<?php
// ODBC
$DB = "KN_Online";
$User = "Knight";
$Pass = "Knight";

// Function
function sanitize($input,$length)
{
        return substr(htmlentities($input, ENT_QUOTES), 0, $length);
}

// Check
if (sizeof($_POST))

// Buttons, Text.
echo '
<div align = "center">
<form action = "Register.php" method="post">
<div align = "center">ID: <input type="text" name="userid" /></div>
<div align = "center">Password: <input type="text" name="pass1" /></div>
<div align = "center">Confirm Passowrd: <input type="text" name="pass2" /></div>
<div align = "center">Security Code: <input type="text" name="charsil" /></div>
<div align = "center">Confirm Security Code: <input type="text" name="charsil1" /></div>
<div align = "center">Email: <input type="text" name="email" /></div>
<div align = "center">Confirm Email: <input type="text" name="email1" /></div>
<div align = "center"><input type = "submit" value = "Register" /></div>
</form>
</div>
';



else

{


// Posted Data
$login = sanitize($_POST['userid'],5);
            $pw = sanitize($_POST['pass1'],5);
            $c_pw =sanitize($_POST['pass2'],5);
            $socNo = sanitize($_POST['charsil'],4);
            $socNo2 = sanitize($_POST['charsil1'],4);
            $email = sanitize($_POST['email'],25);
            $email2 = sanitize($_POST['email1'],25);



// Error Codes
if ($pw == $c_pw) {
echo 'Password Confirmed';
die();
}

if (empty($login)) {
echo 'Fill In Login Field';
die();
}

if (empty($pw) || empty($c_pw)) {
echo 'Fill in Password Field';
die();
}

if (empty($socNo) || empty($socNo2)) {
echo 'Fill In Security Code Field';
die();
}

if (empty($email) || empty($email2)) {
echo 'Fill In Email Field';
die();
}

// Check For Previous Accounts
$msconnect=odbc_connect($DB,$User,$Pass);
$stmt = odbc_prepare($msconnect, " select count(*) from TB_User where straccountid = ?");
$msresul=odbc_exec($msconnect,$stmt)
        $count = odbc_fetch_row ($msresul);
 if ($count > 0) deny { // Curious why count would have to be a variable in this?
 echo 'Account Name In Use'
 die ();
 }


//Registration
$stmt = odbc_prepare($msconnect, "INSERT INTO TB_USER (strACcountID, strPasswd, strSocNo, Email) VALUES (?,?,?,?)");
    $result = odbc_execute($stmt, array($login,$pw,$socno,$email));

}







?>