$username is an already registered user. Choose another one.'."\n";
$username = false;
}
else {
$username = $reg_username;
}
}
else {
echo 'Please enter a Username.
'."\n";
$username = false;
}
if (isset ($_POST['reg_password1']) && $_POST['reg_password1'] != "" &&
isset ($_POST['reg_password2']) && $_POST['reg_password2'] != "") {
if (md5 ($_POST['reg_password1']) != md5 ($_POST['reg_password2'])) {
echo 'Passwords do not match.
'."\n";
$password = false;
}
else {
$password = md5 ($_POST['reg_password1']);
}
}
else {
echo 'Please fill out both password fields.
'."\n";
$password = false;
}
if ($reg_email != '') {
if (preg_match ('/^[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i', $reg_email)) {
$query = "SELECT COUNT(*) AS result FROM user WHERE email='$reg_email'";
if ($mysql->query ($query)) {
if (mysql_result ($result, 0) > 0) {
echo 'A User Account with this email address aready exists.
'."\n";
$email = false;
}
else {
$email = $reg_email;
}
}
else {
$email = false;
message ($mysql->error);
}
}
else {
echo 'Email address is invalid.
'."\n";
$email = false;
}
}
else {
echo 'Please enter a valid email address.
'."\n";
$email = false;
}
if ($username && $password && $email) {
$query = " INSERT INTO user
(username, password, email, active)
VALUES
('$username', md5('$password'), '$email', '0')";
if (mysql_query ("$query")) {
# dieser key wird als username und secret md5 hash an den
# user geschickt und für die verifikation der registrierung gebraucht.
$key = md5 ($username . $secret);
$headers = "From: noreply@yourdomain.com\r\n" .
$subject = 'Your registration at yourdomain.com';
$message = "Hi $username,\r\n\r\n";
$message .= "This email confirms the creation of your Online-Bookmarks user account. ";
$message .= "Your username is '$username'. For security reasons your password is not ";
$message .= "included in this email. To activate your account, visit the following URL:\r\n\r\n";
$message .= "http://www.yourdomain.com/register.php?confirm=$key\r\n\r\n";
$message .= "In case of complications regarding this user account registration, ";
$message .= "please contact support@yourdomain.com\r\n\r\n";
$message .= "With kind regards, your yourdomain.com Team";
mail($email, $subject, $message, $headers);
echo " you have been successfully registered.
Read your email and click the link to activate your account.";
}
else {
echo mysql_error ();
}
}
else {
display_register_form ();
}
}
else if ($confirm != '' && strlen ($confirm) === 32) {
$query = "SELECT username FROM user WHERE MD5(CONCAT(username,'$secret'))='$confirm' AND active='0'";
$result = mysql_query ("$query");
if (mysql_num_rows ($result) == 1) {
# the registration confirmation was successufull,
# thus we can enable the useraccount in the database.
$username = mysql_result ($result, 0);
$query = "UPDATE user SET active='1' WHERE username='$username' AND active='0'";
if (mysql_query ($query)) {
echo "You are now registered. Happy bookmarking!";
}
}
else {
display_register_form ();
}
}
else {
display_register_additional_text ();
display_register_form ();
}
function display_register_form () {
?>
Please provide the information bellow to register.
If you are already a registered user, you can log in here.