<?php

include('db.php');

$action = $_GET['action'];

$username = $con->real_escape_string($_GET['username']);
$password = $con->real_escape_string(md5(md5(md5($_GET['password']))));
$hwid = $con->real_escape_string($_GET['hwid']);
$logged = false;

if(!$action)
{
    echo "Error";
}
else
{
    if($action == "ur unique register command, you can make another handler that will just register users")
    {
        if($query = $con->query("INSERT INTO users (username,password) VALUES ('$username','$password')"))
        {
            echo "1";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "login3")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            echo "1";
        }
        elseif ($cnt == 0)
        {
            echo "0";
        }
        elseif($cnt == 2)
        {
            echo "2";
        }
        elseif ($cnt == 3)
        {
            echo "3";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "hwid")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            echo "1";
        }
        elseif ($cnt == 0)
        {
            echo "0";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "dl")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            $logged = true;
        }
        elseif ($cnt == 0)
        {
            $logged = false;
        }
        else
        {
            $logged = false;
        }
        if ($logged)
        {
            $filename = "ur dll download adress";
            $mimetype = "mime/type";
            header("Content-Type: ".$mimetype );
            echo readfile($filename);
        }
    }
    else if($action == "getrank")
    {
        echo "something";
        $query = $con->query("SELECT rank FROM users3 WHERE username = '$username'");
        $result = $con->query("SELECT rank FROM users3 WHERE username = '$username'");
        echo $result->fetch_object()->memTotal;

    }

}

?>