<?php
if(isset($_POST['submit'])){
mssql_select_db("ACCOUNT_DBF");
$username = $_POST['username'];
$password = $_POST['password'];
$repeat = $_POST['repeat'];
$birthday = $_POST['birthday'];
$email = $_POST['email'];
$how = $_POST['H'];
$referrer = $_POST['ref'];
$ip = $_SERVER['REMOTE_ADDR'];
    if(!$username || !$password || !$repeat || !$birthday || !$email)
    {
        echo "<B>[ERROR]: Please fill in all the fields.</b>";
    }
        else
    {
        $checkuser = mssql_query("SELECT * FROM [ACCOUNT_DBF].dbo.[ACCOUNT_TBL] WHERE account='$username'");
        if(mssql_Num_rows($checkuser) != 0)
        {
            echo "<b>[ERROR]: The user {$username} already exists!</b>";
        }
            else
        {
            if($password != $repeat)
            {
                echo "<b>The passwords you entered do not match!</b>";
            }
                else
            {
                $checkmail = mssql_query("SELECT * FROM [ACCOUNT_DBF].dbo.[ACCOUNT_TBL_DETAIL] WHERE email='$email'");
                if(mssql_num_rows($checkmail) != 0)
                {
                    echo "<b>The e-mail to supplied us is already in use!</b>";
                }
                    else
                {
                if($referrer)
                {
                    if($username == $referrer)
                    {
                        echo "<b>[ERROR]: You cannot be the referrer!</b>";
                    }
                        else
                    {
                        $checkacc2 = mssql_query("SELECT * FROM [ACCOUNT_TBL_DETAIL] WHERE account='$referrer'");
                            if(mssql_num_rows($checkacc2) == 0)
                            {
                                echo "<b>[ERROR]: The referrer username you supplied us doesn't exist!</b>";
                            }
                                else
                            {
                                $checkip = mssql_query("SELECT * FROM [ACCOUNT_TBL_DETAIL] WHERE account='$referrer' AND ip='$ip'");
                                if(mssql_num_rows($checkip) >=1)
                                {
                                echo "<b>[ERROR]: The referrer username you supplied us is connected to you, therefore it isn't legiable to enter.</b>";
                                }
                                    else
                                {
                                    mssql_query("UPDATE [ACCOUNT_TBL] set dPoints = dPoints + 100 where account='$referrer'");
                                }
                            }
                    }
                $stmt = mssql_init('createaccount2');
                mssql_bind($stmt, '@account', $username, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@password', md5($salt . $password), SQLVARCHAR, false, false, 36);
                mssql_bind($stmt, '@birthday', $birthday, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@email', $email, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@how', $how, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@ref', $referrer, SQLVARCHAR, false, false, 15);
                mssql_bind($stmt, '@ip', $ip, SQLVARCHAR, false, false, 15);
                mssql_execute($stmt) or die ("<b>Error occurred while executing the statement.</b>");
                mssql_free_statement($stmt);
                echo "<BR><BR><b>[SUCCESS]: You've been successfully registered as " . $username . "</b>!";
                        }
                    }
                }
            }
        }
    echo "<BR><BR>";
}
echo "You're registering for the server {$servername}<BR><form method='post'><table border='0' cellspacing='0' cellpadding='4'><tr><td><b>Username:</b> </td><td><input id='input' type='text' name='username' maxlength='15'></td></tr><tr><td><b>Password:</b> </td><td><input id='input' type='password' name='password' maxlength='15'></td></tr><tr><td><b>Repeat Password:</b> </td><td><input id='input' type='password' name='repeat' maxlength='15'></td></tr><tr><td><b>Birthday(MM-DD)</b></td><td><input id='input' type='text' name='birthday' maxlength='15'></td><td><b>PLEASE SUPPLY A VALID BIRTHDAY.<BR>[Do not enter the year.]</b></td></tr><tr><td><b>E-Mail:</b></td> <td><input id='input' type='text' name='email' maxlength='30'></td><td><b>MUST BE VALID.</b></td><tr><td><b>How did you find us?</b></td><td><select name='H'><option value='1'>An Advertisment</option><option value='2'>Google</option><option value='3'>Friend</option><option value='4'>Other</option></select></td></tr><tr><td><b>Referrer:</b></td><td><input id='input' type='text' name='ref' maxlength='15'></td><td><b>[Leave blank if none] Please enter the user's username.</tr><tr><td><input id='button' type='submit' name='submit' value='Submit'></td></tr></table>";
?>