├── .gitattributes
├── 10-1.php
├── 10-2.php
├── 13-1.php
├── 13-2.php
├── 14-1.php
├── 14-10.php
├── 14-11.php
├── 14-12.php
├── 14-2.php
├── 14-4.php
├── 14-5.sql
├── 14-6.php
├── 14-8.sql
├── 14-9.sql
├── 15-1.php
├── 16-1.php
├── 16-2.php
├── 17-0.php
├── 17-02.php
├── 17-03.php
├── 17-1.php
├── 17-1.sql
├── 17-2.php
├── 18-1.php
├── 18-2.php
├── 18-3.php
├── 18-4.php
├── 18-5.php
├── 19-1.php
├── 19-2.php
├── 20-1.html
├── 20-2.php
├── 20-3.js
├── 27-1.php
├── 27-2.php
├── 28-1.php
├── 28-1.sql
├── 28-10.php
├── 28-11.php
├── 28-2.php
├── 28-3.php
├── 28-4.php
├── 28-5.php
├── 28-6.php
├── 28-7.php
├── 28-8.php
├── 28-9.php
├── 29-1-login.php
├── 29-2-viewbonus.php
├── 29-3.php
├── 30-1.php
├── 30-2.php
├── 31-1.php
├── 32-1.php
├── 32-2.php
├── 33-1.php
├── 33-2.php
├── 33-3.php
├── 34-1.php
├── 35-1.php
├── 35-1.sql
├── 4-1.php
├── 4-2.php
├── 5-1.php
├── 6-1.php
├── 7-1.php
├── 7-2.php
├── 7-3.php
├── 7-4.php
├── 7-5.php
├── 8-1.php
├── 8-2.php
├── 9-1.php
├── 9-2.php
├── 9-3.php
├── 9-4.php
├── 9-5.php
├── 9-6.php
├── 9-7.php
├── 9-8.php
├── 9-9.php
├── 9781430260431.jpg
├── Contributing.md
├── ConvertController.php
├── LICENSE.txt
├── README.md
├── aes.inc
├── authentication.txt
├── convertForm.blade.php
├── errata.md
├── log_service.php
└── logger.php


/.gitattributes:
--------------------------------------------------------------------------------
1 | # Auto detect text files and perform LF normalization
2 | * text=auto
3 | 


--------------------------------------------------------------------------------
/10-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     function directorySize($directory) {
 3 |         $directorySize=0;
 4 | 
 5 |         // Open the directory and read its contents.
 6 |         if ($dh = opendir($directory)) {
 7 | 
 8 |             // Iterate through each directory entry.
 9 |             while (($filename = readdir ($dh))) {
10 | 
11 |                 // Filter out some of the unwanted directory entries
12 |                 if ($filename != "." && $filename != "..")
13 |                 {
14 | 
15 |                     // File, so determine size and add to total
16 |                     if (is_file($directory."/".$filename))
17 |                         $directorySize += filesize($directory."/".$filename);
18 | 
19 |                     // New directory, so initiate recursion
20 |                     if (is_dir($directory."/".$filename))
21 |                         $directorySize += directorySize($directory."/".$filename);
22 |                 }
23 |             }
24 |         }
25 |         closedir($dh);
26 |         return $directorySize;
27 | 
28 |     }
29 | 
30 |     $directory = '/usr/book/chapter10/';
31 |     $totalSize = round((directorySize($directory) / 1048576), 2);
32 |     printf("Directory %s: %f MB", $directory, $totalSize);
33 | ?>
34 | 


--------------------------------------------------------------------------------
/10-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     function directorySize($directory) {
 3 |         $directorySize=0;
 4 | 
 5 |         // Open the directory and read its contents.
 6 |         $iterator = new DirectoryIterator($directory);
 7 |         foreach ($iterator as $fileinfo) {
 8 |             if ($fileinfo->isFile()) {
 9 |                 $directorySize += $fileinfo->getSize();
10 |             }
11 |             if ($fileinfo->isDir() && !$fileinfo->isDot()) {
12 |                 $directorySize += directorySize($directory.'/'.$fileinfo->getFilename());
13 |             }
14 |         }
15 | 
16 |         return $directorySize;
17 | 
18 |     }
19 | 
20 |     $directory = '/home/frank';
21 |     $totalSize = round((directorySize($directory) / 1048576), 2);
22 |     printf("Directory %s: %f MB", $directory, $totalSize);
23 | ?>
24 | 


--------------------------------------------------------------------------------
/13-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // If the name field is filled in
 3 |     if (isset($_POST['name']))
 4 |     {
 5 |        $name = $_POST['name'];
 6 |        $email = $_POST['email'];
 7 |        printf("Hi %s! <br>", $name);
 8 |        printf("The address %s will soon be a spam-magnet! <br>", $email);
 9 |     }
10 | ?>
11 | 
12 | <form action="subscribe.php" method="post">
13 |     <p>
14 |         Name:<br>
15 |         <input type="text" id="name" name="name" size="20" maxlength="40">
16 |     </p>
17 |     <p>
18 |         Email Address:<br>
19 |         <input type="text" id="email" name="email" size="20" maxlength="40">
20 |     </p>
21 |     <input type="submit" id="submit" name = "submit" value="Go!">
22 | </form>
23 | 


--------------------------------------------------------------------------------
/13-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     if (isset($_POST['submit']))
 3 |     {
 4 |         echo "You like the following languages:<br>";
 5 |         if (is_array($_POST['languages'])) {
 6 |           foreach($_POST['languages'] AS $language) {
 7 |               $language = htmlentities($language);
 8 |               echo "$language<br>";
 9 |           }
10 |       }
11 |     }
12 | ?>
13 | 
14 | <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
15 |    What's your favorite programming language?<br> (check all that apply):<br>
16 |    <input type="checkbox" name="languages[]" value="csharp">C#<br>
17 |    <input type="checkbox" name="languages[]" value="javascript">JavaScript<br>
18 |    <input type="checkbox" name="languages[]" value="perl">Perl<br>
19 |    <input type="checkbox" name="languages[]" value="php">PHP<br>
20 |    <input type="submit" name="submit" value="Submit!">
21 | </form>
22 | 


--------------------------------------------------------------------------------
/14-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // If the username or password isn't set, display the authentication window
 4 |     if (! isset($_SERVER['PHP_AUTH_USER']) || ! isset($_SERVER['PHP_AUTH_PW'])) {
 5 |         header('WWW-Authenticate: Basic Realm="Authentication"');
 6 |         header("HTTP/1.1 401 Unauthorized");
 7 | 
 8 |     // If the username and password are set, output their credentials
 9 |     } else {
10 |         echo "Your supplied username: {$_SERVER['PHP_AUTH_USER']}<br />";
11 |         echo "Your password: {$_SERVER['PHP_AUTH_PW']}<br />";
12 |     }
13 | ?>
14 | 


--------------------------------------------------------------------------------
/14-10.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     $db = new mysqli("localhost", "webuser", "secret", "chapter14");
 4 | 
 5 |     // Create unique identifier
 6 |     $id = md5(uniqid(rand(),1));
 7 | 
 8 |     // User's email address
 9 |     $address = filter_var($_POST[email], FILTER_SANITIZE_EMAIL);
10 | 
11 |     // Set user's hash field to a unique id
12 |     $stmt = $db->prepare("UPDATE logins SET hash=? WHERE email=?");
13 |     $stmt->bind_param('ss', $id, $address);
14 | 
15 |     $stmt->execute();
16 | 
17 |     $email = <<< email
18 | Dear user,
19 | Click on the following link to reset your password:
20 | http://www.example.com/users/lostpassword.php?id=$id
21 | email;
22 | 
23 | // Email user password reset options
24 | mail($address,"Password recovery","$email","FROM:services@example.com");
25 | echo "<p>Instructions regarding resetting your password have been sent to
26 |          $address</p>";
27 | ?>
28 | 


--------------------------------------------------------------------------------
/14-11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $length = 12;
 3 |     $valid = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
 4 |     $max = strlen($valid);
 5 |     $db = new mysqli("localhost", "webuser", "secret", "chapter14");
 6 | 
 7 |     // Create a pseudorandom password $length characters in length
 8 |     for ($i = 0; $i < $length; ++$i) {
 9 |         $pswd .= $valid[random_int(0, $max)];
10 |     }
11 | 
12 |     // User's hash value
13 |     $id = filter_var($_GET[id], FILTER_SANITIZE_STRING);
14 | 
15 |     // Update the user table with the new password
16 |     $stmt = $db->prepare("UPDATE logins SET pswd=? WHERE hash=?");
17 |     $stmt->bind_param("ss", password_hash($pswd, PASSWORD_DEFAULT), $id);
18 |     $stmt->execute();
19 | 
20 |     // Display the new password
21 |     echo "<p>Your password has been reset to {$pswd}.</p>";
22 | ?>
23 | 


--------------------------------------------------------------------------------
/14-12.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include('fb_config.inc');
 3 | 
 4 | $fb = new \Facebook\Facebook([
 5 |     'app_id' => FB_APP_ID,
 6 |     'app_secret' => FB_APP_SECRET,
 7 |     'default_graph_version' => 'v2.11',
 8 | ]);
 9 | 
10 | $helper = $fb->getJavaScriptHelper();
11 | 
12 | try {
13 |     $accessToken = $helper->getAccessToken();
14 |     $fb->setDefaultAccessToken((string) $accessToken);
15 |     $response = $fb->get('/me?fields=id,name');
16 | } catch(\Facebook\Exceptions\FacebookResponseException $e) {
17 |     // When Graph returns an error
18 |     Error('Graph returned an error: ' . $e->getMessage());
19 |     exit;
20 | } catch(\Facebook\Exceptions\FacebookSDKException $e) {
21 |     // When validation fails or other local issues
22 |     Error('Facebook SDK returned an error: ' . $e->getMessage());
23 |     exit;
24 | }
25 | 
26 | $me = $response->getGraphUser();
27 | // $me is an array with the id of the user and any additional fields requested.
28 | 


--------------------------------------------------------------------------------
/14-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $secret = 'e5e9fa1ba31ecd1ae84f75caaa474f3a663f05f4';
 4 | if (($_SERVER['PHP_AUTH_USER'] != 'client') ||
 5 |    (hash('sha1', $_SERVER['PHP_AUTH_PW']) != $secret)) {
 6 |       header('WWW-Authenticate: Basic Realm="Secret Stash"');
 7 |       header('HTTP/1.0 401 Unauthorized');
 8 |       print('You must provide the proper credentials!');
 9 |       exit;
10 | }
11 | 


--------------------------------------------------------------------------------
/14-4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Preset authentication status to false
 4 |     $authorized = false;
 5 | 
 6 |     if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])) {
 7 | 
 8 |         // Read the authentication file into an array
 9 |         $authFile = file("/usr/local/lib/php/site/authenticate.txt");
10 | 
11 |         // Search array for authentication match
12 |         foreach ($authFile as $line) {
13 |             list($user, $hash) = explode(":", $line);
14 |             if ($_SERVER['PHP_AUTH_USER'] == $user &&
15 |                password_verify($_SERVER['PHP_AUTH_PW'], trim($hash)))
16 |             $authorized = true;
17 |             break;
18 |         }
19 |     }
20 | 
21 |     // If not authorized, display authentication prompt or 401 error
22 |     If (!$_SERVER['HTTPS']) {
23 |       echo " Please use HTTPS when accessing this document";
24 |       exit;
25 |     }
26 |     if (!$authorized) {
27 |         header('WWW-Authenticate: Basic Realm="Secret Stash"');
28 |         header('HTTP/1.0 401 Unauthorized');
29 |         print('You must provide the proper credentials!');
30 |         exit;
31 |     }
32 |     // restricted material goes here...
33 | ?>
34 | 


