Code: Select all
<?php
session_start();
include("functions.php");
connect();
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js?ver=1.4.2"></script>
<script src="js/login.js"></script>
<script src="js/register.js"></script>
<head>
<link href="style.css" rel="stylesheet" type="text/css" />
<link href="css/style.css" rel="stylesheet" type="text/css" />
<link rel="stylesheet" href="css/bootstrap-theme.min.css" />
<title></title>
</head>
<body>
<?php
if(isset($_POST['login'])){
if(isset($_SESSION['uid'])){
echo "You are already logged in!";
}else{
$username = protect($_POST['username']);
$password = protect($_POST['password']);
$login_check = mysql_query("SELECT `id` FROM `user` WHERE `username`='$username' AND `password`='".md5($password)."'") or die(mysql_error());
if(mysql_num_rows($login_check) == 0){
echo "Invalid Username/Password Combination!";
}else{
$get_id = mysql_fetch_assoc($login_check);
$_SESSION['uid'] = $get_id['id'];
header("Location: index.php");
}
}
}
?>
<div style="margin-left:50px;">
<ul id="menu">
<li class="logo">
<img style="float:left;" alt="" src="images/menu_left.png"/>
<ul id="help">
</ul>
</li>
<li>
<div id="container">
<!-- Login Starts Here -->
<div id="loginContainer">
<a href="login.php" id="loginButton"><span>Login</span><em></em></a>
<div style="clear:both"></div>
<div id="loginBox">
<form id="loginForm" method="post">
<fieldset id="body">
<fieldset>
<label for="email">Username</label>
<input type="text" name="username" id="username" />
</fieldset>
<fieldset>
<label for="password">Password</label>
<input type="password" name="password" id="password" />
</fieldset>
<input type="submit" name="login" id="login" value="Sign in" />
<label for="checkbox"><input type="checkbox" id="checkbox" />Remember me</label>
</fieldset>
<span><a href="#">Forgot your password?</a></span>
</form>
</div>
<!-- Login Ends Here -->
<!-- Register Starts Here -->
</li>
<li>
<div id="container">
<!-- Login Starts Here -->
<div id="registerContainer">
<a href="login.php" id="registerButton"><span>Register</span><em></em></a>
<div style="clear:both"></div>
<div id="registerBox">
<form id="registerForm" method="post">
<fieldset id="body">
<fieldset>
<label for="username">Username</label>
<input type="text" name="username" id="username" />
</fieldset>
<fieldset>
<label for="email">Email</label>
<input type="text" name="email" id="email" />
</fieldset>
<fieldset>
<label for="password">Password</label>
<input type="password" name="password" id="password" />
</fieldset>
<input type="submit" name="register" id="register" value="Register" />
</fieldset>
</form>
</div>
<!-- Login Ends Here -->
<!-- Register Starts Here -->
</li>
<!-- Register Ends Here -->
</ul>
</div>
<div style="float:none; clear:both;"></div>
<?PHP
$ip = $_SERVER['REMOTE_ADDR'];
$long = ip2long($ip);
if(isset($_POST['register'])){
$username = protect($_POST['username']);
$password = protect($_POST['password']);
$email = protect($_POST['email']);
if($username == "" || $password == "" || $email == ""){
echo "Please supply all fields!";
}elseif(strlen($username) > 20){
echo "Username must be less than 20 characters!";
}elseif(strlen($email) > 100){
echo "E-mail must be less than 100 characters!";
}else{
$register1 = mysql_query("SELECT `id` FROM `user` WHERE `username`='$username'") or die(mysql_error());
$register2 = mysql_query("SELECT `id` FROM `user` WHERE `email`='$email'") or die(mysql_error());
if(mysql_num_rows($register1) > 0){
echo "<big>That username is already in use!</big>";
}elseif(mysql_num_rows($register2) > 0){
echo "<big>That e-mail address is already in use!</big>";
}else{
$ins1 = mysql_query("INSERT INTO `stats` (`id`,`gold`,`attack`,`defense`,`food`,`income`,`farming`,`turns`,`maxturns`,`bank`,`level`,`exper`,`hpoints`,`maxhp`,`location`) VALUES (0,500,8,8,500,10,10,500,500,0,1,0,15,15,'Las Vegas')") or die(mysql_error());
$ins2 = mysql_query("INSERT INTO `unit` (`worker`,`farmer`,`henchmen`,`guards`) VALUES (5,5,5,5)") or die(mysql_error());
$ins3 = mysql_query("INSERT INTO `user` (`username`,`password`,`email`, `ip`) VALUES ('$username','".md5($password)."','$email', '$ip')") or die(mysql_error());
$ins4 = mysql_query("INSERT INTO `weapon` (`gun`,`vest`) VALUES (0,0)") or die(mysql_error());
$ins5 = mysql_query("INSERT INTO `ranking` (`attack`,`defense`,`overall`) VALUES(0,0,0)") or die(mysql_error());
$ins6 = mysql_query("INSERT INTO `business` (`fruit`,`tire`,`parts`,`chop`) VALUES(10,0,0,0)") or die(mysql_error());
$ins7 = mysql_query("INSERT INTO `farms` (`grain`,`wheat`,`hops`,`corn`) VALUES(10,0,0,0)") or die(mysql_error());
echo "<big><br><br><br>You have registered!</big>";
}
}
}
?>
</div>
</body>
</html>
