<?php

session_start();
require "globals.php";

require "mysql.php";

global $c;

if ( $_GET['act'] == 'val')

{

$q=mysql_query("SELECT * FROM validating WHERE vdID='{$_GET['token']}'", $c);

if (!mysql_num_rows($q))

{

die("Invalid account");

}

$r=mysql_fetch_row($q);

$pass=strip_tags($r['vdPASSW']);

$pass=md5($pass);

$username=($r['vdUSERN']);

$email=($r['vdEMAIL']);

$money=($r['vdMONEY']);



if($_POST['ref']) {
$q=mysql_query("SELECT * FROM users WHERE userid={$_POST['ref']}");
$r=mysql_fetch_row($q);
}
mysql_query("INSERT INTO users (username, login_name, userpass, level, money, crystals, donatordays, user_level, energy, maxenergy, will, maxwill, brave, maxbrave, hp, maxhp, location, gender, signedup, email, bankmoney, lastip, lastip_signup) VALUES( '{$username}', '{$username}', md5('{$_POST['password']}'), 1, $sm, 0, 0, 1, 12, 12, 100, 100, 5, 5, 100, 100, 1, '{$_POST['gender']}', unix_timestamp(), '{$_POST['email']}', -1, '$IP', '$IP')");
$i=mysql_insert_id();
mysql_query("INSERT INTO userstats VALUES($i, 10, 10, 10, 10, 10)");
mysql_query("DELETE FROM validating WHERE vdID='{$_GET['token']}'", $c);

print "Account validated!<br />

<a href='login.php'>> Login</a>";

}

else

{

mysql_query("DELETE FROM validating WHERE vdID='{$_GET['token']}'", $c);

print "Registration Cancelled.";

}

?>