<div align="center">
<?PHP
$mssql_user = "sa";
$mssql_pass = "123456";
$mssql_database = "GunzDB";
$mssql_host = "MOSHE\GUNZSERV";
$conn = mssql_connect($mssql_host, $mssql_user, $mssql_pass);
mssql_select_db($mssql_database);
?>
<FORM METHOD=POST ACTION="<?php echo $_SERVER['PHP_SELF']; ?>?op=register&act=register">
<table cellspacing=0 border=0>
<tr>
<td colspan=2 style="border: 1px solid #003300; background: #DDDDDD;"><CENTER>
<A HREF="<?php echo $_SERVER['PHP_SELF']; ?>">Create New Account </A>
</CENTER></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300"> User ID:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="text" NAME="login" ></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300"> Password:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="password" NAME="senha1"> </td>
</tr>
<tr>
<td style="border-left: 1px solid #003300"> Retype Password: </td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="password" NAME="senha2"> </td>
</tr>
<tr>
<td style="border-left: 1px solid #003300"> Email:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="text" NAME="email"> </td>
</tr>
<tr>
<td style="border-left: 1px solid #003300"> Name: </td>
<td style="border-right: 1px solid #003300"><input name="name" type="text" id="name"></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">Age:</td>
<td style="border-right: 1px solid #003300"><input name="age" type="text" id="age"></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">Country:</td>
<td style="border-right: 1px solid #003300"><select name="country">
<option value="">Country...</option>
<option value="IL">Israel</option>
</select></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">Sex:</td>
<td style="border-right: 1px solid #003300"><select name="sex" id="sex">
<option value="0">Male</option>
<option value="1">Female</option>
</select> </td>
</tr>
<tr>
<td style="border: 1px solid #003300; border-top: 0px;" colspan=2><CENTER><INPUT NAME="Cadastrar" VALUE="Register" TYPE="submit">
<input type="reset" name="Reset" value="Reset">
</CENTER></td>
</tr>
</table>
</FORM>
<?php
if ($_GET['act'] == 'register')
{
$user = anti_injection($_POST['login']);
$pass1 = anti_injection($_POST['senha1']);
$pass2 = anti_injection($_POST['senha2']);
$email = anti_injection($_POST['email']);
$age = anti_injection($_POST['age']);
$country = anti_injection($_POST['country']);
$name = anti_injection($_POST['name']);
$sex = anti_injection($_POST['sex']);
if (valida(Array($user,$pass1,$pass2,$email,$name,$age)) == true)
{
if ($pass1 == $pass2)
{
if (ereg("([0-9,a-z,A-Z])", $user))
{
if (ereg("^([0-9,a-z,A-Z]+)([.,_]([0-9,a-z,A-Z]+))*[@]([0-9,a-z,A-Z]+)([.,_,-]([0-9,a-z,A-Z]+))*[.]([0-9,a-z,A-Z]){2}([0-9,a-z,A-Z])?$", $email))
{
$query = mssql_query("SELECT UserID FROM Account WHERE UserID='$user'");
$num_rows = mssql_num_rows($query);
if ($num_rows == 0)
{
$query = mssql_query("SELECT * FROM Account WHERE EMail='$email'");
$num_rows = mssql_num_rows($query);
if ($num_rows == 0)
{
$query = mssql_query("DECLARE @RC int DECLARE @UserID varchar(20) DECLARE @Password varchar(20) DECLARE @Cert tinyint DECLARE @Name varchar(30) DECLARE @Age smallint DECLARE @Country char(3) DECLARE @Sex tinyint DECLARE @Email varchar(50) DECLARE @Ret int EXECUTE @RC = spWebInsertAccount @UserID = '$user' ,@Password = '$pass1' ,@Cert = '1' ,@Name = '$name' ,@Age = '$age' ,@Country = '$country' ,@Sex = '$sex' ,@Email = '$email' ,@Ret = '1'");
if (!$query)
{
echo ":: Error on account register try later ::<br>";
}
else
{
echo ":: Account made succesfully ::<br>";
}
}
}
else
{
echo ":: Email in use ::<br>";
}
}
else
{
echo ":: User in use ::<br>";
}
}
else
{
echo ":: Invalid Email ::<br>";
}
}
else
{
echo ":: Only use Numbers and Letters in User ID ::<br>";
}
}
else
{
echo ":: Password not equal with other ::<br>";
}
}
$query = mssql_query("SELECT AID FROM Account");
$num_rows = mssql_num_rows($query);
echo "Number Accounts: ".$num_rows."<br>";
$query1 = mssql_query("SELECT CID From Character");
$num_rows2 = mssql_num_rows($query1);
echo "There are $num_rows2 characters made<br />";
// Funo Anti Injection
function anti_injection($sql)
{
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}
// Verificar Campos Vazios
function valida($campos){
foreach($campos as $c){
if(empty($c)){
echo ":: All fields needed ::<br>";
return false;
}else{
return true;
}
}
}
?>
</div>
