- set ANSI_NULLS ON
- set QUOTED_IDENTIFIER ON
- GO
- ALTER proc [dbo].[usp_CreateNewAccount]
- @Action char(1) = '',
- @account varchar(16) = '',
- @email varchar(64) = '',
- @pw varchar(32) = '',
- @bday varchar(10) = '',
- @secret_question varchar(64) = '',
- @secret_answer char(1) = '',
- @activity_key varchar(32) = '',
- @reg_ip varchar(15) = '',
- @m_chLoginAuthority char(1) = 'F'
- as
- set nocount on
- --set xact_abort on
- If @Action = 'C1' -- Create Account
- begin
- if not exists (select account from ACCOUNT_TBL where account = @account)
- begin
- begin tran
- INSERT ACCOUNT.ACCOUNT_DBF.dbo.ACCOUNT_TBL(account,password,isuse,member,id_no1,id_no2)
- VALUES(@account, @pw, 'T', 'A', '', '')
- INSERT ACCOUNT.ACCOUNT_DBF.dbo.ACCOUNT_TBL_DETAIL(account,gamecode,tester,m_chLoginAuthority,regdate,BlockTime,EndTime,WebTime,isuse,secession, email, secret_question, secret_answer, reg_ip, bday,aktiv_key)
- VALUES(@account,'A000','2',@m_chLoginAuthority,GETDATE(),CONVERT(CHAR(8),GETDATE()-1,112),CONVERT(CHAR(8),DATEADD(year,10,GETDATE()),112),CONVERT(CHAR(8),GETDATE()-1,112),'T',NULL, @email,@secret_question,@secret_answer,@reg_ip,@bday,@activity_key)
- insert AccountPlay (Account, PlayDate)
- select @account, convert(int, convert(char(8), getdate(), 112))
- if @@error <> 0
- begin
- rollback tran
- select 5 -- Fehler entstanden
- end
- else
- begin
- commit tran
- select 4 -- Account erfolgreich erstellt
- end
- end
- else
- begin
- select 3 -- Account existiert
- end
- end
- If @Action = 'C2' -- Verify Account
- begin
- IF EXISTS(Select account FROM ACCOUNT.ACCOUNT_DBF.dbo.ACCOUNT_TBL_DETAIL where account = @account AND aktiv_key = @activity_key)
- begin
- UPDATE ACCOUNT.ACCOUNT_DBF.dbo.ACCOUNT_TBL_DETAIL set aktiv_val = '1' where account = @account
- SELECT 1
- end
- else
- begin
- SELECT 0
- end
- end
- RETURN
- set nocount off
- $result = mssql_query("EXEC ACCOUNT.ACCOUNT_DBF..usp_CreateNewAccount
- '".C1."',
- '".mysql_real_escape_string($_POST['username'])."',
- '".mysql_real_escape_string($_POST['email'])."',
- '".md5("kikugalanet".$_POST['password'])."',
- '".mysql_real_escape_string($_POST['bday_day']).":".mysql_real_escape_string($_POST['bday_month']).":".mysql_real_escape_string($_POST['bday_year'])."',
- '".mysql_real_escape_string($_POST['secret_question'])."',
- '".mysql_real_escape_string($_POST['secret_answer'])."',
- '".$activity_key."',
- '".$_SERVER['REMOTE_ADDR']."'");