Code:
<style type="text/css">
<!--
body,td,th {
font-family: MV Boli, Arial, Helvetica, sans-serif;
font-size: 15px;
color: #FFFFFF;
}
body {
background-color: #FFFFFF;
}
-->
</style>
<?php
//////////////////////////////////////////////////////////////////////////////////////
// IMPORTANT!!!!!!
// SEARCH FOR >>>>> YOUR_DATABASE <<<<< AND replace it with your database NAME!
// Xsense
//////////////////////////////////////////////////////////////////////////////////////
$mssql = array(
'host' => "pmetzler-PC\SQLEXPRESS", //Your mssql host goes here
'user' => "pmetzler-PC\pmetzler", //Your mssql username goes here
'pass' => "" //Your mssql password goes here
);
function anti_injection($sql) {
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}
if($_POST['activ'] == '1') {
$accname = anti_injection($_POST['accname']);
$accpass1 = anti_injection($_POST['accpass1']);
$accpass2 = anti_injection($_POST['accpass2']);
$E-mail = anti_injection($_POST['E-mail']);
$Secret Q = anti_injection($_POST['Secret Q']);
$answer = anti_injection($_POST['answer']);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']),$mssql['E-mail'],$mssql['Secret Q'],$mssql['answer']);
$result1 = mssql_query("SELECT * FROM silk.dbo.users WHERE id = '".$accname."'",$con);
$row1 = mssql_num_rows($result1);
if(empty($accname) || empty($accpass1) || empty($accpass2)|| empty($E-mail)|| empty($Secret Q)|| empty($answer)){
echo "<br>You didnt fill in all fields<a href='javascript:history.back()'>Go Back</a>";
} elseif($row1 > '0' || $row2 > '0') {
echo "<br>This Account name already exists.<a href='javascript:history.back()'>Go Back</a>";
} elseif($accpass1 != $accpass2) {
echo "<br>The passwords did not match<a href='javascript:history.back()'>Go Back</a>";
} elseif($accpass1 == $accname) {
echo "<br>Account name and password are the same.<a href='javascript:history.back()'>Go Back</a>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accname)) {
echo "<br>Enter a account name only with 0-9 , a-z and A-Z.<a href='javascript:history.back()'>Go Back</a>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accpass1)) {
echo "<br>Enter a password only with 0-9 , a-z and A-Z.<a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($accname) < 3 || strlen($accname) > 15) {
echo "<br>Username Must be above 3 and lower then 15 <a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($accpass1) < 3 || strlen($accpass1) > 15) {
echo "<br>Password Must be above 3 and lower then 15 .<a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($E-mail) < 3 || strlen($E-mail) > 50) {
echo "<br>E-mail Must be above 3 and lower then 50 <a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($Secret Q) < 3 || strlen($Secret Q) > 50) {
echo "<br>Secret Q Must be above 3 and lower then 10 <a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($answer) < 3 || strlen($answer) > 7) {
echo "<br>answer Must be above 3 and lower then 7 <a href='javascript:history.back()'>Go Back</a>";
} else {
$accpass = md5($accpass1);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
mssql_query("INSERT INTO silk.dbo.users (
id,
password,
online,
unknown,
unknown2,
silk,
gold,
E-mail,
Secret Q,
answer,
)
VALUES (
'".$accname."',
'".$accpass."',
'0',
'0',
'0',
'0',
'0',
'".$E-mail."',
'".$Secret Q."',
'".$answer."',
)",$con);
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Welcome To Your Server Name</title>
</head>
<body background="Silkroad_Online.jpg">
<?php
}
} else {
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
$result1 = mssql_query("SELECT * FROM silk.dbo.users",$con);
$row1 = mssql_num_rows($result1);
?>
<form method="POST" action="reg.php">
<input type="hidden" name="activ" value="1"><center> <p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
</center>
<p align="left"><b><font size="7" face="Segoe Script">Welcome To
Your server name</font></b></p>
<p> <font face="MV Boli" size="6">Account ID </font>
<input type="text" name="accname" maxlength="12"></p>
<p> <font face="MV Boli" size="6">PassWord</font>
<input type="password" name="accpass1" maxlength="12" size="20"></p>
<p> <font face="MV Boli" size="6">password again</font>
<input type="password" name="accpass2" maxlength="12"></p>
<p><font size="6" face="MV Boli">E-mail
</font>
<input type="text" name="E-mail" maxlength="12"></p>
<p> <font face="MV Boli" size="6">Secret Q</font>
<input type="text" name="secret Q" maxlength="12">
</p>
<p> <font face="MV Boli" size="6">Secret Answer</font>
<input type="text" name="answer" maxlength="12"> </p>
<p align="center">
<input name="submit" type="submit" value="Create Account" style="float: left"></p>
<p> </p>
</form>
<p align="left"><b>
<?php
}
?>
<font color="#FFFFFF">All Right reserved</font></b><p align="left">
<font color="#FFFFFF"><b>
This Page Made By (ahmed4ever2u)</b></font></p>
<p align="left"><font color="#FFFFFF"><b>
Not allow removal of copyright</b></font></p>
<p> </p>
<script language=JavaScript>
<!--
//Disable right mouse click Script
//By Ahmed4ever2u
//For full source code, visit http://elitepvpers.com
var message="Sorry We Dont Allow This";
///////////////////////////////////
function clickIE4(){
if (event.button==2){
alert(message);
return false;
}
}
function clickNS4(e){
if (document.layers||document.getElementById&&!document.all){
if (e.which==2||e.which==3){
alert(message);
return false;
}
}
}
if (document.layers){
document.captureEvents(Event.MOUSEDOWN);
document.onmousedown=clickNS4;
}
else if (document.all&&!document.getElementById){
document.onmousedown=clickIE4;
}
document.oncontextmenu=new Function("alert(message);return false")
// -->
</script>
</body></html>