<?php
$dns="GunzDB";
$user="sa";
$pass="Haha, nice try.";
$connect=odbc_connect($GunzDB, $sa, $Haha, nice try.) or die ("Couldn't connect to the database, we're sorry...");
odbc_exec($connect,"use GunzDB");
function antisql($bericht){
$bericht = stripslashes($bericht);
$bericht = htmlspecialchars($bericht);
$bericht = nl2br($bericht);
return $bericht;
}
if(isset($_GET['action']) AND $_GET['action'] == "register"){
if(empty($_POST['username'])){
$error.="No username filled!<br>";
}
if(empty($_POST['password'])){
$error.="No password filled!<br>";
}
if(empty($_POST['email'])){
$error.="No e-mail filled!<br>";
}
if(empty($_POST['name'])){
$error.="No name filled!<br>";
}
if(empty($_POST['age'])){
$error.="No age filled!<br>";
}
if($error == TRUE){
echo "<br><br><center>There are some troubles while registering your account:<br>".$error."</center><br>";
die();
}
else
{
$regdate = date("Y-m-d H:i:s");
$email = antisql($_POST['email']);
$reg = "INSERT INTO Account (UserID, UGradeID, PGradeID, RegDate, Email, Age, Name) VALUES ('".antisql($_POST['username'])."', '1', '1', '$regdate', '$email', '".antisql($_POST['age'])."', '".antisql($_POST['name'])."')";
$query = odbc_exec($connect,$reg);
$gebruiker1 = "SELECT AID FROM Account WHERE UserID='".antisql($_POST['username'])."'";
$gebruiker = odbc_exec($connect,$gebruiker1);
$i=1;
while (odbc_fetch_row($gebruiker, $i)){
$aid = odbc_result($gebruiker, 'AID');
$i++;
}
if (!$aid)
{
die ("Oeps, something's wrong with the database");
}
$reg2 = "INSERT INTO Login (UserID, AID, Password) VALUES ('".antisql($_POST['username'])."', '$aid', '".antisql($_POST['password'])."')";
$query = odbc_exec($connect,$reg2);
print ("<center>Your account is succesfully created!</center>");
}
}
?>
<center>
<div align="center"><b>You can register a Gunz account right here:</b><br>
<br>
<?php echo "<form action='".$_SERVER['PHP_SELF']."?action=register' method='POST'>"; ?>
</div>
<tr>
<td align=center height='24'>Username</td>
<td align=center height='24'><input type='text' name='username'></td>
</tr>
<br>
<tr>
<td align=center height='24'>Password</td>
<td align=center height='24'><input type='password' name='password'></td>
</tr>
<br>
<tr>
<td align=center height='24'>E-mail </td>
<td align=center height='24'><input type='text' name='email'></td>
</tr>
<br>
<tr>
<td align=center height='24'>Name </td>
<td align=center height='24'><input type='text' name='name'></td>
</tr>
<br>
<tr>
<td align=center height='24'>Age </td>
<td align=center height='24'><input type='text' name='age'></td>
</tr>
<br>
<tr>
<td align=center height='24'></td>
<td align=center height='24'><input type='submit' value='Register!'></td>
</tr>
</form>
<p align="center"><strong>Made By WizKid</strong></p>
