<?php
if($_REQUEST['submit'] == 'login')
{
	
	$user = $_REQUEST['user'];
	$pass = $_REQUEST['pass'];
	$IDPC = $_REQUEST['IDPCB'];
	if(isset($user) && isset($pass) && isset($IDPC))
	{
		$conn = mysqli_connect('localhost', 'seocabra_m', 'trinhlam', 'seocabra_m') or die ('DIE');
		$sql = 'SELECT `id`,`post_forum`,`spam_facebook`,`check_keywords`, `IDPC` FROM `users` WHERE `user` = "'.$user.'" AND `password` = "'.$pass.'"';
		$result = mysqli_query($conn, $sql);
		if (!$result){
			die ('Câu truy vấn bị sai');
		}
		$row = mysqli_num_rows($result);
		if($row > 0) 
		{
			if($user == "bongdam")
			{
				$row = mysqli_fetch_assoc($result);
				echo json_encode($row);
			}
			else
			{
				$row = mysqli_fetch_assoc($result);
				if($row['IDPC'] == NULL)
				{
					mysqli_query($conn, "UPDATE `users` SET `IDPC` = '" .$IDPC. "' WHERE `id` = " . $row['id'] . "");
				}
				else 
				{
					if($row['IDPC'] == $IDPC)
						echo json_encode($row);
					else
						echo 'false';
				}
			}
			
		}
		else echo 'false';
		mysqli_free_result($result);
		mysqli_close($conn);
	}
	else
	{
		echo 'false';
	}
}
?>