[RELEASE] Secure PHP Web Registration Script (MSSQL ODBC)

[Baserk]

Delete your dbo.User_Master table and then open a new query and paste what is below. I use Abrasives registration script and this is what I did to make it work. (Been discussed and solved many times on EPVP so nothing special here...) Just delete, paste, exicute and it should work. (Also no need to delete Row ID at all. RowID is not even truly needed.)

I do suggest next time maybe doing a bit more searching on this because I found the fix here at EPVP a while back when I first started a server.

Enjoy.

(Open Spoiler to see script.)

 Spoiler

USE [PS_UserData]
GO

/****** Object: Table [dbo].[Users_Master] Script Date: 07/08/2014 05:12:36 ******/
SET ANSI_NULLS ON
GO

SET QUOTED_IDENTIFIER ON
GO

SET ANSI_PADDING ON
GO

CREATE TABLE [dbo].[Users_Master](
[RowID] [int] NULL,
[UserUID] [int] IDENTITY(1,1) NOT NULL,
[UserID] [varchar](18) NOT NULL,
[Pw] [varchar](12) NOT NULL,
[JoinDate] [smalldatetime] NOT NULL,
[Admin] [bit] NOT NULL,
[AdminLevel] [tinyint] NOT NULL,
[UseQueue] [bit] NULL,
[Status] [smallint] NULL,
[Leave] [tinyint] NULL,
[LeaveDate] [smalldatetime] NULL,
[UserType] [char](1) NOT NULL,
[UserIp] [varchar](15) NULL,
[ModiIp] [varchar](15) NULL,
[ModiDate] [datetime] NULL,
[Point] [int] NOT NULL,
[Enpassword] [char](32) NULL,
[Birth] [varchar](8) NULL,
[email] [varchar](255) NULL,
[Activation] [varchar](255) NULL,
CONSTRAINT [PK_Users_Master_1] PRIMARY KEY CLUSTERED
(
[UserUID] ASC
)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, IGNORE_DUP_KEY = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]
) ON [PRIMARY]

GO

SET ANSI_PADDING OFF
GO

ALTER TABLE [dbo].[Users_Master] ADD CONSTRAINT [DF_Users_Master_JoinDate] DEFAULT (getdate()) FOR [JoinDate]
GO

ALTER TABLE [dbo].[Users_Master] ADD CONSTRAINT [DF_Users_Master_Point] DEFAULT ((0)) FOR [Point]
GO

[white95260]

Ty a lot Baserk Works fine.

[-spAik-]

Good modernized version

[nicjoker]

hello everyone!
i have a problem.. when i use this php i click on Create Account and i receive White page.. of register.php.. no error.. no new account.. nothing.. T.T
help

[shakey2k]

I could really use some help. I've been battling registration scripts for a week or more. I can't get any of them to work. Any help would be wonderful.

Thank you.


**EDIT** I keep receiving the "Database Connection Error!"

Even though all of my server info is correct in the db.config

$dbHost = '127.0.0.0.0';
$dbUser = '***';
$dbPass = 'XXX098';

Using that format.

[SnickQ]

Originally Posted by shakey2k

$dbHost = '127.0.0.0.0';

127.0.0.1

[Big_]

yes SinckQ is correct you have rong ip for the database try 127.0.0.1 because '127.0.0.0.0' is where u went rong

[shakey2k]

I know that, I just threw that out there as a false ip so I wouldn't post my true server ip.

[[Dev]K]

If you have the register script outside the host you wont connect into the DB unless you have a port open for outcoming connections, if you have it on xampp from your server just use simple local IP and your DB info...

[Fordmondeo20]

Hi Leute,
die recaptcha URL's haben sich ja mittlerweile ein wenig verändert.
Bei mir möchte das Script momentan nicht korrekt arbeiten und zeigt mir deshalb des reCaptcha nicht an und somit auch nicht den "Create Account" Button.
Also muss dann wohl hier:

PHP Code:

<?php echo recaptcha_get_html($recaptcha_public_key); ?>

das Problem liegen. Oder vielleicht doch an dieser "g-recaptcha-response"-POST-Abfrage?
Jedenfalls habe ich den public key und private key gemäß an den Websiteschlüssel und Geheimen Schlüssel angepasst bzw. einen neuen angefordert.

Vielen Dank schon mal im Voraus für das Lesen und die mögliche künftige Hilfe

MfG
Fm20

English here:

 Spoiler

Hey Guys,
the reCaptcha URL's have changed a lil bit in that time and atm the script won't work so far. The view doesn't show me the captcha and the "Create Account" button. I think the problem is to find here:

PHP Code:

<?php echo recaptcha_get_html($recaptcha_public_key); ?>

The second possible problem could be the "g-recaptcha-response" via POST but I don't know where the problem is.
Of course I changed the old public and private keys to my new web key and secret key how Google said it to me.
I hope you'll find some solutions for me to fix them and thanks in advance for that.

Fm20

[NarakuSS]

Is there anyone still able to help with that? or a different mssql php registration ?

[balongskie123]

Originally Posted by abrasive

This is a modernized version of .

It uses a safer method of querying the database that does not rely on escaping input to prevent SQL injection.

The only files that are different from my old registration script are:
db.config.php
register.php
changepass.php

That means if you made changes to the views for the old registration page, you can reuse those same style changes with this registration page just by replacing the view files
You will need to put your database credentials into this db.config.php.

You will need to set the RowID column on the Users_Master table to be an auto-increment column.

When using this script treat register.php as the index page. Or rename register.php to index.php if you wish.

how can i use this? how to put this code in my website. i try making website in *********. because ive see one server using this web hosting and it is talking to his database how? sorry for my english thanks in advance

[balongskie123]

when i go to localhost/register.php it shows nothing only blank white page

[sanguto]

Well I was looking at this script and saw that has many questioning because of the RowID / UserUID. But some people here who do not stick their hands in the dough to try to leave it the way you want it and sometimes you wait for the "others" and that is annoying. So I made a slight modification in it that allows the null in the RowID / UserUID is just you edit in register.php. Of course if you want, but I left my RowID and the original UserUID.
Abrasive thank you for share this script.
Sorry my English guys

[DEEPDARKP]

Originally Posted by abrasive

This is a modernized version of .

It uses a safer method of querying the database that does not rely on escaping input to prevent SQL injection.

The only files that are different from my old registration script are:
db.config.php
register.php
changepass.php

That means if you made changes to the views for the old registration page, you can reuse those same style changes with this registration page just by replacing the view files
You will need to put your database credentials into this db.config.php.

You will need to set the RowID column on the Users_Master table to be an auto-increment column.

When using this script treat register.php as the index page. Or rename register.php to index.php if you wish.

Hi nice work . Its not working for me it show me this Notice: Undefined variable: errors in C:\xampp\htdocs\reg\register.view.php on line 12
idk where is the problem i change the config to my host and only the error not working . please help me