Indie-Resource.com

Code: Select all

<?php
include('confff.php');
//test to see if username is alfanumeric
$testname=$_POST['username'];
if(!preg_match('[^0-9a-zA-Z]', $username))
{
	//test for duplicate names
	$username = $_POST['username'];
	$username=strip_tags($username);
	$query="SELECT * FROM users WHERE username ='$username'";
	$result=mysql_query($query);
	$num=mysql_num_rows($result);

	if ($num == 0)
	{
		//test for duplicate emails
		$email = $_POST['email'];
		$email=strip_tags($email);
		$query2="SELECT * FROM users WHERE email ='$email'";
		$result2=mysql_query($query2);
		$num2=mysql_num_rows($result2);
		
		if($num2==0)
		{
			//if emails and passwords match up
			if(($_POST['pass']==$_POST['pass2']) && ($_POST['email']==$_POST['email2']))
			{
				//generate random confirmation code
				$confirmation_code=md5(uniqid(rand()));
				$passkey = $confirmation_code;
				
				$sql="INSERT INTO temp (code, username, email, password) VALUES ('$confirmation_code', '$testname', '$email', '$pass')";
				if (!mysql_query($sql,$con))
					{
						die('Error: ' . mysql_error());
						}
					if($sql)
					{
						$message="Your Confirmation link \r\n
Click on this link to activate your account \r\n
http://www.royalempires.com/confirmation.php?passkey=$confirmation_code";

							$sentmail=mail("$email",'Registration Confirmation',"$message" ,'From: admin@royalempires.com');
							header("Location:thankyou.html");
					}
					else
					{
						echo "Not found your email in our database";
					}
				
				//if your email succesfully sent
				if($sentmail)
				{
					echo "Your Confirmation link has been sent to your e-mail account";
				}
				else
				{
					echo "cannot send confirmation link to your e-mail adress";
				}
			}
			else
			{
				header("location:badmatch.html");                              
			}
		}
		else
		{
			header("Location:emailinuse.html");
		}
	}
	else
	{
		header("Location:nameinuse.html");
	}
}

?>

Code: Select all

<?php
$to = "someone@example.com";
$subject = "Test mail";
$message = "Hello! Your email server works!";
$from = "bob@example.com";
$headers = "From: $from";
mail($to,$subject,$message,$headers);
echo "Mail Sent.";
?> 

Code: Select all

$message = wordwrap($message, 70);

Code: Select all

if($sql)
					{
						$to = "$email";
						$subject = "Confirmation";
						$message = "Hello! Click on this link to activate your account: http://www.royalempires.com/confirmation.php?passkey=$confirmation_code";
						$from = "admin@royalempires.com";
						$headers = "From: $from";
						$sentmail = mail($to,$subject,$message,$headers);
						echo "Mail Sent.";
					}
					else
					{
						echo "Not found your email in our database";
					}

Code: Select all

<?php
include("confff.php");//check
 
//set variable
$passkey=$_GET['passkey'];
$sql1="SELECT * FROM temp WHERE code='$passkey'";
$result1=mysql_query($sql1);
 
//if sucessfully queried
if($result1)
{
 
	//how many rows have key
	$count=mysql_num_rows($result1);
   
	//if passkey in database, retrieve data
	if($count==1)
	{
		$rows=mysql_fetch_array($result1);
		$namex=$rows['username'];
		$emailx=$rows['email'];
		$passwordx=$rows['password'];
	   
		//takeoutspace
		$name=str_replace(' ','',$namex);
		$email=str_replace(' ','',$emailx);
		$password=str_replace(' ','',$passwordx);
	   
		//insert into users table
		$sql2="INSERT INTO users SET username='$name', points='5', mycities='1', email='$email', password='$password'";
		$result2=mysql_query($sql2);
		
		if ($result2)
		{
		   
			//starting values
			$myCityname = $name . '\'s city';
			
			$sql43="SELECT * FROM users WHERE username='$name'";
			
			$result10=mysql_query($sql43);
			$result99=mysql_fetch_array($result10);
			$userid = $result99['id'];
			
			$sql3="INSERT INTO resources SET userid='$userid', cityname='$myCityname', wood='200', stone='200', iron='200', food='150', people='10', gold='100', happiness='100', loyalty='100'";
			$result3=mysql_query($sql3);
			
			//remove from temp
			$sql5="DELETE FROM temp WHERE code='$passkey'";
			$result=mysql_query($sql5);
			
			header("location:confirmation2.html");
		}
		else
		{
			echo "wrong confirmation code";
		}
	}
}
	 
?>

Code: Select all

$message = "/n Hello! /n /n Click on this link to activate your account: /n http://www.royalempires.com/confirmation.php?passkey=$confirmation_code";

Code: Select all

$result=mysql_query($sql) or die ('Error A:' mysql_errno() . ": " . mysql_error());

Code: Select all

<?php
include("confff.php");//check
 
//set variable
$passkey=$_GET['passkey'];
$sql1="SELECT * FROM temp WHERE code='$passkey'";
$result1=mysql_query($sql1);
 
//if sucessfully queried
if($result1)
{
 
	//how many rows have key
	$count=mysql_num_rows($result1);
   
	//if passkey in database, retrieve data
	if($count==1)
	{
		$rows=mysql_fetch_array($result1);
		$namex=$rows['username'];
		$emailx=$rows['email'];
		$passwordx=$rows['password'];
	   
		//takeoutspace
		$name=str_replace(' ','',$namex);
		$email=str_replace(' ','',$emailx);
		$password=str_replace(' ','',$passwordx);
	   
		//insert into users table
		$sql2="INSERT INTO users (username, points, mycities, email, password) VALUES ('$name', '5', '1', '$email', '$password')";
		$result2=mysql_query($sql2);
		
		if ($result2)
		{
		   
			//starting values
			$myCityname = $name . '\'s city';
			
			$sql43="SELECT * FROM users WHERE username='$name'";
			
			$result10=mysql_query($sql43);
			$result99=mysql_fetch_array($result10);
			$userid = $result99['id'];
			
			$sql3="INSERT INTO resources (userid, cityname, wood, stone, iron, food, people, gold, happiness=, loyalty) VALUES ('$userid', '$mycityname', '200', '200', '200', '150', '200', '100', '100')";
			$result3=mysql_query($sql3)
			
			//remove from temp
			$sql5="DELETE FROM temp WHERE code='$passkey'";
			$result=mysql_query($sql5);
			
			header("location:confirmation2.html");
		}
		else
		{
			echo "wrong confirmation code";
		}
	}
}
	 
?>