PHP pal Your PHP pal!

[Preview] PlayPal – Have fun with your money!

Author x0r3n

We are happy to release version one of PlayPal™. PlayPal is an advanced banking system/semi-game. It is coded in VB.NET, PHP, and MySQL. It has many features, and many of them are focused on keeping the game safe and secure. We focused on making sure there were no vulnerabilities or glitches. We plan to evolve this program into a fully featured game. Keep following our threads!

Team:
Real[visual basic dot net]

Me (this blogs owner)[Php][MySQL]

ØutƦage[Gfx]

Finished:

[*]Login and registration system
[*]Transactions
[*]Generating money (Bankers only)
[*]Userlists
[*]Many security features

In progress:
[*]Logging system [Vb only]
[*]Rankings [Vb only]
[*]Recommend something!

Screenshots:
Login


Main


Register


Banker


Logs

JSON

Author klaasy

A quick article on JSON.

What is JSON?

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language. (http://www.json.org/)

With JSON you can "convert" an array to a string, and you can store that string in any type of file, such as .txt or .json, practically anything.

Now how do we use it?

Try running the following code:

<?php

$arr = array(1 => "Hey mike",2 => "Wazzup dawg","three" => 1337,"dog" => "cat", "Some array" => array(1 => "A ARRAY IN A ARRAY WTF?!?!?","You mad" => "Trololo"));

echo json_encode($arr);

?>

The output should be:
{"1":"Hey mike","2":"Wazzup dawg","three":1337,"dog":"cat","Some array":{"1":"A ARRAY IN A ARRAY WTF?!?!?","You mad":"Trololo"}}
You can see that a array is opened with { (left curly brace) and closed with } (right curly brace), keys with or without values are split with a , (comma) and keys and values are "linked" with a : (colon)
Now we've got this string, let's turn it back into a array, try running this code:
<?php

$json = '{"1":"Hey mike","2":"Wazzup dawg","three":1337,"dog":"cat","Some array":{"1":"A ARRAY IN A ARRAY WTF?!?!?","You mad":"Trololo"}}';
$arr = json_decode($json,true);

print_r($arr);

?>
The output should be:
Array ( [1] => Hey mike [2] => Wazzup dawg [three] => 1337 [dog] => cat [Some array] => Array ( [1] => A ARRAY IN A ARRAY WTF?!?!? [You mad] => Trololo ) ) Hey mike
And here we have our array back again   You may have noticed the second parameter at json_decode, saying true, if this isn't set to true (you can leave that parameter in that case),

it will become a stdClass Object

The output would then look like this:
stdClass Object ( [1] => Hey mike [2] => Wazzup dawg [three] => 1337 [dog] => cat [Some array] => stdClass Object ( [1] => A ARRAY IN A ARRAY WTF?!?!? [You mad] => Trololo ) )
That's all, hope you learned from this!

MySQLi – Prepared Statements

Author klaasy

Sick of getting SQL Injected? Annoyed of the simple mysql_query function? Well use Prepared Statements!

What is a Prepared Statement?

When you are using a Prepared Statement, you "prepare" a query, you fill in all the variables with ?, the ? are called params (parameters), you can assign a new value to those params with another function, well best is to just show it.

A Prepared Statement is build up like this:

1. Preparing the query
2. Assigning values to the params
3. Execute the query
4. Bind the result
5. Fetch the data (If you are using SELECT)
6. Close the query

So how do we do that?

Like this:

<?php

$mysqli = new mysqli('host','user','pass','database'); //Create a connection with the database using MySQLi

$params = array(1 => 12, 2 => "tennis");

if($stmt = $mysqli->prepare("SELECT name,rank FROM users WHERE id=? AND hobby=?")){ //Prepare the query (Step 1)

$stmt->bind_param("is",$params[1],$params[2]); //Bind the params, further explanation after this code

$stmt->execute(); //Execute the query

$stmt->bind_result($name,$rank); //Bind the value of the colums we selected, notice that the variable names match the order of columns we select, variable names can be anything

$stmt->fetch(); //Fill in the data we retrieved

}

$stmt->close(); //Close the query

?>

First read the comments, now let me explain the bind_param function.