--------------------------------------------------------------------------------
/14-5.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE logins (
2 |    id INTEGER UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
3 |    username VARCHAR(255) NOT NULL,
4 |    pswd CHAR(40) NOT NULL
5 | );
6 | 


--------------------------------------------------------------------------------
/14-6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     /* Because the authentication prompt needs to be invoked twice,
 3 |        embed it within a function.
 4 |     */
 5 | 
 6 |     function authenticate_user() {
 7 |         header('WWW-Authenticate: Basic realm="Secret Stash"');
 8 |         header("HTTP/1.0 401 Unauthorized");
 9 |         exit;
10 |     }
11 | 
12 |     /* If $_SERVER['PHP_AUTH_USER'] is blank, the user has not yet been
13 |        prompted for the authentication information.
14 |     */
15 | 
16 |     if (! isset($_SERVER['PHP_AUTH_USER'])) {
17 | 
18 |         authenticate_user();
19 | 
20 |     } else {
21 | 
22 |       $db = new mysqli("localhost", "webuser", "secret", "chapter14");
23 | 
24 |       $stmt = $db->prepare("SELECT username, pswd FROM logins
25 |                   WHERE username=? AND pswd= ?");
26 | 
27 |       $stmt->bind_param('ss', $_SERVER['PHP_AUTH_USER'], password_hash($_SERVER['PHP_AUTH_PW'], PASSWORD_DEFAULT));
28 | 
29 |       $stmt->execute();
30 | 
31 |       $stmt->store_result();
32 | 
33 |       // Remember to check for erres also!
34 |       if ($stmt->num_rows == 0)
35 |         authenticate_user();
36 |   }
37 | 
38 | ?>
39 | 


--------------------------------------------------------------------------------
/14-8.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE subscribers (
2 |    id INTEGER UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
3 |    email VARCHAR(255) NOT NULL,
4 |    hash CHAR(40) NOT NULL,
5 |    read CHAR(1)
6 | );
7 | 


--------------------------------------------------------------------------------
/14-9.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE logins (
2 |    id TINYINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
3 |    email VARCHAR(55) NOT NULL,
4 |    username VARCHAR(16) NOT NULL,
5 |    pswd CHAR(32) NOT NULL,
6 |    hash CHAR(32) NOT NULL
7 | );
8 | 


--------------------------------------------------------------------------------
/15-1.php:
--------------------------------------------------------------------------------
 1 | <form action="listing15-1.php" enctype="multipart/form-data" method="post">
 2 |   <label form="email">Email:</label><br>
 3 |   <input type="text" name="email" value=""><br>
 4 |   <label form="lastname">Last Name:</label><br>
 5 |   <input type="text" name="lastname" value=""><br>
 6 |   <label form="classnotes">Class notes:</label><br>
 7 |   <input type="file" name="classnotes" value=""><br>
 8 |   <input type="submit" name="submit" value="Submit Notes">
 9 | </form>
10 | <?php
11 | 
12 | // Set a constant
13 | define ("FILEREPOSITORY","/var/www/5e/15/classnotes");
14 | 
15 | // Make sure that the file was POSTed.
16 | if ($_FILES['classnotes']['error'] == UPLOAD_ERR_OK) {
17 |     if (is_uploaded_file($_FILES['classnotes']['tmp_name'])) {
18 |         // Was the file a PDF?
19 |         if ($_FILES['classnotes']['type'] != "application/pdf") {
20 |             echo "<p>Class notes must be uploaded in PDF format.</p>";
21 |         } else {
22 |             // Move uploaded file to final destination.
23 |             $result = move_uploaded_file($_FILES['classnotes']['tmp_name'],
24 |                       FILEREPOSITORY . $_POST['lastname'] . '_' . $_FILES['classnotes']['name']);
25 |            if ($result == 1) echo "<p>File successfully uploaded.</p>";
26 |                else echo "<p>There was a problem uploading the file.</p>";
27 |         }
28 |     }
29 | }
30 | else {
31 |     echo "<p>There was a problem with the upload. Error code {$_FILES['classnotes']['error']}</p>";
32 | }
33 | ?>
34 | 


--------------------------------------------------------------------------------
/16-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Give the script enough time to complete the task
 4 |     ini_set("max_execution_time", 120);
 5 | 
 6 |     // Define scan range
 7 |     $rangeStart = 0;
 8 |     $rangeStop = 1024;
 9 | 
10 |     // Which server to scan?
11 |     $target = "localhost";
12 | 
13 |     // Build an array of port values
14 |     $range =range($rangeStart, $rangeStop);
15 | 
16 |     echo "<p>Scan results for $target</p>";
17 | 
18 |     // Execute the scan
19 |     foreach ($range as $port) {
20 |         $result = @fsockopen($target, $port,$errno,$errstr,1);
21 |         if ($result) echo "<p>Socket open at port $port</p>";
22 |     }
23 | 
24 | ?>
25 | 


--------------------------------------------------------------------------------
/16-2.php:
--------------------------------------------------------------------------------
 1 | <form action="listing16-3.php" method="post">
 2 | <p>
 3 | IP Address:<br />
 4 | <input type="text" name="ip[]" size="3" maxlength="3" value="" />.
 5 | <input type="text" name="ip[]" size="3" maxlength="3" value="" />.
 6 | <input type="text" name="ip[]" size="3" maxlength="3" value="" />.
 7 | <input type="text" name="ip[]" size="3" maxlength="3" value="" />
 8 | </p>
 9 | 
10 | <p>
11 | Subnet Mask:<br />
12 | <input type="text" name="sm[]" size="3" maxlength="3" value="" />.
13 | <input type="text" name="sm[]" size="3" maxlength="3" value="" />.
14 | <input type="text" name="sm[]" size="3" maxlength="3" value="" />.
15 | <input type="text" name="sm[]" size="3" maxlength="3" value="" />
16 | </p>
17 | 
18 | <input type="submit" name="submit" value="Calculate" />
19 | 
20 | </form>
21 | 
22 | <?php
23 |     if (isset($_POST['submit'])) {
24 |         // Concatenate the IP form components and convert to IPv4 format
25 |         $ip = implode('.', $_POST['ip']);
26 |         $ip = ip2long($ip);
27 | 
28 |         // Concatenate the netmask form components and convert to IPv4 format
29 |         $netmask = implode('.', $_POST['sm']);
30 |         $netmask = ip2long($netmask);
31 | 
32 |         // Calculate the network address
33 |         $na = ($ip & $netmask);
34 |         // Calculate the broadcast address
35 |         $ba = $na | (~$netmask);
36 |         // Number of hosts
37 |         $h = ip2long(long2ip($ba)) - ip2long(long2ip($na));
38 | 
39 |         // Convert the addresses back to the dot-format representation and display
40 |         echo "Addressing Information: <br />";
41 |         echo "<ul>";
42 |         echo "<li>IP Address: ". long2ip($ip)."</li>";
43 |         echo "<li>Subnet Mask: ". long2ip($netmask)."</li>";
44 |         echo "<li>Network Address: ". long2ip($na)."</li>";
45 |         echo "<li>Broadcast Address: ". long2ip($ba)."</li>";
46 |         echo "<li>Total Available Hosts: ".($h - 1)."</li>";
47 |         echo "<li>Host Range: ". long2ip($na + 1)." -  ".
48 |               long2ip($ba - 1)."</li>";
49 |        echo "</ul>";
50 |     }
51 | ?>
52 | 


--------------------------------------------------------------------------------
/17-0.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Initiate session and create a few session variables
 3 |     session_start();
 4 | 
 5 |     // Set a few session variables.
 6 |     $_SESSION['username'] = "jason";
 7 |     $_SESSION['loggedon'] = date("M d Y H:i:s");
 8 | 
 9 |     // Encode all session data into a single string and return the result
10 |     $sessionVars = session_encode();
11 |     echo $sessionVars;
12 | ?>
13 | 


--------------------------------------------------------------------------------
/17-02.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |   session_start();
 4 | 
 5 |   // Has a session been initiated previously?
 6 |   if (! isset($_SESSION['username'])) {
 7 | 
 8 |       // If no previous session, has the user submitted the form?
 9 |       if (isset($_POST['username']))
10 |       {
11 | 
12 |         $db = new mysqli("localhost", "webuser", "secret", "corporate");
13 | 
14 |         $stmt = $db->prepare("SELECT first_name FROM users WHERE username = ? and password = ?");
15 | 
16 |         $stmt->bind_param('ss', $_POST['username'], $_POST['password']);
17 | 
18 |         $stmt->execute();
19 | 
20 |         $stmt->store_result();
21 | 
22 |         if ($stmt->num_rows == 1)
23 |         {
24 | 
25 |           $stmt->bind_result($firstName);
26 | 
27 |           $stmt->fetch();
28 | 
29 |           $_SESSION['first_name'] = $firstName;
30 | 
31 |           header("Location: http://www.example.com/");
32 | 
33 |         }
34 | 
35 |       } else {
36 |         require_once('login.html');
37 |       }
38 | 
39 |   } else {
40 |     echo "You are already logged into the site.";
41 |   }
42 | 
43 | ?>
44 | 


--------------------------------------------------------------------------------
/17-03.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Start session
 4 |     session_start();
 5 | 
 6 |     // Connect to server and select database
 7 |     $db = new mysqli("localhost", "webuser", "secret", "corporate");
 8 | 
 9 |     // User wants to view an article, retrieve it from database
10 |     $stmt = $db->prepare("SELECT id, title, content FROM articles WHERE id = ?");
11 | 
12 |     $stmt->bind_param('i', $_GET['id']);
13 | 
14 |     $stmt->execute();
15 | 
16 |     $stmt->store_result();
17 | 
18 |     if ($stmt->num_rows == 1)
19 |     {
20 |       $stmt->bind_result($id, $title, $content);
21 |       #stmt->fetch();
22 |     }
23 | 
24 |     // Add article title and link to list
25 |     $articleLink = "<a href='article.php?id={$id}'>{$title}</a>";
26 | 
27 |     if (! in_array($articleLink, $_SESSION['articles']))
28 |         $_SESSION['articles'][] = $articleLink;
29 | 
30 |     // Display the article
31 |     echo "<p>$title</p><p>$content</p>";
32 | 
33 |     // Output list of requested articles
34 | 
35 |     echo "<p>Recently Viewed Articles</p>";
36 |     echo "<ul>";
37 |     foreach($_SESSION['articles'] as $doc) {
38 |       echo "<li>$doc</li>";
39 |     }
40 |     echo "</ul>";
41 | ?>
42 | 


--------------------------------------------------------------------------------
/17-1.php:
--------------------------------------------------------------------------------
1 | <?php
2 | $password = 'secret';
3 | echo password_hash($password , PASSWORD_DEFAULT) . "\n";
4 | echo password_hash($password , PASSWORD_DEFAULT) . "\n";
5 | echo password_hash($password , PASSWORD_DEFAULT) . "\n";
6 | ?>
7 | 


--------------------------------------------------------------------------------
/17-1.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE users (
2 |    id INTEGER UNSIGNED NOT NULL AUTO_INCREMENT,
3 |    first_name VARCHAR(255) NOT NULL,
4 |    username VARCHAR(255) NOT NULL,
5 |    password VARCHAR(32) NOT NULL,
6 |    PRIMARY KEY(id)
7 | );
8 | 


