<?php
Define('ID_LEN',5);

// ODBC
$DB = "KN_Online"
$User = "Knight"
$Pass = "Knight"
$msconnect=odbc_connect($DB,$User,$Pass);


// Function
function sanitize($input,$length)
{
        return substr(htmlentities($input, ENT_QUOTES), 0, $length);
}

// Login Info
$login = sanitize(@$_POST['userid'],5);
            $pw = sanitize($_POST['pass1'],5);
            $c_pw =sanitize($_POST['pass2'],5);
            $socNo = sanitize($_POST['charsil'],4);
            $socNo2 = sanitize($_POST['charsil1'],4);
            $email = sanitize($_POST['email'],25);
            $email2 = sanitize($_POST['email1'],25);

// Buttons, Text.
<form action="Register.php" method="post">
ID: <input type="text" name="userid" />
Password: <input type="text" name="pass1" />
Confirm Passowrd: <input type="text" name="pass2" />
Security Code: <input type="text" name="charsil" />
Confirm Security Code: <input type="text" name="charsil1" />
Email: <input type="text" name="email" />
Confirm Email: <input type="text" name="email1" />

// Error Codes
if ($pw != $c_pw) {
echo 'Password Confirmed';
die();
}

if (!empty($login) {
echo 'Fill In Login Field';
die();
}

if (!empty($pw) && !empty($c_pw) {
echo 'Fill in Password Field';
die();
}

if (!empty($socNo) && !empty($socNo2) {
echo 'Fill In Security Code Field';
die();
}

if (!empty($email) && !empty($email2) {
echo 'Fill In Email Field';
die();
}

//Registration
$msconnect        = odbc_connect($DB, $User, $Pass);
$stmt = odbc_prepare($msconnect, "INSERT INTO TB_USER (strACcountID, strPasswd, strSocNo, Email) VALUES (?,?,?,?)");
    $result = odbc_execute($stmt, array('$login','$pw','$socno','$email'));

  }

















</form>
?>