The first parameter, in this case, "is", tells the statement what kind of variables it's dealing with, because $params[1], is an integer (i) and $params[2] is a string (s), the next two parameters fill up the question marks (?'s) in the query.

Now you can do anything you want with the variables you got, in this case $name and $rank. a UPDATE, DROP and INSERT statement only requires you to prepare it, bind the parameters and execute it.

If you fetch more than one row, and you want to do something with it, do this:

while($stmt->fetch()){

echo $name." has the rank of ".$rank;

}

This is how a basic SELECT statement is done! Have fun

Simple website status checker

Author x0r3n

Ok, I haven't done anything here with cURL. It is basically a way to work with url's and get and send variables. I have made a simple website status checker. It is really simple, a lot can be done to it to make it better. But here is my basic (but commented)  code.

<?php
//phpal.in simple status checker
$url = "http://www.google.com";
//open the curl connection
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_NOBODY, true); //sets the request method to HTTP(s)
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); //follows and redirects
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 4); //sets the timeout limit for requesting a page
curl_exec($ch);
$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE); //checks if the site is down or not
curl_close($ch);
if (200 == $httpcode) {
echo "<center><font face=\"Impact\" size=\"60\" color=\"green\">";
echo "<font color=\"black\"><a href=\"$url\">$url</a></font> is up<br />";
echo "</font></center>";
} else {
echo "<center><font face=\"Impact\" size=\"60\" color=\"red\">";
echo "<font color=\"black\">$url</font> is down<br />";
echo "</font></center>";
}
?>

You could do a lot to this code to make it work better and optimize it, this is just the barebones. If you want to learn more about
cURL you can view all of its functions here: http://php.net/manual/en/book.curl.php

Edit: Modified version to accept a user supplied URL (very minor modification):

URL to check:
<form name="url" action="status2.php" method="post">
<input type="text" name="url" />
<input type="submit" id="submit" name="submit" value="submit" />
</form>
<?php
if (isset($_POST['submit'])) {
//phpal.in simple status checker
$url = $_POST['url'];
//open the curl connection
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_NOBODY, true); //sets the request method to HTTP(s)
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); //follows and redirects
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 4); //sets the timeout limit for requesting a page
curl_exec($ch);
$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE); //checks if the site is down or not
curl_close($ch);
if (200 == $httpcode) {
echo "<center><font face=\"Impact\" size=\"60\" color=\"green\">";
echo "<font color=\"black\"><a href=\"$url\">$url</a></font> is up<br />";
echo "</font></center>";
} else {
echo "<center><font face=\"Impact\" size=\"60\" color=\"red\">";
echo "<font color=\"black\">$url</font> is down<br />";
echo "</font></center>";
}
}
?>

Updated: simple copy from file then paste into file

Author x0r3n

I realized I should have implemented more checks into the script to let the user know what was going on and I have done it.

The script is below and here is a result of a complete success:

<?php
/**
* @author phpal.in
* @copyright 2011
**/
$fileToOpen = 'C:\\xampp\\htdocs\\get.txt';
$newFile = "C:\\xampp\\htdocs\\paste1.txt";
if (is_readable($fileToOpen) || file_exists($fileToOpen) == true || is_writeable($newFile)) {
echo "<font color=\"green\">$fileToOpen is readable and exists, processing.</font><br />\n";
//opens it for reading
$file = fopen($fileToOpen, 'r');
//actually reads it and gets everything thanks to filesize()
$readText = fread($file, filesize($fileToOpen));
if (file_exists($newFile)) {
echo "<font color=\"red\">Script exiting, $newFile already exists.</font>";
exit(0);
} else {
//opens the new file for creation
$handle = fopen($newFile, "w+");
//writes the old text into the new one
$writenew = fwrite($handle, $readText);
//if it was successful, display a message.
if ($writenew == true) {
echo "<font color=\"green\">Data copied successfully. The data was: \"" . $readText .
"\"</font>";
} else {
echo "<font color=\"red\">Data was not copied successfully, check the script paths.</font>";
}
}
fclose($handle);
fclose($file);

} else {
echo "<font color=\"red\">$fileToOpen is unwritable.</font>";
exit(0);
}
?>