<?PHP

function encryptStringArray ($stringArray, $key = "Your secret salt thingie") {
 $s = strtr(base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, md5($key), serialize($stringArray), MCRYPT_MODE_CBC, md5(md5($key)))), '+/=', '-_,');
 return $s;
}

function decryptStringArray ($stringArray, $key = "Your secret salt thingie") {
 $s = unserialize(rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, md5($key), base64_decode(strtr($stringArray, '-_,', '+/=')), MCRYPT_MODE_CBC, md5(md5($key))), "\0"));
 return $s;
}

$user = $_POST['user'];
$pass = $_POST['password'];

$con = mysqli_connect("fdb17.awardspace.net","2325522_bluered","stefankrol1", "2325522_bluered") or ("Cannot connect!"  . mysql_error());
if (!$con)
    die('Could not connect: ' . mysql_error());

mysqli_select_db($con, "2325522_bluered") or die ("could not load the database" . mysql_error());


$check = mysqli_query($con, "SELECT * FROM Users WHERE user='".$user."'");
if (!$check)
{
    die ("A user with this name does not exist! \n");
}
else
{
    while($row = mysqli_fetch_assoc($check))
        {
        if ($pass == decryptStringArray($row['password']))
            die("login-SUCCESS");
        else
            die("Password is incorrect");
    }
}

?>