I'm having some problems with my register page. I tried recoding it myself a bit, but I had the same problem with those codes too.
Index.php
Spoiler:
Code:
<?php include("Register.php"); ?>
<style type="text/css">
<!--
body,td,th {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 11px;
color: #FFFFFF;
}
body {
background-color: #000000;
}
-->
</style>
<html>
<form action='Register.php' method='POST'>
<center>
<table width="500">
<tr>
<td bgcolor="#333333">Username:</td>
<td bgcolor="#333333">
<input type='text' name='accname' maxlength='12'>
</td>
</tr>
<tr>
<td bgcolor="#666666">Password:</td>
<td bgcolor="#666666">
<input type='password' name='accpass1' maxlength='12'>
</td>
</tr>
<tr>
<td bgcolor="#333333">Restate Password:</td>
<td bgcolor="#333333">
<input type='password' name='accpass2' maxlength='12'>
</td>
</tr>
<tr>
<td align='center' bgcolor="#666666">
</td>
<td align='left' bgcolor="#666666">
<input type='hidden' name='activ' value='1' />
<input name="submit" type='submit' value='Register' />
</td>
</tr>
</table>
</center>
</form>
</html>
<?php
}
?>
|
Register.php
Spoiler:
Code:
<?php include("Index.php"); ?>
<style type="text/css">
<!--
body,td,th {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 11px;
color: #FFFFFF;
}
body {
background-color: #000000;
}
-->
</style>
<?php
$mssql = array(
'host' = "Censored"
'user' = "Censored"
'pass' = "Censored"
);
function anti_injection($sql) {
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}
if($_POST['activ'] == '1') {
$accname = anti_injection($_POST['accname']);
$accpass1 = anti_injection($_POST['accpass1']);
$accpass2 = anti_injection($_POST['accpass2']);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
$result1 = mssql_query("SELECT * FROM Censored.dbo.users WHERE id = '".$accname."'",$con);
$row1 = mssql_num_rows($result1);
if(empty($accname)||empty($accpass1)||empty($accpass2){
echo "Please fill out all the fields!";
}
else {
$accpass = md5($accpass1);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
mssql_query("INSERT INTO Censored.dbo.users (
id,
password,
online,
unknown,
unknown2,
silk,
gold
)
VALUES (
'".$accname."',
'".$accpass."',
'0',
'0',
'0',
'0',
'0'
)",$con);
}
}
else {
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
$result1 = mssql_query("SELECT * FROM Censored.dbo.users",$con);
$row1 = mssql_num_rows($result1);
?>
|
Echoes don't work, and it doesn't register. |
