require_once('mysqlStopGap/mysql2i.class.php');
require_once 'db/dbcon.php';
require_once 'classes.php';
include_once 'nliheader2.php';
require_once 'emailVerification.php';
require_once 'drs/PasswordHash.php';
if (isset($_POST['submit'])) {
$source = $_GET["pre"];
if(empty($source)){$source = 'OE';}
$username = mysql_real_escape_string(strip_tags($_POST["newname"]));
$password = mysql_real_escape_string($_POST["newpass"]);
$password2 = mysql_real_escape_string($_POST["newpassagain"]);
if(!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL) && $_POST['email'] != ''){$error .= "Invalid email address entered.
";}
$cleanEmail = filter_var($_POST['email'],FILTER_SANITIZE_EMAIL);
$emailValid = Email::ValidateEmailProvider($cleanEmail);
if($emailValid !== true){$error .= $emailValid . "
";} // $emailValid contains an error message on not true
$email2 = mysql_real_escape_string($_POST["emailagain"]);
$checkemail = mysql_query("SELECT * FROM OP_grpgusers WHERE email = '".$cleanEmail."'");
$checkuser = mysql_query("SELECT * FROM OP_grpgusers WHERE username = '".$username."'");
$usernameError = Email::UserNames($username);
if($usernameError != ""){$error .= $usernameError;}
if(strlen($password) < 4){
$error .= "The password you chose has " . strlen($password) . " characters. You need to have a minimum of 4 characters.
";
}
if($password != $password2){
$error .= "Your passwords don't match. Please try again.
";
}
if($cleanEmail != $email2){
$error .= "Your emails don't match. Please try again.
";
}
$email_exist = mysql_num_rows($checkemail);
if($email_exist > 0){
$error .= "The email entered is already in use.
";
}
$t_hasher = new PasswordHash(8, FALSE);
$hash = $t_hasher->HashPassword($password);
unset($t_hasher);
if (!isset($error)){
mysql_query("INSERT INTO `OP_grpgusers` (ip, username, password, email, signuptime, lastactive, passwordLastHashed, game)".
"VALUES ('".$_SERVER[REMOTE_ADDR]."', '".$username."', '".$hash."', '".$cleanEmail."', '".time()."', '".time()."', '".time()."', '".$source."')");
mysql_query("INSERT INTO `grpgusers` (username, lastactive)".
"VALUES ('".$username."', '".time()."')");
echo 'Your account has been created successfully! Redirecting to login page in 5 seconds. ';
if ($_POST['referrer'] != ""){
mysql_query("INSERT INTO `referrals` (`when`, `referrer`, `referred`, `login_once`)".
"VALUES ('".time()."', '".$_POST['referer']."', '".$username."' 'No')");
}
die();
}
}?>
if(isset($error)){echo ''.substr($error, 0, -4).'';}?>