<?PHP
$dbres = mysql_query("SELECT * FROM `players`");
$player = mysql_fetch_object($dbres);
?>
								<div class="news">
			
					<div class="cUsrHeader"><h2><b>Register Account</b></h2></div>
				<div class="cBoxBg">
					<div class="cBoxText">
					<form action="?p=register" method="POST">
					<table>


					<tr>
					<td><img src="inc/img/user.png"/>&nbsp;Nickname:</td><td><input type="text" value="" name="nickname" class="input"/></td>
					</tr>
					<tr>
					<td><img src="inc/img/password.png"/>&nbsp;Password:</td><td><input type="password" value="" name="password" class="input"/></td>
					</tr>
					<tr>
					<td><img src="inc/img/password.png"/>&nbsp;Password <sub>Confirm</sub>:</td><td><input type="password" value="" name="password2" class="input"/></td>
					</tr>
					<tr>
					<td><img src="inc/img/email.png"/>&nbsp;Email:</td><td><input type="text" value="" name="email" class="input"/><br /></td>
					</tr>
					<tr>
					<td><br /><b><h4><img src="inc/img/lock.png"/>&nbsp;Fixed Parameters</h4></b></td>
					<tr>
					<td><img src="inc/img/world.png"/>&nbsp;Internet Protocol:</td><td><input type="hidden" value="<? echo $_SERVER['REMOTE_ADDR'];?>"><? echo $_SERVER['REMOTE_ADDR']; ?></input></td>
					</tr>
					<tr>
					<td><img src="inc/img/world_link.png"/>&nbsp;Hostname:</td><td><input type="hidden" value="<? echo gethostbyaddr  ($_SERVER['REMOTE_ADDR']); ?>"><? echo gethostbyaddr  ( $_SERVER['REMOTE_ADDR']); ?></input></td>
					</tr>
					<tr>
					<td><br /><sub>Note</sub> Your information will <b>never</b> be sold to third party's</td>
					</tr>
					<tr>
						<td><input type="submit" value="Register" name="register"/></td>
					</tr>
					</table>
						</form>
		</div>
	</div>
</div>
<?php
// NickName Encoding //
if(isset($_POST['register'])){
$nickname = $_POST['nickname'];
$password = $_POST['password'];
$password2 = $_POST['password2'];
$email = $_POST['email'];


function safeNickname($nickname, $password, $password2, $email) {
$nickname = trim(strip_tags($nickname));
$nickname =  mysql_real_escape_string($nickname);
$dbres = mysql_query("SELECT * FROM `players` where login='". $nickname ."'");
 $nickname_rows = mysql_num_rows($dbres);
    if ($nickname_rows < 1 && $nickname == true){
	     passwordEncrypt($nickname, $password, $password2, $email);
 }else{
   echo '<p><div id="messageBad"><sub>Error</sub>&nbsp;The nickname u entered is invalid or does already exist.</div></p>';
 }
}
// Password Encoding //
function passwordEncrypt($nickname, $password, $password2, $email) {
$passwordinput = $_POST['password'];
$passwordinput2 = $_POST['password2'];
if ($passwordinput == $passwordinput2) {
$shacode = sha1($passwordinput);
emailCheck($nickname, $shacode, $email);
}else{
echo '<p><div id="messageBad"><sub>Error</sub>&nbsp;>The password(s) u entered were invalid or did not match!</div></p>';
}






// Email Encoding //
}
function emailCheck($nickname, $password, $email) {
$email = $_POST['email'];
 $encoded2 =  mysql_real_escape_string($email);
 $mailcheck = validEmail($encoded2);
    if ($mailcheck == true){
    finishRegister($nickname, $password, $encoded2);
 }else{
    echo '<p><div id="messageBad"><sub>Error</sub>&nbsp;The email u entered was invalid!</div></p>';
 }
}


function finishRegister($encoded, $shacode, $mailcheck) {
if ($encoded == true && $shacode == true && $mailcheck == true) {
$ip = $_SERVER['REMOTE_ADDR'];
$query = mysql_query("INSERT INTO `players` VALUES('', '". $encoded ."', '". $shacode ."', NOW(), 'false', 1, 'none', 'images/avatars/default.gif', '". $mailcheck ."', 0, '". $ip ."', '', '');");
if ($query) {
echo '<p><h3 class="title-03">Congratulations!</h3><br><div id="messageGood">You have sucessfully registered to the EXF clan website, u can sign up to be clan member now &nbsp;<a href="?p=login">Click to continue</a></div></p>';
}
}
}
safeNickname($nickname, $password, $password2, $email);


//////////////////////////////////////
}
?>

<?php
  if(isset($_POST['submit'])){
  if(isset($_GET['go'])){
  if(preg_match("/^[  a-zA-Z]+/", $_POST['name'])){
  $name=$_POST['name'];
  //-query  the database table
  $sql="SELECT  ID, login, class FROM players WHERE login LIKE '%" . $name .  "%' OR class LIKE '%" . $name ."%'";
  //-run  the query against the mysql query function
  $result=mysql_query($sql);
  //-create  while loop and loop through result set
  while($row=mysql_fetch_array($result)){
          $login  =$row['login'];
          $level=$row['class'];
		  $class=array(1 => "Registered", 
					   2 => "Clan Member",
					   3 => "Moderator",
					   4 => "Administrator"); 
          $ID=$row['ID'];


function meh($level) {
if ($level == 'Admin') {
echo $class[4];
}
}
  //-display the result of the array
  echo "<tr><td>". $ID ."</td><td><a href=\"?p=profile&id=$id\">" .$login . "</a></td><td>". meh($level) ."</td></tr>\n";


  }
  }
  else{
  echo  "<tr><td><div id=\"messageBad\">Nothing could be found, Letter not found or search query was empty!</div></td></tr>\n";
  }
  }
  }
?>

<?php
// Get the requested page into a variable.
$request = $_GET['p'];
$extra = $_GET['e'];


// Clean up the request.
$request = str_replace( chr(0), '', $request );
$request = str_replace( '.', '', $request );
$request = addslashes( $request );
?>


<div id="post">
	<?php
		if( file_exists( "inc/php/$request.php" ) )
		{
			require_once( "inc/php/$request.php$extra" );
		}
		else
		{
			require_once( "inc/php/news.php" );
		}
	?>			
</div>

if (isset($_GET['editNewsItem2']) or $_SERVER['REQUEST_METHOD'] == 'POST') {
	if($_POST['id']) {
function editNewsItem($newsID, $title, $story, $image) {
 $selectSQL = mysql_query("SELECT * FROM `content` WHERE id = '".mysql_real_escape_string($newsID)."' ") or die(mysql_error());
 if($selectSQL) {
 return mysql_query("UPDATE `content` VALUES title = '".mysql_real_escape_string($title)."', storytext = '".mysql_real_escape_string($story)."', image = '".mysql_real_escape_string($image)."' WHERE id = '".mysql_real_escape_string($newsID)."'");
 }
  return false;
}
		
		// Destroy.
		if(editNewsItem($_POST['id'], $_POST['ntitle'], $story = $_POST['contents'], $image = $_POST['image']))
		{
			echo '<b><font color="green">You have editted the newspost successfully!</font></b><br>';
		}else{
			echo '<b><font color="red">An error occured, please try again</font></b>';
		}
	}
  }