Signup.php-Mark Jones

<?php
require('includes/application_top.php');
require('includes/classes/crypto.php');
include('includes/classes/class.formvalidation.php');
include('includes/classes/class.phpmailer.php');
// load recaptcha library
require_once('recaptchalib.php');
// recaptcha keys
$publickey = "6LfygewSAAAAAEPaEBsI1jhzmUw2oRXxzVrP-dJT";
$privatekey = "6LfygewSAAAAAHjgQUP5ccfMhi0zav8bm0mpFl9x";

if (!$allow_signup) {
	header('location: login.php?signup=no');
	exit;
}

if (isset($_POST['submit'])) {

// begin: reCAPTCHA - VALIDATE

    $resp = recaptcha_check_answer ($privatekey,
                            $_SERVER["REMOTE_ADDR"],
                            $_POST["recaptcha_challenge_field"],
                            $_POST["recaptcha_response_field"]);

    if (!$resp->is_valid) {
        $errors[] = 'Please enter a valid captcha';
    }

    // end: reCAPTCHA - VALIDATE

	$my_form = new validator;
	$mail = new PHPMailer();
	$crypto = new phpFreaksCrypto;

	$firstname = $_POST['firstname'];
	$lastname = $_POST['lastname'];
	$email = $_POST['email'];
	$username = $_POST['username'];
	$password = $_POST['password'];
	$password2 = $_POST['password2'];
	$template_name = $_POST['template_name'];

	if($my_form->checkEmail($email)) { // check for good mail
		if ($my_form->validate_fields('firstname,lastname,email,username,password')) { // comma delimited list of the required form fields
			if ($password == $password2) {
				//create new user, disabled
				$username = mysql_real_escape_string(str_replace(' ', '_', $username));
				$sql = "SELECT userName FROM " . $db_prefix . "users WHERE userName='".$username."';";
				$result = mysql_query($sql);
				if(mysql_numrows($result) > 0){
					$display = '<div class="responseError">User already exists, please try another username.</div><br/>';
				} else {
					$sql = "SELECT email FROM " . $db_prefix . "users WHERE email='".mysql_real_escape_string($email)."';";
					$result = mysql_query($sql);
					if(mysql_numrows($result) > 0){
						$display = '<div class="responseError">Email address already exists.  If this is your email account, please log in or reset your password.</div><br/>';
					} else {
						$salt = substr($crypto->encrypt((uniqid(mt_rand(), true))), 0, 10);
						$secure_password = $crypto->encrypt($salt . $crypto->encrypt($password));
						$sql = "INSERT INTO " . $db_prefix . "users (userName, password, salt, firstname, lastname, template_name, email, status)
						VALUES ('".$username."', '".$secure_password."', '".$salt."', '".$firstname."', '".$lastname."', '".$template_name."',  '".mysql_real_escape_string($email)."', 1);";
						mysql_query($sql) or die(mysql_error());

						//send confirmation email
						$mail->IsHTML(true);

						$mail->From = $adminUser->email; // the email field of the form
						$mail->FromName = 'Amarillo NFL Pick Em'; // the name field of the form

						$mail->AddAddress($_POST['email']); // the form will be sent to this address
						$mail->AddCC('[email protected]');
						$mail->Subject = 'Welcome'; // the subject of email

						// html text block
						$mail->Body = 'Hi ' . $firstname . ', <p>Thank you for signing up for Amarillo NFL Pick Em.</p>
						<p>If you have any questions about how to play or navigate the site, please see the <a href="http://amarillonflpickem.com/rules2.php">Rules Page</a>.
						<br>
						Any other questions or concerns, please contact me directly by email: [email protected]</p>
						<p>Thanks,
						<br>
						Mark Jones - Creator/Admin
						<br>
						Amarillo NFL Pick Em
						</p>';

						$mail->Send();

						//header('Location: login.php');
						$_SESSION['logged'] = 'yes';
						$_SESSION['loggedInUser'] = $username;
						header('Location: index.php?login=success');
					}
				}
			} else {
				$display = '<div class="responseError">Passwords do not match, please try again.</div><br/>';
			}
		} else {
			$display = str_replace($_SESSION['email_field_name'], 'Email', $my_form->error);
			$display = '<div class="responseError">' . $display . '</div><br/>';
		}
	} else {
		$display = '<div class="responseError">There seems to be a problem with your email address, please check.</div><br/>';
	}
}
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
	<title>NFL Pick 'Em Signup</title>
	<link href="css/login.css" rel="stylesheet" type="text/css" media="screen" />
	<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
</head>