--------------------------------------------------------------------------------
/17-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class MySQLiSessionHandler {
 4 | 
 5 |   private $_dbLink;
 6 |   private $_sessionName;
 7 |   private $_sessionTable;
 8 |   CONST SESS_EXPIRE = 3600;
 9 | 
10 |   public function __construct($host, $user, $pswd, $db, $sessionName, $sessionTable)
11 |   {
12 |     // Create a connection to the database
13 |     $this->_dbLink = new mysqli($host, $user, $pswd, $db);
14 |     $this->_sessionName = $sessionName;
15 |     $this->_sessionTable = $sessionTable;
16 | 
17 |     // Set the handlers for open, close, read, write, destroy and garbage collection.
18 |     session_set_save_handler(
19 |       array($this, "session_open"),
20 |       array($this, "session_close"),
21 |       array($this, "session_read"),
22 |       array($this, "session_write"),
23 |       array($this, "session_destroy"),
24 |       array($this, "session_gc")
25 |     );
26 | 
27 |     session_start();
28 |   }
29 | 
30 |   function session_open($session_path, $session_name) {
31 |     $this->_sessionName = $session_name;
32 |     return true;
33 |   }
34 | 
35 |   function session_close() {
36 |       return 1;
37 |   }
38 | 
39 |   function session_write($SID, $value) {
40 |     $stmt = $this->_dbLink->prepare("
41 |       INSERT INTO {$this->_sessionTable}
42 |         (sid, value) VALUES (?, ?) ON DUPLICATE KEY
43 |         UPDATE value = ?, expiration = NULL");
44 | 
45 |     $stmt->bind_param('sss', $SID, $value, $value);
46 |     $stmt->execute();
47 | 
48 |     session_write_close();
49 |   }
50 | 
51 |   function session_read($SID) {
52 |       // create a SQL statement that selects the value for the cussent session ID and validates that it is not expired.
53 |       $stmt = $this->_dbLink->prepare(
54 |         "SELECT value FROM {$this->_sessionTable}
55 |          WHERE sid = ? AND
56 |          UNIX_TIMESTAMP(expiration) + " .
57 |          self::SESS_EXPIRE . " > UNIX_TIMESTAMP(NOW())"
58 |       );
59 | 
60 |       $stmt->bind_param('s', $SID);
61 | 
62 |       if ($stmt->execute())
63 |       {
64 |       $stmt->bind_result($value);
65 |         $stmt->fetch();
66 | 
67 |         if (! empty($value))
68 |         {
69 |           return $value;
70 |         }
71 |       }
72 |   }
73 | 
74 |   public function session_destroy($SID) {
75 |     // Delete the record for the session id provided
76 |     $stmt = $this->_dbLink->prepare("DELETE FROM {$this->_sessionTable} WHERE SID = ?");
77 |     $stmt->bind_param('s', $SID);
78 |     $stmt->execute();
79 |   }
80 | 
81 |     public function session_gc($lifetime) {
82 |       // Delete records that are expired.
83 |       $stmt = $this->_dbLink->prepare("DELETE FROM {$this->_sessionTable}
84 |           WHERE UNIX_TIMESTAMP(expiration) < " . UNIX_TIMESTAMP(NOW()) - self::SESS_EXPIRE);
85 | 
86 |       $stmt->execute();
87 |    }
88 | }
89 | 


--------------------------------------------------------------------------------
/18-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $OpenWeather = ['api_key' => '<API KEY>'];
 3 | $zip = "98109";
 4 | $base_url = "https://api.openweathermap.org/data/2.5";
 5 | $weather_url = "/weather?zip=" . $zip;
 6 | $api_key = "&appid={$OpenWeather['api_key']}";
 7 | $api_url = $base_url . $weather_url . $api_key;
 8 | 
 9 | $weather = json_decode(file_get_contents($api_url));
10 | print_r($weather);
11 | 


--------------------------------------------------------------------------------
/18-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $OpenWeather = ['api_key' => '<API KEY>'];
 3 | $zip = "98109";
 4 | $base_url = "https://api.openweathermap.org/data/2.5";
 5 | $weather_url = "/forecast?zip=" . $zip;
 6 | $api_key = "&appid={$OpenWeather['api_key']}";
 7 | $api_url = $base_url . $weather_url . $api_key;
 8 | 
 9 | $weather = json_decode(file_get_contents($api_url));
10 | print_r($weather);
11 | 


--------------------------------------------------------------------------------
/18-3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $url = "http://webservices.amazon.com/onca/xml";
 4 | 
 5 | $param = "AWSAccessKeyId=AKIAIOSFODNN7EXAMPLE&AssociateTag=mytag-20&ItemId=0679722769&Operation=ItemLookup&ResponseGroup=Images%2CItemAttributes%2COffers%2CReviews&Service=AWSECommerceService&Timestamp=2014-08-18T12%3A00%3A00Z&Version=2013-08-01";
 6 | 
 7 | $data = " GET
 8 | webservices.amazon.com
 9 | /onca/xml
10 | " . $param;
11 | 
12 | $key = "1234567890";
13 | $Signature = base64_encode(hash_hmac("sha256", $param, $key, true));
14 | 
15 | $request = $url . "?" . $param . "&Signature=" . $Signature;
16 | 
17 | echo $request;
18 | 


--------------------------------------------------------------------------------
/18-4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $AppId = 'MyApplication';
 3 | $Secret = '1234567890';
 4 | $url = 'https://logservice.com/api/add_event.php';
 5 | $Timestamp = time();
 6 | $Msg = 'Testing of the logging Web Service';
 7 | $params = "AppId={$AppId}&Timestamp={$Timestamp}";
 8 | $Signature = base64_encode(hash_hmac("sha256", $params, $Secret, true));
 9 | $QueryString = $params . '&Msg=' . urlencode($Msg) . '&Signature=' . urlencode($Signature);
10 | echo file_get_contents($url . '?' . $QueryString);
11 | 


--------------------------------------------------------------------------------
/18-5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $AppId = 'MyApplication';
 3 | $Secret = '1234567890';
 4 | $url = 'https://logservice.com/api/get_events.php';
 5 | $Timestamp = time();
 6 | $params = "AppId={$AppId}&Timestamp={$Timestamp}";
 7 | $Signature = base64_encode(hash_hmac("sha256", $params, $Secret, true));
 8 | $QueryString = $params . '&Signature=' . urlencode($Signature);
 9 | echo file_get_contents($url . '?' . $QueryString);
10 | 


--------------------------------------------------------------------------------
/19-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $hash = '$2y$10$s.CM1KaHMF/ZcskgY6FRu.IMJMeoMgaG1VsV6qkMaiai/b8TQX7ES';
 4 | $passwords = ["secret", "guess"];
 5 | 
 6 | foreach ($passwords as $password) {
 7 |    if (password_verify($password, $hash)) {
 8 |       echo "Password is correct\n";
 9 |    }
10 |    else {
11 |       echo "Invalid Password\n";
12 |    }
13 | }
14 | 
15 | ?>
16 | 


--------------------------------------------------------------------------------
/19-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include "./aes.inc";
 3 | 
 4 | $aes = new AES('My Secret Key');
 5 | 
 6 | $e = $aes->encrypt("This message is secure and must be encrypted");
 7 | echo "Encrypted: '$e'\n";
 8 | 
 9 | $d = $aes->decrypt($e);
10 | echo "Decrypted: '$d'\n";
11 | 


--------------------------------------------------------------------------------
/20-1.html:
--------------------------------------------------------------------------------
 1 | <form id="form_register" "action="register.php" method="post">
 2 |  <p>
 3 |  Provide Your E-mail Address <br>
 4 |  <input type="text" name="email" value="">
 5 |  </p>
 6 | 
 7 |  <p>
 8 |  Choose a Username <br />
 9 |  <input type="text" id="username" name="username" value="">
10 |  <a href="nojs.html" class="button" id="check_un">Check Username</a>
11 |  </p>
12 | 
13 |  <p>
14 |  Choose and Confirm Password<br>
15 |  <input type="password" name="password1" value=""> <br>
16 |  <input type="password" name="password2" value="">
17 |  </p>
18 | 
19 |  <p>
20 |  <input type="submit" name="submit" value="Register">
21 |  </p>
22 | </form>
23 | 


--------------------------------------------------------------------------------
/20-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |  // A makeshift accounts repository
 4 |  $accounts = array("wjgilmore", "mwade", "twittermaniac");
 5 | 
 6 |  // Define an array which will store the status
 7 |  $result = array();
 8 | 
 9 |  // If the username has been set, determine if it exists in the repository
10 |  if (isset($_GET['username']))
11 |  {
12 | 
13 |  // Filter the username to make sure no funny business is occurring
14 |  $username = filter_var($_GET['username'], FILTER_SANITIZE_STRING);
15 | 
16 |  // Does the username exist in the $accounts array?
17 |  if (in_array($username, $accounts))
18 |  {
19 |  $result['status'] = "FALSE";
20 |  } else {
21 |  $result['status'] = "TRUE";
22 |  }
23 | 
24 |  // JSON-encode the array
25 |  echo json_encode($result);
26 |  }
27 | ?>
28 | 


--------------------------------------------------------------------------------
/20-3.js:
--------------------------------------------------------------------------------
 1 | <script
 2 |  src="https://code.jquery.com/jquery-3.3.1.min.js"
 3 |  integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8="
 4 |  crossorigin="anonymous"></script>
 5 | <script type="text/javascript">
 6 | $(document).ready(function() {
 7 | 
 8 |  // Attach a click handler to the Check Username button
 9 |  $('#check_un').click(function(e) {
10 | 
11 |  // Retrieve the username field value
12 |  var username = $('#username').val();
13 | 
14 |  // Use jQuery's $.get function to send a GET request to the available.php script
15 |  // and provide an appropriate response based on the outcome
16 |  $.get(
17 |  "available.php",
18 |  {username: username},
19 |  function(response){
20 |  if (response.status == "FALSE") {
21 |  $("#valid").html("Not available!");
22 |  } else {
23 |  $("#valid").html("Available!");
24 |  }
25 |  },
26 |  "json"
27 |  );
28 | 
29 |  // Use jQuery's preventDefault() method to prevent the link from being followed
30 |  e.preventDefault();
31 |  });
32 | });
33 | 
34 | </script>
35 | 


--------------------------------------------------------------------------------
/27-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Create a new server connection
 3 |     $mysqli = new mysqli('localhost', 'catalog_user', 'secret', 'corporate');
 4 | 
 5 |     // Create the query and corresponding placeholders
 6 |     $query = "INSERT INTO products SET sku=?, name=?, price=?";
 7 | 
 8 |     // Create a statement object
 9 |     $stmt = $mysqli->stmt_init();
10 | 
11 |     // Prepare the statement for execution
12 |     $stmt->prepare($query);
13 | 
14 |     // Bind the parameters
15 |     $stmt->bind_param('ssd', $sku, $name, $price);
16 | 
17 |     // Assign the posted sku array
18 |     $skuarray = $_POST['sku'];
19 | 
20 |     // Assign the posted name array
21 |     $namearray = $_POST['name'];
22 | 
23 |     // Assign the posted price array
24 |     $pricearray = $_POST['price'];
25 | 
26 |     // Initialize the counter
27 |     $x = 0;
28 | 
29 |     // Cycle through the array, and iteratively execute the query
30 |     while ($x < sizeof($skuarray)) {
31 |         $sku = $skuarray[$x];
32 |         $name = $namearray[$x];
33 |         $price = $pricearray[$x];
34 |         $stmt->execute();
35 |     }
36 | 
37 |     // Recuperate the statement resources
38 |     $stmt->close();
39 | 
40 |     // Close the connection
41 |     $mysqli->close();
42 | 
43 | ?>
44 | 


