How do I export my php/mysq based game with xdk (crosswalk)

<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin "*"
</IfModule> [/code:3boz2zyb]

header('Access-Control-Allow-Origin: *');[/code:312q5gjm]

in my .php files 

I'm uploading my .php files and my .capx file if anyone would care to take a look.

I replaced the the mysql db username and password in all the php files but i assure you they are set correctly in the originals. i just changed them here for obvious purposes. 

I zipped all the files and uploaded them to my own space. 
[url]http://ponytron.com/forumzip.zip[/url]

I obviously still can't get anything to work. The login doesn't work after I build it in xdk. I'm building with crosswalk and exporting via cordova. Once I get the .apk and test it, I can't login. It works fine when uploaded as html 5 to my website.

$qz = "SELECT id FROM members where username='" . $username . "' and password='" . $password . "'";
$qz = str_replace("\'", "", $qz);
$result = mysqli_query($con, $qz);
[/code:1joqfaoj]

You are stripping single quotes from the query string before executing it but that means you are comparing columns (username & password) to non string values which SQL will interpret as other columns and throw an error because they don't exist

Example 
"WHERE username=player1 &password=test" will throw an error becuase SQL will think the values "player1" and "test" are columns  since they are not in single quotes

It should be "WHERE username='player1' &password='test'" (The single quotes allow SQL to know you compairing the column value to a string value and not another column or equation

And while this might work it is extremely unstable way of getting the data. On the off chance more than row is returned this will break and what if the username and password don't find a match? 
[code:1joqfaoj]
while ($row = mysqli_fetch_array($result)) {
    echo $row['id'];
}
[/code:1joqfaoj]

Try using this
[code:1joqfaoj]

//make sure param is there and catch it if not so PHP doesn't throw a Notice error
$username = isset($_GET['fname']) ? $_GET['fname'] : '';
$password = isset($_GET['fpass']) ? $_GET['fpass'] : '';

//Validate you received the params you expected
if($username=='' || $password==''){
    echo 'Invalid login';
    exit; //make sure no other code is executed beyond this error;
}

//protect from SQL injection
$username =  mysqli_real_escape_string($con,$username); 
$password =  mysqli_real_escape_string($con,$password);

//You need the single quotes around the values or SQL will break
$qz = "SELECT id FROM members where username='" . $username . "' and password='" . $password . "'";
$result = mysqli_query($con, $qz);

//There should only be 1 row returned. No need for a while statement
$row = mysqli_fetch_array($result);

//The $row may be null if it was invalid username and password combo
if(!$row){
    echo 'Invalid login';
    exit; //make sure no other code is executed beyond this error;
}
echo $row['id']
[/code:1joqfaoj]

Lastly keep in mind that $row['id'] will be returned as a string (all echo statements doesnt matter what they are are returned in string type as literal text) 

so first in C2 you need to compare against the possible error and catch it
Condition (AJAX.LastData=='')  - Ajax was empty and something went wrong. stop code
Condition (AJAX.LastData=='Invalid login') - Ajax returned a notice of invalid login and you need notify the user so they can try again 

Then if that passes you need to store it in userid but convert the (string) you received from php to (int) so it is casted correctly to the userid variable
Action userid = int(AJAX.LastData)