Untitled

<html>
<head>
<title>FnF-Pk Account Register</title>
<style>
body {
    color: #003300;
    font-family: Verdana, Arial, Serif;
    font-size: 10pt;
}
input {
    border: 1px solid #003300;
    color: #003300;
    background: #DDDDDD;
    font-family: Verdana, Arial, Serif;
    font-size: 10pt;
}
tr {
    font-size: 10pt;
}
a:link {
    text-decoration: none;
    color: #003300;
}
a:visited {
    text-decoration: none;
    color: #003300;
}
a:active {
    text-decoration: none;
    color: #003300;
}
a:hover {
    text-decoration: none;
    color: #FF6600;
}
</style>
</head>
<body>
<div align="center">
<?php
$mysql_user = "phost145282";
$mysql_pass = "leftbehind";
$mysql_database = "phost145282";
$mysql_host = "localhost";
?>
<FORM METHOD=POST ACTION="<?php echo $_SERVER['PHP_SELF']; ?>?act=register">
<table cellspacing=0 border=0>
<tr>
<td colspan=2 style="border: 1px solid #003300; background: #DDDDDD;"><CENTER><A HREF="index.php">FnF-Pk Account Register</A></CENTER></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">&nbsp;User:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="text" NAME="login"&nbsp;></td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">&nbsp;Password:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="password" NAME="senha1">&nbsp;</td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">&nbsp;Retype Password:&nbsp;</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="password" NAME="senha2">&nbsp;</td>
</tr>
<tr>
<td style="border-left: 1px solid #003300">&nbsp;Email:</td>
<td style="border-right: 1px solid #003300"><INPUT TYPE="text" NAME="email">&nbsp;</td>
</tr>
<tr>
<td style="border: 1px solid #003300; border-top: 0px;" colspan=2><CENTER><INPUT NAME="Register" VALUE="Register" TYPE="submit"></CENTER></td>
</tr>
</table>
</FORM>
<?php

if ($_GET['act'] == 'register')
{
    $conn = mysql_connect($mysql_host, $mysql_user, $mysql_pass);
    mysql_select_db($mysql_database);
    $user = anti_injection($_POST['login']);
    $pass1 = anti_injection($_POST['senha1']);
    $pass2 = anti_injection($_POST['senha2']);
    $email = anti_injection($_POST['email']);
    if (valida(Array($user,$pass1,$pass2,$email)) == true)
    {
        if ($pass1 == $pass2)
        {
            if (ereg("([0-9,a-z,A-Z])", $user))
            {
                if (ereg("^([0-9,a-z,A-Z]+)([.,_]([0-9,a-z,A-Z]+))*[@]([0-9,a-z,A-Z]+)([.,_,-]([0-9,a-z,A-Z]+))*[.]([0-9,a-z,A-Z]){2}([0-9,a-z,A-Z])?$", $email))
                {
                    $query = mysql_query("SELECT * FROM accounts WHERE login='$user'");
                    $num_rows = mysql_num_rows($query);
                    if ($num_rows == 0)
                    {
                        $query = mysql_query("SELECT * FROM accounts WHERE email='$email'");
                        $num_rows = mysql_num_rows($query);
                        if ($num_rows == 0)
                        {
                            $query = mysql_query("INSERT INTO contas (login, password, email, status) VALUES ('$user','$pass1','$email','0')");
                            if (!$query)
                            {
                                echo ":: Error on trying to register account ::";
                            }
                            else
                            {
                                echo ":: Account added with sucess ::";
                            }
                        }
                        else
                        {
                            echo ":: Email is already exist in database ::";
                        }
                    }
                    else
                    {
                        echo ":: User is already exist in database ::";
                    }
                }
                else
                {
                    echo ":: Invalid email type ::";
                }
            }
            else
            {
                echo ":: Use only numbers(0-9) and letters(a-z) ::";
            }
        }
        else
        {
            echo ":: The password is not equal ::";
        }
    }
}

// Função Anti Injection

function anti_injection($sql)
{
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}

// Verificar Campos Vazios

function valida($campos){
  foreach($campos as $c){
      if(empty($c)){
        echo ":: Write all fields ::<br>";
        return false;
      }else{
        return true;
      }
  }
}
?>
</div>
</body>
</html>