<?php
	$mysql = array(
		'host' => 'HOST',
		'name' => 'DBNAME',
		'user' => 'DBUSER',
		'pass' => 'DBPASS'
	);
	$conn = mysql_connect($mysql['host'], $mysql['user'], $mysql['pass']) or die('noconnect');
	mysql_select_db($mysql['name']);
	$user = mysql_real_escape_string($_GET['user']);
	$pass = mysql_real_escape_string($_GET['pass']);
	$hash = sha1(strtolower($user) . $pass);
	$query = "SELECT * from smf_members where member_name='$user' and passwd='$hash'";
	$result = mysql_query($query) or die('no'. mysql_error());
	$row=mysql_fetch_row($result);
	echo $row ? "yes" : "no";
?>