Advertisement
Guest User

Untitled

a guest
Aug 31st, 2018
332
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.66 KB | None | 0 0
  1. <?php include 'includes/config.inc.php'; ?>
  2. <?php
  3.  
  4.  
  5. //error_reporting(E_ALL);
  6.  
  7. error_reporting(0);
  8. ini_set('display_errors', 0);
  9. require_once "Mail.php";
  10.  
  11. function maill( $to, $from, $host, $port, $username, $password, $subject, $body)
  12. {
  13.  
  14. $headers = array(
  15. "MIME-Version"=> '1.0',
  16. "Content-type" => "text/html; charset=iso-8859-1",
  17. 'From' => $from,
  18. 'To' => $to,
  19. 'Subject' => $subject
  20. );
  21. $smtp = @Mail::factory( 'smtp', array(
  22. 'host' => $host,
  23. 'port' => $port,
  24. 'auth' => true,
  25. 'username' => $username,
  26. 'password' => $password)
  27. );
  28. $mail = @$smtp->send($to, $headers, $body);
  29.  
  30.  
  31. if (@PEAR::isError($mail)) {
  32. //echo("ERR: ".$mail->getMessage()."\n\n");
  33. return false;
  34. } else {
  35. //echo("Message successfully sent!\n");
  36. return true;
  37. }
  38.  
  39.  
  40. }
  41.  
  42. function regmail( $szEmail, $szUserName, $szRandomString )
  43. {
  44. $subject = 'Insanity FlyFF :: Register';
  45. $body = 'Hello '.$szUserName.'<br><br>
  46.  
  47. Please click on the link to activate your account.<br><br>
  48.  
  49. <a href="https://insanityflyff.com/register.php?activate='.$szRandomString.'">https://insanityflyff.com/register.php?activate='.$szRandomString.'</a><br><br>
  50.  
  51. If you cannot click the link copy this into your browser url bar:
  52.  
  53. https://insanityflyff.com/register.php?activate='.$szRandomString.'<br><br>
  54.  
  55. Enjoy playing.<br>
  56. Insanity FlyFF';
  57.  
  58.  
  59. return maill( strtolower( $szEmail ), "contact@insanityflyff.com", "ssl://email-smtp.us-east-1.amazonaws.com", 465, "AKIAIQQ6VYNXIPFAFU6Q", "AsR7NCWmiMQaAhDS7biKGGg/+swaSPhnEHSCDls4bw8q", $subject, $body);
  60.  
  61. }
  62.  
  63. $__page_selected = 'register';
  64.  
  65.  
  66. if( !empty( $_GET['activate'] ) )
  67. {
  68. $checkacc = odbc_prepare($mssql, 'SELECT account FROM [ACCOUNT_TBL] WHERE id_no2 = ?');
  69. odbc_execute_escaped($checkacc, array( $_GET['activate'] ) );
  70.  
  71. $szAcc = odbc_result($checkacc, 'account');
  72. if( $szAcc )
  73. {
  74. $result = odbc_prepare($mssql, 'UPDATE [dbo].[ACCOUNT_TBL_DETAIL] SET gamecode = \'A000\' WHERE account = ?' );
  75. odbc_execute_escaped($result, array( $szAcc ));
  76.  
  77. $subject = 'Insanity FlyFF :: Activation';
  78. $body = '<html>
  79. <head>
  80. <title></title>
  81. </head>
  82. <body data-gramm="true" data-gramm_editor="true" data-gramm_id="a45e74a0-2264-a60d-f3fd-f04ae2815a05">
  83. <p style="text-align: center;">Welcome&nbsp;'.$szAcc.',</p>
  84.  
  85. <p style="text-align: center;">Your account is now activated and you can enjoy our game.</p>
  86.  
  87. <p style="text-align: center;">&nbsp;</p>
  88.  
  89. <p style="text-align: center;">To download the game use:&nbsp;https://www.insanityflyff.com/download.php</p>
  90.  
