<?php
//Configuration Settings
ini_set('display_errors', 1); //Show Errors 0 = off, 1 = on
error_reporting(E_ALL);
// SQL Data
define('MSSQL_HOST', ''); // MsSQL Host
define('MSSQL_USER', ''); // MsSQL Username
define('MSSQL_PASS', ''); // MsSQL Password
//Setting the Salt
$salt = '';
//Connecting to mssql
$connect = mssql_connect(MSSQL_HOST, MSSQL_USER, MSSQL_PASS);
if(!$connect)
{
//If the connection is not succes then show the error.
echo 'There is an problem with the query:'.mssql_get_last_message().'';
}
else
{
//If there are no error messages then proceed.
$db = mssql_select_db("ACCOUNT_DBF"); //Database Selecting
if(!$db)
{
//If the script can't connect to the database show an error
echo 'There is an problem with connecting to the database '.mssql_get_last_message().'';
}
else
{
//If there is no error then proceed//
//Here we gonna add an function to prevend mssql_injection
function mssql_escape_string($string) {
$replaced_string = str_replace("'", "''", $string);
return $replaced_string;
}
//Here is the check if the user has submitted the Form.
If($_SERVER['REQUEST_METHOD'] == "POST")
{
if(isset($_POST['reg']))
{
//Checking if the fields are not empty//
if($_POST['account'] == "" || $_POST['pass'] == "" || $_POST['pass2'] == "" || $_POST['reg_email'] == "")
{
$notice = '<font color="red">You are required to fill in all the fields</font>';
}
elseif($_POST['pass'] != $_POST['pass2'])
{
$notice = '<font color="red">Your passwords don\'t match!</font>';
}
else
{
//Here we are going to see if the account name is already been taken//
$sql = "SELECT * FROM ACCOUNT_TBL WHERE account = '".mssql_escape_string($_POST['account'])."'";
if(!$res = mssql_query($sql))
{
//If there is something wrong with the connection show error!//
echo 'There is an error while selecting the account from ACCOUNT_TBL '.mssql_get_last_message().'';
}
else
{
if(mssql_num_rows($res) > 0)
{
$notice = '<font color="red">This account name is already been taken!.<br />Please provide an different Account name!.</font>';
}
else
{
//If there is no other user known then proceed//
//Getting all the info into ACCOUNT_TBL//
$sql_ins = "INSERT INTO [ACCOUNT_TBL]
(account,
password,
isuse,
member,
id_no1,
id_no2,
realname,
reload,
OldPassword,
TempPassword,
cash
)values(
'".mssql_escape_string($_POST['account'])."',
'".mssql_escape_string(md5($salt.$_POST['pass']))."',
'T',
'A',
NULL,
0,
'P',
NULL,
0,
NULL,
0)";
if(!$res_ins = mssql_query($sql_ins))
{
//If there is an error then show it
echo 'You have an error with the query to insert an account. '.mssql_get_last_message().'';
}
else
{
$sql_ins2 =
"INSERT INTO [ACCOUNT_TBL_DETAIL]
(account,
gamecode,
tester,
m_chLoginAuthority,
regdate,
BlockTime,
EndTime,
WebTime,
isuse,
secession,
email)
VALUES
('".mssql_escape_string(strtolower($_POST['account']))."',
'A000',
'2',
'F',
'".mssql_escape_string(date('Ymd H:i:s'))."',
'20010101',
'20990101',
'20050101',
'O',
NULL,
'".mssql_escape_string($_POST['reg_email'])."')";
if(!$res_ins2 = mssql_query($sql_ins2))
{
//If there is an error then show it
echo 'You have an error with the query to insert an account. '.mssql_get_last_message().'';
}
else
{
//If there are no errors then proceed//
$notice = '<font color="green">Your account has been created!</font>';
}
}
}
}
}
}
}
//Here comes the form//
echo '
<form method="post" action="">
<table width="100%">
<tr>
<td>Account name:</td>
<td><input type="text" name="account" /></td>
</tr>
<tr>
<td>Password:</td>
<td><input type="password" name="pass" /></td>
</tr>
<tr>
<td>Repeat Password:</td>
<td><input type="password" name="pass2" /></td>
</tr>
<tr>
<td>Email address:</td>
<td><input type="text" name="reg_email" /></td>
</tr>
<tr>
<td colspan="2"><input type="submit" name="reg" value="Register" />
</tr>
</table>
</form>';
//Cheking if the notice is set//
if(isset($notice))
{
echo $notice;
}
}
}
?>
tt1: my english is not strong so please don't rampage to me.