--------------------------------------------------------------------------------
/27-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Create a new server connection
 4 |     $mysqli = new mysqli('localhost', 'catalog_user', 'secret', 'corporate');
 5 | 
 6 |     // Create query
 7 |     $query = 'SELECT sku, name, price FROM products ORDER BY sku';
 8 | 
 9 |     // Create a statement object
10 |     $stmt = $mysqli->stmt_init();
11 | 
12 |     // Prepare the statement for execution
13 |     $stmt->prepare($query);
14 | 
15 |     // Execute the statement
16 |     $stmt->execute();
17 | 
18 |     // Bind the result parameters
19 |     $stmt->bind_result($sku, $name, $price);
20 | 
21 |     // Cycle through the results and output the data
22 | 
23 |     while($stmt->fetch())
24 |         printf("%s, %s, %s <br />", $sku, $name, $price);
25 | 
26 |     // Recuperate the statement resources
27 |     $stmt->close();
28 | 
29 |     // Close the connection
30 |     $mysqli->close();
31 | 
32 | ?>
33 | 


--------------------------------------------------------------------------------
/28-1.php:
--------------------------------------------------------------------------------
1 | <?php
2 |     try {
3 |        $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
4 |     } catch (PDOException $exception) {
5 |        echo "Connection error: " . $exception->getMessage();
6 |     }
7 | ?>
8 | 


--------------------------------------------------------------------------------
/28-1.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE products (
2 |    id INT NOT NULL AUTO_INCREMENT,
3 |    sku CHAR(8) NOT NULL,
4 |    title VARCHAR(100) NOT NULL,
5 |    PRIMARY KEY(id)
6 | );
7 | 


--------------------------------------------------------------------------------
/28-10.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function formatRow($row) {
 4 |     return sprintf("Product: %s (%s) <br />", $row[1], $row[0]);
 5 | }
 6 | 
 7 | // Execute the query
 8 | $stmt = $dbh->query('SELECT sku, title FROM products ORDER BY title');
 9 | 
10 | // Retrieve all of the rows
11 | $rows = $stmt->fetchAll();
12 | 
13 | // Output the rows
14 | echo explode(array_map('formatRow', $rows));
15 | 
16 | ?>
17 | 


--------------------------------------------------------------------------------
/28-11.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Connect to the database server
 3 |     $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
 4 | 
 5 |     // Create and prepare the query
 6 |     $query = 'SELECT sku, title FROM products WHERE id=2';
 7 |     $stmt = $dbh->prepare($query);
 8 |     $stmt->execute();
 9 | 
10 |     // Bind according to column offset
11 |     $stmt->bindColumn(1, $sku);
12 | 
13 |     // Bind according to column title
14 |     $stmt->bindColumn('title', $title);
15 | 
16 |     // Fetch the row
17 |     $row = $stmt->fetch(PDO::FETCH_BOUND);
18 | 
19 |     // Output the data
20 |     printf("Product: %s (%s)", $title, $sku);
21 | ?>
22 | 


--------------------------------------------------------------------------------
/28-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     try {
 3 |         $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
 4 |     } catch (PDOException $exception) {
 5 |         printf("Connection error: %s", $exception->getMessage());
 6 |     }
 7 | 
 8 |     $query = "INSERT INTO product(id, sku, title)
 9 |               VALUES(NULL, 'SS873221', 'Surly Soap') ";
10 | 
11 |     $dbh->exec($query);
12 | 
13 |     echo $dbh->errorCode();
14 | ?>
15 | 


--------------------------------------------------------------------------------
/28-3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     try {
 3 |        $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
 4 |     } catch (PDOException $exception) {
 5 |         printf("Failed to obtain database handle %s", $exception->getMessage());
 6 |     }
 7 | 
 8 |     $query = "INSERT INTO product(id, sku, title)
 9 |               VALUES(NULL, 'SS873221', 'Surly Soap') ";
10 | 
11 |     $dbh->exec($query);
12 | 
13 |     print_r($dbh->errorInfo());
14 | 
15 | ?>
16 | 


--------------------------------------------------------------------------------
/28-4.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
4 | echo $dbh->getAttribute(PDO::ATTR_CONNECTION_STATUS);
5 | 
6 | ?>
7 | 


--------------------------------------------------------------------------------
/28-5.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | $query = "UPDATE products SET title='Painful Aftershave' WHERE sku='ZP457321'";
4 | // Be aware of SQL injections when building query strings
5 | $affected = $dbh->exec($query);
6 | echo "Total rows affected: $affected";
7 | 
8 | ?>
9 | 


--------------------------------------------------------------------------------
/28-6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | $query = 'SELECT sku, title FROM products ORDER BY id';
 4 | // Be aware of SQL injections when building query strings
 5 | 
 6 | foreach ($dbh->query($query) AS $row) {
 7 |     printf("Product: %s (%s) <br />", $row[‘title’], $row[‘sku’]);
 8 | }
 9 | 
10 | ?>
11 | 


--------------------------------------------------------------------------------
/28-7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Connect to the database server
 3 |     $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
 4 | 
 5 |     // Create and prepare the query
 6 |     $query = "INSERT INTO products SET sku = :sku, title = :title";
 7 |     $stmt = $dbh->prepare($query);
 8 | 
 9 |     // Execute the query
10 |     $stmt->execute( [':sku' => 'MN873213', ':title' => 'Minty Mouthwash'] );
11 | 
12 |     // Execute again
13 |     $stmt->execute( [':sku' => 'AB223234', ':title' => 'Lovable Lipstick'] );
14 | ?>
15 | 


--------------------------------------------------------------------------------
/28-8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Connect to the database server
 4 |     $dbh = new PDO('mysql:host=localhost;dbname=chp28', 'webuser', 'secret');
 5 | 
 6 |     // Create and prepare the query
 7 |     $query = "INSERT INTO products SET sku = :sku, title = :title";
 8 |     $stmt = $dbh->prepare($query);
 9 | 
10 |     $sku = 'MN873213';
11 |     $title = 'Minty Mouthwash';
12 | 
13 |     // Bind the parameters
14 |     $stmt->bindParam(':sku', $sku);
15 |     $stmt->bindParam(':title', $title);
16 | 
17 |     // Execute the query
18 |     $stmt->execute();
19 | 
20 |     $sku = 'AB223234';
21 |     $title = 'Lovable Lipstick';
22 | 
23 |     // Bind the parameters
24 |     $stmt->bindParam(':sku', $sku);
25 |     $stmt->bindParam(':title', $title);
26 | 
27 |     // Execute again
28 |     $stmt->execute();
29 | ?>
30 | 


--------------------------------------------------------------------------------
/28-9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Connect to the database server
 4 |     $dbh = new PDO("mysql:host=localhost;dbname=chp28", "webuser", "secret");
 5 | 
 6 |     // Execute the query
 7 |     $stmt = $dbh->query('SELECT sku, title FROM products ORDER BY title');
 8 | 
 9 |     while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
10 |         printf("Product: %s (%s) <br />", $row[‘title’], $row[‘sku’]);
11 |     }
12 | 
13 | ?>
14 | 


--------------------------------------------------------------------------------
/29-1-login.php:
--------------------------------------------------------------------------------
1 | <form action="viewbonus.php" method="post">
2 |    Employee ID:<br>
3 |    <input type="text" name="employeeid" size="8" maxlength="8" value="">
4 |    <input type="submit" value="View Present Bonus">
5 | </form>
6 | 


--------------------------------------------------------------------------------
/29-2-viewbonus.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Instantiate the mysqli class
 4 |     $db = new mysqli("localhost", "websiteuser", "jason", "corporate");
 5 | 
 6 |     // Assign the employeeID
 7 |     $eid = filter_var($_POST['employeeid'], FILTER_SANITIZE_NUMBER_INT);
 8 | 
 9 |     // Execute the stored procedure
10 |     $stmt = $db->prepare("SELECT calculate_bonus(?) AS bonus");
11 | 
12 |     $stmt->bind_param('s', $eid);
13 | 
14 |     $stmt->execute();
15 | 
16 |     $stmt->bind_result($bonus);
17 | 
18 |     $stmt->fetch();
19 | 
20 |    printf("Your bonus is \$%01.2f",$bonus);
21 | ?>
22 | 


--------------------------------------------------------------------------------
/29-3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |   // Instantiate the mysqli class
 3 |   $db = new mysqli("localhost", "websiteuser", "jason", "corporate");
 4 | 
 5 |   // Execute the stored procedure
 6 |   $result = $db->query("CALL get_employees()");
 7 | 
 8 |   // Loop through the results
 9 |   while (list($employee_id, $name, $position) = $result->fetch_row()) {
10 |      echo "$employee_id, $name, $position <br>";
11 |   }
12 | 
13 | ?>
14 | 


--------------------------------------------------------------------------------
/30-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |    // Connect to the MySQL database
 4 |    $mysqli = new mysqli("localhost", "websiteuser", "secret", "helpdesk");
 5 | 
 6 | // Create a trigger
 7 | $query = <<<HEREDOC
 8 | DELIMITER //
 9 | CREATE TRIGGER au_reassign_ticket
10 | AFTER UPDATE ON technicians
11 | FOR EACH ROW
12 | BEGIN
13 |    IF NEW.available = 0 THEN
14 |       UPDATE tickets SET  technician_id=null WHERE  technician_id=NEW.id;
15 |    END IF;
16 | END;//
17 | HEREDOC;
18 | $mysqli->query($query);
19 | 
20 | ?>
21 | 


--------------------------------------------------------------------------------
/30-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |    // Connect to the MySQL database
 4 |    $mysqli = new mysqli("localhost", "websiteuser", "secret", "helpdesk");
 5 | 
 6 |    // Assign the POSTed values for convenience
 7 |    $options = array('min_range' => 0, 'max_range' => 1);
 8 |    $email = filter_var($_POST['email'], FILTER_VALIDATE_EMAIL);
 9 |    $available = filter_var($_POST['available'], FILTER_VALIDATE_INT, $options);
10 | 
11 |    // Create the UPDATE query
12 |    $stmt = $mysqli->prepare("UPDATE technicians SET available=? WHERE email=?");
13 | 
14 |    $stmt->bind_param('is', $available, $email);
15 | 
16 |    // Execute query and offer user output
17 |    if ($stmt->execute()) {
18 | 
19 |       echo "<p>Thank you for updating your profile.</p>";
20 | 
21 |       if ($available == 0) {
22 |          echo "<p>Your tickets will be reassigned to another technician.</p>";
23 |       }
24 | 
25 |    } else {
26 |       echo "<p>There was a problem updating your profile.</p>";
27 |    }
28 | 
29 | ?>
30 | 


