e-counting

?<?php

include_once("db_tools.php");

include_once("../tools.php");

include_once("check_tools.php");

$_POST = filterParameters($_POST);

// ???????????? ??????? ?????????? ----------------

$rows = array();

$success = "false";

$bValid = true;

$message = "";

// ??????? POST ?????????? ----------------

if ((!isset($_POST['candidateCode'])) || (!is_numeric($_POST['candidateCode']))) {

        $bValid = false;

        $message = "ERROR: paremeter candidateCode is missing or is not numeric";

}

if ($bValid) {

        $SQL =  sprintf("SELECT * FROM candidate WHERE CAN_Code = %d",$_POST['candidateCode']);

        $conn = db_connect();

        $rs = mysql_query($SQL, $conn) or die(mysql_error());

        $row = mysql_fetch_assoc($rs);

        $myrow["candidateCode"] = $row["CAN_Code"];

        $myrow["firstName"] = $row["CAN_FirstName"];

        $myrow["lastName"] = $row["CAN_LastName"];

         $myrow["fatherName"] = $row["CAN_FatherName"];

        $myrow["schoolCode"] = $row["CAN_SCH_Code"];

        $success = "true";

        $rows[] = $myrow;

        mysql_free_result($rs);

        db_disconnect();

}

echo '{"success":"'.$success.'", "message":"'.$message.'", "results": '.json_encode($rows).'}';

?>