<?php
    $username = $_GET['username'];
    $password = $_GET['password'];
    $mysqli = new mysqli('localhost', 'root', 'no', 'shippr');

    // check login

    $loggedIn = 1;
    if ($loggedIn) {
        if ($mysqli->prepare("INSERT INTO shipping VALUES (0, '".$_POST['trackingnumber']."', '".$_POST['shipper']."', '".$_GET['username']."', 'no')")) {
            echo "yes";
        }
    }
    $stmt->close();
    $mysqli->close();
?>