  91. <p style="text-align: center;">To subscribe to our promotions use this link :&nbsp;https://www.insanityflyff.com/promotion.php</p>
  92.  
  93. <p style="text-align: center;">Note : <span style="color: rgba(255, 255, 255, 0.7); font-family: Whitney, &quot;Helvetica Neue&quot;, Helvetica, Arial, sans-serif; font-size: 15px; white-space: pre-wrap; background-color: rgb(54, 57, 63);">We will never share your details with 3rd parties.</span></p>
  94.  
  95. <p style="text-align: center;"><span style="color: rgb(161, 164, 170); font-family: Helvetica, Arial, sans-serif; font-size: 11px; text-align: center; background-color: rgb(255, 255, 255);">You&#39;ve received this email as confirmation of your </span><span style="font-family: Helvetica, Arial, sans-serif; font-size: 11px; text-align: center; background-color: rgb(255, 255, 255);">InsanityFlyFF </span><span style="color: rgb(161, 164, 170); font-family: Helvetica, Arial, sans-serif; font-size: 11px; text-align: center; background-color: rgb(255, 255, 255);">account.</span></p>
  96.  
  97. <p style="text-align: center;">&nbsp;</p>
  98.  
  99. <p style="text-align: center;">Copyright &copy; Online RPG Gaming S.L. All rights reserved.</p>
  100. </body>
  101. </html>';
  102.  
  103. odbc_exec($mssql, 'USE [ACCOUNT_DBF]');
  104. $accountselect2 = odbc_prepare($mssql, 'SELECT * FROM [ACCOUNT_TBL_DETAIL] WHERE account = ?');
  105. odbc_execute_escaped($accountselect2, array( $szAcc ));
  106.  
  107. $account2 = odbc_fetch_array($accountselect2);
  108.  
  109. maill( $account2['email'], "contact@insanityflyff.com", "ssl://email-smtp.us-east-1.amazonaws.com", 465, "AKIAIQQ6VYNXIPFAFU6Q", "AsR7NCWmiMQaAhDS7biKGGg/+swaSPhnEHSCDls4bw8q", $subject, $body);
  110.  
  111.  
  112.  
  113. header('Location: register.php?m=2');
  114. die('');
  115. }
  116.  
  117. }
  118.  
  119. if( !isset($_REQUEST['m']) && isset($_SESSION['user']) ) header("Location: user_panel.php");
  120.  
  121.  
  122.  
  123.  
  124.  
  125. $c_error = $c_resp = null;
  126.  
  127.  
  128. foreach($_POST as $key => $value) {
  129. if (!is_array($key)) {
  130. // sanitize the input data
  131. $_POST[$key] = stripslashes(trim($value));
  132. }
  133. }
  134.  
  135. if(isset($_POST['reg_submit'])){
  136. odbc_exec($mssql, 'USE [ACCOUNT_DBF]');
  137. $checkacc = odbc_prepare($mssql, 'SELECT COUNT(*) as count FROM [ACCOUNT_TBL] WHERE account = ?');
  138. odbc_execute_escaped($checkacc, array(@$_POST['reg_username']));
  139. $checkmail = odbc_prepare($mssql, 'SELECT COUNT(*) as count FROM [ACCOUNT_TBL_DETAIL] WHERE email = ?');
  140. odbc_execute_escaped($checkmail, array(@$_POST['reg_email']));
  141. $errors = array();
  142.  
  143.  
  144. $check_username = preg_replace("/[^a-z0-9]/", "", @$_POST['reg_username']);
  145.  
