View file registration.php

File size: 3.48Kb
<?php ini_set("display_errors",0);
define('IN_HDM',1);
$title = "Registration";
include('includes/connect.php');
include('includes/header.php');
echo '<div class="br"/><div class="title"><b>Registration</b></div>';
if($set['registration']==0){
echo '<div class="news">Registration has been closed, you can try again s0me other time</div>'; } else {
if ( $_GET['act'] == "do" )
{
$password = md5( addslashes( $_POST['password'] ) );
$verify_password = md5( addslashes( $_POST['verify_password'] ) );
$username = addslashes( $_POST['username'] );
$email = addslashes( $_POST['email'] );
$code = addslashes( $_POST['code'] );
if (strlen($_POST['username'])<3 || strlen($_POST['username'])>20 ) {
echo '<div class="news">Error! Username must be between 4 - 15 characters<br/><a href="javascript:history.go(-1)">Go back</a></div>'; }
elseif ( mysql_num_rows(mysql_query("SELECT id FROM users WHERE username='$username'"))>0)
{ echo '<div class="news">This Username already Exist! <br/><a href="javascript:history.go(-1)">Go back</a></div>'; }
elseif(!preg_match("^[A-Za-z0-9]+$^", "$username"))
{ echo '<div class="news">Username contain invalid characters! <br/><a href="javascript:history.go(-1)">Go back</a></div>'; }
elseif ( ! $_POST['password'] || ! $_POST['verify_password'] || ! $email || ! $code)
{
echo '<div class="news">Error! you have not entered all fields! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
elseif (!check_email($email))
{
echo '<div class="news">Invalid Email! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
elseif ( mysql_num_rows(mysql_query("SELECT id FROM users WHERE mail='$email'"))>0)
{
echo '<div class="news">This email is already in use, Please choose another email! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
elseif ( $password != $verify_password )
{
echo '<div class="news">Passwords does n0t match! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
elseif (strlen($_POST['password'])<5 || strlen($_POST['password'])>15 )
{
echo '<div class="news">Password must be between 6 - 15 characters! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
elseif ($code != $_SESSION["security_code"] )
{
echo '<div class="news">Wrong verification code! <br/><a href="javascript:history.go(-1)">Go back</a></div>';
}
else{
$pw = $_POST['password'];
$idu = insert('users');
mkdir('data/user'.$idu);
@$a=mysql_query("INSERT INTO users (id,username,mail, password,rights,disk,files,regtime) VALUES ('$idu', '$username', '{$email}', '{$password}', '1', '0', '0', '$time')");
if ($a) print "<div class=\"news\">Your account has been created succesfully.<br/>User ID: $idu<br/>Login: $username<br/>Password: $pw<br/><a href='login.php'>Click here to log in</a></div>";
else
print '<div class="news">There was an error in the registration process, please contact the site administrator</div>';
}} else {

echo <<<EOF
<div class="menu"><form action="?act=do" method="post">Username:<br><input size="17" type="text" name="username" value=""><br/>E-mail:<br/><input size="17" type="text" name="email" value=""><br/>Password: (6 - 20 char)<br><input size="17" type="password" name="password" value=""><br>Confirm Password:<br><input type="password" size="17" name="verify_password" value=""><br/>Captcha<br><img src="captcha.php"><br><input type="text" name="code" value="" size="5">
<br><br><input type="submit" name="submit" value="Register"></form>
EOF;
echo '</div>';
}
}
include "includes/footer.php";
?>