Code: Select all
include "pageHeader.php";
No, I'll have to resist. Please don't let people hack your site this easy.Cannot Execute:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1
Code: Select all
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<LINK href="style.css" rel="stylesheet" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Register Form</title>
</head>
<body alink="#00FF00" vlink="#00FF00" link="#00FF00">
<CENTER><form method="post" action="checkreg.php"><br />
Username:<br /> <input type="text" name="username"><br />
Email:<br /> <input type="text" name="email"><br />
Password:<br /> <input type="password" name="password"><br />
<input type="submit" value="Register">
</form>
<a href="index.php">Back To Login</a>
</CENTER>
</body>
</html>
Code: Select all
<?php
include './config/connect.php';
$username = $_POST['username'];
$password = $_POST['password'];
$email = $_POST['email'];
$dupe1 = "select * from users where username = '$username'" or die('Cannot Execute: '. mysql_error());
$checkresults = mysql_query($dupe1) or die('Cannot Execute: '. mysql_error());
$row = mysql_fetch_assoc($checkresults);
if($row['username'] == $_POST['username']) {
?>
<CENTER>That Username Is Already Being Used! <a href="register.php">Retry<a></CENTER>
<?php
} elseif($_POST['username'] == "") {
?>
<CENTER>Please Enter A Username! <a href="register.php">Retry<a></CENTER>
<?php
} elseif($_POST['password'] == "") {
?>
<CENTER>Please Enter A Password! <a href="register.php">Retry<a></CENTER>
<?php
} elseif($_POST['email'] == "") {
?>
<CENTER>Please Enter A Email! <a href="register.php">Retry<a></CENTER>
<?php
} else {
$sql = mysql_query("INSERT INTO users (username,password,email,sneak,strength,lockpicking,hp,stanima,agility,defence,level,map,money,havehouse,strengthexp,defenceexp,sneakexp,agilityexp,lockpickingexp,lumber,rock,iron,crops,head,chest,weapon,ring,legs,shoes) VALUES('$username','$password','$email',5,5,3,100,100,3,10,1,'Asbar',100,0,0,0,0,0,0,100,100,100,100,0,0,0,0,0,0") or die('Cannot Execute:'. mysql_error());
?>
<html>
<LINK href="style.css" rel="stylesheet" type="text/css">
<head>
</head>
</html>
<LINK href="style.css" rel="stylesheet" type="text/css">
<body alink="#00FF00" vlink="#00FF00" link="#00FF00">
<CENTER>Thank You For Registering! You may now <a href="index.php">Log In<a></CENTER>
</body>
</html>
<?php
}
?>
Code: Select all
$dupe1 = "SELECT * FROM `users` WHERE `username` = '". mysql_real_escape_string($username) ."'" or die('Cannot Execute: '. mysql_error());