<?php
@include 'conn.conn';
$GLOBALS['conn'];
$conn=@mysqli_connect($DATAhst,$DATAusr,$DATApwd,$DATAdtb)or die("CONNECTION ERROR");

$content = null;
$content->status = 404;

if(isset($_POST['act']) && $_POST['act'] == 'auth') {
  if($_POST['usr'] == 'admin' && $_POST['pwd'] == 'JohnHolmes') {
    $content->status = 200;
    $content->authToken = md5(date("Y-m-d"));
  } else {
    $content->status = 403;
  }
} else if(isset($_POST['act']) && $_POST['act'] == 'check') {
  if($_POST['token'] == md5(date("Y-m-d"))) {
    $content->status = 200;
    $content->authToken = md5(date("Y-m-d"));
  } else {
    $content->status = 403;
  }
}

header('Access-Control-Allow-Origin: *');
header('Content-Type: application/json');
echo json_encode($content);

?>