<?php
require_once("includes/config.php");
require_once("includes/functions.php");
require_once("includes/tpl_engine.class");
$connect = dbconnect($DBHost, $DBName, $DBUser, $DBPass);
$page = new HtmlTemplate ("templates/$tpl_name/register.html");
IF(isset($POST['Submit']))
{
IF($POST['username'] == "")
{
$page->SetParameter ("USERNAME_ERROR", "<br>You did not complete the username field");
$error = 1;
}
ELSE
{
$page->SetParameter ("USERNAME_ERROR", "");
}
IF($POST['password'] == "")
{
$page->SetParameter ("PASSWORD_ERROR", "<br>You did not complete the password field");
$error = 1;
}
ELSE
{
$page->SetParameter ("PASSWORD_ERROR", "");
}
IF($POST['password'] != $POST['password2'])
{
$page->SetParameter ("PASSWORD_ERROR", "<br>Your passwords did not match");
$error = 1;
}
IF($POST['email'] == "")
{
$page->SetParameter ("EMAIL_ERROR", "<br>You did not complete the email field");
$error = 1;
}
ELSE
{
$page->SetParameter ("EMAIL_ERROR", "");
}
$page->SetParameter ("FIELD_USERNAME", $_POST['username']);
$page->SetParameter ("FIELD_EMAIL", $_POST['email']);
IF(!isset($error))
{
$sql = "INSERT INTO `outoften_users` ( `user_id` , `group_id` , `user_username` , `user_password` , `user_email` , `user_ratings` , `user_totalratings` , `user_avgrating` ) VALUES ('', '" . $_POST['group'] . "', '" . $_POST['username'] . "', '" . md5($_POST['password']) . "', '" . $_POST['email'] . "', '0', '0', '0.00');";
mysql_query($sql);
$query_string = "INSERT INTO `outoften_custom` ( `user_id`";
foreach ($_POST['custom'] as $key => $value) {
$query_string .= " , `" . $key . "`";
}
$query_string .= " ) VALUES ('" . mysql_insert_id() . "'";
foreach ($_POST['custom'] as $key => $value) {
$query_string .= " , '" . $value . "'";
}
$query_string .= ");";
$signup_id = mysql_insert_id();
mysql_query($query_string);
require_once("includes/email.php");
$email = implode("", file("templates/" . $tpl_name . "/emails/signup.txt"));
$email = eregi_replace("{USERNAME}", $_POST['username'], $email);
$email = eregi_replace("{PASSWORD}", $_POST['password'], $email);
$email = eregi_replace("{URL}", $site_url . "login.php", $email);
$addy = $_POST['email'];
$m= new Mail;
$m->From($admin_email);
$m->To($addy);
$m->Subject($site_title . " Registration Details");
$m->Body($email);
$m->Send();
setcookie("outoften[userid]", $user_id,time()+31536000);
setcookie("outoften[user]", $_POST['username'],time()+31536000);
setcookie("outoften[pass]", md5($_POST['password']),time()+31536000);
session_start();
$_SESSION['id'] = $signup_id;
$_SESSION['username'] = $_POST['username'];
header("Location: index.php");
exit;
}
}
ELSE
{
$page->SetParameter ("USERNAME_ERROR", "");
$page->SetParameter ("PASSWORD_ERROR", "");
$page->SetParameter ("PASSWORD_ERROR", "");
$page->SetParameter ("EMAIL_ERROR", "");
$page->SetParameter ("FIELD_USERNAME", "");
$page->SetParameter ("FIELD_EMAIL", "");
}
$page->SetParameter ("OVERALL_HEADER", get_header($tpl_name,$site_title));
$page->SetParameter ("LEFT_MENU", get_left_menu($tpl_name,''));
$page->SetParameter ("GROUP_LIST", get_group_list($tpl_name));
$page->SetParameter ("CUSTOM_FIELDS", get_custom_fields($connect,$DBName));
$page->SetParameter ("RIGHT_MENU", get_right_menu($tpl_name,$cache_time));
$page->SetParameter ("OVERALL_FOOTER", get_footer($tpl_name));
$page->CreatePageEcho();
?>
<?php