<?php
	/* Blackout
	file: register.php
	function:
		process account registrations
	notes: first displays registration form, once submitted the information entered is checked to ensure it is correct
		if correct the new account is than created and is ready to be activated for play
	vars: (these are defined in cfg.php)
		$start_metal = playersstarting amount for the resource metal
		$start_crystal = playersstarting amount for the resource crystal
		$start_eonium = playersstarting amount for the resource eonium
		$start_mines = playersstarting amount for unused mines
		$start_score = players starting score
		$start_research = players starting research (research_id)
		$start_buildings = players starting buildings (building_id)
		$start_buildings_no = number of defined building player begins with
		$p_id = player_id
	todo:
		add a valid email address checker, to ensure valid email addresses are used.
	*/
	include "cfg.php";
	session_start();
?>
	<title>blackout.</title>
<?php
	if (isset($_SESSION['player'])) {
		header("Location: game.php");
	}
	else {
		if (isset($_POST['submit'])) {
			if (
				!$_POST['username'] ||
				!$_POST['password'] ||
				!$_POST['cpassword'] ||
				!$_POST['email'] ||
				!$_POST['cemail'] ||
				!$_POST['race'] ||
				!$_POST['rname'] ||
				!$_POST['pname']) { $check = 1; }
			else {
				$_POST['username'] = addslashes($_POST['username']);
				$_POST['password'] = addslashes($_POST['password']);
				$_POST['cpassword'] = addslashes($_POST['cpassword']);
				$_POST['email'] = addslashes($_POST['email']);
				$_POST['cemail'] = addslashes($_POST['cemail']);
				$_POST['race'] = addslashes($_POST['race']);
				$_POST['rname'] = addslashes($_POST['rname']);
				$_POST['pname'] = addslashes($_POST['pname']);
				if ($_POST['password'] != $_POST['cpassword']) { $check = 1; }
				elseif ($_POST['email'] != $_POST['cemail']) { $check = 1; }
				else {
					$isuser = mysql_query("SELECT * FROM `player` WHERE `player_username`='$_POST[username]'");
					$isuser2 = mysql_fetch_array($isuser);
					if ($isuser2) { $check = 1; $error = "<small>There is already a user with that username.</small>"; }

					if (!isset($check)) {
					$isemail = mysql_query("SELECT * FROM `player` WHERE `player_email`='$_POST[email]'");
					$isemail2 = mysql_fetch_array($isemail);
					if ($isemail2) { $check = 1; $error = "<small>There is already a user with that email address.</small>"; }

					if (!isset($check)) {
						$password = md5($_POST['password']);
						$a_key = rand(1,100000000);
						$a_key = md5($a_key);

						$sql = "INSERT INTO `player` (`player_id`,`player_username`,`player_password`,
						`player_email`,`player_validated`) VALUES (
						'','$_POST[username]','$password','$_POST[email]','$a_key')";
						mysql_query($sql);

						$get_id = mysql_query("SELECT * FROM `player` WHERE `player_username`='$_POST[username]'");
						$get_id2 = mysql_fetch_array($get_id);
						$p_id = $get_id2['player_id'];
						// playerInfo
						$sql2 = "INSERT INTO `playerInfo` (`pInfo_id`,`pInfo_player_id`,`pInfo_race_id`,
						`pInfo_ruler_name`,`pInfo_planet_name`,`pInfo_coords_universe`,
						`pInfo_coords_galaxy`,`pInfo_coords_planet`) VALUES (
						'','$p_id','$_POST[race]','$_POST[rname]','$_POST[pname]','1','1','1')";
						// playerResources
						$sql3 = "INSERT INTO `playerResources` (`pResources_id`,`pResources_player_id`,
						`pResources_metal`,	`pResources_crystal`,`pResources_eonium`) VALUES (
						'','$p_id','$start_metal','$start_crystal','$start_eonium')";
						// playerMines
						$sql4 = "INSERT INTO `playerMines` (`pMines_id`,`pMines_player_id`,
						`pMines_metal`,	`pMines_crystal`,`pMines_eonium`,`pMines_unused`) VALUES (
						'','$p_id','','','','$start_mines')";
						// playerStats
						$sql5 = "INSERT INTO `playerStats` (`pStats_id`,`pStats_player_id`, `pStats_score`)
						VALUES (
						'','$p_id','$start_score')";
						/*
						// playerResearch
						$sql6 = "INSERT INTO `playerResearch` (`pResearch_id`,`pResearch_player_id`, `pResearch_id`) VALUES (
						'','$p_id','$start_research')";
						// playerBuildings
						$sql6 = "INSERT INTO `playerBuildings` (`pBuildings_id`,`pBuildings_player_id`,
						`pBuildings_building_id`,`pBuildings_no_built`) VALUES (
						'','$p_id','$start_buildings','$start_buildings_no')";
						*/
						mysql_query($sql2);
						mysql_query($sql3);
						mysql_query($sql4);
						mysql_query($sql5);

						echo "registration successfully completed.";
						if ($send_mail == "0") {
							echo "<br/><a href=\"auth.php?p=activate&player={$_POST['username']}&key={$a_key}\">Activate account</a><br/>";
						}
						else {
							echo "<br/>Activation key has been sent to your email address.";
						    mail("$_POST[email]","Your Blackout Activation key","Paste the URL to activate your account.  /auth.php?p=activate&player=$_POST[username]&key=$a_key");
						}

						$check = 0;
					}
					}
				}
			}
			if (isset($check) && !isset($error)) { if ($check == "1") { $error = "<small>Please enter information in all fields and ensure it is correct.</small>"; } }
		}
		if (!isset($check) || $check == "1") {
?>
	<center><h2>Register</h2></center>
	<?php
		if (isset($error)) { echo $error; }
	?>
	<form method="post" action="register.php">
	<table align="center" width="500">
	<tr><td>Username: </td><td><input type="text" name="username" maxlength="25" size="20"></td></tr>
	<tr><td>Password: </td><td><input type="password" name="password" maxlength="25" size="20"></td></tr>
	<tr><td>Confirm password: </td><td><input type="password" name="cpassword" maxlength="25" size="20"></td></tr>
	<tr><td>Email: </td><td><input type="text" name="email" maxlength="255" size="35"></td></tr>
	<tr><td>Confirm email: </td><td><input type="text" name="cemail" maxlength="255" size="35"></td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td></tr>
	<tr><td>Race: </td><td><select name="race">
<?php
		$q_races = "SELECT * FROM `races` ORDER BY `race_id`";
		$races = mysql_query($q_races);
		while ($race = mysql_fetch_array($races)) {
			echo "<option value=\"{$race['race_id']}\">{$race['race_name']}</option>";
		}
?>
	</select></td></tr>
	<tr><td>Ruler name: </td><td><input type="text" name="rname" maxlength="25" size="20"></td></tr>
	<tr><td>Planet name: </td><td><input type="text" name="pname" maxlength="50" size="20"></td></tr>
	<tr><td align="right" colspan="2"><input type="submit" name="submit" value="Register"></td></tr>
	</table>
	</form>
<?php
		}
	}
?>