<?php

/**
 * @author Stuart
 * @copyright 2010
 */

class Database
{
    private $server;
    private $username;
    private $password;
    private $database;
    private $connected;

    public function __construct($s, $u, $p, $d)
    {
        $this->server = $s;
        $this->username = $u;
        $this->password = $p;
        $this->database = $d;
        $this->connected = false;
    }

    public function connect()
    {
        if (!mysql_connect($this->server, $this->username, $this->password))
            return false;

        if (!@mysql_select_db($this->database))
            return false;

        $this->connected = true;
        return true;
    }

    public function query($s)
    {
        if (!$this->connected)
            $this->connect();
        $query = mysql_query($s);

        return $query;
    }

    public function anti_inject($sql)
    {
        $sql = preg_replace(sql_regcase(" / (from | select | insert | delete |
                where | drop table | show tables | #|\*|--|\\\\)/"), "", $sql);
        $sql = trim($sql);
        $sql = strip_tags($sql);
        $sql = addslashes($sql);
        return $sql;
    }
}

?>