<?php
///////////////////////
/// set consts
//////////////////////
$DEBUG_MODE = true;
$USER = "USER";
$PASSWORD = "PASSWORD";
$ERROR_NODB = "COULD NOT CONNECT";
$ERROR_EXISTS = "ID ALREADY EXISTS";



///////////////////////
/// get hardware id and code and validate
//////////////////////
$hwid = $_POST["hwid"];
$code = $_POST["code"];
if ($hwid == "" || $code == "") return;
if (!ctype_alnum($hwid) || !ctype_alnum($hwid)) return;

$hwid = mysql_real_escape_string($hwid);
$code = mysql_real_escape_string($code);



//////////////////////
/// connect to db
//////////////////////
$con = mysql_connect("localhost", $USER, $PASSWORD);
if (!$con) die($ERROR_NODB . " " . mysql_error());



//////////////////////
/// create table if not exists
//////////////////////
mysql_select_db("somesite_users", $con);
$sql = "CREATE TABLE IF NOT EXISTS USERS(HWID varchar(15), CODE varchar(15))";
mysql_query($sql, $con);




//////////////////////
/// show all
//////////////////////
$result = mysql_query("SELECT HWID FROM USERS WHERE HWID = '$hwid'");
while($row = mysql_fetch_array($result)) {
      echo $ERROR_EXISTS;
      return;
}



//////////////////////
/// write the values (if they don't exist)
//////////////////////
mysql_query("INSERT INTO USERS(HWID, CODE) VALUES ('$hwid', '$code')");




if ($DEBUG_MODE) {
//////////////////////
/// show all
//////////////////////
$result = mysql_query("SELECT * FROM USERS");
while($row = mysql_fetch_array($result)) {
  echo $row['HWID'] . " -- " . $row['CODE'];
  echo "<br>";
}
}


mysql_close($con);
?>