choose_name.php

<?php
#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|
#|                                                                        #|
#|                Développement de RetroPHP par Tyler                     #|
#|                                                                        #|
#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|

include '../init.php';

$pageid = "renamed";
$Auth::Session_Disconnected($_SESSION);

$pagename = "Choisir un pseudo";

if($rtp_user['renamed'] == 1) {
Redirect(URL."/client");
}

if(isset($_POST['username']))
{
$username = safe($_POST['username'],'SQL');
$filter = preg_replace("/[^a-z\d'\-=\?!@:\.]/i", "", $username);
$tmp_sql = $bdd->query("SELECT id FROM users WHERE username = '".safe($username,'SQL')."' LIMIT 1");
$tmp = $tmp_sql->rowCount();
if(isset($username)) {
$failure = false;

if(strlen($username) < 3){
$message1['username'] = "Votre pseudo est trop court.";
$failure = true;
} elseif(strlen($username) > 15){
$message1['username'] = "Votre pseudo est trop long.";
$failure = true;
} elseif($filter !== $username){
$message1['username'] = "Votre Pseudo contient des carractères non-autorisé.";
$failure = true;
} elseif($tmp > 0){
$message1['username'] = "Ce Pseudo existe déjà.";
$failure = true;
}
if(str_contains($username, 'mod-') || str_contains($username, 'vip-') || str_contains($username, 'adm-') || str_contains($username, 'admin-') || str_contains($username, 'smod-') || str_contains($username, 'mod-') || str_contains($username, 'vip-') || str_contains($username, 'adm-') || str_contains($username, 'admin-') || str_contains($username, 'sadm-')){
$message1['username'] = "Votre Pseudo contient des mots interdit.";
$failure = true;
}
if($username == "mod" || $username == "admin" || $username == "founder" || $username == "smod" || $username == "sadmin"  || $username == "Mod" || $username == "Admin" || $username == "Founder" || $username == "Smod" || $username == "Sadmin"){
$message1['username'] = "Votre Pseudo contient des mots interdit.";
$failure = true;
}
if($failure == false){
$bdd->exec("UPDATE retrophp_users SET renamed = '1' WHERE uid = '".safe($User->id,'SQL')."'");
$bdd->exec("UPDATE users SET username = '".safe($username,'SQL')."' WHERE id = '".safe($User->id,'SQL')."'");
$_SESSION['username'] = $username;
Redirect(URL."/client");
}
}
}

preg_match('#^((.|\s)+)@#', $User->mail, $pseudo);
?>
<html>
<head>
<meta charset="utf-8">
<title><?php echo Settings('Name'); ?>: <?php echo $pagename; ?> </title>
<link type="text/css" rel="stylesheet" href="<?php echo URL; ?>/web-gallery/v5/css/habbo.out.css?<?PHP echo UPDATE; ?>">
<link rel="shortcut icon" href="<?php echo URL; ?>/web-gallery/v2/favicon.ico?<?PHP echo UPDATE; ?>" type="image/vnd.microsoft.icon" />
<script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js"></script>

</head>
<body>
<SCRIPT LANGUAGE="JavaScript">
<!--
var today=new Date();
var heure="";
function messagevariable() {
var time=today.getHours();
heure=""
if(time>=6 && time<8)
heure="<div id=\"habbo-hotel-image\">"
if(time>=8 && time<18)
heure="<div id=\"habbo-hotel-image\">"
if(time>=18 || time<6)
heure="<div id=\"habbo-hotel-night\">"
}
// --></SCRIPT>
<SCRIPT LANGUAGE="JavaScript">
<!--
messagevariable();
document.writeln(heure)
// -->
</SCRIPT>
</div>
	<form id="login" method="post">
	<div class="logo">
	</div>
<div class="section">
		<span class="title">Pseudo</span>
		<p>
			Tu peux utiliser des chiffres, des lettres, et les caract&egrave;res - _ .
		</p>
		<?PHP if(isset($message1)) { ?>
        <div class="message error">
        <?PHP if(isset($message1['username'])) { echo $message1['username']; } ?>
        </div>
        <?php } ?>
<input type="text" name="username" id="username" placeholder="Pseudo" <?php if($rtp_user['facebook'] == 1) { ?>value="<?php echo $User->username; ?>"<?php } ?> <?php if($rtp_user['facebook'] == 0) { ?>value="<?php echo nl2br($pseudo[1]); ?>"<?php } ?>>
	</div>
		<a onclick="location.href='<?php echo URL; ?>/account/logout';" class="btn red">Annuler mon inscription</a>
		<button type="submit" class="btn green" style="outline: none;">Suivant</button>
</form>
</body>
</html>