Indie-Resource.com

Code: Select all

<?php
	include_once 'connect.php';
?>

<?php
		if(isset($_POST['username']))
		{
			$username = $_POST['username'];
			$password = $_POST['password'];
			$email	  = $_POST['email'];
			// ANTI SQL INJECTION \\
			$username = strip_tags($username);
			$password = strip_tags($password);
			$email = strip_tags($email);
			
			$username = stripslashes($username);
			$password = stripslashes($password);
			$email = stripslashes($email);
			
			$fetcharry=mysql_fetch_array(mysql_query("SELECT * from players where name='$username'"));
			if( (!$username) || (!$password) || (!$email) )
			{
			if(!$username){echo "Missing Username<br>";}
			if(!$password){echo "Missing Password<br>";}
			if(!$email){echo "Missing Email";}
			}
			else
			{

				mysql_query("INSERT into players(name, password, email) VALUES ('$player','$password','$email')");
			}
		}
?>
<form method="post" action="">
<b>Användarnamn:<input type="text" size="15" maxlength="21" name="username"></b>
<b>Lösenord:<input type="password" size="15" maxlenght="21" name="password"></b>
<b>Email:<input type="text" size="25" maxlength="55" name="email"></b></center><br><br>
<form 
<center><input type="submit" value="Registera"></center>

Code: Select all

$result = mysql_fetch_array(mysqli_query("SELECT name FROM players WHERE name='$username'"));
if (!$result) {
     //No player with that name! OK to use!
}