<?php
$dbsettings = Array
(
"server"     => "localhost", // MySQL server name.
"user"       => "phost185604", // MySQL username.
"pass"       => "1994schuleist", // MySQL password.
"name"       => "phost185604", // MySQL database name.
);

$command = $_POST["c"];
if(empty($command))
{
    $command = 0;
}
switch($command)
{
    case 0:
        if(isset($_POST["username"]) && isset($_POST["password"]))
        {
            $username = mysql_escape_string($_POST["username"]);
            $password = mysql_escape_string($_POST["password"]);
            checkLogin($username, $password);
        }
        else
        {
            echo "false(No data)";
        }
        break;
    case 1:
        showIds();
        break;
    case 2:
        if(isset($_POST["ticket"]))
        {
            $id = mysql_escape_string($_POST["ticket"]);
            showTicketData($id);
        }
        break;
}

function showTicketData($id)
{
    $values = doQuery("SELECT * FROM `character_ticket` WHERE `ticket_id` = '".$id."';");
    while($id = mysql_fetch_array($values))
    {
        echo json_encode($id);
    }
}

function showIds()
{
    $ids = doQuery("SELECT `ticket_id` FROM `character_ticket`;");
    while($id = mysql_fetch_array($ids))
    {
        echo $id[0]."<br>";
    }
}

function checkLogin($username, $password) //$password = SHA1(CONCAT(UPPER(`username`), ':', UPPER(<pass>)));
{
    $data = doQuery("SELECT `sha_pass_hash` FROM `account` WHERE `username` = '".$username."';", true);
    if($data[0] == $password)
    {
        echo json_encode(true);
    }
    else
    {
        echo json_encode(false);
    }
}

function doquery($query, $fetch = false)
{
    global $link,$dbsettings;

    if(!$link)
    {
        $link = mysql_connect($dbsettings["server"], $dbsettings["user"], $dbsettings["pass"]) or die(mysql_error());
        mysql_select_db($dbsettings["name"]) or die(mysql_error());
        echo mysql_error();
    }
    $sqlquery   = mysql_query($query) or die(mysql_error());

    if($fetch)
        return mysql_fetch_array($sqlquery);
    else
        return $sqlquery;
}

?>