<?php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);
include('boxydb.php');
$eusername = mysqli_real_escape_string($con, htmlspecialchars($_GET['g']));
$epassword = mysqli_real_escape_string($con, htmlspecialchars($_GET['w']));
$ekey = mysqli_real_escape_string($con, htmlspecialchars($_GET['r']));

//DECRYPT USERNAME
exec("./ed.out d $eusername",$dusername);
$username = $dusername[0];
//echo "Decrypted username: ".$username;
// DECRYPT PASSWORD
exec("./ed.out d $epassword",$dpassword);
$password = $dpassword[0];
//echo "<br>Decrypted password: ".$password;
// DECRYPT KEY
exec("./ed.out d $ekey",$dkey);
$key = $dkey[0];
//echo "<br>Decrypted Key: ".$key;

// Check if client [[KEY]] matches server [[KEY]]

//exec('g++ skey.cpp -o skey.out -std=c++11',$result);
//print_r($result);
exec("./skey.out $username",$result);
$skey = $result[0];
//echo "<br>";
//echo("Server key is: ".$skey);
//echo("<br>Client key is: ".$key);
if ($key == $skey) {
  $result = mysqli_query($con, "SELECT * FROM `users` WHERE BINARY `username` = '$username' AND `password` = '$password'") or die(mysqli_error($con));
  $exist = mysqli_num_rows($result);
	if($exist >= 1) {

    exec("./ed.out e GOOD",$final2);
    $final = $final2[0];
    echo $final;
    die();
  }
} else {
  exec("./ed.out e FAIL",$final2);
  $final = $final2[0];
  echo $final;
  die();
}



?>