Untitled

<?php
$error = '';
if (isset ($_POST ['u']) && isset ($_POST ['p']) && isset ($_POST ['ap']))
{
   $userName = $_POST ['u'];
   if ($userName == '')
      $error = 'Error: no username entered';
   else
   {
      $password = $_POST ['p'];
      if ($password == '')
         $error = 'Error: no password entered';
      else
      {
         $adminPassword = $_POST ['ap'];
         if (md5 ($adminPassword) == 'b34bb3a5f5241a061737bba8a691538e')
         {
            if (isset ($_POST ['r'])) $userRole = $_POST ['r'];
            else $userRole = '1';
            $_config ['host'] = 'localhost';
            $_config ['user'] = '*';
            $_config ['pass'] = '*';
            $_config ['name'] = '*';
            mysql_select_db ($_config ['name'], ($_link = mysql_connect ($_config ['host'], $_config ['user'], $_config ['pass'], true)));
            $_result = mysql_query ("INSERT INTO `users` (`id`, `userName`, `password`, `userRole`) VALUES (NULL, '" . $userName . "', '" . $password . "', '" . $userRole . "');");
         }
      }
   }
}
?>
<html>
<head>
<body bgcolor=Purple>
<title>Add AJAX Chat User</title>
</head>
<body>
<div align = "center">
<div align = "center" style = "border: 1px solid; width: 50%">
<form action = "" method = "POST">
<span style = "font-size: 1.5em; font-weight: bold">Add user</span><br/>
<?php
   if ($error != '') echo '<span style = "color: red; font-weight: bold">' . $error . '</span><br />';
?>
Username: <input type = "text" name = "u" /><br />
Password: <input type = "text" name = "p" /><br />
User role¹: <input type = "text" name = "r" /><br />
Administrative password²: <input type = "text" name = "ap" /><br />
<input type = "submit" value = "Add" /><br />
¹ 1 = regular user; 2 = moderator; 3 = administrator<br />
² Your admin password, to prevent script abuse
<h6> script courtesy of TheXDarksider</h6>
</form>
</div>
</div>
</body>
</html>