He probbably made it himself, im guessing. But im not taking sides, but sure, its wasnt on WAMP, but it also wasnt 'as' public as your making out, he didnt go around giving the link etc...
Well, youve said your friend gave you a code to put in globals.php, im guessing this was ment to secure the game. Wrong, no on piece of code in one file will secure your game...
could do something like;
function colour_name($name) {
//function
return $output;
}
Near the end of globals:
$ir['username'] = colour_name($ir['username']);