Untitled

<?php

$sql_host = "localhost"; //MySQL Host
$sql_user = "web"; //MySQL User
$sql_pass = "123456"; //SQL Password
$arc_db = "logon"; //Auth Database
$con = mysql_connect($sql_host,$sql_user,$sql_pass);
if (!$con)
{
die('Could not connect: ' . mysql_error());
}

mysql_select_db($arc_db, $con);

if(get_magic_quotes_gpc()) {
array_map('stripslashes', $_POST);
}

$login = mysql_real_escape_string($_POST['login']);
$password = mysql_real_escape_string($_POST['password']);
$email = mysql_real_escape_string($_POST['email']);
$key = mysql_real_escape_string($_POST['key']);
$password = sha1(strtoupper($login) . ":" . strtoupper($password));
$password = strtoupper($password);


$acccheck = "SELECT `username` FROM `account` WHERE `username`='$login'";
$result1 = mysql_query($acccheck, $con);
$row1 = mysql_num_rows($result1);
if($row1 == 1)
{
echo "
<link rel='stylesheet' type='text/css' href='Style.css' />
</HEAD>
<BODY bgcolor='black'>
<center>
<Table cellpadding=0 cellspacing=0 style='margin-top:-100px;'><tr><td class='account' width=846 height=687 valign='top' align='middle'>
<table cellpadding=0 cellspacing=0 style='margin-top:250px;'><tr>
<td class='account2' width=330 height=300 valign='top'>Der Accountname existiert bereits!
<meta http-equiv='refresh' content='2; URL=index.php'>
</body>
</html>
";
}

else
{
$keycheck1 = "SELECT `key` FROM `keys` WHERE `key`='".$key."'";
$namecheck = "SELECT `name` FROM `keys` WHERE `key`='".$key."'";
$result = mysql_query($keycheck1, $con);
$row = mysql_num_rows($result);
if($row == 1)
{
$keyname = mysql_query("SELECT `name` FROM `keys` WHERE `key`='".$key."'");
$nameentry= mysql_fetch_array($keyname);
mysql_query("DELETE FROM `keys` WHERE `key`='".$key."'");
$sql="INSERT INTO account (username, sha_pass_hash, email, expansion, key, name) VALUES ('".$login."', '".$password."', '".$email."', '2', '".$key."', '".$namenetry['name']."')";

if (!mysql_query($sql,$con))
{
die('Error: ' . mysql_error());
}
echo "
<link rel='stylesheet' type='text/css' href='Style.css' />
</HEAD>
<BODY bgcolor='black'>
<center>
<Table cellpadding=0 cellspacing=0 style='margin-top:-100px;'><tr><td class='account' width=846 height=687 valign='top' align='middle'>
<table cellpadding=0 cellspacing=0 style='margin-top:250px;'><tr>
<td class='account2' width=330 height=300 valign='top'>Account was created!
<meta http-equiv='refresh' content='2; URL=index.php'>
</body>
</html>
";
}
else
echo "
<link rel='stylesheet' type='text/css' href='Style.css' />
</HEAD>
<BODY bgcolor='black'>
<center>
<Table cellpadding=0 cellspacing=0 style='margin-top:-100px;'><tr><td class='account' width=846 height=687 valign='top' align='middle'>
<table cellpadding=0 cellspacing=0 style='margin-top:250px;'><tr>
<td class='account2' width=330 height=300 valign='top'>Falscher Gamekey!
<meta http-equiv='refresh' content='2; URL=index.php'>
</body>
</html>
";
}
mysql_close($con)
?>