--------------------------------------------------------------------------------
/31-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Connect to the MySQL database
 4 |     $mysqli = new mysqli("localhost", "websiteuser", "secret", "chapter34");
 5 | 
 6 |     // Create the query
 7 |     $query = "SELECT * FROM employee_contact_info_view";
 8 | 
 9 |     // Execute the query
10 |     if ($result = $mysqli->query($query)) {
11 | 
12 |         printf("<table border='1'>");
13 |         printf("<tr>");
14 | 
15 |         // Output the headers
16 |         $fields = $result->fetch_fields();
17 |         foreach ($fields as $field)
18 |             printf("<th>%s</th>", $field->name);
19 | 
20 |         printf("</tr>");
21 | 
22 |         // Output the results
23 |         while ($employee = $result->fetch_assoc()) {
24 |             // Format the phone number
25 |             $phone = preg_replace("/([0-9]{3})([0-9]{3})([0-9]{4})/",
26 |                                   "(\\1) \\2-\\3", $employee['Telephone']);
27 | 
28 |             printf("<tr>");
29 |             printf("<td>%s</td><td>%s</td>", $employee['First Name'], $employee['Last Name']);
30 |             printf("<td>%s</td><td>%s</td>", $employee['Email Address'], $phone);
31 |             printf("</tr>");
32 | 
33 |       }
34 | 
35 |    }
36 | ?>
37 | 


--------------------------------------------------------------------------------
/32-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Include the HTML_Table package
 4 |     require_once "HTML/Table.php";
 5 | 
 6 |     // Assemble the data in an array
 7 | 
 8 |     $salesreport = array(
 9 |     '0' => ["12309","45633","2010-12-19 01:13:42","$22.04","$5.67","$27.71"],
10 |     '1' => ["12310","942","2010-12-19 01:15:12","$11.50","$3.40","$14.90"],
11 |     '2' => ["12311","7879","2010-12-19 01:15:22","$95.99","$15.00","$110.99"],
12 |     '3' => ["12312","55521","2010-12-19 01:30:45","$10.75","$3.00","$13.75"]
13 |     );
14 | 
15 |     // Create an array of table attributes
16 |     $attributes = array('border' => '1');
17 | 
18 |     // Create the table object
19 | 
20 |     $table = new HTML_Table($attributes);
21 | 
22 |     // Set the headers
23 | 
24 |     $table->setHeaderContents(0, 0, "Order ID");
25 |     $table->setHeaderContents(0, 1, "Client ID");
26 |     $table->setHeaderContents(0, 2, "Order Time");
27 |     $table->setHeaderContents(0, 3, "Sub Total");
28 |     $table->setHeaderContents(0, 4, "Shipping Cost");
29 |     $table->setHeaderContents(0, 5, "Total Cost");
30 | 
31 |     // Cycle through the array to produce the table data
32 | 
33 |     for($rownum = 0; $rownum < count($salesreport); $rownum++) {
34 |         for($colnum = 0; $colnum < 6; $colnum++) {
35 |             $table->setCellContents($rownum+1, $colnum,
36 |                                      $salesreport[$rownum][$colnum]);
37 |         }
38 |     }
39 | 
40 |     // Output the data
41 | 
42 |     echo $table->toHTML();
43 | 
44 | ?>
45 | 


--------------------------------------------------------------------------------
/32-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // Include the HTML_Table package
 4 |     require_once "HTML/Table.php";
 5 | 
 6 |     // Connect to the MySQL database
 7 |     $mysqli = new mysqli("localhost", "websiteuser", "secret", "corporate");
 8 | 
 9 |     // Create an array of table attributes
10 |     $attributes = array('border' => '1');
11 | 
12 |     // Create the table object
13 |     $table = new HTML_Table($attributes);
14 | 
15 |     // Set the headers
16 | 
17 |     $table->setHeaderContents(0, 0, "Order ID");
18 |     $table->setHeaderContents(0, 1, "Client ID");
19 |     $table->setHeaderContents(0, 2, "Order Time");
20 |     $table->setHeaderContents(0, 3, "Sub Total");
21 |     $table->setHeaderContents(0, 4, "Shipping Cost");
22 |     $table->setHeaderContents(0, 5, "Total Cost");
23 | 
24 |     // Cycle through the array to produce the table data
25 | 
26 |     // Create and execute the query
27 |     $query = "SELECT id AS `Order ID`, client_id AS `Client ID`,
28 |                      order_time AS `Order Time`,
29 |                      CONCAT('$', sub_total) AS `Sub Total`,
30 |                      CONCAT('$', shipping_cost) AS `Shipping Cost`,
31 |                      CONCAT('$', total_cost) AS `Total Cost`
32 |                      FROM sales ORDER BY id";
33 | 
34 |     $stmt = $mysqli->prepare($query);
35 | 
36 |     $stmt->execute();
37 | 
38 |     $stmt->bind_result($orderID, $clientID, $time, $subtotal, $shipping, $total);
39 | 
40 |     // Begin at row 1 so don't overwrite the header
41 |     $rownum = 1;
42 | 
43 |     // Format each row
44 | 
45 |     while ($stmt->fetch()) {
46 | 
47 |         $table->setCellContents($rownum, 0, $orderID);
48 |         $table->setCellContents($rownum, 1, $clientID);
49 |         $table->setCellContents($rownum, 2, $time);
50 |         $table->setCellContents($rownum, 3, $subtotal);
51 |         $table->setCellContents($rownum, 4, $shipping);
52 |         $table->setCellContents($rownum, 5, $total);
53 | 
54 |         $rownum++;
55 | 
56 |     }
57 | 
58 |     // Output the data
59 |     echo $table->toHTML();
60 | 
61 |     // Close the MySQL connection
62 |     $mysqli->close();
63 | 
64 | ?>
65 | 


--------------------------------------------------------------------------------
/33-1.php:
--------------------------------------------------------------------------------
 1 | <p>
 2 | Search the employee database:<br />
 3 | <form action="search.php" method="post">
 4 |    Last name:<br>
 5 |    <input type="text" name="lastname" size="20" maxlength="40" value=""><br>
 6 |    <input type="submit" value="Search!">
 7 | </form>
 8 | </p>
 9 | 
10 | <?php
11 | 
12 |    // If the form has been submitted with a supplied last name
13 |    if (isset($_POST['lastname'])) {
14 | 
15 |       // Connect to server and select database
16 | 
17 |       $db = new mysqli("localhost", "websiteuser", "secret", "chapter36");
18 | 
19 |       // Query the employees table
20 |       $stmt = $db->prepare("SELECT firstname, lastname, email FROM employees
21 |                             WHERE lastname like ?");
22 | 
23 |       $stmt->bind_param('s', $_POST['lastname']);
24 | 
25 |       $stmt->execute();
26 | 
27 |       $stmt->store_result();
28 | 
29 |       // If records found, output them
30 |       if ($stmt->num_rows > 0) {
31 | 
32 |         $stmt->bind_result($firstName, $lastName, $email);
33 | 
34 |         while ($stmt->fetch())
35 |           printf("%s, %s (%s)<br />", $lastName, $firstName, $email);
36 |       } else {
37 |          echo "No results found.";
38 |       }
39 | 
40 |    }
41 | ?>
42 | 


--------------------------------------------------------------------------------
/33-2.php:
--------------------------------------------------------------------------------
 1 | <p>
 2 | Search the employee database:<br>
 3 | <form action="search2.php" method="post">
 4 |    Keyword:<br>
 5 |    <input type="text" name="keyword" size="20" maxlength="40" value=""><br>
 6 |    Field:<br>
 7 |    <select name="field">
 8 |       <option value="">Choose field:</option>
 9 |       <option value="lastname">Last Name</option>
10 |       <option value="email">E-mail Address</option>
11 |       </select>
12 |    <input type="submit" value="Search!" />
13 | </form>
14 | </p>
15 | 
16 | <?php
17 |    // If the form has been submitted with a supplied keyword
18 |    if (isset($_POST['field'])) {
19 | 
20 |       // Connect to server and select database
21 |       $db = new mysqli("localhost", "websiteuser", "secret", "chapter36");
22 | 
23 |       // Create the query
24 |       if ($_POST['field'] == "lastname") {
25 |          $stmt = $db->prepare("SELECT firstname, lastname, email
26 |                                FROM employees WHERE lastname like ?");
27 |       } elseif ($_POST['field'] == "email") {
28 |          $stmt = $db->prepare("SELECT firstname, lastname, email
29 |                                FROM employees WHERE email like ?");
30 |       }
31 | 
32 |       $stmt->bind_param('s', $_POST['keyword']);
33 | 
34 |       $stmt->execute();
35 | 
36 |       $stmt->store_result();
37 | 
38 |       // If records found, output them
39 |       if ($stmt->num_rows > 0) {
40 | 
41 |         $stmt->bind_result($firstName, $lastName, $email);
42 | 
43 |         while ($stmt->fetch())
44 |           printf("%s, %s (%s)<br>", $lastName, $firstName, $email);
45 | 
46 |       } else {
47 |         echo "No results found.";
48 |       }
49 |    }
50 | ?>
51 | 


--------------------------------------------------------------------------------
/33-3.php:
--------------------------------------------------------------------------------
 1 | <p>
 2 | Search the online resources database:<br>
 3 | <form action="fulltextsearch.php" method="post">
 4 |    Keywords:<br>
 5 |    <input type="text" name="keywords" size="20" maxlength="40" value=""><br>
 6 |    <input type="submit" value="Search!">
 7 | </form>
 8 | </p>
 9 | 
10 | <?php
11 | 
12 |    // If the form has been submitted with supplied keywords
13 |    if (isset($_POST['keywords'])) {
14 | 
15 |       // Connect to server and select database
16 |       $db = new mysqli("localhost", "websiteuser", "secret", "chapter36");
17 | 
18 |       // Create the query
19 |       $stmt = $db->prepare("SELECT name, url FROM bookmarks
20 |                           WHERE MATCH(description) AGAINST(?)");
21 | 
22 |       $stmt->bind_param('s', $_POST['keywords']);
23 | 
24 |       $stmt->execute();
25 | 
26 |       $stmt->store_result();
27 | 
28 |       // Output retrieved rows or display appropriate message
29 |       if ($stmt->num_rows > 0) {
30 | 
31 |         $stmt->bind_result($url, $name);
32 | 
33 |         while ($result->fetch)
34 |           printf("<a href='%s'>%s</a><br />", $url, $name);
35 |       } else {
36 |           printf("No results found.");
37 |       }
38 |    }
39 | ?>
40 | 


--------------------------------------------------------------------------------
/34-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |    // Give the POSTed item ID a friendly variable name
 4 |    $itemID = filter_var($_POST['itemid'], FILTER_VALIDATE_INT);
 5 |    $participant = new Participant();
 6 |    $buyerID = $participant->getParticipantKey();
 7 | 
 8 |    // Retrieve the item seller and price using some fictitious item class
 9 |    $item = new Item();
10 |    $sellerID = $item->getItemOwner($itemID);
11 |    $price = $item->getPrice($itemID);
12 | 
13 |    // Instantiate the mysqli class
14 |    $db = new mysqli("localhost","website","secret","chapter34");
15 | 
16 |    // Disable the autocommit feature
17 |    $db->autocommit(FALSE);
18 | 
19 |    // Debit buyer's account
20 | 
21 |    $stmt = $db->prepare("UPDATE participants SET cash = cash - ? WHERE id = ?");
22 | 
23 |    $stmt->bind_param('di', $price, $buyerID);
24 | 
25 |    $stmt->execute();
26 | 
27 |    // Credit seller's account
28 |    $query = $db->prepare("UPDATE participants SET cash = cash + ? WHERE id = ?");
29 | 
30 |    $stmt->bind_param('di', $price, $sellerID);
31 | 
32 |    $stmt->execute();
33 | 
34 |    // Update trunk item ownership. If it fails, set $success to FALSE
35 |    $stmt = $db->prepare("UPDATE trunks SET owner = ? WHERE id = ?");
36 | 
37 |    $stmt->bind_param('ii', $buyerID, $itemID);
38 | 
39 |    $stmt->execute();
40 | 
41 |    if ($db->commit()) {
42 |       echo "The swap took place! Congratulations!";
43 |    } else {
44 |       echo "There was a problem with the swap!";
45 |    }
46 | 
47 | ?>
48 | 


