Untitled

<?php
    // set the config values for connecting to the db
    $dbhost = "127.0.0.1";
    $dbuser = "root";
    $dbpassword = "P@ssw0rd";
    $db = "arcemu_logon";

    // misc config
    $accountcreated = "<div style='background-color:green; color:white; font-weight:bold;'>Your account ".$login." has been created!</div>";
    $allow_multi_email = true;
    $allow_multi_ip = true;

    echo '
        <html>
            <head>
                <title>WoWPS Account Creation</title>
            </head>
            <body>
    ';

    if (!isset($_POST['login'])) {
        form();
    } else {
        // connect to the db
        $dbcon = mysql_connect($dbhost,$dbuser,$dbpassword) or die(mysql_error());
        mysql_select_db($db,$dbcon) or die(mysql_error());

        // get login, password, email from form
        $login = !get_magic_quotes_gpc() ? mysql_real_escape_string($_POST['login']) : $_POST['login'];
        $password = !get_magic_quotes_gpc() ? mysql_real_escape_string($_POST['password']) : $_POST['password'];
        $email = !get_magic_quotes_gpc() ? mysql_real_escape_string($_POST['email']) : $_POST['email'];
        $ip = $_SERVER['REMOTE_ADDR'];

        if (valid_info($login,$password,$email,$ip,$allow_multi_email,$allow_multi_ip)) {
            // encrypt the password for putting in to db
            $sha1pass = sha1(strtoupper($login).":".strtoupper($password));

            // make sure data gets put in or display error
            if (mysql_query("INSERT INTO accounts(login,password,encrypted_password,gm,email,flags,lastip) VALUES('$login','$password','$sha1pass',0,'$email',24,'$ip')")) {
                mysql_close($dbcon);
                echo $accountcreated;
            } else {
                switch(mysql_errno()) {
                    case 1062 :
                        echo "<div style='background-color:red; color:white; font-weight:bold;'>This accounts already exist !</div> ".form();
                    break;

                    default :
                        echo "Mysql Error : ".mysql_errno()."<br />".form();
                    break;
                }
            }
        }
    }

    echo '
            </body>
        </html>
    ';

    function form() {
        echo '
            <form action="./" method="post">
                <table>
                    <tr><td>Login : (6 chars min) </td><td><input name="login" value="" type="text"></td></tr>
                    <tr><td>Password : (6 chars min) </td><td><input name="password" value="" type="password"></td></tr>
                    <tr><td>Email : </td><td><input name="email" value="" type="text"></td></tr>
                    <tr><td colspan="2" align="center"><input type="submit"></td></tr>
                </table>
            </form>
        ';
    }

    function valid_info($login,$password,$email,$ip,$allow_multi_email,$allow_multi_ip) {

        // check for valid password and login
        if (preg_match('/[^0-9A-Za-z]/',$login)) {
            echo "<div style='background-color:red; color:white; font-weight:bold;'>Login is invalid. Only a-z, A-Z, and numbers allowed!</div>".form();
            return false;
        }

        // check for blank login or password or email
        if ($login == "" || $password == "" || $email == "") {
            echo "<div style='background-color:red; color:white; font-weight:bold;'>Login, password, or email is blank, please fill them out! !</div>".form();
            return false;
        }

        // check if login and password is over 5 characters long
        if (strlen($login) <= 5 || strlen($password) <= 5) {
            echo "<div style='background-color:red; color:white; font-weight:bold;'>Login or password was under 6 characters long !</div>".form();
            return false;
        }

        // check for valid email
            if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            echo "<div style='background-color:red; color:white; font-weight:bold;'>Invalid email address!</div>".form();
            return false;
        }

        // if we don't allow an email to be used on more then one account warn the user
        if (!$allow_multi_email) {
            if (mysql_num_rows(mysql_query("SELECT email FROM accounts WHERE email = '$email'")) > 0) {
                echo "<div style='background-color:red; color:white; font-weight:bold;'>Email already in use!</div>".form();
                return false;
            }
        }

        // if we don't allow an ip to be on more then one account then warn the user
        if (!$allow_multi_ip) {
            if (mysql_num_rows(mysql_query("SELECT * FROM accounts WHERE lastip = '$ip'")) > 0) {
                echo "<div style='background-color:red; color:white; font-weight:bold;'>This IP has already made an account!</div>".form();
                return false;
            }
        }

        return true;
    }
?>