<?php
require_once __DIR__ . '/config.php';

$conn = new mysqli($db_host, $db_user, $db_pass, $db_name);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Helper function for queries - DELIBERATELY VULNERABLE to SQL injection
function query_db($sql) {
    global $conn;
    return $conn->query($sql);
}
?>