| query($sql);
$num = $s24_sql->num_rows($result);
if ($num <= 0) {
error("The account was not found!");
}
$row = $s24_sql->fetch_array($result);
if ($row[status] == 'Queue') {
error("Your Account has not been approved be an admin!");
}
if ($row[active] == '1') {
error("Account has already been activated!");
}
if ($row[time] != $time) {
error("Timecheck failed! Please check your email again for the correct activation link. If you still have problems activating your account you might want to contact us.");
} else {
$sql = "UPDATE $pop_tbl SET active='1' WHERE account='$account'";
$result = $s24_sql->query($sql);
head("Account wurde aktiviert!");
include(directory . "tpl/member_activated.tpl");
footer();
}
}
if ($action == 'signup') {
$sql = "SELECT account FROM $pop_tbl WHERE account='$account'";
$result = $s24_sql->query($sql);
$num = $s24_sql->num_rows($result);
if ($num > 0 ) {
error("Account already exists");
}
if (empty($account)) {
error(""Account" is a required field");
}
if (empty($password)) {
error(""Password" is a required field");
}
if (empty($name)) {
error(""Name" is a required field");
}
if (empty($email)) {
error(""Email" is a required field");
}
if (empty($title)) {
error(""Title" is a required field");
}
if (empty($url)) {
error(""URL" is a required field");
}
if (!ereg('http://', $url) || $url == 'http://') {
error("URL not allowed");
}
if (!ereg('^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+'.'@'.'[-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.'.'[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$', $email) || ereg("'", $email)) {
error("Email not allowed");
}
$ip = getenv("REMOTE_ADDR");
$sql = "SELECT * FROM $ban_tbl WHERE type='email'";
$result = $s24_sql->query($sql);
while($row = $s24_sql->fetch_array($result)) {
if (eregi("$row[content]", $email)) {
error("Email not allowed");
}
}
$sql = "SELECT * FROM $ban_tbl WHERE type='word'";
$result = $s24_sql->query($sql);
while($row = $s24_sql->fetch_array($result)) {
if (eregi("$row[content]", $account)) {
error("Account not allowed");
}
}
$sql = "SELECT * FROM $ban_tbl WHERE type='domain'";
$result = $s24_sql->query($sql);
while($row = $s24_sql->fetch_array($result)) {
if (eregi("$row[content]", $url)) {
error("URL not allowed");
}
}
$sql = "SELECT * FROM $ban_tbl WHERE type='ip'";
$result = $s24_sql->query($sql);
while($row = $s24_sql->fetch_array($result)) {
if (eregi("$row[content]", $ip)) {
error("IP banned");
}
}
if ($checkdup == 1) {
$sql = "SELECT * FROM $pop_tbl WHERE email='$email'";
$result = $s24_sql->query($sql);
$num = $s24_sql->num_rows($result);
if ($num > 0 ) {
error("Email already exists");
}
$sql = "SELECT * FROM $pop_tbl WHERE url='$url'";
$result = $s24_sql->query($sql);
$num = $s24_sql->num_rows($result);
if ($num > 0 ) {
error("URL already exists");
}
}
if ($terms != "on") {
error("By submitting this application, you must agree to the Terms and Conditions of membership.");
}
$time = time();
if ($moderate == '1') {
$status = "Queue";
} else {
$status = "Approved";
$lastuse = $time;
$apptime = $time;
$moderator = "--";
}
$name = addslashes($name);
if ($verifyemail == '1') {
$active = "0";
} else {
$active = "1";
}
$acturl = "$scripturl" . "signup.php?action=activate&account=$account&time=$time";
$sql = "INSERT INTO $pop_tbl (account, name, password, title, url, email, type, active, status, time, apptime, moderator, lastuse, credits, ip) VALUES ('$account', '$name', '$password', '$title', '$url', '$email', '$type', '$active', '$status', '$time', '$apptime', '$moderator', '$lastuse', '$credits', '$ip');";
$result = $s24_sql->query($sql);
if ($moderate == '1') {
$emailmessage = "Ihre Anmeldung wird von uns schnellstens überprüft. Sie bekommen eine E-Mail sowie der Account freigeschaltet wurde!";
}
if ($verifyemail != '0' && $moderate == '0') {
$sql = "SELECT * FROM $emails_tbl WHERE name='signup'";
$result = $s24_sql->query($sql);
$row = $s24_sql->fetch_array($result);
$mailsubject = $row[subject];
$mailmessage = mailreplace($row[message]);
mail($email,$mailsubject,$mailmessage,$additional);
$emailmessage = "You will immediately get an email with instructions how to activate your account!";
}
if ($notify == '1') {
$sql = "SELECT * FROM $emails_tbl WHERE name='notify'";
$result = $s24_sql->query($sql);
$row = $s24_sql->fetch_array($result);
$mailsubject = $row[subject];
$mailmessage = mailreplace($row[message]);
mail($adminemail,$mailsubject,$mailmessage,$additional);
}
if ($active == '1' && $status != 'Queue') {
$htmlcode = "
Bitte fügen Sie folgenden CODE in ihre angemeldete Seite ein:
1.) Fügen Sie diesen Code zwischen <HEAD> und </HEAD> ein;:
<SCRIPT LANGUAGE="JavaScript" SRC="popup.php?account="></SCRIPT>
2.) Fügen Sie diesen Code in den <BODY>-Tag ein;
onload=popup()
>
Beispiel:
<HTML>
<HEAD>
<SCRIPT LANGUAGE="JavaScript" SRC="".$scripturl."popup.php?account=".$account.""></SCRIPT>
</HEAD>
<BODY onUnload=popup()>
...
</BODY>
</HTML>
Hier können Sie in den Mitgliederbreich einloggen
";
}
head("Der Account $account wurde hinzugefügt!");
include(directory . "tpl/signup_useradded.tpl");
footer();
exit;
}
?>
| |