<?php
if (isset($_COOKIE['MISJA'])) {
    if ($_COOKIE['MISJA']==2137) {
        setcookie("MISJA", "", time()-1);
        echo "<script>console.info('Ok, to było proste. Czas na coś trudniejszego! ;)');
                      console.info('https://mieciu.eu/img/siemanko.tif');</script>";
    }
}
define('IS_AJAX', isset($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest');
if(!IS_AJAX) { include('404.php'); exit(); }
// MySQL connect //
@mysql_connect("###", "###", "###") or die ("Nie można połączyć z bazą danych!");
@mysql_select_db("###") or die ("Wystąpił błąd bazy danych!");
mysql_query("SET NAMES utf8");
// API start //
$q = $_GET["q"];
switch ($q) {
    // login //
    case "login": {
        if (!isset($_POST["login"])) {
            header("Location:login.php");
        }
        $login = $_POST["login"];
        $password = hash("sha256", $_POST["password"]);
        if(mysql_num_rows(mysql_query("SELECT * FROM `###` WHERE `login`='$login'"))==0)
            echo "Użytkownik nie istnieje!";
        else {
            $mysql = mysql_fetch_assoc(mysql_query("SELECT * FROM ### WHERE login='$login'"));
            $mysql_password = $mysql["pass"];
            $mysql_function = $mysql["func"];
            $mysql_id = $mysql["id"];
            $mysql_premium = $mysql["hasPremium"];
            if ($mysql_password == $password) {
                session_start();
                $_SESSION['login'] = $login;
                $_SESSION['func'] = $mysql_function;
                $_SESSION['id'] = $mysql_id;
                $_SESSION['hasPremium'] = $mysql_premium;
                echo "zalogowano";
            } else {
                echo "Złe hasło!";
            }
        }
        break;
    }
    case "video": {
        $post_id = $_POST['id'];
        $mysql_array = mysql_fetch_assoc(mysql_query("SELECT * FROM ### WHERE id='$post_id'"));
        $mysql_views = $mysql_array["count"];
        $mysql_views++;
        mysql_query("UPDATE ### SET count='$mysql_views'");
        break;
    }
    case "getViews": {
        $id = $_POST['id'];
        $videoCounter_array = mysql_fetch_assoc(mysql_query("SELECT * FROM ### WHERE id='$id'"));
        $videoCounter_count = $videoCounter_array["count"];
        echo $videoCounter_count;
        break;
    }
    // undefined query //
    default: {
        return "Error";
    }
}
?>