if(!defined("IN_SITE")){ print "pls stop haxing"; exit; } $me = $_GET["page"]; $linktome = buildlinkback($me); switch($_GET["function"]){ case "register_user"; if($_POST["Submit"] == "Register"){ $name = addslashes($_POST["name"]); $password = md5($_POST["password1"]); $password2 = md5($_POST["password2"]); $mailpassword = $_POST["password1"]; $email = addslashes($_POST["email1"]); $question = addslashes($_POST["question"]); $answer = md5(strtolower($_POST["answer"])); $str_ver = $_POST["random"]; if($password != $password2){ print "Your passwords do not match!"; } else { $row = mysql_query("SELECT COUNT(id) FROM users WHERE email = '{$post_safe['email1']}'") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); if(mysql_result($row, 0) == 0){ $row = mysql_query("SELECT COUNT(id) FROM characters WHERE name = '{$post_safe['name']}'"); if(mysql_result($row, 0) == 0) { if(strtolower($_SESSION["image_verify_string"]) == strtolower($str_ver)){ if(preg_match("/^([a-zA-Z0-9_]+)$/", $name)){ mysql_query("INSERT INTO users (email, password, reg_date, question, answer, ip_address) VALUES ('{$post_safe['email1']}', '{$password}', NOW(), '{$post_safe['question']}', '{$answer}', '" . GetIP() . "')") or print(mysql_error() . " " . __LINE__); $userID = mysql_insert_id(); $checksum = generateVerifyChecksum(); mysql_query("INSERT INTO verify (checksum, user_id) VALUES ('$checksum', '$userID')") or print(mysql_error(). " " . __FILE__ . " #" . __LINE__); $hp = mt_rand(6, 12); $str = mt_rand(2, 5); mysql_query("INSERT INTO characters (owner_id, name, money, level, strength, max_hp, now_hp) VALUES ('$userID', '{$post_safe['name']}', '100', '1', '{$str}', '{$hp}', '{$hp}')") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); $charID = mysql_insert_id(); mysql_query("INSERT INTO bank (owner_id, account_type, money, last_collected) VALUES ('$charID', '1', '50', DATE_SUB(NOW(), INTERVAL 1 DAY))") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); print "Please check your e-mail and follow the directions therein."; mail("{$post_safe['email1']}", "Kingsleyville - Register","Welcome to Kingsleyville!\n\nEnclosed is your password for Kingsleyville. Along with an account verify link.\nPlease click the link to activate your account!\n\nPassword: {$post['password1']}\n\nLink: http://kingsleyville.kingsley-muir.com/?page=register&function=verify&checksum=$checksum\n\nThank you,\nKingsleyville Mayor","From: accounts@kingsleyville.kingsley-muir.com"); } else { print "Invalid name"; } } else { print "Image codes did not match"; } } else { print "That name already exists"; } } else { print "That email already exists"; } } } else { print "Please fill in the boxes and try again"; } break; case "verify"; if($get_safe['checksum'] != "" || isset($_GET["checksum"])){ $q = mysql_query("SELECT id, user_id FROM verify WHERE checksum = '{$get_safe['checksum']}'") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); if(mysql_num_rows($q) == 1){ $user_id = mysql_result($q, 0, 'user_id'); $checksum_id = mysql_result($q, 0, 'id'); mysql_query("UPDATE users SET status = '1' WHERE id = '{$user_id}'") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); print "Your account is now activated!"; mysql_query("DELETE FROM verify WHERE id = '{$checksum_id}'") or print(mysql_error() . " " . __FILE__ . " #" . __LINE__); } else { print "Big bad thing happened"; } } break; default; ?>