<b>Register</b><br />
<?php
//error handling
if (isset($_GET['error'])){
if (($_GET['error']) == "nu"){
echo ("<font color=red>You did not enter a username.</font><br />");}
if (($_GET['error']) == "np"){
echo ("<font color=red>You did not enter a password.</font><br />");}
if (($_GET['error']) == "nanu"){
echo ("<font color=red>You used non alphanumeric/numeric characters in your username.</font><br />");}
if (($_GET['error']) == "nanp"){
echo ("<font color=red>You used non alphanumeric/numeric characters in your password.</font><br />");}
if (($_GET['error']) == "nanc"){
echo ("<font color=red>You used non numeric characters in your pin.</font><br />");}
if (($_GET['error']) == "lu"){
echo ("<font color=red>Your username is too long. 12 characters max!</font><br />");}
if (($_GET['error']) == "lp"){
echo ("<font color=red>Your password is too long. 12 characters max!</font><br />");}
if (($_GET['error']) == "lc"){
echo ("<font color=red>Your PIN is too long. 4 numeric digits!</font><br />");}
if (($_GET['error']) == "ue"){
echo ("<font color=red>The username you chose exists. Choose another one.</font><br />");}
}
if (!isset($_POST['submit'])){
?>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>?page=register" method="post">
Username:<br />
<input type="text" name="username" maxlength="12" value=""><br />
<small>12 characters max</small><br />
<br />
Password:<br />
<input type="password" name="password" maxlength="12" value=""><br />
<small>12 characters max</small><br />
<br />
Gender:<br />
<select name="gender">
<option value="0">Male</option>
<option value="1">Female</option>
</select><br />
<br />
<input type="hidden" name="pin" value="0000">
<input type="submit" value="Submit" name="submit">
</form>
<?php
}else{
//check to see if the variables were set
if (($_POST['username'] == "")){header("Location: index.php?page=register&error=nu"); die();}
if (($_POST['password'] == "")){header("Location: index.php?page=register&error=np"); die();}
//check for alpha numeric characters
$username = ereg_replace("[^A-Za-z0-9]", "", $_POST['username']);
if ($username != $_POST['username']){header("Location: index.php?page=register&error=nanu"); die();}
$password = ereg_replace("[^A-Za-z0-9]", "", $_POST['password']);
if ($password != $_POST['password']){header("Location: index.php?page=register&error=nanp"); die();}
$pin = ereg_replace("[^A-Za-z0-9]", "", $_POST['pin']);
if ($pin != $_POST['pin']){header("Location: index.php?page=register&error=nanc"); die();}
//check lengths
if (strlen($_POST['username']) > 12){header("Location: index.php?page=register&error=lu"); die();}
if (strlen($_POST['password']) > 12){header("Location: index.php?page=register&error=lp"); die();}
if (strlen($_POST['pin']) > 4){header("Location: index.php?page=register&error=lc"); die();}
//check for duplicate username
$user_query = mysql_query("SELECT COUNT(*) FROM `users` WHERE `username` = '". $_POST['username'] ."'") or die (mysql_error());
$check_user = mysql_fetch_array($user_query);
if ($check_user['0'] != "0"){header("Location: index.php?page=register&error=ue"); die();}
else{
//prepare sql
$add_user = ("INSERT INTO `users`
(`ID`, `username`, `password`, `pin`, `gender`, `gm`)
VALUES (NULL ,'". $_POST['username'] ."', '". $_POST['password'] ."', '". $_POST['pin'] ."', '". $_POST['gender'] ."', '0')");
mysql_query ($add_user) or die (mysql_error());
//escape php mode and output some kind of welcome message to the user
?>
Welcome, <?php echo $_POST['username']; ?>!<br />
Your acount has been created!<br />
<br />
<i>[links to download clients blah blah blah...]</i>
<?php
}
}
?>
