function create_account($user,$pass,$email)//gotta be logged in for this, returns
{
	global $db_translation,$db,$a_user;
	$pass = preg_replace( "/[^A-Za-z0-9]/", "", $pass ); //only letters and numbers
	$user = preg_replace( "/[^A-Za-z0-9]/", "", $user ); //only letters and numbers

	$pass_enc=sha1(strtoupper($user).':'.strtoupper($pass));
	$db->query("INSERT INTO ".$db_translation['accounts']." (".$db_translation['login'].",".$db_translation['encrypted_password'].",".$db_translation['banned'].",".$db_translation['email'].",".$db_translation['flags'].") VALUES ('".$user."','".$pass_enc."','0','".$db->escape($email)."','2')") or ($report = 'Error: '.mysql_error());
	if (!$report)
		return false;
	else
		return $report;
}