<?php
$db_user    = "root"; // MySQL username
$db_pass    = "protroad975"; // MySQL password
$db_host    = "localhost"; // MySQL Server Host
$db_db      = "realmd"; // Account database

if(isset($_POST['submit']))
{
    $con = mysql_connect($db_host,$db_user,$db_pass) or die('Could not connect: ' . mysql_error());
    mysql_select_db($db_db, $con);
    $user = $_POST['login'];
    $pass = $_POST['password'];
    $email = $_POST['email'];
    $pack = $_POST['expansion'];
    function sha_password($user,$pass)
    {
        $user = strtoupper($user);
        $pass = strtoupper($pass);
        return SHA1($user.':'.$pass);
    }
    $sha=sha_password($user,$pass);
    if(!$user)
        echo "You have not inserted your username.";
    else if(!$pass)
        echo "You have not inserted your password.";
    else if(!$email)
        echo "You have not inserted your e-mail";
    else
    {
        $check = mysql_query("SELECT `username` FROM `account` WHERE `username`='".$user."' ", $con)  or die (mysql_error());
        if(mysql_numrows($check) > 0)
            echo "Account ".$user." already exists. Please Try Again";
        else
        {
            $query = "INSERT INTO `account`(`username`, `sha_pass_hash`, `email`, `expansion`) VALUES
('" . mysql_real_escape_string($user) . "', '" . mysql_real_escape_string($sha) . "', '" . mysql_real_escape_string($email) . "', '" . mysql_real_escape_string($pack) . "')";
            $do_query = mysql_query($query) or die (mysql_error());
            if(!mysql_query($do_query))
                echo "Account ".$user." has been created.";
            else
                echo "Creation of account ".$user." has failed. Please try again later.";
        }
    }
@mysql_close($con);
}
?>