# # File name: register.php # Author: Kingsley # Date: 06/6/2008 # Time: 5:37 AM # if(!defined("IN_BGS")){ include("../404.php"); } switch($_GET["function"]){ default; if($config["User_Register"]){ ?>
} else { print "Registration is currently disabled"; } break; case "register_user"; if($config["User_Register"]){ //get our post information $username = addslashes($_POST["username"]); $password = md5($_POST["password"]); $password2 = md5($_POST["password2"]); $mailpassword = $_POST["password"]; $email = addslashes($_POST["email"]); $question = addslashes($_POST["question"]); $answer = addslashes($_POST["answer"]); $random = $_POST["random"]; $answer = strtolower($answer); $answer = md5($answer); $domain = explode("@", $email); $domain = $domain[1]; $comm = 'User'; $level = 0; $regdate = $time; $lastlogin = ''; //check passwords match first if($password != $password2){ print "Error: Passwords do not match"; } else { if($_POST["agree"] != "yes"){ print "You must agree to the terms of use to register"; } else { //check mysql info $user = mysql_query("SELECT username from `users` where username='".$username."'"); $result = mysql_num_rows($user); if($result >= 1){ print "Error: That username already exists, Please register another!"; } else { if ($_SESSION['image_verify_string'] == $random){ if(preg_match("/^([a-zA-Z0-9_]+)$/",$username) && strlen($username) >= 3 && strlen($username) <= 25){ if(checkdnsrr($domain)){ $checksum = md5("$regdate|$username"); mysql_query("INSERT INTO `users` (username, password, email, level, committee, question, answer, regdate, lastlogin, verified, ipaddr, dnsaddr) VALUES ('$username', '$password', '$email', '$level', '$comm', '$question', '$answer', '$regdate', '$lastlogin', '0', '".GetIP()."', '".gethostbyaddr(GetIP())."')"); mysql_query("INSERT INTO `verify` VALUES('$username', '$regdate')"); mysql_query("INSERT INTO `buddies_chat` values ('', '$username', '0')"); print "Please check your e-mail and follow the directions therein"; mail("$email","Beyond Gaming - Register","Welcome to Beyond Gaming!\n\nEnclosed is your username and password for Beyond Gaming. Along with an account verify link.\nPlease click the link to activate your account!\n\nUsername: $username\nPassword: $mailpassword\n\nLink: http://beyondgaming.org/index.php?page=register&function=verify&checksum=$checksum\n\nThank you,\nBeyond Gaming","From: accounts@beyondgaming.org"); //forum registration $userid = mysql_insert_id(); mysql_query("INSERT INTO phpbb_groups (group_name, group_description, group_single_user, group_moderator) VALUES ('', 'Personal User', 1, 0)"); $group_id = mysql_insert_id(); mysql_query("INSERT INTO phpbb_user_group (user_id, group_id, user_pending) VALUES ($userid, $group_id, 0)"); } else { print "Invalid domain email, please try again"; } } else { print "Invalid Username. Please try again"; } } else { print "The image did not match"; } } } } } else { print "Registration is currently disabled."; } break; case "verify"; $checksum = $_GET["checksum"]; $check = mysql_query("SELECT * from `verify`"); $done = false; if(mysql_num_rows($check) > 0) { while($row = mysql_fetch_array($check)) { if($checksum == md5($row["time"]."|".$row["username"])) { $user = $row["username"]; $time1 = $row["time"]; mysql_query("DELETE from `verify` where username = '$user' AND time = '$time1'"); mysql_query("UPDATE `users` set level = '0' where username = '$user'"); mysql_query("UPDATE `users` set verified = '1' where username = '$user'"); mysql_query("UPDATE `users` set user_active = 1 where username = '$user'"); print "Your account is now verified $user, feel free to login!"; $done = true; } } if($done == false) { print "There was an error verifiying your account, please email