Untitled

<?php
$realmd = array(
'db_host'=> 'localhost',        // Host IP
'db_username' => '',        // Database login-name
'db_password' => '',      // Database login-pass
'db_name_realm'=> '',     // Database name of realm
);

function check_for_symbols($string)
{
    $len=strlen($string);
    $allowed_chars="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
    for($i=0;$i<$len;$i++)if(!strstr($allowed_chars,$string[$i]))
        return TRUE;
    return FALSE;
}
function sha_password($user,$pass)
{
    $user = strtoupper($user);
    $pass = strtoupper($pass);
    return SHA1($user.':'.$pass);
}
if ($realmd[db_host] != "" && $realmd[db_username] != "" && $realmd[db_password] != "" && $realmd[db_name_realm] != "")
{
    $new_connect = mysql_connect($realmd[db_host],$realmd[db_username],$realmd[db_password]);
    if ($new_connect)
        $selectdb = mysql_select_db($realmd[db_name_realm],$new_connect);
    else
    {
        echo "Could NOT connect to db: Configs (Name/Pass/Port/IP) are incorrect";
        die;
    }

    if ($new_connect && !$selectdb)
    {
        echo "Could NOT connect to db: Database does not exist!";
        die;
    }

    if ($_POST['registration'])
    {
        $username = $_POST['username'];
        $password = sha_password($username,$_POST['password']);
        $passcheck1 = $_POST['password'];
        $passcheck2 = $_POST['password2'];
        $email = $_POST['email'];
                $email2 = $_POST['email2'];
        $expansionnumber = $_POST['expansion'];

        $check_username = mysql_query("SELECT username FROM `account` WHERE username='$username'");
        if ($username == "")
        {
            echo "Username is empty!";
        }
        else if ($password == "")
        {
            echo "Password is empty!";
        }
                else if ($passcheck2 == "")
                {
                        echo "Please confirm your password!";
                }
        else if (check_for_symbols($_POST[password]) == TRUE)
        {
            echo "Error with creating account: password has invalid symbols in it.";
        }
        else if (check_for_symbols($username) == TRUE)
        {
            echo "Error with creating account: username has invalid symbols in it.";
        }
        else if (mysql_num_rows($check_username) != 0)
        {
            echo "Error with creating account: name is already in use.";
        }
                else if ($passcheck1 != $passcheck2)
                {
                        echo "Passwords don't match!";
                }
                else if ($email == "")
                {
                        echo "Email is empty!";
                }
                else if ($email2 == "")
                {
                        echo "Please confirm your email!";
                }
                else if ($email != $email2)
                {
                        echo "Emails don't match!";
                }
        else
        {
            $username = mysql_real_escape_string($username);
                        $email = mysql_real_escape_string($email);
            mysql_query("INSERT INTO account (username,sha_pass_hash,email,expansion) VALUES
('$username','$password','$email','$expansionnumber')");
            if (mysql_error)
                echo mysql_errno($new_connect) . ": " . mysql_error($new_connect). "\n";
            else
            {
                echo "Account created.";
                mysql_close($new_connect);
            }
        }
    }
    else
    {
        ?>
        <html>
        <head>
        <title>Регистрация Аккаунт Battleage.kg</title>
        </head>
        <body>
        <center><br><br><img src="logo.png"><br><br></center>
<table width="30%" border="1" align="center">
  <tr>
    <td><center>Регистрация аккаунта</center></td>
  </tr>
  <tr>
    <td><center><form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="POST">
      <table width="100%" border="1">
        <tr>
          <td width="50%">Логин:</td>
          <td width="50%"><input type="text" name="username" /></td>
        </tr>
        <tr>
          <td>Пароль:<br/>
            Подверждение пароля:</td>
          <td width="50%"><input type="password" name="password" />            <input type="password" name="password2" /></td>
        </tr>
        <tr>
          <td>Expansion Selection:</td>
          <td width="50%"><select name="expansion">
            <option selected value="2">WotLK</option>
            </select></td>
        </tr>
        <tr>
          <td>Email:<br/>
            Подверждение Email:</td>
          <td width="50%"><input type="text" name="email" />            <input type="text" name="email2" /></td>
        </tr>
        </table>
        <input type="submit" name="registration" />
      </p>
    </form></center></td>
  </tr>
</table>
    </body>
        </html>
        <?php
    }
}
else
{
    echo "Config file either not present or connection variables are empty";

}
?>