<?php
/*
##########################################################################
# #
# Version 4 / / / #
# -----------__---/__---__------__----__---/---/- #
# | /| / /___) / ) (_ ` / ) /___) / / #
# _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___ #
# Free Content / Management System #
# / #
# #
# #
# Copyright 2005-2011 by webspell.org #
# #
# visit webSPELL.org, webspell.info to get webSPELL for free #
# - Script runs under the GNU GENERAL PUBLIC LICENSE #
# - It's NOT allowed to remove this copyright-tag #
# -- http://www.fsf.org/licensing/licenses/gpl.html #
# #
# Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at), #
# Far Development by Development Team - webspell.org #
# #
# visit webspell.org #
# #
##########################################################################
*/
$_language->read_module('register');
eval("\$title_register = \"".gettemplate("title_register")."\";");
echo $title_register;
$show = true;
if(isset($_POST['save'])) {
if(!$loggedin){
$username = mb_substr(trim($_POST['username']), 0, 30);
$nickname = htmlspecialchars(mb_substr(trim($_POST['nickname']), 0, 30));
$pwd1 = $_POST['pwd1'];
$pwd2 = $_POST['pwd2'];
$mail = $_POST['mail'];
$game = $_POST['game'];
$CAPCLASS = new Captcha;
$error = array();
// check nickname
if(!(mb_strlen(trim($nickname)))) $error[]=$_language->module['enter_nickname'];
// check nickname inuse
$ergebnis = safe_query("SELECT * FROM ".PREFIX."user WHERE nickname = '$nickname' ");
$num = mysql_num_rows($ergebnis);
if($num) $error[]=$_language->module['nickname_inuse'];
// check username
if(!(mb_strlen(trim($username)))) $error[]=$_language->module['enter_username'];
elseif(mb_strlen(trim($username)) > 30 ) $error[]=$_language->module['username_toolong'];
// check username inuse
$ergebnis = safe_query("SELECT * FROM ".PREFIX."user WHERE username = '$username' ");
$num = mysql_num_rows($ergebnis);
if($num) $error[]=$_language->module['username_inuse'];
// check passwort
if($pwd1 == $pwd2) {
if(!(mb_strlen(trim($pwd1)))) $error[]=$_language->module['enter_password'];
}
else $error[]=$_language->module['repeat_invalid'];
// check e-mail
if(!validate_email($mail)) $error[]=$_language->module['invalid_mail'];
// check e-mail inuse
$ergebnis = safe_query("SELECT userID FROM ".PREFIX."user WHERE email = '$mail' ");
$num = mysql_num_rows($ergebnis);
if($num) $error[]=$_language->module['mail_inuse'];
// check game
if($game == "") $error[]=$_language->module['no_game'];
// check captcha
if(!$CAPCLASS->check_captcha($_POST['captcha'], $_POST['captcha_hash'])) $error[]=$_language->module['wrong_securitycode'];
if(count($error)) {
$list = implode('<br />• ', $error);
$showerror = '<div class="errorbox">
<b>'.$_language->module['errors_there'].':</b><br /><br />
• '.$list.'
</div>';
}
else {
// insert in db
$md5pwd = md5(stripslashes($pwd1));
$registerdate=time();
$activationkey = createkey(20);
$activationlink='http://'.$hp_url.'/index.php?site=register&key='.$activationkey;
safe_query("INSERT INTO `".PREFIX."user` (`registerdate`, `lastlogin`, `username`, `password`, `nickname`, `game`, `email`, `newsletter`, `activated`) VALUES ('$registerdate', '$registerdate', '$username', '$md5pwd', '$nickname', '$game', '$mail', '1', '".$activationkey."')");
$insertid = mysql_insert_id();
// insert in user_groups
safe_query("INSERT INTO ".PREFIX."user_groups ( userID ) values('$insertid' )");
// mail to user
$ToEmail = $mail;
$ToName = $username;
$header = str_replace(Array('%username%', '%password%', '%activationlink%', '%pagetitle%', '%homepage_url%'), Array(stripslashes($username), stripslashes($pwd1), stripslashes($activationlink), $hp_title, $hp_url), $_language->module['mail_subject']);
$Message = str_replace(Array('%username%', '%password%', '%activationlink%', '%pagetitle%', '%homepage_url%'), Array(stripslashes($username), stripslashes($pwd1), stripslashes($activationlink), $hp_title, $hp_url), $_language->module['mail_text']);
if(mail($ToEmail,$header, $Message, "From:".$admin_email."\nContent-type: text/plain; charset=utf-8\n")){
redirect("index.php",$_language->module['register_successful'],3);
$show = false;
}
else{
redirect("index.php",$_language->module['mail_failed'],3);
$show = false;
}
}
}
else{
redirect("index.php?site=register",str_replace('%pagename%',$GLOBALS['hp_title'],$_language->module['no_register_when_loggedin']),3);
}
}
if(isset($_GET['key'])) {
safe_query("UPDATE `".PREFIX."user` SET activated='1' WHERE activated='".$_GET['key']."'");
if(mysql_affected_rows()) redirect('index.php?site=login',$_language->module['activation_successful'],3);
else redirect('index.php?site=login',$_language->module['wrong_activationkey'],3);
}
elseif(isset($_GET['mailkey'])) {
if(mb_strlen(trim($_GET['mailkey']))==32){
safe_query("UPDATE `".PREFIX."user` SET email_activate='1', email=email_change, email_change='' WHERE email_activate='".$_GET['mailkey']."'");
if(mysql_affected_rows()) redirect('index.php?site=login',$_language->module['mail_activation_successful'],3);
else redirect('index.php?site=login',$_language->module['wrong_activationkey'],3);
}
}
else {
if($show == true){
if(!$loggedin){
$bg1=BG_1;
$bg2=BG_2;
$bg3=BG_3;
$bg4=BG_4;
$CAPCLASS = new Captcha;
$captcha = $CAPCLASS->create_captcha();
$hash = $CAPCLASS->get_hash();
$CAPCLASS->clear_oldcaptcha();
if(!isset($showerror)) $showerror='';
if(isset($_POST['nickname'])) $nickname=getforminput($_POST['nickname']);
else $nickname='';
if(isset($_POST['username'])) $username=getforminput($_POST['username']);
else $username='';
if(isset($_POST['pwd1'])) $pwd1=getforminput($_POST['pwd1']);
else $pwd1='';
if(isset($_POST['pwd2'])) $pwd2=getforminput($_POST['pwd2']);
else $pwd2='';
if(isset($_POST['mail'])) $mail=getforminput($_POST['mail']);
else $mail='';
$gameauswahl='';
if((isset($_POST['game'])) && $_POST['game'] != "") $gameauswahl='<option value="'.getforminput($_POST['game']).'">'.getforminput($_POST['game']).'</option>';
else $gameauswahl='<option value="">'.$_language->module['choose_game'].'</option>';
$gameQuery = safe_query("SELECT * FROM ".PREFIX."games");
while($ga = mysql_fetch_array($gameQuery)) {
$gameauswahl.='<option value="'.$ga['name'].'">'.$ga['name'].'</option>';
}
eval("\$register = \"".gettemplate("register")."\";");
echo $register;
}
else{
redirect("index.php",str_replace('%pagename%',$GLOBALS['hp_title'],$_language->module['no_register_when_loggedin']),3);
}
}
}
?> | 
20.06.2013 - 09:46 - 7 Replies
28.03.2013 -