Posts by R.H user removed

<?php


//officieel query
 if(isset($_POST['registreer'])){
if($_POST['password'] != $_POST['password_repeat']){
echo'De wachtwoorden komen niet overeen';
}else{
$username				= $_POST['username'];
	$password				= $_POST['password'];
	$password_repeat		= $_POST['password_repeat'];
	$wachtwoordmd5			= md5($password);
	$email					= $_POST['email'];
	$ip						= $_SERVER['REMOTE_ADDR'];
	$date                  	= date("Y-m-d H:i:s");
	
  	mysql_query("INSERT INTO `users` (`login`, `email`, `wachtwoord`, `ip`) 
    VALUES ('".$username."', '".$email."', '".$wachtwoordmd5."', '".$ip."')");
	
echo"Succesvol geregistreerd";	
}
}




?>
<form method="post">
<table>
<tr>
<td>Username:</td>
<td><input type="text" name="username" value="<?php echo $_POST['username']?>" maxlength="10"></td>
</tr>
<td>Password:</td>
<td><input type="password" name="password" value="<?php echo $_POST['password'];?>"></td>
</tr>
<td>Password opnieuw:</td>
<td><input type="password" name="password_repeat" value="<?php echo $_POST['password_repeat'];?>"></td>
</tr>
<td>Email:</td>
<td><input type="text" name="email" value="<?php echo $_POST['email'];?>"></td>
</tr>
<tr>
<td>Draak:</td>
<td><input type="radio" name="who" value="draak1'" id="draak1"><img src="images/icons/Image.jpg">
&nbsp;&nbsp;<input type="radio" name="who" value="draak2'" id="draak2"><img src="images/icons/dragon001.png"><br />
<input type="radio" name="who" value="draak2'" id="draak2"><img src="images/icons/Image.jpg">
&nbsp;&nbsp;<input type="radio" name="who" value="draak3'" id="draak3"><img src="images/icons/dragon001.png">
</td>
</tr>
<tr>
        <td><input type="submit" name="registreer" value="registreer" /></td>
      </tr>
</table>
</form>

<?php  
session_start ();
include "config.php";  


if(isset($_POST["login"]))  
{  
    $query     = mysql_query("SELECT ban, wachtwoord FROM `users` WHERE `login`='".mysql_real_escape_string($_POST["username"])."'");  
    $row     = mysql_fetch_object($query);  
     
    $wachtwoord1 = md5($_POST["password"]);  
     
    if($wachtwoord1 == $row->wachtwoord && $row->ban == 0)  
    {  
        
        $_SESSION['login'] = mysql_real_escape_string(strip_tags($_POST['username']));  
         
        mysql_query("UPDATE `users` SET `status`= '1' WHERE `login` = '".mysql_real_escape_string($_POST["username"])."'");  
     
        echo "<div class='green'> Je bent succesvol ingelogd! Een ogenblik geduld a.u.b</div>";   
        echo '<meta http-equiv="REFRESH" content="2 ;url=http://www.-KNIP-.nl/site/2/index.php?page=start">'; 
    }  
    else  
    {  
        echo "<div class='red'>Je gebruikersnaam of wachtwoord is onjuist!</div>";   
         
        if ($row->ban != 0)  
        {  
            echo"Je bent gebanned. Neem contact op via het contact formulier voor meer infomatie.";  
        }  
    }  
}  
?>   




<form method="post">
<table>
<tr>
<td>Username:</td>
<td><input type="text" name="username" value="<?php echo"".$_POST['username'].""?>" maxlength="10"></td>
</tr>
<td>Password:</td>
<td><input type="password" name="password" value="<?php echo"".$_POST['password'].""?>"></td>
</tr>


<tr>
        <td><input type="submit" name="login" value="login" /></td>
      </tr>
</table>
</form>