--------------------------------------------------------------------------------
/35-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Connect to the MySQL server and select the corporate database
 3 |     $mysqli = new mysqli("localhost","someuser","secret","corporate");
 4 | 
 5 |     // Open and parse the sales.csv file
 6 |     $fh = fopen("sales.csv", "r");
 7 | 
 8 |     while ($fields = fgetcsv($fh, 1000, ","))
 9 |     {
10 |         $id = $ fields[0];
11 |         $client_id = $fields[1];
12 |         $order_time = $fields[2];
13 |         $sub_total = $fields[3];
14 |         $shipping_cost = $fields[4];
15 |         $total_cost = $fields[5];
16 | 
17 |         // Insert the data into the sales table
18 |         $query = "INSERT INTO sales SET id='$id',
19 |             client_id='$client_id', order_time='$order_time',
20 |             sub_total='$sub_total', shipping_cost='$shipping_cost',
21 |             total_cost='$total_cost'";
22 | 
23 |         $result = $mysqli->query($query);
24 |     }
25 | 
26 |     fclose($fh);
27 |     $mysqli->close();
28 | ?>
29 | 


--------------------------------------------------------------------------------
/35-1.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sales (
2 |    id SMALLINT UNSIGNED AUTO_INCREMENT PRIMARY KEY,
3 |    client_id SMALLINT UNSIGNED NOT NULL,
4 |    order_time TIMESTAMP NOT NULL,
5 |    sub_total DECIMAL(8,2) NOT NULL,
6 |    shipping_cost DECIMAL(8,2) NOT NULL,
7 |    total_cost DECIMAL(8,2) NOT NULL
8 | );
9 | 


--------------------------------------------------------------------------------
/4-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | function amortizationTable($paymentNumber, $periodicPayment, $balance, $monthlyInterest)
 4 | {
 5 | 
 6 |     static $table = array();
 7 | 
 8 |     // Calculate payment interest
 9 |     $paymentInterest = round($balance * $monthlyInterest, 2);
10 | 
11 |     // Calculate payment principal
12 |     $paymentPrincipal = round($periodicPayment - $paymentInterest, 2);
13 | 
14 |     // Deduct principal from remaining balance
15 |     $newBalance = round($balance - $paymentPrincipal, 2);
16 | 
17 |     // If new balance < monthly payment, set to zero
18 |     if ($newBalance < $paymentPrincipal) {
19 |         $newBalance = 0;
20 |     }
21 | 
22 |     $table[] = [$paymentNumber, 
23 |       number_format($newBalance, 2), 
24 |       number_format($periodicPayment, 2), 
25 |       number_format($paymentPrincipal, 2),
26 |       number_format($paymentInterest, 2)
27 |     ];
28 | 
29 | // If balance not yet zero, recursively call amortizationTable()
30 |     if ($newBalance > 0) {
31 |          $paymentNumber++;
32 |          amortizationTable($paymentNumber, $periodicPayment,
33 |                             $newBalance, $monthlyInterest);
34 |     }
35 | 
36 |     return $table;
37 | }
38 | 
39 | 


--------------------------------------------------------------------------------
/4-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | include("./4-1.php");
 4 | 
 5 |    // Loan balance
 6 |    $balance = 10000.00;
 7 | 
 8 |    // Loan interest rate
 9 |    $interestRate = .0575;
10 | 
11 |    // Monthly interest rate
12 |    $monthlyInterest = $interestRate / 12;
13 | 
14 |    // Term length of the loan, in years.
15 |    $termLength = 5;
16 | 
17 |    // Number of payments per year.
18 |    $paymentsPerYear = 12;
19 | 
20 |    // Payment iteration
21 |    $paymentNumber = 1;
22 | 
23 |    // Determine total number payments
24 |    $totalPayments = $termLength * $paymentsPerYear;
25 | 
26 |    // Determine interest component of periodic payment
27 |    $intCalc = 1 + $interestRate / $paymentsPerYear;
28 | 
29 |    // Determine periodic payment
30 |    $periodicPayment = $balance * pow($intCalc,$totalPayments) * ($intCalc - 1) /
31 |                                     (pow($intCalc,$totalPayments) - 1);
32 | 
33 |    // Round periodic payment to two decimals
34 |    $periodicPayment = round($periodicPayment,2);
35 | 
36 |    $rows =  amortizationTable($paymentNumber, $periodicPayment, $balance, $monthlyInterest);
37 | 
38 |    // Create table
39 |    echo "<table>";
40 |    echo "<tr>
41 | <th>Payment Number</th><th>Balance</th>
42 | <th>Payment</th><th>Principal</th><th>Interest</th>
43 | </tr>";
44 | 
45 |     foreach($rows as $row) {
46 |         printf("<tr><td>%d</td>", $row[0]);
47 |         printf("<td>$%s</td>", $row[1]);
48 |         printf("<td>$%s</td>", $row[2]);
49 |         printf("<td>$%s</td>", $row[3]);
50 |         printf("<td>$%s</td></tr>", $row[4]);
51 |     }
52 | 
53 |    // Close table
54 |    echo "</table>";
55 | ?>
56 | 
57 | 


--------------------------------------------------------------------------------
/5-1.php:
--------------------------------------------------------------------------------
 1 | <form action="submitdata.php" method="post">
 2 | <p>
 3 |     Provide up to six keywords that you believe best describe the state in
 4 |     which you live:
 5 | </p>
 6 | <p>Keyword 1:<br />
 7 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
 8 | <p>Keyword 2:<br />
 9 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
10 | <p>Keyword 3:<br />
11 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
12 | <p>Keyword 4:<br />
13 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
14 | <p>Keyword 5:<br />
15 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
16 | <p>Keyword 6:<br />
17 | <input type="text" name="keyword[]" size="20" maxlength="20" value="" /></p>
18 | <p><input type="submit" value="Submit!"></p>
19 | </form>
20 | 
21 | 


--------------------------------------------------------------------------------
/6-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Employee
 4 | {
 5 | 
 6 |     private $name;
 7 |     private $title;
 8 | 
 9 |     public function getName() {
10 |         return $this->name;
11 |     }
12 | 
13 |     public function setName($name) {
14 |         $this->name = $name;
15 |     }
16 | 
17 |     public function sayHello() {
18 |         echo "Hi, my name is {$this->getName()}.";
19 |     }
20 | 
21 | }
22 | 
23 | 


--------------------------------------------------------------------------------
/7-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class Employee {
 3 |   private $name;
 4 |   function setName($name) {
 5 |     $this->name = $name;
 6 |   }
 7 |   function getName() {
 8 |     return $this->name;
 9 |   }
10 | }
11 | 
12 | $emp1 = new Employee();
13 | $emp1->setName('John Smith');
14 | $emp2 = $emp1;
15 | $emp2->setName('Jane Smith');
16 | 
17 | echo "Employee 1 = {$emp1->getName()}\n";
18 | echo "Employee 2 = {$emp2->getName()}\n";
19 | 
20 | 


--------------------------------------------------------------------------------
/7-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     class Employee {
 3 |         private $employeeid;
 4 |         private $tiecolor;
 5 |         // Define a setter and getter for $employeeid
 6 |         function setEmployeeID($employeeid) {
 7 |             $this->employeeid = $employeeid;
 8 |         }
 9 | 
10 |         function getEmployeeID() {
11 |             return $this->employeeid;
12 |         }
13 | 
14 |         // Define a setter and getter for $tiecolor
15 |         function setTieColor($tiecolor) {
16 |             $this->tiecolor = $tiecolor;
17 |         }
18 | 
19 |         function getTieColor() {
20 |             return $this->tiecolor;
21 |         }
22 |     }
23 | 
24 |     // Create new Employee object
25 |     $employee1 = new Employee();
26 | 
27 |     // Set the $employee1 employeeid property
28 |     $employee1->setEmployeeID("12345");
29 | 
30 |     // Set the $employee1 tiecolor property
31 |     $employee1->setTieColor("red");
32 | 
33 |     // Clone the $employee1 object
34 |     $employee2= clone $employee1;
35 | 
36 |     // Set the $employee2 employeeid property
37 |     $employee2->setEmployeeID("67890");
38 | 
39 |     // Output the $employee1and $employee2employeeid properties
40 | 
41 |    printf("Employee 1 employeeID: %d <br />", $employee1->getEmployeeID());
42 |    printf("Employee 1 tie color: %s <br />", $employee1->getTieColor());
43 | 
44 |    printf("Employee 2 employeeID: %d <br />", $employee2->getEmployeeID());
45 |    printf("Employee 2 tie color: %s <br />", $employee2->getTieColor());
46 | 
47 | ?>
48 | 
49 | 


--------------------------------------------------------------------------------
/7-3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | // Create new Employee object
 4 | $employee1 = new Employee();
 5 | 
 6 | // Set the $employee1 employeeid property
 7 | $employee1->setEmployeeID("12345");
 8 | 
 9 | // Clone the $employee1 object
10 | $employee2 = clone $employee1;
11 | 
12 | // Set the $employee2 employeeid property
13 | $employee2->setEmployeeID("67890");
14 | 
15 | // Output the $employee1 and $employee2 employeeid properties
16 | printf("Employee1 employeeID: %d <br />", $employee1->getEmployeeID());
17 | printf("Employee1 tie color: %s <br />", $employee1->getTieColor());
18 | printf("Employee2 employeeID: %d <br />", $employee2->getEmployeeID());
19 | printf("Employee2 tie color: %s <br />", $ employee2->getTieColor());
20 | 
21 | 


--------------------------------------------------------------------------------
/7-4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |    // Define a base Employee class
 3 |    class Employee {
 4 | 
 5 |       private $name;
 6 | 
 7 |       // Define a setter for the private $name property.
 8 |       function setName($name) {
 9 |          if ($name == "") echo "Name cannot be blank!";
10 |          else $this->name = $name;
11 |       }
12 | 
13 |       // Define a getter for the private $name property
14 |       function getName() {
15 |          return "My name is ".$this->name."<br />";
16 |       }
17 |    } // end Employee class
18 | 
19 |    // Define an Executive class that inherits from Employee
20 |    class Executive extends Employee {
21 | 
22 |       // Define a method unique to Employee
23 |       function pillageCompany() {
24 |          echo "I'm selling company assets to finance my yacht!";
25 |       }
26 | 
27 |    } // end Executive class
28 | 
29 |    // Create a new Executive object
30 |    $exec = new Executive();
31 | 
32 |    // Call the setName() method, defined in the Employee class
33 |    $exec->setName("Richard");
34 | 
35 |    // Call the getName() method
36 |    echo $exec->getName();
37 | 
38 |    // Call the pillageCompany() method
39 |    $exec->pillageCompany();
40 | ?>
41 | 
42 | 


