<?php

if( isset( $_GET[ 'Login' ] ) ) {
	// Get username
	$user = $_GET[ 'username' ];


	// Get password
	$pass = $_GET[ 'password' ];
	$key = 'addddaf';

	//$nonce = '00002';
	$pass = md5( $pass );

	// Check the database
	//$query  = "SELECT * FROM `popeye` WHERE user = '$username' AND password = '$passwork';";
	//$result = mysqli_query($GLOBALS["___mysqli_ston"],  $query ) or die( '<pre>' . ((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)) . '</pre>' );

	if($user.$key == $pass) {
		$html .=  "<p>Welcome Master :</p>";
		$html .=  "<p>flag : XXXXXXXXXXXX";
	}
	else {

		$html .= " View source code here :
		" . dvwaExternalLinkUrlGet( 'https://en.wikipedia.org/wiki/MD5' ) . "

		<p>noob</p>";

	}

	/*
	if( $result && mysqli_num_rows( $result ) == 1 ) {
		// Get users details
		$row    = mysqli_fetch_assoc( $result );
		//$avatar = $row["avatar"];

		// Login successful
		$html .= "<p>Welcome to the password protected area {$user}</p>";
		//$html .= "<img src=\"{$avatar}\" />";
	}
	else {
		// Login failed
		$html .= "<pre><br />Username and/or password incorrect.</pre>";
	}
	*/

	((is_null($___mysqli_res = mysqli_close($GLOBALS["___mysqli_ston"]))) ? false : $___mysqli_res);
}

?>