SnakeGame/Web/index.php

<?php
if(!isset($_POST['client']) || $_POST['client']=="")
{
	echo "Welcome!<br>
	<a>Project home</a>";
	die();
}
else
{
	//echo "Client data";
	$conn = mysqli_connect("mysql.hostinger.hu", "u821146919_games", "SLp7q9m60J", "u821146919_games");
	if($_POST['client']=="cheesecrescent")
	{ //GameList
		$res=mysqli_query($conn, "SELECT * FROM games");
		while($row=mysqli_fetch_array($res))
		{
			$namecount=count(explode(',', $row['playernames']));
			if($namecount==0 || $row['startdate']<time()-60*60*1000)
			{
				mysqli_query($conn, "DELETE FROM games
				WHERE name='".$row['name']."'
				AND ownername='".$row['ownername']."'
				AND maxplayers='".$row['maxplayers']."'
				AND playernames='".$row['playernames']."'
				AND startdate='".$row['startdate']."'
				AND ip='".$row['ip']."'
				") or die(mysqli_error($conn));
			}
			else
			{
				echo $row['name']."|".$row['ownername']."|".$row['maxplayers']."|".$namecount."|".$row['playernames']."|".$row['ip']."|";
			}
		}
	}
	else
	{
		if($_POST['name']=="" || $_POST['maxplayers']=="" || $_POST['client']=="" || $_POST['ip']=="")
			die("A field is or more fields are empty!");
		mysqli_query($conn, "INSERT INTO games
		(
		name, maxplayers, playernames, ownername, startdate, ip
		) VALUES (
		'".$_POST['name']."', '".$_POST['maxplayers']."', '".$_POST['client']."', '".$_POST['client']."', '".time()."', '".$_POST['ip']."'
		)") or die(mysqli_error($conn));
		echo "OK";
	}
}
//WebPass: vhwfsQOv9E
//fötöpö: (...sznpadmin) VKiSh7i1og

?>