gigaspartan

<?php
// This is how your DB will be setup.
/*
CREATE TABLE IF NOT EXISTS `visitors` (
  `visitor_id` int(11) NOT NULL auto_increment,
  `name` varchar(225) NOT NULL default '',
  `value` varchar(225) NOT NULL default '',
  PRIMARY KEY  (`visitor_id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;
 
INSERT INTO `visitors` (`visitor_id`, `name`, `value`) VALUES
(1, 'ip', ''),
(2, 'hits', '0,0');
*/
?>

<?php
$db_user = ""; // Username
$db_pass = ""; // Password
$db_database = ""; // Database Name
$db_host = ""; // Server Hostname
$db_connect = mysql_connect ($db_host, $db_user, $db_pass);
$db_select = mysql_select_db ($db_database);
 
// Code to pull the results from the db.
$q = mysql_query("SELECT * FROM `visitors` WHERE `name` = 'hits'"); // Finds the row with the numbers
$visitor = mysql_fetch_array($q);
$visitor = split(",", $visitor['value']); // Splits the query result into an array.
define('SITE_HITS', $visitor['0']); //  Defines a constant for all hits
define('SITE_UNI_HITS', $visitor['1']); // Defines a constant for unique hits
 
function visitor($ip) { // Function that will be put on main page.
	$q_ip = mysql_query("SELECT * FROM `visitors` WHERE `name` = 'ip'") or die(mysql_error()); // Finds the info for all of the ip's
	$r_ip = mysql_fetch_array($q_ip); // Fetches the ip array we will use later.
	$array_ip = split("-", $r_ip['value']); // Splits the results and turns it into an array of all the ips
 
	$q_hit = mysql_query("SELECT * FROM `visitors` WHERE `name` = 'hits'") or die(mysql_error()); // Finds the info for the hits
	$r_hit = mysql_fetch_array($q_hit);
	$hit = split(",", $r_hit['value']); // Splits the query results into an array.
	$hits = $hit['0']; // The total hits
	$uni = $hit['1']; // The unique hits
 
	if (in_array($ip, $array_ip)) { // If the users ip is in the array we defined earlier
		$hits++; // Adds a hit, but not a unique hit
	} else {
		$hits++; // Adds both a unique and hit because he is a new user.
		$uni++;
		$ip = $r_ip['value'] . $ip; // Adds the new ip to the ips already in the db
		mysql_query("UPDATE `visitors` SET `value` = '$ip' WHERE `name` = 'ip'"); // Updates the table
	}
 
	$hits = $hits . "," . $uni; // Combines the hits and unique hits
	mysql_query("UPDATE `visitors` SET `value` = '$hits' WHERE `name` = 'hits'"); // Updates the table
}
?>

<?php
include("conf.inc.php");
visitor($_SERVER["REMOTE_ADDR"]); // Use the function we defined earlier with the users ip.
echo "Main page";
?>

<?php
include("conf.inc.php");
echo "Total Hits: " . SITE_HITS;
echo "<br />";
echo "Unique Hits: " . SITE_UNI_HITS;
?>

<?php
$db_user = ""; // Username
$db_pass = ""; // Password
$db_database = ""; // Database Name
$db_host = ""; // Server Hostname
$db_connect = mysql_connect ($db_host, $db_user, $db_pass); // Connects the the database
$db_select = mysql_select_db ($db_database); // Selects the DB we will be searching in.
 
// IP Ban Check
function is_banned($ip) { // Starts the is_banned function.
	$q = mysql_query("SELECT * FROM `ban` WHERE `ip` = '$ip'") or die(mysql_error()); // Searches the database for the users ip.
	$rows = mysql_num_rows($q); // Counts all the results found.
 
	if ($rows > 0) { // If more than 0 were found.
		$banned = true; // The user is banned.
	} else {
		$banned = false; // The user is not banned.
	}
 
	return $banned;
}
?>

<?php
include("conf.inc.php"); // Include the database and function details.
if (is_banned($_SERVER["REMOTE_ADDR"])) { // Start out function with the users ip.
	echo "Error: You have been banned from this website!"; // The user is banned.
	exit(); // Halts the rest of the script from performing.
} else {
	echo "You have not been banned, congrats on not being one of the many assholes.";
}
?>

CREATE TABLE IF NOT EXISTS `users` (
  `user_id` int(11) NOT NULL auto_increment,
  `username` varchar(225) NOT NULL default '',
  `password` varchar(225) NOT NULL default '',
  `email` varchar(225) NOT NULL default '',
  PRIMARY KEY  (`user_id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

<?php
$db_user = ""; // Username
$db_pass = ""; // Password
$db_database = ""; // Database Name
$db_host = ""; // Server Hostname
$db_connect = mysql_connect ($db_host, $db_user, $db_pass); // Connects to the database.
$db_select = mysql_select_db ($db_database); // Selects the database.
 
