invisio v2.0

<?php
session_start();

require("../../config/main_function.php");

$secure = "cAh3DrJACzw4RbU";

$connection = connectDB($secure);

if ($connection) {

// หา KEY ///

$sql_key = "SELECT * FROM tbl_system_setting WHERE setting_id = '1';";
	$rs_key = mysqli_query($connection, $sql_key) or die($connection->error);
	$row_key = mysqli_fetch_array($rs_key);

$secure_key = $row_key['secure_text'];

$username = mysqli_real_escape_string($connection, $_POST['username']);
	$password = mysqli_real_escape_string($connection, md5($_POST['password']));

if (strlen($username) > 0 && strlen($password) > 0) {

$sql = "SELECT * FROM tbl_member WHERE username = '$username';";

$rs = mysqli_query($connection, $sql) or die($connection->error);
		$check = mysqli_num_rows($rs);
		$row = mysqli_fetch_array($rs);

$secure_text = $row['secure_text'];
		$secure_pointer = $row['secure_pointer'];
		$mypassword = stringInsert($password, $secure_text, $secure_pointer);

if ($mypassword == $row['password']) {
			$member_name = bigsara_decode($row['member_name'], $secure_key);

$member_level = $row['member_level'];
			$register_type = $row['register_type'];
			$register_level = $row['register_level'];
			$username = $row['username'];

$key = randomCode(10); // กุญแจ /
			$pointer = rand(0, 9); //5

////////////////////////////////////////////////////
			$update_time = date('Y-m-d H:i:s');
			$sql_login = "UPDATE tbl_member SET login_status ='1', update_time = '$update_time' WHERE  username = '$username'";
			$res_login = mysqli_query($connection, $sql_login);

// เอา Member_id เข้า Encode ก่อน

$step_1 = bigsara_encode($row['member_id'], $key, $pointer); //Login Code

// เอา Login Code ต่อคำกับ $step 1

$login_code = $step_1 . "." . $key;

$arr['username'] = $username;

$arr['login_code'] = $login_code;

$arr['member_name'] = $member_name;

$arr['member_level'] = $member_level;

$arr['register_type'] = $register_type;

$arr['register_level'] = $register_level;

$arr['verify'] = $row['identificate_datetime'];

$_SESSION['login_code'] = $login_code;

$result = 1;
		} else {

$result = 2;
		}
	} else {

$result = 3;
	}
} else {

$result = 0;
}

$arr['result'] = $result;

echo json_encode($arr);