Reg

<?php
require_once 'config.php';
require_once 'functions.php';
require_once 'recaptchalib.php';

$privatekey = "6LcoouYSAAAAAPqMC4MyP8wRieWRNvfGoJw7-LdJ";
$publickey = "6LcoouYSAAAAAGdxiM-0G2jv8BHKCOFqArqz0gwQ";

if (isLoggedIn()) { redirect('membersarea.php'); }

define('DEFAULT_STARTER_LEVEL', 15);
define('DEFAULT_STARTER_COLUMNS', 4);
define('DEFAULT_USER_MONEY', 20000);

$pokemonNames = array(
	'Bulbasaur' , 'Charmander' , 'Squirtle' , 'Chikorita' ,
	'Cyndaquil' , 'Totodile'   , 'Treecko'  , 'Torchic'   ,
	'Mudkip'    , 'Turtwig'    , 'Chimchar' , 'Piplup'    ,
	'Snivy'     , 'Tepig'      , 'Oshawott' , 'Eevee'
);

$username  = isset( $_POST['username']  ) ? $_POST['username']  : '' ;
$email     = isset( $_POST['email']     ) ? $_POST['email']     : '' ;
$password  = isset( $_POST['password']  ) ? $_POST['password']  : '' ;
$password2 = isset( $_POST['password2'] ) ? $_POST['password2'] : '' ;
$pokemon   = isset( $_POST['pokemon']   ) ? $_POST['pokemon']   : '' ;

$username = trim($username);
$errorMessage = '';

if(count($_POST) > 0) {

	$sqlUsername = cleanSql( trim($username) );
	$sqlPassword = sha1($password);
	$sqlEmail    = cleanSql($email);
	$sqlPokemon  = cleanSql($pokemon);
	$time        = time();
	$errors      = array();



	if( $username == '' ) {
		$errors[] = $lang['register_empty_username'];
	}

	if( strlen($username) < 5){
		$errors[] =  $lang['register_contain_username'];
	}

	if( strlen($username) > 40){
		$errors[] = $lang['register_contain_username_max'];
	}

	if( !in_array($pokemon, $pokemonNames) ) {
		$errors[] =  $lang['register_not_starter'];
	}

	if($password != $password2) {
		$errors[] =  $lang['register_match_pwd'];
	}

	if(strlen($password) <= 6) {
		$errors[] =  $lang['register_contain_pwd'];
	}

	if(filter_var($email, FILTER_VALIDATE_EMAIL) === false) {
		$errors[] =  $lang['register_valid_email'];
	}

	if (isset($_POST["recaptcha_challenge_field"]) && isset($_POST["recaptcha_response_field"])) {
	    $resp = recaptcha_check_answer(
	        $privatekey,
	        $_SERVER["REMOTE_ADDR"],
	        $_POST["recaptcha_challenge_field"],
	        $_POST["recaptcha_response_field"]
	     );

	    if(!$resp->is_valid) {
			$errors[] = $lang['register_captcha_wrong'];
	    }
	} else {
		$errors[] = $lang['register_captcha_missing'];
	}

	$query = mysql_query("SELECT `id` FROM `users` WHERE `username`='{$sqlUsername}' LIMIT 3");
	if(mysql_num_rows($query) == 3) {
		$errors[] =  $lang['register_taken_username'];
	}

	if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) && $_SERVER['HTTP_X_FORWARDED_FOR'] != '') {
	    $ip = cleanSql($_SERVER['HTTP_X_FORWARDED_FOR']);
	} else {
	    $ip = cleanSql($_SERVER['REMOTE_ADDR']);
	}

	if (isset($_GET['ref'])) {
		$refId = (int) $_GET['ref'];
		$query = mysql_query("SELECT * FROM `users` WHERE `id`='{$refId}'");
		$refRow = mysql_fetch_assoc($query);
		if ($refRow['ip'] == $ip) {
			$errors[] = $lang['register_match_ip'];
		}
	}

	$oneDayAgo = time() - (60*60*24);
	$query = mysql_query("SELECT `id` FROM `users` WHERE `ip`='{$ip}' AND `signup_date`>='{$oneDayAgo}' LIMIT 1");
	if(mysql_num_rows($query) == 1) {
		$errors[] = $lang['register_already_ip'];
	}


   /* if(mysql_num_rows(mysql_query("SELECT id FROM users WHERE ip = '{$ip}'")) != 0) {
		include '_header.php';
		echo '<div class="ip-error">Sorry, but there\'s already an account registered under this IP. <br />
				If you wish to reclaim this account or delete it, please contact one of our administrators.</div>';
		die();
	} */


	if (count($errors) > 0) {
		$errorMessage = '<p style="top: 0; margin: 2px 0;" class="error">'.implode('</p><p style="top: 0; margin: 2px 0;" class="error">', $errors).'</p>';
	} else {