  146. if(empty($_POST['reg_username']) || empty($_POST['reg_password']) || empty($_POST['reg_confirmpw']) || empty($_POST['reg_email']) || empty($_POST['reg_question']) || empty($_POST['reg_answer']) )
  147. $errors[] = 'You must fill-in all fields!';
  148. if(!empty($_POST['reg_username']) && odbc_result($checkacc, 'count') > 0)
  149. $errors[] = 'Username does already exist!';
  150. if(!empty($_POST['reg_email']) && odbc_result($checkmail, 'count') > 0)
  151. $errors[] = 'E-Mail address does already exist!';
  152. if(!empty($_POST['reg_username']) && (strlen($_POST['reg_username']) > 10 || strlen($_POST['reg_username']) < 4))
  153. $errors[] = 'Your username must contain 4 - 10 characters!';
  154. if (!empty($_POST['reg_username']) && strcmp($check_username, $_POST['reg_username']) != 0)
  155. $errors[] = 'Your username must contain only lowercase alphanumeric characters!';
  156. if(!empty($_POST['reg_password']) && (strlen(@$_POST['reg_password']) > 12 || strlen(@$_POST['reg_password']) < 6))
  157. $errors[] = 'Your password must contain 6 - 12 characters!';
  158. /* if(preg_match('/[A-Z]/', @$_POST['reg_password']))
  159. $errors[] = 'Do not use CAPS in your password!'; ~GTFO - Pumaaa */
  160. if((!empty($_POST['reg_password']) && !empty($_POST['reg_confirmpw'])) && $_POST['reg_password'] != $_POST['reg_confirmpw'])
  161. $errors[] = 'The password confirmation doesn\'t match!';
  162.  
  163. $bMailError = false;
  164.  
  165.  
  166.  
  167. if( ( empty($_POST['reg_email'])|| empty($_POST['reg_email2']) ) || !preg_match('/^[a-zA-Z0-9-_.]+@[a-zA-Z0-9-_.]+\.[a-zA-Z]{2,4}$/', $_POST['reg_email']) )
  168. $bMailError = true;
  169.  
  170. if( strcmp( $_POST['reg_email'], $_POST['reg_email2'] ) !== 0 )
  171. $errors[] = 'The confirmation of your e-Mail address doesn\'t match!';
  172.  
  173. preg_match('/^([a-zA-Z0-9-_.]+)@([a-zA-Z0-9-_.]+)\.([a-zA-Z]{2,4})$/', $_POST['reg_email'], $aMail );
  174.  
  175. if( empty($aMail) || count($aMail) !== 4 )
  176. $bMailError = true;
  177.  
  178. if( $bMailError === false )
  179. $bMailError = !checkdnsrr( $aMail[2].'.'.$aMail[3], 'A');
  180.  
  181. if( $bMailError === true )
  182. $errors[] = 'Your e-Mail address is not valid!';
  183.  
  184. if (@$_POST['agree'] != 'yes')
  185. $errors[] = 'Your you must agree with our Terms and Conditions!';
  186.  
  187.  
  188. require_once dirname(__FILE__) . '/securimage/securimage.php';
  189. $securimage = new Securimage();
  190. if ($securimage->check($_POST['reg_captcha']) == false) {
  191. $errors[] = 'Incorrect security code entered!';
  192. }
  193.  
  194. if(count($errors) > 0) {
  195. $errorMsg = array();
  196. foreach($errors as $error) {
  197. $errorMsg[] = $error;
  198. }
  199. $errorMsg = implode('<br>', $errorMsg);
  200. } else {
  201.  
  202.  
  203. $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
  204. $charactersLength = strlen($characters);
  205. $randomString = md5($_POST['reg_username']);
  206. for ($i = 0; $i < 64; $i++) {
  207. $randomString .= $characters[rand(0, $charactersLength - 1)];
  208. }
  209.  
  210. if( regmail( $_POST['reg_email'], $_POST['reg_username'], $randomString ) )
  211. {
  212.  
