public function getQCEWQuarter($stfips, $areatype, $area, $periodyear, $periodtype, $period)
 {
     $link = getDatabaseConnection();
     $query = sprintf(" SELECT ind.*, format(ind.estab, '###,###,###.##') as estab_fmt,  \n                             format(ind.totwage, '###,###,###.##') as totwage_fmt, \n                             format(ind.avgwkwage, '###,###,###.##') as avgwage_fmt, \n                             format(ind.avgemp, '###,###,###.##') as avgemp_fmt, ic.codetitle \n                             FROM wid.industry ind\n                             INNER JOIN wid.indcodes ic ON ind.indcodty = ic.codetype \n                             AND ind.indcode = ic.code\n                             WHERE ind.stfips = '%s'\n                             AND ind.areatype = '%s'\n                             AND ind.area = '%s'\n                             AND ind.periodyear = '%s'\n                             AND ind.periodtype = '%s'\n                             AND ind.period = '%s'\n                             ORDER BY indcode, period ", mysql_real_escape_string($stfips), mysql_real_escape_string($areatype), mysql_real_escape_string($area), mysql_real_escape_string($periodyear), mysql_real_escape_string($periodtype), mysql_real_escape_string($period));
     $list = $this->getResult($query, $link);
     return $list;
 }

 public function getAreaList($stfips, $areatype)
 {
     $link = getDatabaseConnection();
     $query = sprintf("select * from wid.geog " . "where stfips = '%s' and areatype = '%s' order by stfips, areatype, area", mysql_real_escape_string($stfips), mysql_real_escape_string($areatype));
     $arealist = $this->getJSONResult($query, $link);
     return $arealist;
 }

 public function getList($stfips, $areatype, $area, $seriescode, $adjusted)
 {
     $link = getDatabaseConnection();
     $query = sprintf(" SELECT s.seriesttls, s.serieslvl,  empces, format(c.empces, '###,###,###.##') as empces_fmt,\n                            c.periodyear, c.periodtype, c.period, c.stfips, c.areatype, c.area,\n                            c.adjusted, c.seriescode, c.prelim\n                             FROM wid.cescode s\n                             INNER JOIN wid.ces c ON c.stfips = s.stfips\n                             AND c.seriescode = s.seriescode\n                             WHERE c.stfips = '%s'\n                             AND c.areatype = '%s'\n                             AND c.area = '%s'\n                             AND c.seriescode = '%s'\n                             and c.adjusted = '%s'\n                             ORDER BY periodyear, periodtype, period, prelim ", mysql_real_escape_string($stfips), mysql_real_escape_string($areatype), mysql_real_escape_string($area), mysql_real_escape_string($seriescode), mysql_real_escape_string($adjusted));
     $list = $this->getResult($query, $link);
     return $list;
 }

 protected function processData()
 {
     //Alpha-num
     sanitizeUsername($this->username);
     //Verify username and password length requirements
     if (strlen($this->username) > 40) {
         throw new Exception("Username must be shorter than 40 characters");
     }
     if (strlen($this->username) > 72) {
         throw new Exception("Password must be shorter than 72 characters");
     }
     //verify username available
     $conn = getDatabaseConnection();
     $availabilityQuery = new UsernameAvailabilityQuery($conn, $this->username);
     $available = $availabilityQuery->getNumRows() == 0;
     if ($available) {
         //hash pw
         $this->password = password_hash($this->password, PASSWORD_DEFAULT);
         //add user
         $addUserQuery = new AddUserQuery($conn, $this->username, $this->password);
         $addUserQuery->query();
     } else {
         //username taken
         throw new Exception("Username taken");
     }
     return true;
 }

 public function getLicxocc($stfips, $areatype, $area, $occcode)
 {
     $link = getDatabaseConnection();
     $query = sprintf(" SELECT * from wid.licxocc x \n                             inner join wid.license l \n                             on l.stfips = x.stfips \n                             and l.licenseid = x.licenseid \n                             where l.stfips = '%s'\n                             and l.areatype = '%s'\n                             and l.area = '%s'\n                             and x.occcode = '%s' ", mysql_real_escape_string($stfips), mysql_real_escape_string($areatype), mysql_real_escape_string($area), mysql_real_escape_string($occcode));
     $list = $this->getResult($query, $link);
     return $list;
 }

