dumarepo/process_create.php at master · dumaworks/dumarepo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
<?
include "connect_wr.php";
require "send_sms.php";
$error = 0;
if (isset($_POST["name"])){
	$name = $_POST["name"];
	if ($name == "Name"){
		$error = 1;
	}
}
else
{
	$error = 1;
}
$terms = null;

if (isset($_POST["terms"])){
	$terms = $_POST["terms"];
}
if (isset($_POST["phone"])){
	$phone = $_POST["phone"];
	$dirty_phone = $_POST["phone"];
	if ($phone == "Phone Number"){
		$error = $error + 10;
	}
}
else
{
		$error = $error + 10;
}


if (isset($_POST["pin1"])){
	$pin1 = $_POST["pin1"];
	if ($pin1 == "Pin" || $pin1 == null){
		$error = $error + 10000;
	}
}
else
{
		$error = $error + 10000;
}

if (isset($_POST["pin2"])){
	$pin2 = $_POST["pin2"];
	if ($pin2 == "Re-Enter Pin" || $pin2 == null){
		$error = $error + 10000000;
	}
}
else
{
		$error = $error + 10000000;
}

if ($pin1 != $pin2) {
	$error = $error + 1000000;
}
if (preg_match("/\d{4}/", $pin1) && (strlen($pin1) == 4)) {
    //die("fine $phone");
} else {
    $error = $error + 100000;
}
$phone = ereg_replace("[^+0-9]", "", $phone);
$name = mysql_real_escape_string($name);

if ((substr($phone, 0,2)) == "+1"){
	$phone = str_replace("+1", "", $phone);
}

if (preg_match("/\d{10}/", $phone) && (strlen($phone) == 10)) {
    //die("fine $phone");
} else {
    $error = $error + 1000;
}
/*
if (preg_match('/\(?\d{3}\)?[-\s.]?\d{3}[-\s.]\d{4}/x', $phone) == true) {
	die ("valid");
}else{
	die("Invalid $phone");

}*/

$result = mysql_query("SELECT * FROM `users` WHERE username = '$phone'") or die (mysql_error());
$uname = mysql_fetch_assoc($result);
$is_registered = $uname['is_registered'];

if ($is_registered) {
	$error = $error + 100;
}
if ($error || !$terms) {
	header("location:index.php?D@0v^=$error&nm*=$name&pn*=$dirty_phone&tm*=$terms");
}
else{
	$cryptedPassword = md5($pin1);
	// Random confirmation code
	$passkey=rand(1000,9999);
	$confirm_code=rand(1000,9999);

	$result = mysql_query("SELECT * FROM `users` WHERE `username` = '$phone' LIMIT 0 , 30") or die(mysql_error());

	$lastID = null;

	if (mysql_num_rows($result) > 0) {
		$info = mysql_fetch_assoc($result);
		$lastID = $info["id"];
		mysql_query("UPDATE `dumaremote`.`users` SET `username` = '$phone',
					`password` = '$cryptedPassword',
					`name` = '$name',
					`activation_code` = '$passkey',
					`forgotten_password_code` = '$confirm_code',
					`is_registered` = '1' WHERE `users`.`id` ='$lastID' LIMIT 1") or die(mysql_error());
	}
	else{
	mysql_query("INSERT INTO users (name,password,activation_code,forgotten_password_code,username,is_registered) values ('$name','$cryptedPassword', '$passkey','$confirm_code','$phone','1')") or die (mysql_error());
	$lastID = mysql_insert_id();
	//die("INSERT INTO `dumaremote`.`meta` (`id`,)VALUES ('$lastID',);");
	mysql_query("INSERT INTO `dumaremote`.`meta` (`user_id`)VALUES ('$lastID');") or die(mysql_error());
	}
	$message = "Your Duma Account has been created! Confirmation code: $passkey. ";
	$result = send_message($phone, $message);

	if($result)
	{
		//send add with lastID
		header("location:confirm.php?pn=$phone");

	}
	else
	{
		header("location:index.php?B$@4it=2");
	}


}
?>