<?php

require_once('_inc/security.class.php');

require_once('_inc/config.php');



if(!isset($_POST['submit']))

    {

        echo "<table border='1'>

        <form method='post'>

        <td>Username</td><td><input type='text' name='username' maxlength='16'></td><tr/>

        <td>Password[1]</td><td><input type='password' name='pw1' maxlength='32'></td><tr/>

        <td>Password[2]</td><td><input type='password' name='pw2' maxlength='32'></td><tr/>

        <td></td><td><input type='submit' name='submit' value='Register'></td>

        </form>

                </table>";

    }

    else

    {

        if(strlen($_POST['username']) < 3) $msg[] = "Username too short";

        if(strlen($_POST['username']) > 16)$msg[] = "Username too long";

        if(strlen($_POST['pw1']) < 6) $msg[] = "Password [1] too short";

        if(strlen($_POST['pw1']) > 32)$msg[] = "Password [1] too long";

        if(strlen($_POST['pw2']) < 6) $msg[] = "Password [2] too short";

        if(strlen($_POST['pw2']) > 32) $msg[] = "Password [2] too long";

        if($_POST['pw1'] != $_POST['pw2']) $msg[] = "Passwords are not the same";

        

            $sec = new security();

            

            if($sec->is_secure($_POST['username']) == false) $msg[] = "Username contains forbidden symbols";

            if($sec->is_secure($_POST['pw1']) == false) $msg[] = "Password [1] contains forbidden symbols";

            if($sec->is_secure($_POST['pw2']) == false) $msg[] = "Password [2] contains forbidden symbols";

            

            if(count($msg) > 0)

                {

                    for($i = 0; $i < count($msg); $i++)

                        {

                            echo $msg[$i]."<br/>";

                        }

                        return;

                }

                else

                    {

                        //checking damn mssql stuff

                        $accountExists = mssql_num_rows(mssql_query("select StrUserID from TB_User where StrUserID='$_POST[username]'"));

                            if($accountExists > 0) echo "Account with such username already exists<br/>";

                                else

                                {

                                    $pwd = md5($_POST['pw1']);

                                    mssql_query("insert into TB_User(StrUserID,password,sec_primary,sec_content) values('$_POST[username]','$pwd','3','3')");

                                        echo "Account successfully created<br/>";

                                }

                    }



    }

?>