<?php if(basename($_SERVER["PHP_SELF"]) == "register.php"){
    die("403 - Access Forbidden");
}
if(isset($_SESSION['id'])){
    echo "<meta http-equiv=refresh content="0; url=?base=ucp">";
}
else{
echo "<h2 class="text-left">Registration</h2><hr/>";
if (@$_POST["register"] != "1") {
?>
    <form action="?base=main&page=register" method="POST" role="form">
    <div class="form-group">
        <label for="inputUser">Username</label>
        <input type="text" name="musername" maxlength="12" class="form-control" id="inputUser" required autocomplete="off" placeholder="Username">
    </div>
    <div class="form-group">
        <label for="inputPass">Password</label>
        <input type="password" name="mpass" maxlength="30" class="form-control" id="inputPass" required autocomplete="off" placeholder="Password">
    </div>
    <div class="form-group">
        <label for="inputConfirm">Confirm Password</label>
        <input type="password" name="mpwcheck" maxlength="30" class="form-control" id="inputConfirm" required autocomplete="off" placeholder="Confirm Password">
    </div>
    <div class="form-group">
        <label for="inputEmail">Email</label>
        <input type="email" name="memail" maxlength="50" class="form-control" id="inputEmail" required autocomplete="off" placeholder="Email">
    </div>
    <b>reCaptcha</b>
    <div class="g-recaptcha" data-sitekey="YOUR SITE KEY HERE"></div>
    <br/>
        <input type="submit" class="btn btn-primary" name="submit" alt="Register" value="Register &raquo;"/>
        <input type="hidden" name="register" value="1" />
    </form>
    <br/>
<?php
} else {
    $getusername = $mysqli->real_escape_string($_POST["musername"]); # Get Username
    $username = preg_replace("/[^A-Za-z0-9 ]/", '', $getusername); # Escape and Strip
    $password = $_POST["mpass"]; # Get Password
    $confirm_password =$_POST["mpwcheck"]; # Get Confirm Password
    $email = $mysqli->real_escape_string($_POST["memail"]);
    $captcha = $mysqli->real_escape_string($_POST["g-recaptcha-response"]);
    $birth = "1990-01-01";
    $ip = getRealIpAddr();

    $secretkey = "YOUR PRIVATE SITE KEY HERE";

    if(empty($captcha)){
        echo ("<div class="content"><div class="contentbg registerbg"></div><div class="body_register"><div class="alert alert-danger"><b>Error:</b> Please fill in the correct ReCAPTCHA code!<br/><a href="?base=main&page=register" class="areg">&laquo; Go Back</a></div></div></div>");
    } else {
        $select_user_result = $mysqli->query("SELECT id FROM accounts WHERE name='".$username."' OR email='".$email."' LIMIT 1");
        $returned = $select_user_result->num_rows;
        if ($returned > 0) {
            echo ("<div class="alert alert-danger"><b>Error:</b> This username or email is already used!<br/><a href="?base=main&page=register">&laquo; Go Back</a>");
        } else if ($password != $confirm_password) {
            echo ("<div class="alert alert-danger">Passwords didn't match!<br/><a href="?base=main&page=register">&laquo; Go Back</a></div></div></div>");
        } else if (strlen($password) < 4 || strlen($password) > 12) {
            echo ("<div class="alert alert-danger">Your password must be between 4-12 characters<br/><a href="?base=main&page=register">&laquo; Go Back</a>");
        } else if (strlen($username) < 4 || strlen($username) > 12) {
            echo ("<div class="alert alert-danger">Your username must be between 4-12 characters<br/><a href="?base=main&page=register">&laquo; Go Back</a>");
        } else if (!strstr($email, '@')) {
            echo ("<div class="alert alert-danger">You have filled in a wrong email address<br/><a href="?base=main&page=register">&laquo; Go Back</a>");
        } else {
            $response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretkey."&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
            if($response.success==true)
            {
            //All data is ok
            $password = sha1($password);
            $insert_user_query = "INSERT INTO accounts (`name`, `password`, `ip`, `email`, `birthday`) VALUES ('".$username."', '".$password."', '".$ip."', '".$email."', '".$birth."')";
            $mysqli->query($insert_user_query);
            echo"
                <div class="alert alert-success"><b>Success!</b> Please login, and head to the downloads page to get started!</div>
            ";
            }
            }
        }
    }
}