<?php

//Connect to Database Server
$link = @mysql_connect($hostname, $username, $password);
if(is_resource($link))
{
        if(mysql_select_db($dbname, $link) === true)
        {
                $user = mysql_real_escape_string($_GET['user']);
                $password = $mysql_real_escape_string($_GET['pass']);
                $pass = md5($password);
                $sql ="SELECT user_posts FROM phpbb_users WHERE username='".$user."' AND pass='".$pass."'";
                $result = mysql_query($sql);
                if(is_resource($result))
                {
                        if(mysql_num_rows($result) > 0)
                        {
                                while($row=mysql_fetch_array($result))
                                {
                                        echo $row['postcount'];
                                }
                        }
                        else
                        {
                                echo 'no results found';
                        }
                }
                else
                {
                        echo 'invalid resource';
                }
        else
        {
                echo 'unable to select database';
        }
}
else
{
        echo 'unable to connect to database';
}

mysql_close();
?>