Android Question B4A connection with Mysql database

Private const ServerName As String = "http://192.168.178.23"
    Private const ScriptPath As String = "/folderunderHtDocs/scriptname.php"

Private const ServerName As String = "https://mywebsite.com"
    Private const ScriptPath As String = "/folderunderHtDocs/scriptname.php"

Dim MyJob As HttpJob
    MyJob.Initialize(JobName, Me)
    MyJob.PostString(ServerName & ScriptPath, JSONstring)

JobName="Login"
    Dim Parms As Map
    Parms.Initialize
    Parms.put("Action", "Login")
    Parms.put("uname", UserTF.text)
    Parms.put("upw", SHA256Hash(PWTF.text)) 'Hash the pw
    Parms.put("apphash", AppHash) 'another security method
    Parms.put("imei", imei) 'paranoia mode
    StartJob(Parms)

Sub StartJob (p As Map)
    JsonList.Initialize
    JsonList.add(p)
 
    Dim JSONGenerator As JSONGenerator
    JSONGenerator.Initialize2(JsonList)
 
    Dim JSONstring As String
    JSONstring = JSONGenerator.ToString
    Log(JSONstring)
  
    Dim MyJob As HttpJob
    MyJob.Initialize(JobName, Me)
    MyJob.PostString(ServerName & ScriptPath, JSONstring)
   
    Log("Starting Job... " & DateTime.Time(DateTime.Now))
End Sub

$con = mysqli_connect($host,$user,$pw) or die(mysqli_error());
    mysqli_select_db($con,$db) or die(mysqli_error());
    mysqli_query($con,"SET CHARACTER SET utf8");
    mysqli_query($con,"SET NAMES 'utf8'");
   
    $ip=$_SERVER['REMOTE_ADDR'];

    $json = file_get_contents("php://input"); //Get the string = just get all the content

    $jsall = array();
    $jsone = array();
    $jsall=json_decode($json, true); //Get the list

    $jsone=$jsall[0]; //Get the first map (you can add more maps if you like, example: Inserting 100 rows in one transaction)
   
   
    $action = $jsone["Action"];

switch ($action)
    {
Case "Login":
        $upw=stripslashes(mysqli_real_escape_string($con,$jsone["upw"]));
        $uname=stripslashes(mysqli_real_escape_string($con,$jsone["uname"]));
        $imei=stripslashes(mysqli_real_escape_string($con,$jsone["imei"]));
         
        $stmt = $con->prepare("SELECT * FROM users where uname = ?");
        $rc=$stmt->bind_param("s", $uname);
        $rc=$stmt->execute();
        $q = $stmt->get_result();
        $count=mysqli_num_rows($q);
        $stmt->close();

 //do some checks (user known, pw, hash, whatever)

   }