<?php
$ip = $_SERVER["REMOTE_ADDR"];
include_once('settings.php');
include_once('functions.php');
$conn = sqlsrv_connect( $serverName, $connectionInfo);
if(!$conn ) {
die( print_r( sqlsrv_errors(), true));
}
$_POST['status'] = "NULL";
$_POST['type'] = "fail";
$user = @

_clean($_POST['user']);
$pass = @

_clean($_POST['pass']);
$userLength = strlen($user);
$passLength = strlen($pass);
if (($userLength < 5) || ($userLength > 20))
{
$_POST['status'] = "Username entered is too short or too long.";
return;
}
if (($passLength < 5) || ($passLength > 32))
{
$_POST['status'] = "Password entered is too short or too long.";
return;
}
if ($_POST["pass"] != $_POST["passconfirm"]) {
$_POST['status'] = "Password's don't match.";
return;
}
$checkAccount = "SELECT sUserID FROM tUser WHERE sUserID = '$user'";
$params = array();
$options = array( "Scrollable" => SQLSRV_CURSOR_KEYSET );
$stmt = sqlsrv_query( $conn, $checkAccount , $params, $options );
$row_count = sqlsrv_num_rows( $stmt );
if ($row_count > 0) {
$_POST['status'] = "Username is taken.";
return;
}
$maxID = "SELECT MAX(nUserNo) FROM tUser";
$executeID = sqlsrv_query($conn, $maxID);
$row = @

srv_fetch_array($executeID, SQLSRV_FETCH_NUMERIC);
$currentID = $row[0];
$newID = ++$currentID;
if ($_POST['status'] == "Query failed")
return;
$insertAccount = sqlsrv_query($conn, "INSERT tUser (sUserID, sUserPW, sUserName, nAuthID, sUserIP) VALUES ('$user', '$pass', '$user', 1, '$ip')");
if($insertAccount) {
$_POST['type'] = "success";
$_POST['status'] = "Account has been created successfully.";
} else {
$_POST['type'] = "fail";
$_POST['status'] = "Account creation has failed.";
die( print_r( sqlsrv_errors(), true));
}
sqlsrv_close($conn);
?>