
<link href="http://ardassets.com/wp-content/themes/assets/dist/css/font-awesome.min.css" rel="stylesheet" media="screen">
<link rel="stylesheet" href="http://ardassets.com/wp-content/themes/assets/css/style.css" type="text/css" />
<meta name='robots' content='noindex,follow' />
<link rel="alternate" type="application/rss+xml" title="ardassets.com » Зээлийн тооцоолуур Comments Feed" href="http://ardassets.com/calculator/feed/" />
<?php
include "function.php";
if (isset($_POST["username"]) && isset($_POST["userpassword"])) {
//low security
$userid = loginDB($_POST['username'], $_POST['userpassword']);
if ($userid != 0) {
session_start();
$_SESSION['userid'] = $userid;
echo "successfully logged in";
unset($_POST["username"]);
unset($_POST["userpassword"]);
//jump to engine
header('Location: engine.php');
} else {
echo "log in failed";
}
}
if (isset($_SESSION['userid'])) {
echo "<br>Already logged in";
} else {