--------------------------------------------------------------------------------
/7-5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class Employee {
 4 |  private $name;
 5 |  private $salary;
 6 | 
 7 |  function setName($name) {
 8 |    $this->name = $name;
 9 |  }
10 | 
11 |  function setSalary($salary) {
12 |    $this->salary = $salary;
13 |  }
14 | 
15 |  function getSalary() {
16 |    return $this->salary;
17 |  }
18 | }
19 | 
20 | class Executive extends Employee {
21 |  function pillageCompany() {
22 |    $this->setSalary($this->getSalary() * 10);
23 |  }
24 | }
25 | 
26 | class CEO extends Executive {
27 |   function getFacelift() {
28 |      echo "nip nip tuck tuck\n";
29 |   }
30 | }
31 | 
32 | $ceo = new CEO();
33 | $ceo->setName("Bernie");
34 | $ceo->setSalary(100000);
35 | $ceo->pillageCompany();
36 | $ceo->getFacelift();
37 | echo "Bernie's Salary is: {$ceo->getSalary()}\n"; 
38 | ?>
39 | 
40 | 


--------------------------------------------------------------------------------
/8-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | class MyException extends Exception { 
 4 |     function __construct($language, $errorcode) {
 5 |         $this->language = $language;
 6 |         $this->errorcode = $errorcode;
 7 |     }
 8 |     function getMessageMap() {
 9 |         $errors = file("errors/{$this->language}.txt");
10 |         foreach($errors as $error) {
11 |              list($key,$value) = explode(",", $error, 2);
12 |              $errorArray[$key] = $value;
13 |         }
14 |         return $errorArray[$this->errorcode];
15 |     }
16 | }
17 | try {
18 |     throw new MyException("english", 4);
19 | }
20 | catch (MyException $e) {
21 |     echo $e->getMessageMap();
22 | }
23 | 


--------------------------------------------------------------------------------
/8-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     /* The InvalidEmailException class notifies the
 3 |        administrator if an e-mail is deemed invalid. */
 4 |     class InvalidEmailException extends Exception {
 5 |         function __construct($message, $email) {
 6 |            $this->message = $message;
 7 |            $this->notifyAdmin($email);
 8 |         }
 9 | 
10 |         private function notifyAdmin($email) {
11 |            mail("admin@example.org","INVALID EMAIL",$email,"From:web@example.com");
12 |         }
13 |     }
14 | 
15 |     /* The Subscribe class validates an e-mail address
16 |        and adds the e-mail address to the database. */
17 |     class Subscribe {
18 |         function validateEmail($email) {
19 |             try {
20 |                 if ($email == "") {
21 |                     throw new Exception("You must enter an e-mail address!");
22 |                 } else {
23 |                     list($user,$domain) = explode("@", $email);
24 |                     if (! checkdnsrr($domain, "MX"))
25 |                         throw new InvalidEmailException(
26 |                             "Invalid e-mail address!", $email);
27 |                     else
28 |                         return 1;
29 |                 }
30 |             } catch (Exception $e) {
31 |                   echo $e->getMessage();
32 |             } catch (InvalidEmailException $e) {
33 |                   echo $e->getMessage();
34 |                   $e->notifyAdmin($email);
35 |             }
36 |         }
37 |         /* Add the e-mail address to the database */
38 |         function subscribeUser() {
39 |             echo $this->email." added to the database!";
40 |         }
41 |     }
42 | 
43 |     // Assume that the e-mail address came from a subscription form
44 |     $_POST['email'] = "someuser@example.com";
45 | 
46 |     /* Attempt to validate and add address to database. */
47 |     if (isset($_POST['email'])) {
48 |         $subscribe = new Subscribe();
49 |         if($subscribe->validateEmail($_POST['email']))
50 |             $subscribe->subscribeUser($_POST['email']);
51 |     }
52 | ?>
53 | 


--------------------------------------------------------------------------------
/9-1.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // This function will add the acronym's long form
 4 |     // directly after any acronyms found in $matches
 5 |     function acronym($matches) {
 6 |         $acronyms = array(
 7 |             'WWW' => 'World Wide Web',
 8 |             'IRS' => 'Internal Revenue Service',
 9 |             'PDF' => 'Portable Document Format');
10 | 
11 |         if (isset($acronyms[$matches[1]]))
12 |             return $acronyms[$matches[1]] . " (" . $matches[1] . ")";
13 |         else
14 |             return $matches[1];
15 |     }
16 | 
17 |     // The target text
18 |     $text = "The <acronym>IRS</acronym> offers tax forms in
19 |              <acronym>PDF</acronym> format on the <acronym>WWW</acronym>.";
20 | 
21 |     // Add the acronyms' long forms to the target text
22 |     $newtext = preg_replace_callback("/<acronym>(.*)<\/acronym>/U", 'acronym',
23 |                                       $text);
24 | 
25 |     print_r($newtext);
26 | 
27 | ?>
28 | 


--------------------------------------------------------------------------------
/9-2.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     // The target text
 4 |     $text = "The <acronym>IRS</acronym> offers tax forms in
 5 |              <acronym>PDF</acronym> format on the <acronym>WWW</acronym>.";
 6 | 
 7 |     // Add the acronyms' long forms to the target text
 8 |     $newtext = preg_replace_callback("/<acronym>(.*)<\/acronym>/U",
 9 |       function($matches) {
10 |         $acronyms = array(
11 |             'WWW' => 'World Wide Web',
12 |             'IRS' => 'Internal Revenue Service',
13 |             'PDF' => 'Portable Document Format');
14 | 
15 |         if (isset($acronyms[$matches[1]]))
16 |             return $acronyms[$matches[1]] . " (" . $matches[1] . ")";
17 |         else
18 |             return $matches[1];
19 |       },
20 |        $text);
21 |     print_r($newtext);
22 | 
23 | ?>
24 | 


--------------------------------------------------------------------------------
/9-3.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $summary = <<<summary
 3 |     The most up to date source for PHP documentation is the PHP manual.
 4 |     It contins many examples and user contributed code and comments.
 5 |     It is available on the main PHP web site
 6 |     <a href="http://www.php.net">PHP’s</a>.
 7 | summary;
 8 |     $words = sizeof(explode(' ',strip_tags($summary)));
 9 |     echo "Total words in summary: $words";
10 | ?>
11 | 


--------------------------------------------------------------------------------
/9-4.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $substr = "index.html";
 3 |     $log = <<< logfile
 4 |     192.168.1.11:/www/htdocs/index.html:[2010/02/10:20:36:50]
 5 |     192.168.1.13:/www/htdocs/about.html:[2010/02/11:04:15:23]
 6 |     192.168.1.15:/www/htdocs/index.html:[2010/02/15:17:25]
 7 | logfile;
 8 | 
 9 |    // What is first occurrence of the time $substr in log?
10 |    $pos = strpos($log, $substr);
11 | 
12 |    // Find the numerical position of the end of the line
13 |    $pos2 = strpos($log,"\n",$pos);
14 | 
15 |    // Calculate the beginning of the timestamp
16 |    $pos = $pos + strlen($substr) + 1;
17 | 
18 |    // Retrieve the timestamp
19 |    $timestamp = substr($log,$pos,$pos2-$pos);
20 |    echo "The file $substr was first accessed on: $timestamp";
21 | ?>
22 | 


--------------------------------------------------------------------------------
/9-5.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Limit $summary to how many characters?
 3 |     $limit = 100;
 4 | 
 5 |     $summary = <<< summary
 6 |     The most up to date source for PHP documentation is the PHP manual.
 7 |     It contins many examples and user contributed code and comments.
 8 |     It is available on the main PHP web site
 9 |     <a href="http://www.php.net">PHP’s</a>.
10 | summary;
11 | 
12 |     if (strlen($summary) > $limit)
13 |         $summary = substr($summary, 0, strrpos(substr($summary, 0, $limit),
14 |                           ' ')) . '...';
15 |     echo $summary;
16 | ?>
17 | 


--------------------------------------------------------------------------------
/9-6.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $buzzwords = array("mindshare", "synergy", "space");
 3 | 
 4 |     $talk = <<< talk
 5 |     I'm certain that we could dominate mindshare in this space with
 6 |     our new product, establishing a true synergy between the marketing
 7 |     and product development teams. We'll own this space in three months.
 8 | talk;
 9 | 
10 |     foreach($buzzwords as $bw) {
11 |         echo "The word $bw appears ".substr_count($talk,$bw)." time(s).<br />";
12 |     }
13 | ?>
14 | 


--------------------------------------------------------------------------------
/9-7.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $sentence = "The rain in Spain falls mainly on the plain";
 3 | 
 4 |     // Retrieve located characters and their corresponding frequency.
 5 |     $chart = count_chars($sentence, 1);
 6 | 
 7 |     foreach($chart as $letter=>$frequency)
 8 |         echo "Character ".chr($letter)." appears $frequency times<br />";
 9 | ?>
10 | 


--------------------------------------------------------------------------------
/9-8.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     $summary = <<< summary
 3 |     The most up to date source for PHP documentation is the PHP manual.
 4 |     It contins many examples and user contributed code and comments.
 5 |     It is available on the main PHP web site
 6 |     <a href="http://www.php.net">PHP’s</a>.
 7 | summary;
 8 |    $words = str_word_count($summary);
 9 |    printf("Total words in summary: %s", $words);
10 | ?>
11 | 


--------------------------------------------------------------------------------
/9-9.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $summary = <<< summary
 3 |     The most up to date source for PHP documentation is the PHP manual.
 4 |     It contins many examples and user contributed code and comments.
 5 |     It is available on the main PHP web site
 6 |     <a href="http://www.php.net">PHP’s</a>.
 7 | summary;
 8 |    $words = str_word_count($summary,2);
 9 |    $frequency = array_count_values($words);
10 |    print_r($frequency);
11 | ?>
12 | 


--------------------------------------------------------------------------------
/9781430260431.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Apress/beginning-php-and-mysql-5e/4ef0f8355ee4f79f9326e9cb3bb3b80e53871742/9781430260431.jpg


--------------------------------------------------------------------------------
/Contributing.md:
--------------------------------------------------------------------------------
 1 | # Contributing to Apress Source Code
 2 | 
 3 | Copyright for Apress source code belongs to the author(s). However, under fair use you are encouraged to fork and contribute minor corrections and updates for the benefit of the author(s) and other readers.
 4 | 
 5 | ## How to Contribute
 6 | 
 7 | 1. Make sure you have a GitHub account.
 8 | 2. Fork the repository for the relevant book.
 9 | 3. Create a new branch on which to make your change, e.g. 
10 | `git checkout -b my_code_contribution`
11 | 4. Commit your change. Include a commit message describing the correction. Please note that if your commit message is not clear, the correction will not be accepted.
12 | 5. Submit a pull request.
13 | 
14 | Thank you for your contribution!


