IsBanned.php fr

<?php

    $server = "";
    $server_username = "";
    $server_password = "";
    $server_dbname = "";

    $conn = new mysqli_connect($server, $server_username, $server_password, $server_dbname);

    $usernamePost = mysqli_real_escape_string($conn, $_POST['usernamePost']);
    $passwordPost = mysqli_real_escape_string($conn, $_POST['passwordPost']);
    $hashPost = mysqli_real_escape_string($conn, $_POST['hashPost']);

    $kys = "'".$usernamePost."','".$passwordPost."','".$hashPost."'";
    $hash = hash("sha512", $kys);

    if ($hashPost == $hash)
    {
        $sql1 = "SELECT * FROM users WHERE username='".$usernamePost."'";
        $result1 = mysqli_query($conn, $sql1);
        if (mysqli_num_rows($result1) > 0)
        {
            while($row = mysqli_fetch_assoc($result1))
            {
                if ($passwordPost == $row['passwordPost'])
                {
                    if ($row['isBanned'] == 0)
                    {
                        echo "-1";
                    } else
                    {
                        echo "1";
                    }
                } else
                {
                    echo "-1";
                }
            }
        } else
        {
            echo "Account Not Found!";
        }
    }
?>