function form($data) { // Prevents SQL Injection
   global $db_connect;
   $data = ereg_replace("[\'\")(;|`,<>]", "", $data);
   $data = mysql_real_escape_string(trim($data), $db_connect);
   return stripslashes($data);
}
?>

<?php
include("conf.inc.php"); // Includes the db and form info.
if (!isset($_POST['submit'])) { // If the form has not been submitted.
	echo "<form action=\"register.php\" method=\"POST\">";
	echo "<table>";
	echo "<tr>";
	echo "<td colspan=\"2\">Register:</td>";
	echo "</tr>";
	echo "<tr>";
	echo "<td width=\"50%\">Username:</td><td width=\"50%\"><input name=\"username\" size=\"18\" type=\"text\" />";
	echo "</tr>";
	echo "<tr>";
	echo "<td width=\"50%\">Password:</td><td width=\"50%\"><input name=\"password\" size=\"18\" type=\"text\" />";
	echo "</tr>";
	echo "<tr>";
	echo "<td width=\"50%\">Email:</td><td width=\"50%\"><input name=\"email\" size=\"18\" type=\"text\" />";
	echo "</tr>";
	echo "<tr>";
	echo "<td colspan=\"2\"><input type=\"submit\" name=\"submit\" value=\"submit\"</td>";
	echo "</tr>";
	echo "</table>";
	echo "</form>";
} else { // The form has been submitted.
	$username = form($_POST['username']);
	$password = md5($_POST['password']); // Encrypts the password.
	$email = form($_POST['email']);
 
	if (($username == "") || ($password == "") || ($email == "")) { // Checks for blanks.
		exit("There was a field missing, please correct the form.");
	}
 
	$q = mysql_query("SELECT * FROM `users` WHERE username = '$username' OR email = '$email'") or die (mysql_error()); // mySQL Query
	$r = mysql_num_rows($q); // Checks to see if anything is in the db.
 
	if ($r > 0) { // If there are users with the same username/email.
		exit("That username/email is already registered!");
	} else {
		mysql_query("INSERT INTO `users` (username,password,email) VALUES ('$username','$password','$email')") or die (mysql_error()); // Inserts the user.
		header("Location: login.php"); // Back to login.
	}
}
mysql_close($db_connect); // Closes the connection.
?>

<?php
include("conf.inc.php"); // Includes the db and form info.
session_start(); // Starts the session.
if ($_SESSION['logged'] == 1) { // User is already logged in.
	header("Location: index.php"); // Goes to main page.
	exit(); // Stops the rest of the script.
} else {
	if (!isset($_POST['submit'])) { // The form has not been submitted.
		echo "<form action=\"login.php\" method=\"POST\">";
		echo "<table>";
		echo "<tr>";
		echo "<td colspan=\"2\">Login:</td>";
		echo "</tr>";
		echo "<tr>";
		echo "<td width=\"50%\">Username:</td><td width=\"50%\"><input name=\"username\" size=\"18\" type=\"text\" />";
		echo "</tr>";
		echo "<tr>";
		echo "<td width=\"50%\">Password:</td><td width=\"50%\"><input name=\"password\" size=\"18\" type=\"text\" />";
		echo "</tr>";
		echo "<tr>";
		echo "<td colspan=\"2\"><input type=\"submit\" name=\"submit\" value=\"submit\"</td>";
		echo "</tr>";
		echo "</table>";
		echo "</form>";
	} else {
		$username = form($_POST['username']);
		$password = md5($_POST['password']); // Encrypts the password.
 
		$q = mysql_query("SELECT * FROM `users` WHERE username = '$username' AND password = '$password'") or die (mysql_error()); // mySQL query
		$r = mysql_num_rows($q); // Checks to see if anything is in the db. 
 
		if ($r == 1) { // There is something in the db. The username/password match up.
			$_SESSION['logged'] = 1; // Sets the session.
			header("Location: index.php"); // Goes to main page.
			exit(); // Stops the rest of the script.
		} else { // Invalid username/password.
			exit("Incorrect username/password!"); // Stops the script with an error message.
		}
	}
}
mysql_close($db_connect); // Closes the connection.
?>

<?php
session_unset(); // Destroys the session.
header("Location: login.php"); // Goes back to login.
?>

<?php
include("conf.inc.php"); // Includes the db and form info.
session_start(); // Starts the session.
if ($_SESSION['logged'] != 1) { // There was no session found!
	header("Location: login.php"); // Goes to login page.
	exit(); // Stops the rest of the script.
}
echo "This is the main page!";
echo "<br />";
echo "<a href=\"logout.php\">Logout?</a>"
?>