user-api

<?php

    require 'config.php';

    $mysqli = new MySQLi($mysql['host'],$mysql['user'],$mysql['pass'],$mysql['db']) or die($mysqli->error);

    $user = (isset($_GET['user'])) ? $_GET['user'] : 'iExit';

    $user_row = $mysqli->query("SELECT * FROM users WHERE username = '".$mysqli->real_escape_string($user)."'");
    $user = $user_row->fetch_assoc();

    $allowed = array(
        'look' => true
    );

    $array = array();
    foreach($user as $index => $val) {
        if(isset($allowed[$index])) {
            $array[$index] = $val;
        }
    }

    header('Content-type: text/javascript');

    echo json_encode($array);