简单的登陆接口

<?php

$username = $_REQUEST['username'];
$pwd = $_REQUEST['pwd'];
$action = $_REQUEST['action'];
if($action=='login'){
    $re = loginapi($username,$pwd);
    var_dump($re);
}elseif($action=='register'){
    echo 1;
}


function loginapi($username,$pwd){

    $arr = array();
    if(empty($username)){
        $arr['code'] = '10001';
        $arr['content'] = 'username is empty';
        exit(json_encode($arr));
    }
    if(empty($pwd)){
        $arr['code'] = '10002';
        $arr['content'] = 'pwd is empty';
        exit(json_encode($arr));
    }
    //还要考虑防sql 注入；
    $pdo = dbconnect('iwebshop','root','root');
    $sql = 'select * from iwebshop_user where username=?';
    $stmt = $pdo->prepare($sql);
    $re = $stmt->execute(array($username));
    //var_dump($re);die;
    //$re = $pdo->query($sql);
    //echo $sql;die;
    if($re){
        $res = $stmt->fetch(PDO::FETCH_ASSOC);
        if($res['password']==$pwd){
            $arr['code'] = '10000';
            $public_key = 'aabb123';
            $str = base64_encode($username.$public_key.$pwd);
            $array = array('status'=>'success','appkey'=>$str,'content'=>'login success');
            $arr['data'] = $array;
            exit(json_encode($arr));
        }else{
            $arr['code'] = '10004';
            $arr['content'] = 'pwd is error';
            exit(json_encode($arr));
        }
    }else{
        $arr['code'] = '10003';
        $arr['content'] = 'username undefind';
        exit(json_encode($arr));
    }
}
function dbconnect($dbname,$username,$pwd){
   // echo $username;die;
    $dsn = 'mysql:host=localhost;dbname='.$dbname;
    $pdo = new PDO($dsn,$username,$pwd);
    $pdo->query('set names utf8');
    return $pdo;
}
?>