
im using appserver.
Code:
>>>> YOUR_DATABASE <<<<< AND replace it with your database NAME! // Xsense ////////////////////////////////////////////////////////////////////////////////////// $mssql = array( 'host' => "N0601-SAN\SQLEXPRESS", //Your mssql host goes here 'user' => "sa", //Your mssql username goes here 'pass' => "1234" //Your mssql password goes here ); function anti_injection($sql) { $sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql); $sql = trim($sql); $sql = strip_tags($sql); $sql = addslashes($sql); return $sql; } if($_POST['activ'] == '1') { $accname = anti_injection($_POST['accname']); $accpass1 = anti_injection($_POST['accpass1']); $accpass2 = anti_injection($_POST['accpass2']); $con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']); $result1 = mssql_query("SELECT * FROM N0601-SAN\SQLEXPRESS.dbo.users WHERE id = '".$accname."'",$con); $row1 = mssql_num_rows($result1); if(empty($accname) || empty($accpass1) || empty($accpass2)|| empty($accname)) { echo "
You didnt fill in all fieldsGo Back"; } elseif($row1 > '0' || $row2 > '0') { echo "
This Account name already exists.Go Back"; } elseif($accpass1 != $accpass2) { echo "
The passwords did not matchGo Back"; } elseif($accpass1 == $accname) { echo "
Account name and password are the same.Go Back"; } elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accname)) { echo "
Enter a account name only with 0-9 , a-z and A-Z.Go Back"; } elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accpass1)) { echo "
Enter a password only with 0-9 , a-z and A-Z.Go Back"; } elseif(strlen($accname) < 3 || strlen($accname) > 15) { echo "
Username Must be above 3 and lower then 15 Go Back"; } elseif(strlen($accpass1) < 3 || strlen($accpass1) > 15) { echo "
Password Must be above 3 and lower then 15 .Go Back"; } else { $accpass = md5($accpass1); $con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']); mssql_query("INSERT INTO N0601-SAN\SQLEXPRESS.dbo.users ( id, password, online, unknown, unknown2, silk, gold ) VALUES ( '".$accname."', '".$accpass."', '0', '0', '0', '0', '0' )",$con); ?>
here is my reg.htm
Code:
<style type="text/css">
<!--
body,td,th {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 11px;
color: #FFFFFF;
}
body {
background-color: #000000;
}
-->
</style>
<?php
//////////////////////////////////////////////////////////////////////////////////////
// IMPORTANT!!!!!!
// SEARCH FOR >>>>> N0601-SAN\SQLEXPRESS <<<<< AND replace it with your database NAME!
// Xsense
//////////////////////////////////////////////////////////////////////////////////////
$mssql = array(
'host' => "N0601-SAN\SQLEXPRESS", //Your mssql host goes here
'user' => "sa", //Your mssql username goes here
'pass' => "1234" //Your mssql password goes here
);
function anti_injection($sql) {
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}
if($_POST['activ'] == '1') {
$accname = anti_injection($_POST['accname']);
$accpass1 = anti_injection($_POST['accpass1']);
$accpass2 = anti_injection($_POST['accpass2']);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
$result1 = mssql_query("SELECT * FROM N0601-SAN\SQLEXPRESS.dbo.users WHERE id = '".$accname."'",$con);
$row1 = mssql_num_rows($result1);
if(empty($accname) || empty($accpass1) || empty($accpass2)|| empty($accname)) {
echo "<br>You didnt fill in all fields<a href='javascript:history.back()'>Go Back</a>";
} elseif($row1 > '0' || $row2 > '0') {
echo "<br>This Account name already exists.<a href='javascript:history.back()'>Go Back</a>";
} elseif($accpass1 != $accpass2) {
echo "<br>The passwords did not match<a href='javascript:history.back()'>Go Back</a>";
} elseif($accpass1 == $accname) {
echo "<br>Account name and password are the same.<a href='javascript:history.back()'>Go Back</a>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accname)) {
echo "<br>Enter a account name only with 0-9 , a-z and A-Z.<a href='javascript:history.back()'>Go Back</a>";
} elseif(!preg_match("/^[0-9a-zA-Z]{3,15}$/i", $accpass1)) {
echo "<br>Enter a password only with 0-9 , a-z and A-Z.<a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($accname) < 3 || strlen($accname) > 15) {
echo "<br>Username Must be above 3 and lower then 15 <a href='javascript:history.back()'>Go Back</a>";
} elseif(strlen($accpass1) < 3 || strlen($accpass1) > 15) {
echo "<br>Password Must be above 3 and lower then 15 .<a href='javascript:history.back()'>Go Back</a>";
} else {
$accpass = md5($accpass1);
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
mssql_query("INSERT INTO N0601-SAN\SQLEXPRESS.dbo.users (
id,
password,
online,
unknown,
unknown2,
silk,
gold
)
VALUES (
'".$accname."',
'".$accpass."',
'0',
'0',
'0',
'0',
'0'
)",$con);
?>
<center>
<table width="500">
<tr>
<td colspan='2' align='center'><img src="top.jpg" width="500" height="300" /></td>
</tr>
<tr>
<td colspan="2" align="center" bgcolor="#333333">
Welcome to srevolution! Below are your details! Keep them safe!
</td>
</tr>
<tr>
<td bgcolor="#666666">
Account name:
</td>
<td bgcolor="#666666">
<b><?php echo "".$accname.""; ?></b>
</td>
</tr>
<tr>
<td bgcolor="#333333">
Your password:
</td>
<td bgcolor="#333333">
<b><?php echo "".$accpass1.""; ?></b>
</td>
</tr>
</table>
</center>
<?php
}
} else {
$con = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
$result1 = mssql_query("SELECT * FROM N0601-SAN\SQLEXPRESS.dbo.users",$con);
$row1 = mssql_num_rows($result1);
?>
<form action='reg.php' method='POST'>
<center>
<table width="500">
<tr>
<td colspan='2' align='center'>
<img src="top.jpg" width="500" height="300" />
</td>
</tr>
<tr>
<td bgcolor="#333333">Account Name</td>
<td bgcolor="#333333">
<input type='text' name='accname' maxlength='12'>
</td>
</tr>
<tr>
<td bgcolor="#666666">Password</td>
<td bgcolor="#666666">
<input type='password' name='accpass1' maxlength='12'>
</td>
</tr>
<tr>
<td bgcolor="#333333">Again pass.</td>
<td bgcolor="#333333">
<input type='password' name='accpass2' maxlength='12'>
</td>
</tr>
<tr>
<td align='center' bgcolor="#666666">
</td>
<td align='right' bgcolor="#666666">
<input type='hidden' name='activ' value='1' />
<input name="submit" type='submit' value='Create Account' />
</td>
</tr>
</table>
</center>
</form>
<?php
}
?>
IF i use other reg page. then here

i get Fatal error: Call to undefined function mssql_connect() in C:\AppServ\www\reg.php on line 115






