All pastes #752271 Raw Edit

Fred

public php v1 · immutable
#752271 ·published 2007-10-28 06:14 UTC
rendered paste body
if(!empty($_POST['Register'])){	$valid = true;	if(empty($_POST['firstr']) || empty($_POST['lastr']))	{		$valid = false;	}	else	{		$firstr = trim($_POST['firstr']);		$lastr = trim($_POST['lastr']);		if(!ctype_alpha($firstr) || !ctype_alpha($lastr))		{			$valid = false;		}		else		{			if(ctype_lower($firstr)) $firstr = ucfirst($firstr);			if(ctype_lower($lastr)) $lastr = ucfirst($lastr);			if(!preg_match('@^[A-Z][a-z]+$@', $firstr)) $valid = false;			if(!preg_match('@^[A-Z][a-z]+$@', $lastr)) $valid = false;			if(!empty($_POST['midr']))			{				$midr = trim($_POST['midr']);				if(!ctype_alpha($midr))				{					$valid = false;				}				else				{					if(ctype_lower($midr)) $midr = ucfirst($midr);					if(!preg_match('@^[A-Z][a-z]+$@', $midr)) $valid = false;				}			}			if(!empty($midr))			{				$fullname = $firstr.'_'.$midr.'_'.$lastr;			}			else			{				$fullname = $firstr.'_'.$lastr;					$midr = '';			}		}		}	if($valid)	{		$pendingr = $sql = "SELECT COUNT(*) AS total 			FROM pendingplayers 			WHERE firstname='".mysql_real_escape_string($firstr)."' 			AND middlename='".mysql_real_escape_string($midru)."' 			AND lastname='".mysql_real_escape_string($lastr)."'";		$res = mysql_query($sql) or die(mysql_error());		$row = mysql_fetch_assoc($res);		$pendingr = $row['total'];				$bannedr = $sql = "SELECT COUNT(*) AS total 			FROM bannedplayers 			WHERE firstname='".mysql_real_escape_string($firstr)."' 			AND middlename='".mysql_real_escape_string($midru)."' 			AND lastname='".mysql_real_escape_string($lastr)."'";		$res = mysql_query($sql) or die(mysql_error());		$row = mysql_fetch_assoc($res);		$bannedr = $row['total'];		$ip = !empty($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'Unknown';				$filenamer = '../stable/scriptfiles/' . $fullname . '.ini';		if($pendingr != 0)		{			echo '<font color="red">'.$fullname.' is awaiting approval.<br>Cannot register this account, try another name name!</font><br>';		}		elseif($bannedr != 0)		{			echo '<font color="red">'.$fullname.' has been banned.  Try another name!</font>';		}		elseif(file_exists($filenamer))		{			echo '<font color="red">'.$fullname.' is already registered.<br>Cannot register this account, try another name!</font><br>';		}		else		{			$sql = "INSERT INTO pendingplayers 				(firstname, middlename, lastname, password, ipaddress) 				VALUES ('$firstr', '$midr', '$lastr', '$passreg', '$ip')";			mysql_query($sql) or die(mysql_error()); 			echo '<font color="green">'.$fullname.' is now pending approval.<br>Check status below.</font><br>';		}	}	else	{		echo '<font color="red">Appropriately fill the required fields and press Register.</font><br />';	}}