<?
require_once($_
SERVER['DOCUME
NT_ROOT'].'/d
b_connect.php'
);
//SEE IF
ALREADY LOGGED
IN
if($_SESSION[
'logged_in']
== 1)
{
//REDIRECT
TO HOMEPAGE
header('Locati
on: http://' .
$_SERVER['HTTP
_HOST'] .
'');
} else {
if(isset($HTTP
_POST_VARS['su
bmit']))
{
//BEGIN
CHECKING
USERNAME...
if(!$_POST['us
ername'])
die('Alert:
username field
was
blank.');
//array of
invalid
characters
$junk =
array('.' ,
',' , '/' ,
'\' , '`'
, ';' , '['
, ']' ,
'-','*',
'&',
'^', '%',
'$', '#',
'@', '!',
'~', '+',
'(', ')'
'|', '{',
'}',
'<',
'>',
'?', ':',
'"',
'=');
')'
//starting
lenght of
username
$len =
strlen($_POST[
'username']);<
br />
//replace
invalid
characters
$_POST['userna
me'] =
str_replace($ju
nk, '',
$_POST['userna
me']);
$test =
$_POST['userna
me'];
//if lenghts
are different
($len smaller),
invalid
characters
found, so
prompt
error.
if(strlen($test
) != $len) {
die('Username
Error: Username
contained
invalid
characters. You
can only use
A-Z, 0-9 and
the
underscore
(_).');
}
//Check if
username
already
exists...
$q2 =
mysql_query(&q
uot;SELECT *
FROM `members`
WHERE
`username` =
'".$_POS
T['username']
."'&quo
t;);
$q3 =
mysql_fetch_obj
ect($q2);
if($q3->user
name ==
$_POST['userna
me']) {
die('<BR&g
t;<BR>Sor
ry, but the
username
"'.$q3-&
gt;username.'
" is
taken, please
choose
another.');
}
//PASSWORD
if(!$_POST['pa
ssword']) {
die('Error:
Password field
was
blank');
}
if(!$_POST['ve
rify_password'
]) {
die('Error:
Verify Password
field was
blank.');
}
if($_POST['pas
sword'] !=
$_POST['verify
_password']) {
die('Error:
The passwords
do not
match.');
}
if(strlen($_POS
T['password']
) < 6 ) {
die('Error:
Your password
is too short.
Must be 6 or
more characters
in
length.');
}
//ADD NEW
MEMBER
$insert
="INSERT
INTO `members`
(username,
user_password,
user_email)
VALUES
('".$_PO
ST['username'
]."',
'".md5($
_POST['passwor
d'])."'
,
'".$_POS
T['email'].&
quot;')"
;
$insert2 =
mysql_query($in
sert);
if(!$insert2)
die(mysql_error
());
echo('Registra
tion
Successful,
Welcome new
member! You can
now login to
your new
account.');
} else {
?>
<table>
<form
name="sig
nup"
action="&
lt;?
$_SERVER['PHP_
SELF'];
?>"
method="P
OST"><
br />
<tr>
<td>Usern
ame: <BR>
(only A-Z, 0-9
and _
Allowed)<BR&
gt;</td><
br />
<td><i
nput
type="tex
t" id
="usernam
e"
name="use
rname"
value="&
quot;
maxlength=&quo
t;30">
<BR></
td>
</tr>
<tr>
<td>Passw
ord:</td>
<td><i
nput
type="pas
sword"
id="passw
ord"
name="pas
sword"
value="&
quot;
maxlength=&quo
t;30">
<BR>
(minimum 6
characters)<
/td>
</tr>
<tr>
<td>Verif
y
Pass:</td>
;
<td><i
nput
type="pas
sword"
id="verif
y_password&quo
t;
name="ver
ify_password&q
uot;
value="&
quot;
maxlength=&quo
t;30">
<BR>
</td>
</tr>
<tr>
<td>Email
:</td>
<td><i
nput
type="tex
t"
id="email
"
name="ema
il"
value="&
quot;
size="30
"><b
r></td>
;
</tr>
<tr>
<td>Click
to Complete
Signup:</td&
gt;
<td><i
nput
type="sub
mit"
id="submi
t"
name="sub
mit"
value="su
bmit">
</td>
</tr>
</form><
br />
</table>
<?
} //end not
logged in
} //end submit
not pressed
?>
