MPOS / php-mpos

    $aPin = explode('$', $strPinHash);

    count($aPin) == 1 ? $pin_hash = $this->getHash($pin, 0) : $pin_hash = $this->getHash($pin, $aPin[1], $aPin[2]);

    $stmt = $this->mysqli->prepare("SELECT pin FROM $this->table WHERE id = ? AND pin = ? LIMIT 1");

    if ($stmt->bind_param('is', $userId, $pin_hash) && $stmt->execute() && $stmt->bind_result($row_pin) && $stmt->fetch()) {

      $stmt->close();

      $this->setUserPinFailed($userId, 0);

      return ($pin_hash === $row_pin);

    }

    $this->log->log('info', $this->getUserName($userId).' incorrect pin');

    $this->incUserPinFailed($userId);

    // Check if this account should be locked

    $this->debug->append("STA " . __METHOD__, 4);

    if (!is_string($key)) return false;

    $stmt = $this->mysqli->prepare("SELECT api_key, id FROM $this->table WHERE api_key = ? LIMIT 1");

    if ($this->checkStmt($stmt) && $stmt->bind_param("s", $key) && $stmt->execute() && $stmt->bind_result($api_key, $id) && $stmt->fetch()) {

      if ($api_key === $key)

        return $id;

    }

    header("HTTP/1.1 401 Unauthorized");

    die('Access denied');

  }