function getTripInfo($tripId)
{
    $rsp = new JsonResponse_TripInfo("Problem getting trip info.");
    // Connect to database
    $conn = getDatabaseConnection();
    // Prepare statement to get all waypoints with that tripid
    $statement = $conn->prepare('SELECT time, latitude, longitude
		FROM waypoints WHERE trip = :trid', array(PDO::ATTR_CURSOR => PDO::CURSOR_FWDONLY));
    // Execute
    $statement->execute(array(':trid' => $tripId));
    $wps = $statement->fetchAll();
    // Loop over results and build response data.. just space-sep'd vals
    $timez = "";
    $latz = "";
    $longz = "";
    for ($i = 0, $l = count($wps); $i < $l; ++$i) {
        $timez .= $wps[$i][0] . " ";
        $latz .= $wps[$i][1] . " ";
        $longz .= $wps[$i][2] . " ";
    }
    $rsp->times = $timez;
    $rsp->lats = $latz;
    $rsp->longs = $longz;
    // Return info
    $rsp->setSuccessful();
    $rsp->respondAndExit();
}

 public function getSocCips($soccode)
 {
     $link = getDatabaseConnection();
     $query = sprintf(" SELECT * from wid.cipcode c \n                            inner join wid.socxcip s on s.cipcode = c.cipcode\n                            where soccode = '%s'", mysql_real_escape_string($soccode));
     $list = $this->getResult($query, $link);
     return $list;
 }

 public function getList($stfips, $areatype, $area, $popsource)
 {
     $link = getDatabaseConnection();
     $query = sprintf(" SELECT * from wid.populatn \n                             where stfips = '%s'\n                             and areatype = '%s'\n                             and area = '%s'\n                             and popsource = '%s' \n                             and periodyear >= '1980' ", mysql_real_escape_string($stfips), mysql_real_escape_string($areatype), mysql_real_escape_string($area), mysql_real_escape_string($popsource));
     $list = $this->getResult($query, $link);
     return $list;
 }

 public function getCenLabor($stfips, $periodyear)
 {
     $link = getDatabaseConnection();
     $sqlstring = "\n   select censtitle, format(femalelf, '#,###,###.##') as femalelf, format(malelf, '#,###,###.##') as malelf\n   from wid.censcode c, wid.cenlabor l \n   where c.censcode = l.censcode\n   and l.stfips = '%s'\n   and l.periodyear = '%s' \n   order by c.censcode";
     $query = sprintf($sqlstring, mysql_real_escape_string($stfips), mysql_real_escape_string($periodyear));
     $cenlab = $this->getJSONResult($query, $link);
     return $cenlab;
 }

 protected function processData()
 {
     //add game
     $conn = getDatabaseConnection();
     $addGameQuery = new IncreaseScoreQuery($conn, $this->game, $this->player, $this->increaseAmount);
     $addGameQuery->query();
     return true;
 }

 function __construct()
 {
     if (PRODUCTION_ENVIRONMENT) {
         require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/db.php';
     } else {
         require_once '../db.php';
     }
     $this->db = getDatabaseConnection();
 }

 public function getEmployerData($stfips = "41", $areatype = "01", $area = "000000", $zipcode = "", $naicscode = "000000", $sizeclass = "9", $annsalrng = "X", $search = "", $page = "1", $rows = "25", $sord = "asc", $sidx = "name")
 {
     $link = getDatabaseConnection();
     $page = max($page, 1);
     $start = $page * $rows + 1 - $rows;
     $where = sprintf(" WHERE stfips = '%s' ", mysql_real_escape_string($stfips)) . sprintf($areatype == '01' ? "" : " and areatype = '%s' and area = '%s' ", mysql_real_escape_string($areatype), mysql_real_escape_string($area)) . sprintf($naicscode == '000000' ? "" : " and primnaics like '%s' ", mysql_real_escape_string($naicscode . '%')) . sprintf($search == '' ? "" : " and name like '%s' ", mysql_real_escape_string('%' . $search . '%')) . sprintf($annsalrng == 'X' ? "" : " and annsalrng='%s'", mysql_real_escape_string($annsalrng)) . sprintf($zipcode == '' ? "" : " and zipcode='%s'", mysql_real_escape_string($zipcode)) . sprintf(($sizeclass == '9' ? "" : " and empsizrng='%s'") . " order by " . $sidx . " " . $sord . "  ", mysql_real_escape_string($sizeclass));
     $query = "select * from wid.empdb " . $where . " limit " . ($start - 1) . ", " . $rows;
     return $this->getEmployerResult($query, $where, $rows, $page, $link);
 }

 private static function updateUtilisateur($utilisateur)
 {
     try {
         $bdd = getDatabaseConnection();
         $request = $bdd->prepare('UPDATE utilisateur SET nom=?, prenom=?, mail=?, username=?, password=? WHERE userId = ? ;');
         $result = $request->execute(array($utilisateur->getNom(), $utilisateur->getPrenom(), $utilisateur->getMail(), $utilisateur->getUserName(), $utilisateur->getPasswordHash(), $utilisateur->getID()));
     } catch (Exception $e) {
         die("Message: " + $e->getMEssage());
     }
 }