<body>

<div id="bgextendnav">

	<ul id="menu">
	<li><a href="login.php">Back to Login</a></li>
	<li><a href="about.php">About</a></li>
	<li><a href="rules2.php">Rules</a></li>

</ul>
<br>

	<div id="login">
	<table>
		<tr valign="top">
			<td><img src="images/logos/nfl-logo.png" /></td>
			<td>&nbsp;</td>
			<td>
				<h1>Amarillo NFL Pick 'Em Signup</h1>
				<?php
					if(isset($display)) {
						echo $display;
					}
				?>

				<script type="text/javascript">
 var RecaptchaOptions = {
    theme : 'white'
 };
 </script>

				<form action="signup.php" method="post" name="addnewuser">
					<fieldset>
					<legend style="font-weight:bold;">Sign Up</legend>
						<table cellpadding="3" cellspacing="0" border="0">
						<tr><td><i><p style="color:red;">ALL Fields are required!<p></i></td></tr>
							<tr><td>First Name:</td><td><input type="text" name="firstname" value="<?php echo $_POST['firstname']; ?>"></td></tr>
							<tr><td>Last Name:</td><td><input type="text" name="lastname" value="<?php echo $_POST['lastname']; ?>"></td></tr>
							<tr><td>Email:</td><td><input type="text" name="email" value="<?php echo $_POST['email']; ?>" size="30"></td></tr>
							<tr><td><br></td></tr>

							<tr><td>User Name:</td><td><input type="text" name="username" value="<?php echo $_POST['username']; ?>"></td></tr>
							<tr><td>Password:</td><td><input type="password" name="password" value=""></td></tr>
							<tr><td>Confirm Password:</td><td><input type="password" name="password2" value=""></td></tr>
							<tr><td><b>Favorite Team:</b>
 				<select name="template_name" id="target">

 				<option value="NONE.css">Choose your team</option>
<option value="ARI.css">Arizona Cardinals</option>
<option value="ATL.css">Atlanta Falcons</option>
<option value="BAL.css">Baltimore Ravens</option>
<option value="BUF.css">Buffalo Bills</option>
<option value="CAR.css">Carolina Panthers</option>
<option value="CHI.css">Chicago Bears</option>
<option value="CIN.css">Cincinnati Bengals</option>
<option value="CLE.css">Cleveland Browns</option>
<option value="DAL.css">Dallas Cowboys</option>
<option value="DEN.css">DenverBroncos</option>
<option value="DET.css">Detroit Lions</option>
<option value="GB.css">Green Bay Packers</option>
<option value="HOU.css">Houston Texans</option>
<option value="IND.css">Indianapolis Colts</option>
<option value="JAX.css">Jacksonville Jaguars</option>
<option value="KC.css">Kansas City Chiefs</option>
<option value="MIA.css">Miami Dolphins</option>
<option value="MIN.css">Minnesota Vikings</option>
<option value="NE.css">New England Patriots</option>
<option value="NO.css">New Orleans Saints</option>
<option value="NYG.css">New York Giants</option>
<option value="NYJ.css">New York Jets</option>
<option value="OAK.css">Oakland Raiders</option>
<option value="PHI.css">Philidelphia Eagles</option>
<option value="PIT.css">Pittsburg Steelers</option>
<option value="SD.css">San Diego Chargers</option>
<option value="SEA.css">Seattle Seahawks</option>
<option value="SF.css">San Francisco 49ers</option>
<option value="STL.css">St. Louis Rams</option>
<option value="TB.css">Tampa Bay Buccaneers</option>
<option value="TEN.css">Tennessee Titans</option>
<option value="WAS.css">Washington Redskins</option>
 				<select>
					</tr></td>
					<tr><td>
					<!-- begin: reCAPTCHA - RENDERING-->
					<?php echo recaptcha_get_html($publickey); ?></br>
					<!--   end: reCAPTCHA - RENDERING-->
					</tr></td>
							<tr><td>&nbsp;</td><td><input type="submit" name="submit" value="Submit"></td></tr>

						</table>
					</fieldset>
				</form>
			</td>
		</tr>
	</table>
<?php

?>