use mysqli for connection
add pin check for videos