Linux, Apache, MySQL, PHP

<?php
	/** this is the database connections specification files
		can only be changed by an administrator 
	*/
	//connect to database

	require_once("constants.php");
	
	class MySQLDB
	{
		var $connection;				//the mysql database connection
		var $num_active_user;			//number of active users viewing site
		var $num_active_guests;			//number of guests viewing site
		var $num_members;				//number of signed users
		
		//class constructor
		function MySLQDB()
		{
			
			
			$this->connection = mysql_connect(DB_SERVER, DB_USER, DB_PASS) or die (mysql_error());
			mysql_select_db(DB_NAME, $this->connection) or die(mysql_error());
			
			//only query database to find out number of members when getnummembers() is called for the first time, until then
			//default value is set
			$this->num_members = -1;
			
			if(TRACK_VISITORS)
			{
				//calculate number of users at site
				$this->calcNumActiveUsers();
				
				//calculate number of guests at site
				$this->calcNumActiveGuests();
			}
		}
		//confirm users pass
		function confirmUserpass($username, $password)
		{
			//add slashes if necessary
			if(!get_magic_quotes_gpc())
			{
				$username = addslashes($username);
			}
			
			//verify that username is in database
			$q = "SELECT password FROM members WHERE username = '$username'";
			$result = mysql_query($q, $this->connection);
			if(!$result || (mysql_num_rows($result) < 1))
			{
				return 1; //indicate username failure
			}
			
			//retrieve password from result, strip slashes
			$dbarray = mysql_fetch_array($result);
			$dbarray['password'] = stripslashes($dbarray['password']);
			$password = stripslashes($password);
			
			//validate that password is correct
			if($password == $dbarray['password'])
			{
				return 0; //success! username and password confirmed
			}
			else 
			{
				return 2; //indicate password failure
			}
		}
		
		//confirm userid
		function confirmUserID($username, $userid)
		{
			//add slashes if necessary (for query)
			if(!get_magic_quotes_gpc())
			{
				$username = addslashes($username);
			}
			
			//verify that username is in database
			$q = "SELECT id FROM members WHERE username  = '$username'";
			$result = mysql_query($q, $this->connection);
			if(!$result || (mysql_num_rows($result) < 1))
			{
				return 1; //indicates username failure
			}
			
			//retrieve userid from database, strip slashes
			$dbarray = mysql_fetch_array($result);
			$dbarray['id'] = stripslashes($dbarray['id']);
			$userid = stripslashes($userid);
			
			//validate that userid is correct
			if($userid == $dbarray['id'])
			{
				return 0; //success! username and userid are correct
			}
			else
			{
			 return  2; //indicates userid invalid
		}
	}
	
	//username taken
	function usernameTaken($username)
	{
		if(!get_magic_quotes_gpc())
		{
			$username = addslashes($username);
		}
		$q = "SELECT username FROM members WHERE username = '$username'";
		$result = mysql_query($q, $this->connection);
		return (mysql_num_rows($result) > 0);
	}
	
	//username banned
	function usernameBanned($username)
	{
		if(!get_magic_quotes_gpc())
		{
			$username = addslashes($username);
		}
		$q = "SELECT username FROM members WHERE username = '$username'";
		$result = mysql_query($q, $this->connection);
		return (mysql_num_rows($result) > 0);
	}
	
	//add new user
	function addNewUser($username, $password, $email)
	{
		$time = time();
		//if admin sign up give admin user level
		if(strcasecmp($username, ADMIN_NAME) == 0)
		{
			$ulevel = ADMIN_LEVEL;
		}
		else
		{
			$ulevel = USER_LEVEL;
		}
		$q = "INSERT INTO members VALUES ('$username', '$password', '0', $ulevel, '$email', $time)";
		return mysql_query($q, $this->connection);
	}
	//update user field
	function updateUserField($username, $field, $value)
	{
		$q = "UPDATE members SET ".$field." = '$value' WHERE username = '$username'";
		return mysql_query($q, $this->connection);
	}
	
