<?php
// Attempts to create account
// Params:  $username = string, username of account to be created (not escaped)
//          $password = string, password of account to be created (not escaped)
//          $email    = string, email of account to be created (not escaped)
// Return: -1 = database error
//          1 = account craeted
//          0 = account already exists
function createAccount($username, $password, $email)
{
    $mysql_conn = mysql_connect(&#039;127.0.0.1&#039;, &#039;website_realmd&#039;, &#039;PASSWORD&#039;);
    if (!$mysql_conn)
        return -1;

    if (!mysql_select_db(&#039;realmd&#039;, $mysql_conn))
        return -1;

    if ($query = mysql_query(&#039;SELECT 1 FROM `account` WHERE `username`=\&#039;&#039; . mysql_real_escape_string($username) . &#039;\&#039; LIMIT 1&#039;, $mysql_conn))
    {
        if (mysql_num_rows($query))
            return 0;
    }

    mysql_query(&#039;INSERT INTO `account` (username, sha_pass_hash, email, expansion) VALUES (\&#039;&#039; . mysql_real_escape_string(strtoupper($username)) . &#039;\&#039;,
        \&#039;&#039; . sha1(strtoupper($username . &#039;:&#039; . $password)) . &#039;\&#039;, \&#039;&#039; . strtoupper(mysql_real_escape_string($email)) . &#039;\&#039;, 2)&#039;, $mysql_conn);

    return 1;
}