require('mysqlClass.php');
$db = new mysqlClass();
$mystuff = $db->getStuff();

class mysqlClass {
	public $_Link;
 
	// Construct: Open SQL
	public function __construct()
	{
		$this->_Link = mysql_connect(SITEDB_HOSTNAME, SITEDB_USERNAME, SITEDB_PASSWORD);
		mysql_query("SET NAMES 'utf8'");
		$db = mysql_select_db(SITEDB_DATABASE);
		if(!$this->_Link) $this->callError("Server connection error: " . SITEDB_HOSTNAME . ".");
		if(!$db) $this->callError("Database open error: " . SITEDB_DATABASE . ".");
	}
 
	// Destruct: Close SQL
	public function __destruct() {
		mysql_close($this->_Link);
	}
 
        // Update sample
	public function updateStuff($stuff, $id){
		$sql = sprintf("
			UPDATE 		stuff
			SET		stuff = '%s'
			WHERE		id = %d
		",
			mysql_real_escape_string($stuff), mysql_real_escape_string($id)
		);
		$result = mysql_query($sql, $this->_Link);
		if(!$result) $this->callError("Update Error: " . $sql);
	}
 
        //Insert Sample
	public function insertStuff($stuff){
		$sql = sprintf("
			INSERT INTO		stuff
						(stuff)
				VALUES		('%s');
		",
			mysql_real_escape_string($stuff)
		);
		mysql_query($sql) or $this->callError("Insert Error");
		return mysql_insert_id();
	}
 
	// Select Sample
	public function getStuff(){
		$sql = sprintf("
                    SELECT          *
                    FROM            stuff
		");
		$result = mysql_query($sql, $this->_Link);
		if(!$result) $this->callError("Result error: " . $sql);
		$queryresult = array();
		while ($row = mysql_fetch_object($result)) {
			$queryresult[] = $row;
		}
		mysql_free_result($result);
		return $queryresult;
	}
 
        // Show SQL errors
	function callError($details='') {
		echo 'Database Error: ' . $details . ' Error: ' . mysql_error();
	}
}

ini_set('display_errors', '1');
error_reporting(E_ALL);

var htmlChars:Array = new Array();
 
htmlChars["\\"] = "";
htmlChars["\""] = "";
htmlChars[">"] = "";
htmlChars["<"] = "";

function sanitizeInput(msg:String):String
{
	for (var htmlChar:Object in htmlChars)
	{
    	     msg = msg.split(htmlChar).join(htmlChars[htmlChar]);
	}
	return msg;
}

var safeString:String = sanitizeInput("

htmlChars["Bye"] = "CYA";
 
var safeString:String = sanitizeInput("Bye for now\");
// safeString = "CYA for now"

        private static TcpListener tcl;
        //Generate policy
        private static string response = "" +
                                    "\0";
        public static void Main(string[] args)
        {
            Console.WriteLine("Starting up server...");
 
            tcl = new TcpListener(IPAddress.Any, 843);
            tcl.Start();
            tcl.BeginAcceptSocket(new AsyncCallback(AcceptCallback), tcl);
            Console.WriteLine("Hit enter/return to close");
            Console.ReadLine();
        }
        private static void AcceptCallback(IAsyncResult ar)
        {
            try
            {
                TcpListener listener = null;
                Socket client = null;
 
                listener = (TcpListener)ar.AsyncState;
                client = listener.EndAcceptSocket(ar);
                NetworkStream ns = new NetworkStream(client);
                StreamReader sr = new StreamReader(ns);
                StreamWriter sw = new StreamWriter(ns);
 
                sr.Read();
                //Send policy
                sw.Write(response);
                sw.Flush();
                ns.Flush();
                //Cleanup
                sw.Close();
                sr.Close();
                ns.Close();
                client.Close();
                //Do it again!
                tcl.BeginAcceptSocket(new AsyncCallback(AcceptCallback), tcl);
            }
            catch (Exception e)
            {
                Console.WriteLine(e.Message);
                return;
            }
        }

ALTER PROCEDURE dbo.SPSelectArticles
	@categoryid INT,
	@languageid INT,
	@defaultlanguageid INT,
	@maxarticles INT
AS
SET ROWCOUNT @maxarticles
	SELECT
			A.id AS id, CT.content AS title, CD.content AS description, A.publishdate AS publishdate, AC.color AS categorycolor,
			1 AS iscorrectlanguage
	FROM	articles A
	LEFT OUTER JOIN
		contentitems CT ON CT.cid = A.title_cid AND CT.languageid = @languageid
	LEFT OUTER JOIN
		contentitems CD ON CD.cid = A.description_cid AND CD.languageid = @languageid
	INNER JOIN
		articlecategories AC ON A.categoryid = AC.id
	WHERE	A.publishdate < GETDATE() AND
		A.categoryid = @categoryid AND
		CT.content IS NOT NULL
UNION ALL
	SELECT
			A.id AS id, CTD.content AS title, CDD.content AS description, A.publishdate AS publishdate, AC.color AS categorycolor,
			0 AS iscorrectlanguage
	FROM	articles A
	LEFT OUTER JOIN
		contentitems CTD ON CTD.cid = A.title_cid AND CTD.languageid = @defaultlanguageid
	LEFT OUTER JOIN
		contentitems CDD ON CDD.cid = A.description_cid AND CDD.languageid = @defaultlanguageid
	LEFT OUTER JOIN
		contentitems CT ON CT.cid = A.title_cid AND CT.languageid = @languageid
	LEFT OUTER JOIN
		contentitems CD ON CD.cid = A.description_cid AND CD.languageid = @languageid
	INNER JOIN
		articlecategories AC ON A.categoryid = AC.id
	WHERE	A.publishdate < GETDATE() AND
		A.categoryid = @categoryid AND
		CT.content IS NULL
		ORDER BY A.publishdate DESC

public function setPageTheme($themeid){
    $sql = sprintf("
        UPDATE userpages U
        INNER JOIN themes T ON T.themeid = %d
        SET U.background=T.background, U.font=T.font, U.textcolor=T.textcolor
        WHERE U.userid = %d
    ",
        $this->esc($themeid), $this->userid
    );
    $result = mysql_query($sql, $this->_Link);
    if(!$result) $this->callError("Error: " . $sql);
}