Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- $database_encoding = 'CP1251';
- $tbc = 3;
- $realmd = mysql_connect("$host:$port", "$user", "$pass", True);
- mysql_selectdb("$db1", $realmd);
- $world = mysql_connect("$host:$port", "$user", "$pass", True);
- mysql_selectdb("$db2", $world);
- $characters = mysql_connect("$host:$port", "$user", "$pass", True);
- mysql_selectdb("$db3", $characters);
- echo "
- <script type=\"text/javascript\">
- function isAlphaNumeric(value)
- {
- if (value.match(/^[a-zA-Z0-9_]+$/))
- return true;
- return false;
- }
- function checkform(f)
- {
- if (f.account.value == \"\")
- {
- alert(\"Введите логин\");
- return false;
- }
- if (!isAlphaNumeric(f.account.value))
- {
- alert(\"Запрещенные символы в логине\");
- return false;
- }
- if (f.password.value==\"\")
- {
- alert(\"Введите пароль\");
- return false;
- }
- if (!isAlphaNumeric(f.password.value))
- {
- alert(\"Запрещенные символы в пароле\");
- return false;
- }
- if (f.password2.value==\"\")
- {
- alert(\"Вы не ввели повтор пароля\");
- return false;
- }
- if (f.password.value != f.password2.value)
- {
- alert(\"Пароли не совпадают\");
- return false;
- }
- if (f.email.value==\"\")
- {
- alert(\"Вы не ввели e-mail\");
- return false;
- }
- }
- </script>";
- echo "
- <center><font size=3>Регистрация</font></center>
- <font color=#00CC00>
- </font><br>
- <br>
- <center>
- <form method=post action=index.php?id=reg onsubmit=\"return checkform(this)\">
- <table>
- <tr>
- <td><font color=white>*</font> Логин:</td>
- <td><input type=text name=account maxlength=20></td>
- </tr>
- <tr>
- <td><font color=white>*</font> Пароль:</td>
- <td><input type=password name=password maxlength=20></td>
- </tr>
- <tr>
- <td><font color=white>*</font> Повторите пароль:</td>
- <td><input type=password name=password2 maxlength=20></td>
- </tr>
- <tr>
- <td><font color=white>*</font> E-mail:</td>
- <td><input type=text name=email maxlength=32></td>
- </tr>
- <tr>
- <td colspan=2 style=\"text-align: center;\"><br><input type=submit value=Зарегистрироваться></td>
- </tr>
- </table>
- </form></center>";
- if (isset($_POST['account'])) {
- if ($_POST['account'] && strlen($_POST['account'])<=20 && strlen($_POST['account'])>=3 && strlen($_POST['password'])>=3 && $_POST['password'] && $_POST['password2'] && $_POST['password']==$_POST['password2']) {
- if (!eregi("^[a-zA-Z0-9_]+$", $_POST['account']))
- die ("<p>Error: SQL-Injection</p>");
- if (!eregi("^[a-zA-Z0-9_]+$", $_POST['password']))
- die ("<p>Error: SQL-Injection</p>");
- $pass = ($_POST['password']);
- $username = ($_POST['account']);
- $result = mysql_query("SELECT * FROM account WHERE username='".$_POST['account']."' AND sha_pass_hash='$pass'", $realmd);
- if (mysql_num_rows($result) != 0) {
- echo "<center><p><font color=#CC0000><b>Такой аккаунт уже есть!</b></font></p></center>";
- } else {
- if (!mysql_query("INSERT INTO account (username, sha_pass_hash, email, expansion) VALUES ('$username', SHA1(CONCAT(UPPER('$username'),':',UPPER('$pass'))), '".$_POST['email']."', $tbc)", $realmd)) {echo "<center><p><font color=#CC0000><b>Ошибка</b></font></p></center>";} else {echo "<center><p><font color=#00CC00><b>Аккаунт успешно зарегестрирован!</b></font></p></center>";}
- }
- } else {
- echo "<center><p><font color=#CC0000><b>Проверьте правильность ввода!</b></font></p></center>";
- }
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement