<?php
include("database.php");
session_start();
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
  if(isset($_SESSION["Username"]))
  {
    $user = $_SESSION["Username"];
    $pass = $_SESSION["Password"];
  }
  else
  {
    $user = $_POST["User"];
    $pass = $_POST["Password"];
    $_SESSION['Username'] = $user;
    $_SESSION['Password'] = $pass;
    $escuser = mysql_real_escape_string($user);
    $escpass = mysql_real_escape_string($pass);
  }
  $query = "SELECT * FROM playerinfo WHERE user = '$escuser'";
  $result = mysql_query($query);
  $username_exist = mysql_num_rows($result);
  if($username_exist == 0)
  {
    echo('That username does not exist');
    echo '<a href="index.php"">Go back</a>';
    unset($_SESSION['Username']);
    unset($_SESSION['Password']);
    die;
  }
  $row = mysql_fetch_row($result);
  if($row[1] !== $escpass)
  {
    echo('Wrong password!');
    echo '<a href="index.php"">Go back</a>';
    unset($_SESSION['Username']);
    unset($_SESSION['Password']);
  }
  $str = '<b><font size="4" color="#000080"> Welcome to the control panel! </font></b>';
  echo $str;
  echo "<table>";
  echo "
  <tr>
  <td>Username:</td>
  <td>$row[0]</td>
  </tr>";
  echo "
  <tr>
  <td>Kills:</td>
  <td>$row[2]</td>
  </tr>";
  echo "
  <tr>
  <td>Deaths:</td>
  <td>$row[3]</td>
  </tr>";
  echo "
  <tr>
  <td>Score:</td>
  <td>$row[4]</td>
  </tr>";
    echo "
  <tr>
  <td>Money:</td>
  <td> $$row[5]</td>
  </tr>";
  echo "</table>";
  echo '<a href="NewPassword.php"">New Password</a>';
  echo '<p><a href="Stats.php"">Look a players stats up</a></p>'
?>