	//get userinfo
	function getUserInfo($username)
	{
		$q = "SELECT * FROM  members WHERE username = '$username'";
		$result = mysql_query($q, $this->connection);
		//error occured, return given name by default
		if(!$result || (mysql_num_rows($result) < 1))
		{
			return NULL;
		}
		//return result array
		$dbarray = mysql_fetch_array($result);
		return $dbarray;
	}
	
	//getnumMembers
	function getNumMembers()
	{
		if($this->num_members < 0)
		{
			$q = "SELECT * FROM members";
			$result = mysql_query($q, $this->connection);
			$this->num_members = mysql_num_rows($result);
		}
		return $this->num_members;
	}
	
	//calcnumactiveusers
	function calcNumActiveUsers()
	{
		$q = "SELECT * FROM active_users";
		$result = mysql_query($q, $this->connection);
		$this->num_active_users = mysql_num_rows($result);
	}
	
	//calcactiveguests
	function calcNumActiveGuests()
	{
		$q = "SELECT * FROM active_guests";
		$result = mysql_query($q, $this->connection);
		$this->num_active_guests = mysql_num_rows($result);
	}
	
	//addactiveuser
	function addActiveUser($username, $time)
	{
		$q = "UPDATE members SET timestamp = '$time' WHERE username = '$username'";
		mysql_query($q, $this->connection);
		
		if(!TRACK_VISITORS) return;
		$q = "REPLACE INTO active_users VALUES ('$username', '$time')";
		mysql_query($q, $this->connection);
		$this->calcNumActiveUsers();
	}

	//addactiveguests
	function addActiveGuest($ip, $time)
	{
		if(!TRACK_VISITORS) return;
		$q = "REPLACE INTO active_guests VALUES ('$ip, '$time')";
		mysql_query($q, $this->connection);
		$this->calcNumActiveGuests();
	}
	
	//remove active users
	function removeActiveUser($username)
	{
		if(!TRACK_VISITORS) return;
		$q = "DELETE FROM ACTIVE_USERS WHERE username = '$username'";
		mysql_query($q, $this->connection);
		$this->calcNumActiveUsers();
	}
	
	//remove active guests
	function removeActiveGuest($ip)
	{
		if(!TRACK_VISITORS) return;
		$q = "DELETE FROM ACTIVE_GUESTS WHERE ip = '$ip'";
		mysql_query($q, $this->connection);
		$this->calcNumActiveGuests();
	}
	
	//remove Inactiveusers
	function removeInactiveUsers()
	{
		if(!TRACK_VISITORS) return;
		$timeout = time()-USER_TIMEOUT*60;
		$q = "DELETE FROM ACTIVE_USERS WHERE timestamp < $timeout";
		mysql_query($q, $this->connection);
		$this->calcNumActiveUsers();
	}
	
	//remove inactiveguests
		function removeInactiveGuests()
	{
		if(!TRACK_VISITORS) return;
		$timeout = time()-GUEST_TIMEOUT*60;
		$q = "DELETE FROM ACTIVE_GUESTS WHERE timestamp < $timeout";
		mysql_query($q, $this->connection);
		$this->calcNumActiveGuests();
	}
	
	//query - performs the given query on the database and returns the result which may be false or true or 
	//a resource identifier
	function query($query)
	{
		return mysql_query($query, $this->connection);
	}
	};
	
	
	//create database connection
	$database = new MySQLDB;
	
	
		
?>

if (substr(php_sapi_name(), 0, 3) == 'cgi')
    header("Status: 404 Not Found");
else
    header("HTTP/1.1 404 Not Found");

<?php

if (substr(php_sapi_name(), 0, 3) == 'cgi')
	header("Status: 404 Not Found");
else
	header("HTTP/1.1 404 Not Found");

?>
<!DOCTYPE html>
<html>
<head>
	<title>My 404!!</title>
</head>
<body>
	<h1>My 404!!!</h1>
</body>
</html>

class FileHeader
{
    private $contentSize;
    private $titleLength;
    private $headerLength;
}