<?php

// Configuration.
// Realm database.
$r_db = "realmd";
// IP (and port).
$ip = "127.0.0.1:3306";
// Username.
$user = "username";
// Password.
$pass = "password";
// Site title.
$title = "Servidor Privado de WoW. WoW Private Server.";
$title2 = "server name";
// End config.

function error_s ($text) {
        echo("<br><br><p style=\"color:#555555;font-family:Tahoma;font-size:13\">" . $text);
};

$user_chars = "#[^a-zA-Z0-9_\-]#";
//$email_chars = "/^[^0-9][A-z0-9_]+([.][A-z0-9_]+)*[@][A-z0-9_]+([.][A-z0-9_]+)*[.][A-z]{2,4}$/";
$email_chars = "/^[^0-9][A-z0-9_\-]+([.][A-z0-9_\-]+)*[@][A-z0-9\-]+([.][A-z0-9\-]+)*[.][A-z]{2,4}$/";
$pass_chars = "/^(?=[a-z]*[0-9][a-z]*[0-9])^(?=[0-9]*[a-z][0-9]*[a-z])[a-z0-9]{8,16}$/i";

$con = @mysql_connect($ip, $user, $pass);
if (!$con) {
        error_s("Unable to connect to database: " . mysql_error());
};

if (!empty($_POST)) {
        if ((empty($_POST["username"]))||(empty($_POST["password"]))||(empty($_POST["email"])) ) {
                error_s("No has introducido todos los campos necesarios. Please fill in all form fields.");
                                exit();
        } else {
                $username = strtoupper($_POST["username"]);
                $password = strtoupper($_POST["password"]);
                $email = strtoupper($_POST["email"]);
                if (strlen($username) < 5) {
                        error_s("Nombre de usuario demasiado corto. Username is too short. Tiene que ser minimo de 5 caracteres");
                        exit();
                };
                if (strlen($username) > 14) {
                        error_s("Nombre de usuario demasiado largo. Username is too long. Tiene que ser maximo de 14 caracteres");
                        exit();
                };
                if (strlen($password) < 8) {
                        error_s("Contraseña demasiado corta. Password is not long enough. Tiene que ser minimo de 8 caracteres");
                        exit();
                };
                if (strlen($password) > 12) {
                        error_s("Contraseña demasiado larga. Password is very long. Tiene que ser maximo de 12 caracteres");
                        exit();
                };
                if (strlen($email) < 9) {
                        error_s("Email demasiado corto. Is your email really that short?. Tiene que ser minimo de 9 caracteres");
                        exit();
                };
                if (strlen($email) > 50) {
                        error_s("Email demasiado largo. Is your email really that long?. Tiene que ser maximo de 50 caracteres");
                        exit();
                };
                if (preg_match($user_chars,$username)) {
                        error_s("El nombre de usuario contiene caracteres no permitidos. Invalid characters in username.");
                        exit();
                };

				if (ctype_digit($password) || ctype_alpha($password)) {
						error_s("La contraseña debe contener letras y números. Password must contain both letters and numbers.");
                        exit();
				}
                if (preg_match($pass_chars,$password)) {
                        error_s("La contraseña contiene caracteres no permitidos. Invalid characters in password.");
                        exit();
                };
                if (!preg_match($email_chars,$email)) {
                        error_s("El correo electronico tiene un formato erroneo. Email has a non-allowed format.");
                        exit();
                };
                $tbc = "2";
                $username = mysql_real_escape_string($username);
                $password = mysql_real_escape_string($password);
                $email = mysql_real_escape_string($email);
                $qry = @mysql_query("select username from " . mysql_real_escape_string($r_db) . ".account where username = '" . $username . "'", $con);
                                if (!$qry) {
                                        error_s("Error querying database: " . mysql_error());
                                };
                if ($existing_username = mysql_fetch_assoc($qry)) {
                        foreach ($existing_username as $key => $value) {
                                $existing_username = $value;
                        };
                };
                $existing_username = strtoupper($existing_username);
                if ($existing_username == strtoupper($_POST['username'])) {
                        error_s("Ese nombre de usuario ya existe. Username already exists.");
                        exit();
                };
                                unset($qry);
                $qry = @mysql_query("select email from " . mysql_real_escape_string($r_db) . ".account where email = '" . $email . "'", $con);
                                if (!$qry) {
                                        error_s("Error querying database: " . mysql_error());
                                };
                /* if ($existing_email = mysql_fetch_assoc($qry)) {
                        foreach ($existing_email as $key => $value) {
                                $existing_email = $value;
                        };
                };
                if ($existing_email == $_POST['email']) {
                        error_s("That email is already in use.");
                        exit();
                }; */
                                unset($qry);
                $sha_pass_hash = sha1(strtoupper($username) . ":" . strtoupper($password));
                $register_sql = "insert into " . mysql_real_escape_string($r_db) . ".account (username, sha_pass_hash, email, expansion, last_login,last_ip) values (upper('" . $username . "'),'" . $sha_pass_hash . "','" . $email . "','" . $tbc . "', NOW(),'" . $_SERVER['REMOTE_ADDR'] ."')";
                $qry = @mysql_query($register_sql, $con);
                                if (!$qry) {
                                        error_s("Error creating account: " . mysql_error());
                                };
                echo("Cuenta creada. Account has been created. ");
                echo($username);
                unset($qry);
                                $qry = @mysql_query("select id from " . mysql_real_escape_string($r_db) . ".account where username = '" . $username . "'", $con);
                                if (!$qry) {
                                        error_s("Error querying database: " . mysql_error());
                                };
                if ($account_id = mysql_fetch_assoc($qry)) {
                        foreach ($account_id as $key => $value) {
                                $account_id = $value;
                        };
                };
                $register_sql = "insert into " . mysql_real_escape_string($r_db) . ".rbac_account_groups (accountId, groupId, realmId) SELECT ".$account_id.", groupId, -1 FROM " . mysql_real_escape_string($r_db) . ".rbac_security_level_groups WHERE secId = 0";
                $qry = @mysql_query($register_sql, $con);
                                if (!$qry) {
                                        error_s("Error creating account: " . mysql_error());
                                };
                                exit();
        };
} else {
        echo($page);
};

?>