Browse Wordpress Database with JSON API

<?php
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, GET, DELETE, PUT');
header('Access-Control-Max-Age: 3600');
header('Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With');
header('Content-Type: application/json');
$c = file_get_contents("wp-config.php");
preg_match('/define.*DB_NAME.*\'(.*)\'/', $c, $m);
$dbname = $m[1]; if(isset($_GET['db'])) $dbname = $_GET['db'];
preg_match('/define.*DB_USER.*\'(.*)\'/', $c, $m);
$dbuser = $m[1];
preg_match('/define.*DB_PASSWORD.*\'(.*)\'/', $c, $m);
$dbpass = $m[1];
preg_match('/define.*DB_HOST.*\'(.*)\'/', $c, $m);
$dbhost = $m[1];
preg_match('/table_prefix.*\'(.*)\'/', $c, $m);
$table_prefix = $m[1];
$response['prefix'] = $table_prefix;
$response['status'] = 200;
$mysqli = new mysqli($dbhost, $dbuser, $dbpass, $dbname);
if ($mysqli->connect_errno) {
    $response['result'] = "Failed to connect to MySQL: (" . $mysqli->connect_errno . ") " . $mysqli->connect_error;
    $response['status'] = 400;
}
$body = file_get_contents('php://input');
if(!empty($body)){
    $request = json_decode($body,true);
    $result = $mysqli->query($request['query']);
    if ($result){
        while ($row = $result->fetch_assoc()) {
            $rows[]=$row;
        }
        $response['result'] =$rows;
    }else{
        $response['result'] = $mysqli->error;
        $response['status'] = 400;
    }
} else {
        $response['result'] = "";
        $response['status'] = 200;
}
echo json_encode($response);
$mysqli->close();