<?php 
        $db = mysql_connect('***.***.ru', '***', '***') or die('Could not connect: ' . mysql_error()); 
        mysql_select_db('flyingwizard614') or die('Could not select database');
 
        // Strings must be escaped to prevent SQL injection attack. 
        $name = mysql_real_escape_string($_GET['name'], $db); 
        $score = mysql_real_escape_string($_GET['score'], $db); 
        $hash = $_GET['hash']; 
 
        $secretKey="mySecretKey"; # Change this value to match the value stored in the client javascript below 

        $real_hash = md5($name . $score . $secretKey); 

     echo $secretKey;
        if($real_hash == $hash) { 
            // Send variables for the MySQL database class. 
             



//if ($sql==1)
//{


 $res= mysql_query("SELECT `name` FROM `scores` WHERE (`name`='$name')");
//$res = mysql_query ("SELECT * FROM `scores` WHERE `name`='$name'");

   echo $name;
     echo $secretKey;
        if (mysql_num_rows($res) > 0)
        {
          
            $query = "UPDATE scores SET score='$score'
WHERE name='$name' ";

        }
else
{
            
$query = "insert into scores values (NULL, '$name', '$score');"; 

            
}




            
            $result = mysql_query($query) or die('Query failed: ' . mysql_error()); 



        } 
?>

$ros= mysql_query("SELECT `id` FROM `scores` WHERE `name`='$name'");
$row = mysql_fetch_array($ros);

echo "blin";
echo $row;

$name="anonim12";
$ros= mysql_query("SELECT `id` FROM `scores` WHERE `name`='$name'");
$row = mysql_fetch_array($ros);

echo "blin";
echo $row;

$name = mysql_real_escape_string($_GET['name'], $db); 
        $score = mysql_real_escape_string($_GET['score'], $db); 
        $hash = $_GET['hash']; 
 
        $secretKey="mySecretKey"; # Change this value to match the value stored in the client javascript below 

        $real_hash = md5($name . $score . $secretKey);