		// make them a user account
		$money = DEFAULT_USER_MONEY;
		$refId = isset($_GET['ref']) ? (int) $_GET['ref'] : 0 ;
		mysql_query("
			INSERT INTO `users` (
				`username`, `password`, `email`,`signup_date`, `money`, `ip`, `register_ip`, `ref_id`
			) VALUES (
				'{$sqlUsername}', '{$sqlPassword}', '{$sqlEmail}', '{$time}', '{$money}', '{$ip}', '{$ip}', '$refId')
		");
		$uid = mysql_insert_id();


		$pokeQuery  = mysql_query("SELECT * FROM `pokemon` WHERE `name`='{$pokemon}'");
		$pokemonRow = mysql_fetch_assoc($pokeQuery);
		$level = DEFAULT_STARTER_LEVEL;
		$exp   = levelToExp($level);

		// give them a pokemon
		$query = mysql_query("
			INSERT INTO `user_pokemon` (
				`uid`, `name`, `level`, `exp`, `move1`, `move2`, `move3`, `move4`
			) VALUES (
				'{$uid}', '{$pokemon}', '{$level}', '{$exp}', '{$pokemonRow['move1']}', '{$pokemonRow['move2']}', '{$pokemonRow['move3']}', '{$pokemonRow['move4']}'
			)
		");
		$pid = mysql_insert_id();

		// put the pokemon in the first slot
		mysql_query("UPDATE `users` SET `poke1`='{$pid}' WHERE `id`='{$uid}'");

		//give them some items
		mysql_query("
			INSERT INTO `user_items` (
				`uid`, `poke_ball`, `great_ball`, `ultra_ball`, `master_ball`,
				`potion`, `super_potion`, `hyper_potion`, `burn_heal`, `full_heal`,
				`parlyz_heal`, `antidote`, `awakening`, `ice_heal`, `dawn_stone`,
				`dusk_stone`, `fire_stone`, `leaf_stone`, `moon_stone`, `oval_stone`,
				`shiny_stone`, `sun_stone`, `thunder_stone`, `water_stone`
			) VALUES (
				'{$uid}', '20', '15', '10', '5', '20', '10', '5',
				'5', '5', '5', '5', '5', '5', '5', '5', '5',
				'5', '5', '5', '5', '5', '5', '5'
			);
		");

		if (isset($_GET['ref'])) {
			$refId = (int) $_GET['ref'];
			mysql_query("UPDATE `users` SET `Referals`=`Referals`+1 WHERE `id`='{$refId}'");
		}

		$_SESSION['register'] = '<div class="success">'.$lang['register_success'].'</div>';

		redirect('login.php');
	}
}

$starterCells = array();
foreach ($pokemonNames as $name) {
	$starterCells[] = '
		<label>
		<img src="images/pokemon/'.$name.'.png" alt="'.$name.'" /><br /><br />
		<input type="radio" name="pokemon" value="'.$name.'" />
		</label>
	';
}

include '_header.php';
?>

<div class="content">
	<div class="wrap">
		<table>
			<tr>
				<td>
					<div class="poke three"></div>

					<div class="register">

					<?=$errorMessage?>

						<div class="title" align="center"><?=$lang['register_title']?></div>

						<form action="" method="post" autocomplete="off">
							<table style=" text-align: left;">
								<tr class="block">
									<th><?=$lang['register_username']?></th>
									<td><input type="text" name="username" value="<?=htmlentities($username, ENT_QUOTES, 'UTF-8')?>"  autofocus="on" /></td>
								</tr>

								<tr class="block">
									<th><?=$lang['register_pwd']?></th>
									<td><input type="password" name="password" /></td>
								</tr>

								<tr class="block">
									<th><?=$lang['register_pwd_again']?></th>
									<td><input type="password" name="password2" /></td>
								</tr>

								<tr class="block">
									<th><?=$lang['register_email']?></th>
									<td><input type="text" name="email" value="<?=htmlentities($email, ENT_QUOTES, 'UTF-8')?>" /></td>
								</tr>

								<tr class="block">
									<th colspan="2" style="vertical-align: top;"><?=$lang['register_starter']?></th>
								</tr>

								<tr class="block">
									<td colspan="2">
										<table class="table" style="text-align: center">
											<?=cellsToRows($starterCells, DEFAULT_STARTER_COLUMNS)?>
										</table>
									</td>
								</tr>

								<tr class="block">
									<th colspan="2"><?=$lang['register_captcha']?></th>
								</tr>

								<tr>
									<td colspan="2"><?php echo recaptcha_get_html($publickey); ?></td>
								</tr>

								<tr class="block">
									<td colspan="2"><center><input type="submit" value="<?=$lang['register_signup']?>" name="submit" class="button"></center></td>
								</tr>
							</table>
						</form>
					</div>
					<? include '_footer.php'; ?>
				</td>
			</tr>
		</table>
	</div>
</div>