 protected function processData()
 {
     //roll dice
     $conn = getDatabaseConnection();
     $dice = array();
     for ($i = 0; $i < 6; $i++) {
         array_push($dice, rand(1, 6));
     }
     $rollDiceQuery = new RollDiceQuery($conn, $this->game, $dice);
     $rollDiceQuery->query();
     return true;
 }

 protected function processData()
 {
     //add game
     $conn = getDatabaseConnection();
     $addGameQuery = new AddGameQuery($conn, $this->player1, $this->player2);
     $addGameQuery->query();
     //roll dice
     $dice = array();
     for ($i = 0; $i < 6; $i++) {
         array_push($dice, rand(1, 6));
     }
     $rollDiceQuery = new RollDiceQuery($conn, $conn->insert_id, $dice);
     $rollDiceQuery->query();
     return true;
 }

function doLogin($user_id, $user_pass)
{
    $connect = getDatabaseConnection();
    // See if the user is in the database
    $query = sprintf("SELECT * from user_access where lower(user_id) = lower('%s') and user_pass = '%s'", mysql_real_escape_string($user_id), mysql_real_escape_string($user_pass));
    $result = mysql_query($query);
    $num = mysql_num_rows($result);
    if ($num > 0) {
        // Generate a GUID
        $result = mysql_query("select uuid() as unique_id");
        $retVal = mysql_result($result, 0, "unique_id");
        mysql_query("update user_access set user_session_uuid='" . $retVal . "', last_access_datetime=utc_timestamp()");
    } else {
        $retVal = null;
    }
    closeDatabaseConnection($connect);
    return $retVal;
}

 protected function processData()
 {
     //Alpha-num
     sanitizeUsername($this->username);
     //Verify username and password length requirements
     if (strlen($this->username) > 40) {
         throw new Exception("Username invalid");
     }
     if (strlen($this->username) > 72) {
         throw new Exception("Password incorrect");
     }
     //verify password
     $conn = getDatabaseConnection();
     $storedPassQuery = new PasswordQuery($conn, $this->username);
     $storedPassHash = $storedPassQuery->getPassword();
     $valid = password_verify($this->password, $storedPassHash);
     return $valid;
 }

 public function __construct($target, $singularity = false)
 {
     if (!$singularity) {
         trigger_error('STOP! Use: $db = databaseMachine::getDatabaseMachine();', E_USER_NOTICE);
         exit(1);
     }
     $this->_target = $target;
     if (!isset($this->_dbLink)) {
         $this->_dbLink = getDatabaseConnection();
     }
     if ($this->_dbLink) {
         if (!@mysql_select_db($this->_target, $this->_dbLink)) {
             trigger_error('Could not select database target: ' . $this->_target, E_USER_NOTICE);
             @mysql_close($this->_dbLink);
             $this->_dbLink = null;
         }
     } else {
         trigger_error('Could not connect to database server.', E_USER_NOTICE);
     }
 }

function hasValidSession()
{
    // See if username and password are set in session variables
    if ($_SESSION["uname"] == null || $_SESSION["phash"] == null) {
        return false;
    }
    // Try connecting to database
    $conn = getDatabaseConnection();
    // Prepare statement to check for users with that name
    $statement = $conn->prepare('SELECT hashedpw
		FROM users WHERE username = :username', array(PDO::ATTR_CURSOR => PDO::CURSOR_FWDONLY));
    // Execute
    $statement->execute(array(':username' => $_SESSION["uname"]));
    $wps = $statement->fetchAll();
    // If no users available, can't be a valid session...
    if (count($wps) == 0) {
        return false;
    }
    // Get hashed password (could check that only one user exists, but okay)
    $phash = $wps[0][0];
    // If equal to session var then fine
    return $phash == $_SESSION["phash"];
}

 * A HTML/PHP script file that acts as the account
 * portal authorized by logging into the MySQL
 * accounts database table used by the SWGEMU 
 * Core3 server for user management within MySQL.
 * 
 * Refer to Register.php for DB structure.
 * 
 * fin
 */
require_once 'includes/Conn.php';
session_start();
//Is this the indexed session from account_id?
if (!isset($_SESSION["account_id"])) {
    header('Location: Login.php');
} else {
    $con = getDatabaseConnection();
    $account_id = $_SESSION["account_id"];
    //Match query to account_id row
    if ($stmt = $con->prepare("SELECT username FROM accounts WHERE account_id=?")) {
        $stmt->bind_param("i", $account_id);
        $stmt->execute();
        $result = $stmt->get_result();
        if ($result->num_rows == 1) {
            $row = $result->fetch_assoc();
        } else {
            session_unset();
            header("Location: Login.php");
            exit(0);
        }
    }
}