if(!empty($_POST['Register']))
{
$valid = true;
if(empty($_POST['firstr']) || empty($_POST['lastr']))
{
$valid = false;
}
else
{
$firstr = trim($_POST['firstr']);
$lastr = trim($_POST['lastr']);
if(!ctype_alpha($firstr) || !ctype_alpha($lastr))
{
$valid = false;
}
else
{
if(ctype_lower($firstr)) $firstr = ucfirst($firstr);
if(ctype_lower($lastr)) $lastr = ucfirst($lastr);
if(!preg_match('@^[A-Z][a-z]+$@', $firstr)) $valid = false;
if(!preg_match('@^[A-Z][a-z]+$@', $lastr)) $valid = false;
if(!empty($_POST['midr']))
{
$midr = trim($_POST['midr']);
if(!ctype_alpha($midr))
{
$valid = false;
}
else
{
if(ctype_lower($midr)) $midr = ucfirst($midr);
if(!preg_match('@^[A-Z][a-z]+$@', $midr)) $valid = false;
}
}
if(!empty($midr))
{
$fullname = $firstr.'_'.$midr.'_'.$lastr;
}
else
{
$fullname = $firstr.'_'.$lastr;
$midr = '';
}
}
}
if($valid)
{
$pendingr = $sql = "SELECT COUNT(*) AS total
FROM pendingplayers
WHERE firstname='".mysql_real_escape_string($firstr)."'
AND middlename='".mysql_real_escape_string($midru)."'
AND lastname='".mysql_real_escape_string($lastr)."'";
$res = mysql_query($sql) or die(mysql_error());
$row = mysql_fetch_assoc($res);
$pendingr = $row['total'];
$bannedr = $sql = "SELECT COUNT(*) AS total
FROM bannedplayers
WHERE firstname='".mysql_real_escape_string($firstr)."'
AND middlename='".mysql_real_escape_string($midru)."'
AND lastname='".mysql_real_escape_string($lastr)."'";
$res = mysql_query($sql) or die(mysql_error());
$row = mysql_fetch_assoc($res);
$bannedr = $row['total'];
$ip = !empty($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'Unknown';
$filenamer = '../stable/scriptfiles/' . $fullname . '.ini';
if($pendingr != 0)
{
echo ''.$fullname.' is awaiting approval.
Cannot register this account, try another name name!
';
}
elseif($bannedr != 0)
{
echo ''.$fullname.' has been banned. Try another name!';
}
elseif(file_exists($filenamer))
{
echo ''.$fullname.' is already registered.
Cannot register this account, try another name!
';
}
else
{
$sql = "INSERT INTO pendingplayers
(firstname, middlename, lastname, password, ipaddress)
VALUES ('$firstr', '$midr', '$lastr', '$passreg', '$ip')";
mysql_query($sql) or die(mysql_error());
echo ''.$fullname.' is now pending approval.
Check status below.
';
}
}
else
{
echo 'Appropriately fill the required fields and press Register.
';
}
}