10-04-2002, 09:45 PM
Let me show you my add user script in PHP:


$pass = md5($password);

if ($password != $confirmpassword) {
header("location:signupnow.php?error=12&&user=$username&&password=$pass&&question=$question&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($username)) {
header("location:signupnow.php?error=1&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($password)) {
header("location:signupnow.php?error=2&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($question)) {
header("location:signupnow.php?error=3&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($answer)) {
header("location:signupnow.php?error=4&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($fname)) {
header("location:signupnow.php?error=5&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($lname)) {
header("location:signupnow.php?error=6&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($address1)) {
header("location:signupnow.php?error=7&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}


if (empty($zip)) {
header("location:signupnow.php?error=8&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

if (empty($state)) {
header("location:signupnow.php?error=9&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}

$namecheck = "$username@jkcool.com";

$validEmail = "^[_.0-9a-z-]+@([0-9a-z][0-9a-z-]+.)+[a-z]{2,4}$";
if(!eregi($validEmail, $namecheck)){

header("location:signupnow.php?error=42&&user=$username&&password=$pass&&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");
exit;
}else {




$username = strtolower($username);
$password = strtolower($password);


$connection = mysql_connect("localhost", "john", "camaro");
$db = mysql_select_db("instant", $connection);
$sql = "select * from users where user = \"$username\" ";
$result = mysql_query($sql,$connection) or die("$sql:<br>" . mysql_error());
$num = mysql_numrows($result);
if ($num == 0) {
include ("header.php");
$sql1 = "insert into userinfo (fname, lname, username, password, question, answer, address1, address2, state, zip, email) values
('$fname', '$lname', '$username', '$password', '$question', '$answer', '$address1', '$address2', '$state', '$zip', '$email')";
$result1 = mysql_query($sql1, $connection);
$sql2 = "insert into users(user, password) values ('$username', '$password')";
$result2 = mysql_query($sql2, $connection) or die("$sql2:<br>" . mysql_error());

$md5pass= crypt($password);
$final = str_replace('$', '\$', $md5pass);



$str = "mkdir /users/$username";
$str2 = "touch /users/$username/.profile";
$str3 = "echo /usr/bin/pine >> /users/$username/.profile";
$str4 = "echo logout >> /users/$username/.profile";
$str5 = $final;


$fp = fopen("/website/job", 'a+');
fwrite($fp, "\n $str \n");
fclose($fp);

$fp2 = fopen("/website/job", 'a+');
fwrite($fp2, "$str2 \n");
fclose($fp2);

$fp3 = fopen("/website/job", 'a+');
fwrite($fp3, "$str3 \n");
fclose($fp3);

$fp4 = fopen("/website/job", 'a+');
fwrite($fp4, "$str4 \n");
fclose($fp4);

$fp5 = fopen("/website/job", 'a+');
fwrite($fp5, "useradd $username -d /users/$username -s /dev/null -p $str5 \nchown $username /users/$username \n");
fclose($fp5);

$fp6 = fopen("/website/job", 'a+');
fwrite($fp6, "echo stty -isig >> /users/$username/.profile \n");
fclose($fp6);

$fp7 = fopen("/website/job", 'a+');
fwrite($fp7, "sendmail $username@jkcool.com < /home/john/.welcome \n");
fclose($fp7);

$fp8 = fopen("/website/job", 'a+');
fwrite ($fp8, "cp /home/john/.sig /users/$username/.sig \n");
fclose($fp8);

$fp9 = fopen("/website/job", 'a+');
fwrite($fp9, "chown $username /users/$username/.sig \n");
fclose($fp9);

$fp10 = fopen("/website/job", 'a+');
fwrite($fp10, "chmod 777 /users/$username/.sig \n");
fclose($fp10);

$fp11 = fopen("/website/job", 'a+');
fwrite($fp11, "cp /users/.forward /users/$username \n");
fclose($fp11);

$fp12 = fopen("/website/job", 'a+');
fwrite($fp12, "chmod 644 /users/$username/.forward\n");
fclose($fp12);

$fp13 = fopen("/website/job", 'a+');
fwrite($fp13, "chown $username /users/$username/.forward\n");
fclose($fp13);


echo "<b>New Accounts Created Every 1 Minute</b><br>";
passthru(date);
echo "<br>";
echo "The Account you requested has been created $username";

} Else {
header("location:signupnow.php?error=11&&user=$username&&password=$pass&question=$question1&&answer=$answer&&fname=$fname&&lname=$lname&&address1=$address1&&address2=$address2&&zip=$zip&&state=$state&&email=$email");

}
}


this is probably more then you wanted to know but pay close attention how I took the password and encrypted it shadow style then I used the -p switch that will add it to the shadow file automatically.

(OH YEAH I WENT BALD FIGURING THIS OUT)


John