PHP Code:
<?php
// Enter MySQL Connection Info Here
$mysql = array(
'host' => "localhost",
'user' => "root",
'pass' => ""
);
function anti_inject($sql) {
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}
echo "<center>";
if($_POST['activ'] == '1') {
$accname = anti_inject($_POST['accname']);
$accmail = anti_inject($_POST['accmail']);
$accpass1 = anti_inject($_POST['accpass1']);
$accpass2 = anti_inject($_POST['accpass2']);
$con = mysql_connect($mysql['host'],$mysql['user'],$mysql['pass']);
$result = mysql_query("SELECT * FROM newproject_db_auth.bg_user WHERE user_id = '".$accname."'",$con);
$row = mysql_num_rows($result);
$result2 = mysql_query("SELECT user_code FROM newproject_db_auth.bg_user ORDER BY user_code DESC LIMIT 1",$con);
$newcode = mysql_result($result2, 0) + 1;
if(empty($accname) || empty($accmail) || empty($accpass1) || empty($accpass2)) {
echo "<br>You did not fill in all the required fields. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif($row > '0') {
echo "<br>This account name already exists. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif($accpass1 != $accpass2) {
echo "<br>The passwords did not match. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif($accpass1 == $accname) {
echo "<br>Account name and password are the same. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accname)) {
echo "<br>Enter a account name containing only (0-9, A-Z). <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accpass1)) {
echo "<br>Enter a password containing only (0-9, A-Z). <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif(!preg_match("/^\w+([-+.]\w+)*@\w+([-.]\w+)*\.\w+([-.]\w+)*$/i",$accmail)) {
echo "<br>Your e-mail is not correct. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif(strlen($accname) < 3 || strlen($accname) > 12) {
echo "<br>The account name must be 3-12 characters long. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} elseif(strlen($accpass1) < 3 || strlen($accpass1) > 12) {
echo "<br>The password must be 3-12 characters long. <br>(<a href='javascript:history.back()'>Go Back</a>)<br><br>";
} else {
mysql_query("INSERT INTO newproject_db_auth.bg_user VALUES ('".$newcode."', '".$accname."', ' ', ' ', NULL, ' ', ' ', '000000-0000000', 'M', '".$accpass1."', 0, NULL, NULL, NULL, 'S', '".$accmail."', NULL, NULL, 0, 0, NULL, NULL, '0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 0 0', '0 0 0 0 0 1 0', 'N', 'Y', 'Y', 'Y', 'N', 'N', 'Y', 'N', NULL, NULL, NULL, NULL, NULL, NULL, 'LC', 'LC', '0000-00-00 00:00:00', '0000-00-00 00:00:00', NULL, NULL, 0, 'N', 'N', 'N', 'N', NULL, 'Y', NULL, 'N', NULL, 'N')");
echo "<center>The account was successfully created.</center><br>";
}
} else {
$con = mysql_connect($mysql['host'],$mysql['user'],$mysql['pass']);
$result = mysql_query("SELECT * FROM newproject_db_auth.bg_user",$con);
$row = mysql_num_rows($result);
echo "<center><b>We Have ".$row." Registed Accounts On Our Server</b></center><br>";
echo "<form action='".$_SEVER['PHP_SELF']."' method='POST'>";
echo "<center><table>";
echo "<tr><td colspan='2' align='center'><b>Your Account Info</b></td></tr>";
echo "<tr><td>Account Name:</td><td><input type='text' name='accname' maxlength='12'></td></tr>";
echo "<tr><td>Password:</td><td><input type='password' name='accpass1' maxlength='12'></td></tr>";
echo "<tr><td>Again Password:</td><td><input type='password' name='accpass2' maxlength='12'></td></tr>";
echo "<tr><td>E-Mail:</td><td><input type='text' name='accmail' maxlength='50'></td></tr>";
echo "<tr><td> </td><td> </td></tr>";
echo "<tr><td colspan='2' align='center'>
<input type='hidden' name='activ' value='1'>
<input type='submit' value='Create Account'></td></tr>";
echo "</table></center>";
echo "</form>";
echo "LastChaos Register Page © Warmonger ";
}
echo "</center>";
?>
Welche Version vom LC