shrug here goes.
<?php
$connection = mysql_connect('localhost', 'user', 'pass');
mysql_select_db('db');
$secret_hash_padding = "2313123113klasd872jaslkdfu2137182jads";
function register_user($first_name, $last_name, $username, $pass1, $pass2, $email)
{
if(strlen($_POST['first_name']) <= 25 && strlen($_POST['last_name']) <= 25 && strlen($_POST['username']) <= 25
&& strlen($_POST['pass1']) <= 25 && strlen($_POST['email']) <= 50 && $_POST['pass1'] == $_POST['pass2'] &&
validate_email($_POST['email']))
{
if(name_valid($_POST['username']) && strlen($_POST['pass1']) >= 6)
{
$username = strtolower($_POST['username']);
$username = trim($username);
$email = $_POST['email'];
$query =
"
SELECT user_id
FROM user
WHERE username = '$username'
AND email = '$email'
";
$result = mysql_query($query);
if($result && mysql_num_rows($result) > 0)
{
$output = "Error! Username or Email already exists!";
return $output;
} else {
$first_name = $_POST['first_name'];
$last_name = $_POST['last_name'];
$password = md5($_POST['pass1']);
$user_ip = $_SERVER['REMOTE_ADDR'];
$hash = md5($email.$secret_hash_padding);
$query = "
INSERT INTO user
(first_name, last_name, username, password, email, remote_addr, confirm_hash, confirmed, date_created)
VALUES('$first_name', '$last_name', '$username', '$password', '$email', '$user_ip', '$hash', '0', 'NOW()')
";
$result = mysql_query($query);
if(!$result)
{
$output = "Database error!";
return $output;
} else {
$encoded_email = urlencode($email);
$mail_body = <<< EOMAIL
Thank you for registering at [url]www.tikitorchbob.tk,[/url] $first_name!
Click this link to confirm your registration: <a href="http://tiki.0x3g3n.net/confirm.php?hash=$hash&email=$encoded_email">Here</a>
EOMAIL;
mail ($email, 'Tiki Torch Bob dot tk Registration Confirmation', $mail_body, 'From:tiki@tikitorchbob.tk');
$output = "Register successful, a confirmation email has been sent to $email";
return $output;
}
}
} else {
$output = "Username or password is invalid";
return $output;
}
} else {
$output = "ERROR - Please fill in all fields correctly";
return $output;
}
}
function name_valid($username)
{
if(strspn($username, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-") == 0)
{
return false;
}
if(strspn($username, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-") != strlen($username))
{
return false;
}
if (strlen($username) < 5)
{
return false;
}
if (strlen($username) > 25)
{
return false;
}
if (eregi("^((root)|(bin)|(daemon)|(adm)|(lp)|(sync)|(shutdown)|(halt)|(mail)|(news)|(uucp)|(operator)|(games)|
(mysql)|(httpd)|(nobody)|(dummy)|(www)|(cvs)|(shell)|(ftp)|(irc)|(debian)|(ns)|(download))$", $username))
{
return false;
}
if (eregi("^(anoncvs_)", $username))
{
return false;
}
return true;
}
function validate_email($email)
{
return (ereg('^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+'. '@' '[-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.' . '[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$', $email));
}
?>
