<?php
$limit = 5;

$ip = $_SERVER['REMOTE_ADDR'];
$times = mysql_query("SELECT times FROM reglog WHERE ip=$ip");
if($times >= $limit){
echo "Sorry, you have reached the limit of accounts you can make per IP!";
}else{
?><center><h3>Register</font size></h3>
<hr />
<?php
if (array_key_exists('reset', $_POST)) {

function sanitize($value)
{
        if(is_array($value))
        {
                $value = array_map('sanitize', $value);
        }
        else
        {
                if(function_exists("mysql_real_escape_string"))
                {
                        $value = mysql_real_escape_string($value);
                }
                else
                {
                        $value = addslashes($value);
                }
        }
        return $value;
}
$_POST = array_map('sanitize', $_POST);
$_GET = array_map('sanitize', $_GET);
?>

<?php
$name = mysql_real_escape_string($_POST['name']);
$pass = mysql_real_escape_string($_POST['pass']);
$pass2 = mysql_real_escape_string($_POST['pass2']);
$email = mysql_real_escape_string($_POST['email']);
$dob = mysql_real_escape_string($_POST['dob']);

print '<title>Registration</title>';
$name = $_POST['name'];
$pass = $_POST['pass'];
$pass2 = $_POST['pass2'];
$sel = 'SELECT * FROM accounts WHERE name="'.$_POST['name'].'"';
if($name == ""){
$message[] = "No username filled in";
}if($pass != $pass2){
$message[] = "Your passwords do not match!";
}elseif(mysql_num_rows(mysql_query($sel)) >= 1 ){
$message[] = "This username already exists!";
}elseif($pass == ""){
$message[] = "No password filled in";
}else{
$check = 'UPDATE reglog SET times=times WHERE ip=$ip';
if($check){
$updatetimes = 'UPDATE reglog SET times=time + 1 WHERE ip=$ip';
}else{
$updatetimes ='INSERT INTO reglog (ip, times) VALUES ($ip, 1)';
$d = 'INSERT INTO accounts (name, password, email, birthday) VALUES ("'.sql_sanitize($name).'","'.sql_sanitize($pass).'", "'.sql_sanitize($email).'", "'.sql_sanitize($dob).'")';
mysql_query($d) OR die (mysql_error());
mysql_query($updatetimes) OR die (mysql_error());
echo '<center>Your account has been successfully created. You may now log in</center>' or die(mysql_error());
$message[] = "You have successfully registered to <b>$servername.</b>";
}
}
}
?>

<!-- start content -->
<div align="center">
<div class="display">
<?php
if (isset($message)) {
echo '<ul>';
foreach ($message as $item) {
echo "<li>$item</li>";
}
echo '</ul>';
}
?>
</div>
<center>
<table cellspacing=1 cellpadding=5>
<tr><br>
<form id="form1" name="form1" method="post" action="">
<tr><td class=list align=left>Username:</td><td class=list><input type=text name=name maxlength="12"></td></tr>
<tr><td class=list align=left>Password:</td><td class=list><input type=password name=pass maxlength="30"></td></tr>
<tr><td class=list align=left>Confirm:</td><td class=list><input type=password name=pass2 maxlength="30"></td></tr>
<tr><td class=list align=left>Email:</td><td class=list><input type=text name=email maxlength="50"></td></tr>
<tr><td class=list align=left>Date of Birth: <br><i>Ex. 1988-09-23</i></td><td class=list><input type=text name=dob maxlength="15"></td></tr>
<tr><td class=listtitle align=right colspan=2><input type=submit id=reset name=reset value='Register'></td></tr>
</form>
</table>
<br>
</center>
</div>
<?php
}
?>