<?php

header('Access-Control-Allow-Origin: *');
header('Content-Type: application/json');

if(!isset($_POST)) die();
session_start();

$response = [];

$con = mysqli_connect('localhost','root','','test_site');

$username = mysqli_real_escape_string($con, $_POST['username']);
$password = mysqli_real_escape_string($con, $_POST['password']);

$query = "SELECT * FROM `users` WHERE username='$username' AND password='$password'";

$result = mysqli_query($con, $query);

if(mysql_num_rows(result) > 0 ) {
	$response['status'] = 'loggedIn';
	$response['user'] = 'admin';
	$response['useruniqueid'] = md5(uniqid());
	$_SESSION['useruniqueid'] = $response['useruniqueid'];
} else {
	$response['status'] = 'error';
}

echo json_encode($response);