<?php
// ODBC
$DB = "KN_Online";
$User = "Knight";
$Pass = "Knight";

// Function
function sanitize($input,$length)
{
        return substr(htmlentities($input, ENT_QUOTES), 0, $length);
}

if (!$posted)
{
// Buttons, Text.
echo '
<form action="Register.php" method="post">
ID: <input type="text" name="userid" />
Password: <input type="text" name="pass1" />
Confirm Passowrd: <input type="text" name="pass2" />
Security Code: <input type="text" name="charsil" />
Confirm Security Code: <input type="text" name="charsil1" />
Email: <input type="text" name="email" />
Confirm Email: <input type="text" name="email1" />
</form>
';
}
else
{
//actually register

// posted data
$login = sanitize(@$_POST['userid'],5);
            $pw = sanitize($_POST['pass1'],5);
            $c_pw =sanitize($_POST['pass2'],5);
            $socNo = sanitize($_POST['charsil'],4);
            $socNo2 = sanitize($_POST['charsil1'],4);
            $email = sanitize($_POST['email'],25);
            $email2 = sanitize($_POST['email1'],25);



// Error Codes
if ($pw != $c_pw) {
echo 'Password Confirmed';
die();
}

if (!empty($login) {
echo 'Fill In Login Field';
die();
}

if (!empty($pw) && !empty($c_pw) {
echo 'Fill in Password Field';
die();
}

if (!empty($socNo) && !empty($socNo2) {
echo 'Fill In Security Code Field';
die();
}

if (!empty($email) && !empty($email2) {
echo 'Fill In Email Field';
die();
}

//Registration
$msconnect=odbc_connect($DB,$User,$Pass);
$stmt = odbc_prepare($msconnect, "INSERT INTO TB_USER (strACcountID, strPasswd, strSocNo, Email) VALUES (?,?,?,?)");
    $result = odbc_execute($stmt, array($login,$pw,$socno,$email));

}







?>