function sha_password($username,$pass){
 $user = strtoupper($username);
 $pass = strtoupper($pass);
return SHA1($user.':'.$pass);
}




<?php
   $dbcon = @mysql_connect($dbhost, $dbuser, $dbpass);
   if (!$dbcon)
   {
     return show_error(mysql_error());
   }
   $dba = @mysql_select_db($dbaccs, $dbcon);
   if (!$dba)
   {
     return show_error(mysql_error());
   }

 // sha_pass_hash
 function sha_password($username,$pass){
 $user = strtoupper($username);
 $pass = strtoupper($pass);
 return SHA1($user.':'.$pass);
 }


 $ip = $_SERVER['REMOTE_ADDR'];

 if($multi_ip != 1) {
   $query = @mysql_query("SELECT * FROM account WHERE last_ip = '$ip'") or die(mysql_error());
   if(mysql_num_rows($query) != 0) {
    return locked_error("You have already used this IP before to register an account.");
   }
 }

 echo '<div id="acc">
 <h2 align="center">Create an Account</h2><br  /><form method="post">Account Name<br /><input  type="text" name="accname" /><br /><br />Account  Password<br /><input type="password" name="pword" /><br  /><br />Retype your Password<br /><input  type="password" name="pwordtwo" /><br /><br />E-mail  Address (Use a valid E-mail)<br /><input type="text"  name="accmail" /><br /><br /><input type="submit"  value="" name="submit" /></form>
 </div>';

 if(isset($_POST['submit'])) {

 $accname = mysql_real_escape_string($_POST['accname']);
 $pword = mysql_real_escape_string($_POST['pword']);
 $pwordtwo = mysql_real_escape_string($_POST['pwordtwo']);
 $accmail = mysql_real_escape_string($_POST['accmail']);


    if(empty($accname) || empty($pword) || empty($pwordtwo) || empty($accmail))
      return show_error("Some fields were empty, please fill in all fields.");

      if($pwordtwo != $pword) return show_error("Your passwords did not match.");
   if(!is_valid_email($accmail)) return show_error("You must use a valid email");

      $query1 = @mysql_query("SELECT * FROM account WHERE username = '$accname'") or die(mysql_error());
      if(mysql_num_rows($query1) != 0) return show_error("Username already exists in our database.");

      $query2 = @mysql_query("SELECT * FROM account WHERE email = '$accmail'") or die(mysql_error());
      if(mysql_num_rows($query2) != 0) return show_error("E-mail already exists in our database.");

      $sha_ass_hash = sha_password($accname, $pword);
      $query3  = mysql_query("INSERT INTO account SET username = '$accname',  sha_pass_hash = '$sha_ass_hash', email = '$accmail', expansion = '2'") or  die(mysql_error());
      if (mysql_affected_rows($dbcon) <= 0)  return show_error("Something went wrong, please try again. Account was  not created!");

      echo '<div class="success"><span  style="padding-left:35px;">Account successfully  created!</span> <div  class="s-img"></div></div><br />';
 }

 ?>