  213. $result = odbc_prepare($mssql, 'INSERT INTO [dbo].[ACCOUNT_TBL] (account, password, isuse, member, id_no1, id_no2, realname, reload,
  214. OldPassword, TempPassword, cash, question, answer, votepoints) VALUES
  215. (?, ?, N\'T\', N\'A\', NULL,
  216. ?, N\'P\', NULL, 0, NULL, 0, ?, ?, 0)');
  217. odbc_execute_escaped($result, array(strtolower($_POST['reg_username']), md5($_CONFIG['pwdsalt'].$_POST['reg_password']), $randomString, strtolower($_POST['reg_question']), strtolower($_POST['reg_answer'])));
  218.  
  219.  
  220. $result = odbc_prepare($mssql, 'INSERT INTO [dbo].[ACCOUNT_TBL_DETAIL] (account, gamecode, tester, m_chLoginAuthority, regdate, BlockTime, EndTime, WebTime, isuse, secession, email, dtLastWebRecovery,nNumWebRecoveryTries) VALUES (?, N\'R000\', N\'2\', N\'F\', ?, N\'20010101\', N\'20990101\', N\'20050101\', N\'O\', NULL, ?, ?, 0)');
  221. odbc_execute_escaped($result, array(strtolower($_POST['reg_username']), date('Y-m-d H:i:s'), strtolower($_POST['reg_email']), date('Y-m-d H:i:s') ));
  222.  
  223. $_SESSION['insanityflyff_reg_ok'] = 1;
  224. }
  225. //require_once('jsonRPCClient.php');
  226. //$rstlink_api = new jsonRPCClient('http://api.1rstlink.com/email/');
  227. //$params = array(
  228. // "list" => "insanityflyff",
  229. // "email" => $_POST['reg_email'],
  230. // "ip_register" => $_SERVER["REMOTE_ADDR"],
  231. // "HTTP_USER_AGENT" => $_SERVER["HTTP_USER_AGENT"],
  232. // "HTTP_REFERER" => (isset($_SERVER['HTTP_REFERER']))?$_SERVER['HTTP_REFERER']:null,
  233. //);
  234. //$result = $rstlink_api->add_contact( "931aceaac754dbe1cb08a3d19920bed5", $params);
  235. //$_SESSION['contact_id'] = $result['contact_id'];
  236.  
  237. $_POST = NULL;
  238. }
  239. }
  240.  
  241. if(@$_SESSION['insanityflyff_reg_ok']) {
  242. $_SESSION['insanityflyff_reg_ok'] = "";
  243. header('Location: register.php?m=1');
  244. die('');
  245. }
  246. ?>
  247. <?php include '__header.php';?>
  248. <div id="content" class="large">
  249. <div class="content-title register"></div>
  250. <div id="content_wrapper">
  251. <!-- Facebook Pixel Code -->
  252. <script>
  253. !function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?
  254. n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;
  255. n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;
  256. t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,
  257. document,'script','//connect.facebook.net/en_US/fbevents.js');
  258.  
  259. fbq('init', '954011474694868');
  260. fbq('track', "PageView");</script>
  261. <noscript><img height="1" width="1" style="display:none"
  262. src="https://www.facebook.com/tr?id=954011474694868&ev=PageView&noscript=1"
  263. /></noscript>
  264. <!-- End Facebook Pixel Code -->
  265. <?php
  266. if (@$_REQUEST['m'] == 1) {
  267. echo '<div class="success">Your account has successfully been created!</div>';
  268. echo '<img src="http://aff.1rstlink.com/afflead.php?contact_id='.@$_SESSION['contact_id'].'" width="1" height="1">';
  269. } else if (@$_REQUEST['m'] == 2) {
  270. echo '<div class="success">Your account has successfully been validated!</div>';
  271. echo '<img src="http://aff.1rstlink.com/afflead.php?contact_id='.@$_SESSION['contact_id'].'" width="1" height="1">';
  272. }
  273. else {
  274. if (!empty($errorMsg))
  275. echo '<div class="fail">'.$errorMsg.'</div>';
  276. ?>
  277.  