--------------------------------------------------------------------------------
/ConvertController.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Http\Controllers;
 4 | 
 5 | use Illuminate\Http\Request;
 6 | 
 7 | class ConvertController extends Controller
 8 | {
 9 |     /**
10 |      * Show the conversion form
11 |      *
12 |      * @return \Illuminate\Http\Response
13 |      */
14 |     public function form()
15 |     {
16 |         return view('convertForm');
17 |     }
18 | 
19 |     /**
20 |      * Show the conversion form
21 |      *
22 |      * @return \Illuminate\Http\Response
23 |      */
24 |     public function calc()
25 |     {
26 |         return response()->json([
27 |             'to' => round($_POST['from'] * $_POST['fromUnit'] / $_POST['toUnit'], 2),
28 |         ]);
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Freeware License, some rights reserved
 2 | 
 3 | Copyright (c) 2018 Frank Kromann
 4 | 
 5 | Permission is hereby granted, free of charge, to anyone obtaining a copy 
 6 | of this software and associated documentation files (the "Software"), 
 7 | to work with the Software within the limits of freeware distribution and fair use. 
 8 | This includes the rights to use, copy, and modify the Software for personal use. 
 9 | Users are also allowed and encouraged to submit corrections and modifications 
10 | to the Software for the benefit of other users.
11 | 
12 | It is not allowed to reuse,  modify, or redistribute the Software for 
13 | commercial use in any way, or for a user’s educational materials such as books 
14 | or blog articles without prior permission from the copyright holder. 
15 | 
16 | The above copyright notice and this permission notice need to be included 
17 | in all copies or substantial portions of the software.
18 | 
19 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22 | AUTHORS OR COPYRIGHT HOLDERS OR APRESS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
24 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
25 | SOFTWARE.
26 | 
27 | 
28 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Apress Source Code
 2 | 
 3 | This repository accompanies [*Beginning PHP and MySQL*](https://www.apress.com/9781430260431) by Frank Kromann (Apress, 2018).
 4 | 
 5 | [comment]: #cover
 6 | ![Cover image](9781430260431.jpg)
 7 | 
 8 | Download the files as a zip using the green button, or clone the repository to your machine using Git.
 9 | 
10 | ## Releases
11 | 
12 | Release v1.0 corresponds to the code in the published book, without corrections or updates.
13 | 
14 | ## Contributions
15 | 
16 | See the file Contributing.md for more information on how you can contribute to this repository.


--------------------------------------------------------------------------------
/aes.inc:
--------------------------------------------------------------------------------
 1 | <?php
 2 | //
 3 | class AES {
 4 |     private $key = null;
 5 |     private $cipher = "AES-128-CBC";
 6 | 
 7 |     function __construct($key, $cipher = "AES-128-CBC") {
 8 |         $this->key = $key;
 9 |         $this->cipher = $cipher;
10 |     }
11 | 
12 |     function encrypt($data) {
13 |         if (in_array($this->cipher, openssl_get_cipher_methods())) {
14 |             $ivlen = openssl_cipher_iv_length($this->cipher);
15 |             $iv = openssl_random_pseudo_bytes($ivlen);
16 |             $encrypted = openssl_encrypt($data, $this->cipher, $this->key, OPENSSL_RAW_DATA, $iv);
17 |             $hmac = hash_hmac('sha256', $encrypted, $this->key, true);
18 |             return base64_encode($iv.$hmac.$encrypted);
19 |         }
20 |         else {
21 |             return null;
22 |         }
23 |     }
24 | 
25 |     function decrypt($data) {
26 |         $c = base64_decode($data);
27 |         $ivlen = openssl_cipher_iv_length($this->cipher);
28 |         $iv = substr($c, 0, $ivlen);
29 |         $hmac = substr($c, $ivlen, $sha2len=32);
30 |         $encrypted = substr($c, $ivlen+$sha2len);
31 |         $hmac_check = hash_hmac('sha256', $encrypted, $this->key, true);
32 |         if (hash_equals($hmac, $hmac_check)) {
33 |             return openssl_decrypt($encrypted, $this->cipher, $this->key, OPENSSL_RAW_DATA, $iv);
34 |         }
35 |         else {
36 |             return null;
37 |         }
38 |     }
39 | }
40 | 


--------------------------------------------------------------------------------
/authentication.txt:
--------------------------------------------------------------------------------
1 | jason:68c46a606457643eab92053c1c05574abb26f861
2 | donald:53e11eb7b24cc39e33733a0ff06640f1b39425ea
3 | mickey:1aa25ead3880825480b6c0197552d90eb5d48d23
4 | 


--------------------------------------------------------------------------------
/convertForm.blade.php:
--------------------------------------------------------------------------------
  1 | <!doctype html>
  2 | <html lang="{{ app()->getLocale() }}">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <meta name="viewport" content="width=device-width, initial-scale=1">
  6 | 
  7 |         <title>Unit Converter</title>
  8 | 
  9 |         <!-- Fonts -->
 10 |         <link href="https://fonts.googleapis.com/css?family=Nunito:200,600" rel="stylesheet" type="text/css">
 11 | 
 12 |         <!-- Styles -->
 13 |         <style>
 14 |             html, body {
 15 |                 background-color: #fff;
 16 |                 color: #636b6f;
 17 |                 font-family: 'Nunito', sans-serif;
 18 |                 font-weight: 200;
 19 |                 height: 100vh;
 20 |                 margin: 0;
 21 |             }
 22 | 
 23 |             .full-height {
 24 |                 height: 100vh;
 25 |             }
 26 | 
 27 |             .flex-center {
 28 |                 align-items: center;
 29 |                 display: flex;
 30 |                 justify-content: center;
 31 |             }
 32 | 
 33 |             .position-ref {
 34 |                 position: relative;
 35 |             }
 36 | 
 37 |             .top-right {
 38 |                 position: absolute;
 39 |                 right: 10px;
 40 |                 top: 18px;
 41 |             }
 42 | 
 43 |             .content {
 44 |                 text-align: center;
 45 |             }
 46 | 
 47 |             .title {
 48 |                 font-size: 32px;
 49 |             }
 50 | 
 51 |             .links > a {
 52 |                 color: #636b6f;
 53 |                 padding: 0 25px;
 54 |                 font-size: 12px;
 55 |                 font-weight: 600;
 56 |                 letter-spacing: .1rem;
 57 |                 text-decoration: none;
 58 |                 text-transform: uppercase;
 59 |             }
 60 | 
 61 |             .m-b-md {
 62 |                 margin-bottom: 30px;
 63 |             }
 64 |         </style>
 65 |         <script
 66 |   src="https://code.jquery.com/jquery-3.3.1.min.js"
 67 |   integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8="
 68 |   crossorigin="anonymous"></script>
 69 |     </head>
 70 |     <body>
 71 |         <div class="flex-center position-ref full-height">
 72 |             <div class="content">
 73 |                 <div class="title m-b-md">
 74 |                     Unit Converter
 75 |                 </div>
 76 | 
 77 |                 <div class="links">
 78 |                     <form id="convertForm" method="POST" action="/calculate">
 79 |                        @csrf
 80 |                        <input id="from" name="from" placeholder="From" type="number">
 81 |                        <select id="fromUnit" name="fromUnit">
 82 |                           <option value="25.4">Inch</option>
 83 |                           <option value="304.8">Foot</option>
 84 |                           <option value="1">Millimeter (mm)</option>
 85 |                           <option value="10">Centimeter (cm)</option>
 86 |                           <option value="1000">Meeter (m)</option>
 87 |                        </select>
 88 |                        <br/>
 89 |                        <input id="to" placeholder="To" type="number" disabled>
 90 |                        <select id="toUnit" name="toUnit">
 91 |                           <option value="25.4">Inch</option>
 92 |                           <option value="304.8">Foot</option>
 93 |                           <option value="1">Millimeter (mm)</option>
 94 |                           <option value="10">Centimeter (cm)</option>
 95 |                           <option value="1000">Meeter (m)</option>
 96 |                        </select>
 97 |                        <br/>
 98 |                        <button type="submit">Calculate</button>
 99 |                    </form>
100 |                 </div>
101 |             </div>
102 |         </div>
103 |         <script>
104 | $("#convertForm").submit(function( event ) {
105 | 
106 |   // Stop form from submitting normally
107 |   event.preventDefault();
108 |   // Get some values from elements on the page:
109 |   var $form = $( this ),
110 |     t = $form.find("input[name='_token']").val(),
111 |     f = $form.find("#from").val(),
112 |     fU = $form.find("#fromUnit").val(),
113 |     tU = $form.find("#toUnit").val(),
114 |     url = $form.attr("action");
115 | 
116 |   // Send the data using post
117 |   var posting = $.post( url, { _token: t, from: f, fromUnit: fU, toUnit: tU } );
118 | 
119 |   // Put the results in a div
120 |   posting.done(function( data ) {
121 |     $("#to").val(data.to);
122 |   });
123 | });
124 |         </script>
125 |     </body>
126 | </html>
127 | 


--------------------------------------------------------------------------------
/errata.md:
--------------------------------------------------------------------------------
 1 | # Errata for *Beginning PHP and MySQL*
 2 | 
 3 | On **page 141** There are 2 errors on this page in the same line of code:
 4 |  
 5 | $carBrands = ["Cheverolet", "Chrysler""Ford", "Honda", "Toyota");
 6 | 
 7 | The first error is the closing parentheses ) instead it should be a bracket ] The second error is inside the array there is a missing comma between "Chrysler""Ford" it should be "Chrysler", "Ford".
 8 | 
 9 | The correct syntax for this array is:
10 | $carBrands = ["Cheverolet", "Chrysler", "Ford", "Honda", "Toyota"]; ]
11 | 
12 | ***
13 | 
14 | On **page xx** [Summary of error]:
15 |  
16 | Details of error here. Highlight key pieces in **bold**.
17 | 
18 | ***
19 | 


--------------------------------------------------------------------------------
/log_service.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | class logService {
 3 |     private function authenticate() {
 4 |         if (empty($_GET['AppId']) || empty($_GET['Timestamp']) || empty($_GET['Signature'])) {
 5 |             return false;
 6 |         }
 7 |         else {
 8 |             $Secret = null;
 9 |             // Replace with a lookup of the secret based on the AppId.
10 |             if ($_GET['AppId'] == 'MyApplication') {
11 |                 $Secret = '1234567890';
12 |             }
13 |             If ($Secret) {
14 |                 $params = "AppId={$_GET['AppId']}&Timestamp={$_GET['Timestamp']}";
15 |                 $Signature = base64_encode(hash_hmac("sha256", $params, $Secret, true));
16 |                 If ($Signature == $_GET['Signature']) {
17 |                     return $_GET['AppId'];
18 |                 }
19 |                 else {
20 |                     return false;
21 |                 }
22 |             }
23 |         }
24 |     }
25 | 
26 |     public function addEvent() {
27 |         if ($filename = $this->authenticate()) {
28 |             $entry = gmdate('Y/m/d H:i:s') . ' ' . $_SERVER['REMOTE_ADDR'] . ' ' . $_GET['Msg'];
29 |             file_put_contents('/log/' . $filename .'.log', $entry . "\n", FILE_APPEND);
30 |             header('Content-Type: application/json');
31 |             echo json_encode(true);
32 |         }
33 |         else {
34 |             header('Content-Type: application/problem+json');
35 |             echo json_encode(false);
36 |         }
37 |     }
38 | 
39 |     public function getEvents() {
40 |         if ($filename = $this->authenticate()) {
41 |         header('Content-Type: text/plain');
42 |         readfile('/log/' . $filename .'.log');
43 |     }
44 |     else {
45 |         header('Content-Type: application/problem+json');
46 |         echo json_encode(false);
47 |     }
48 | }
49 | };
50 | 


--------------------------------------------------------------------------------
/logger.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 |     // Assign GET variable
 3 |     $cookie = $_GET['cookie'];
 4 | 
 5 |     // Format variable in easily accessible manner
 6 |     $info = "$cookie\n\n";
 7 | 
 8 |     // Write information to file
 9 |     $fh = @fopen("/home/cookies.txt", "a");
10 |     @fwrite($fh, $info);
11 | 
12 |     // Return to original site
13 |     header("Location: http://www.example.com");
14 | ?>
15 | 


--------------------------------------------------------------------------------