<?
header("Content-type: text/xml");

//My Auth PHP Script which will return some values

$phone 	= $_REQUEST['phone'];
$pin	= $_REQUEST['pin'];

$host = "localhost";
$user = "admin";
$pass = "temppass";
$db = "test";
$tableName = "userData";

$connection = mysql_connect($host, $user, $pass)
			  or die("Could not connect to host.");

$db_selected = mysql_select_db($db, $connection)
			  or die("Could not find database.");

$query=mysql_query("SELECT pin FROM " . $tableName . " WHERE phone = '$phone'");
$query_row=mysql_fetch_array($query);

$userPin = $query_row['pin'];

if($userPin == $pin)
{

//VALID USER
	$userQuery=mysql_query("SELECT * FROM " . $tableName . " WHERE phone = '$phone'");
	$userSQLFetch=mysql_fetch_array($userQuery);

  // XML START
  $xml_output = "<?xml version=\"1.0\"?>";
   $xml_output .= "<" . $tableName . ">";

    $xml_output .= "<status>";
	 $xml_output .= "<valid>";
	  $xml_output .= "1";
	 $xml_output .= "</valid>";
	$xml_output .= "</status>";

	$xml_output .= "<userInfo>\n";
     $xml_output .= "<ID>" . $userSQLFetch['id'] . "</ID>";
	 $xml_output .= "<fName>" . $userSQLFetch['fName'] . "</fName>";
	 $xml_output .= "<lName>" . $userSQLFetch['lName'] . "</lName>";
	 $xml_output .= "<phone>" . $userSQLFetch['phone'] . "</phone>";
	 $xml_output .= "<pin>" . $userSQLFetch['pin'] . "</pin>";
	$xml_output .= " " . "</userInfo>";
   $xml_output .= "</" . $tableName . ">";
   //XML END

	echo $xml_output;
} else
	{
	//INVALID USER

   //XML START
   $xml_output = "<?xml version=\"1.0\"?>";
    $xml_output .= "<" . $tableName . ">";
     $xml_output .= "<status>";
	  $xml_output .= "<valid>";
	   $xml_output .= "0";
	  $xml_output .= "</valid>";
	 $xml_output .= "</status>";
	$xml_output .= "</" . $tableName . ">";
	//XML END
    echo $xml_output;
	}
?>