  278. <form action="register.php" method="post" autocomplete="off" id="registerform">
  279. <table width="100%">
  280. <!--<b>Do not use CAPS when you register, your account will not work !</b><br><br>-->
  281. <tr>
  282. <td>Username:</td>
  283. <td><input type="text" name="reg_username" maxlength="10" value="<?php echo (isset($_POST['reg_username']))? htmlspecialchars($_POST['reg_username']):''?>"></td>
  284. </tr>
  285. <tr>
  286. <td>Password:</td>
  287. <td><input type="password" name="reg_password" maxlength="11"></td>
  288. </tr>
  289. <tr>
  290. <td>Confirm PW:</td>
  291. <td><input type="password" name="reg_confirmpw"></td>
  292. </tr>
  293. <tr>
  294. <td>E-Mail:</td>
  295. <td><input type="text" name="reg_email" id="reg_email" value="<?php echo htmlspecialchars(@$_POST['reg_email']); ?>"><div id="status"></div></td>
  296. </tr>
  297. <tr>
  298. <td>E-Mail(retype):</td>
  299. <td><input type="text" name="reg_email2" id="reg_email2" onpaste="return false;" value="<?php echo htmlspecialchars(@$_POST['reg_email']); ?>"><div id="status"></div></td>
  300. </tr>
  301. <tr>
  302. <td>
  303. Please enter a valid mail - it needs to be verified!
  304. <td>
  305. </tr>
  306. <tr>
  307. <td>Secret Question:</td>
  308. <td><input type="text" name="reg_question" style="width: 300px;" value="<?php echo htmlspecialchars(@$_POST['reg_question']); ?>"></td>
  309. </tr>
  310. <tr>
  311. <td>Answer:</td>
  312. <td><input type="text" name="reg_answer" value="<?php echo htmlspecialchars(@$_POST['reg_answer']); ?>"></td>
  313. </tr>
  314. <tr>
  315. <td>Security code:</td>
  316. <td><?php include 'includes/captcha.input.php'; ?></td>
  317. </tr>
  318. <tr>
  319. <td>&nbsp;</td>
  320. <td><input type="checkbox" name="agree" value="yes" <?php echo ((@$_POST['agree'] == 'yes') ? ' checked="checked" ': ''); ?>> I agree with the <a href="terms.php" target="_blank" title="Terms and Conditions">Terms and Conditions</a></td>
  321. </tr>
  322. <tr>
  323. <td></td>
  324. <td><input type="submit" name="reg_submit" value="Create Account" class="large"></td>
  325. </tr>
  326. </table>
  327. </form>
  328.  
  329. <style>
  330. .success{color:#2ECC40;}
  331. .error{color:#FF4136;}
  332. .warning{color:#FF851B;}
  333. </style>
  334. <script>
  335. (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
  336. (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
  337. m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
  338. })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
  339.  
  340. ga('create', 'UA-76531800-1', 'auto');
  341. ga('send', 'pageview');
  342.  
  343. </script>
  344. <script src="/js/fallingsnow_v6.js" data-cfasync="false"></script>
  345. <!-- Start Alexa Certify Javascript -->
  346. <script type="text/javascript">
  347. _atrk_opts = { atrk_acct:"hKI4n1a4KM10cv", domain:"insanityflyff.com",dynamic: true};
  348. (function() { var as = document.createElement('script'); as.type = 'text/javascript'; as.async = true; as.src = "https://d31qbv1cthcecs.cloudfront.net/atrk.js"; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(as, s); })();
  349. </script>
  350. <noscript><img src="https://d5nxst8fruw4z.cloudfront.net/atrk.gif?account=hKI4n1a4KM10cv" style="display:none" height="1" width="1" alt="" /></noscript>
  351. <!-- End Alexa Certify Javascript -->
  352. <?php } ?>
  353. </div>
  354. </div>
  355. <?php include '__footer.php'; ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement