<?php          

   $config = array (    

          // Names of DBs    
          'wname'   => 'mangos', // база мира    
          'rname'   => 'realmd', // база реалмов    
          'cname'   => 'characters', // база чаров    
          // DB settings    
          'host' => '127.0.0.1', // адрес БД    
          'user' => 'mangos', // логин к БД    
          'pass' => 'mangos', // пароль к БД    
          'port' => '3306', // порт к БД    
   );    

   $db1 = "realmd";                       
   $db2 = "mangos";                  
   $db3 = "characters";              

   $host = "localhost";             
   $user = "mangos";                     
   $pass = "mangos";                        
   $port = "3306";                      

   $tbc = 2;                          
   $database_encoding = 'CP1251';            

   $realmd = mysql_connect("$host:$port", "$user", "$pass", True);          
   mysql_selectdb("$db1", $realmd);          

   $world = mysql_connect("$host:$port", "$user", "$pass", True);          
   mysql_selectdb("$db2", $world);          

   $characters = mysql_connect("$host:$port", "$user", "$pass", True);          
   mysql_selectdb("$db3", $characters);          

   echo "          
   <script type=\"text/javascript\">          
   function isAlphaNumeric(value)          
   {          
           if (value.match(/^[a-zA-Z0-9_]+$/))          
             return true;          
           return false;          
   }          
   function checkform(f)          
   {          
           if (f.account.value == \"\")          
           {          
             alert(\"Введите логин\");          
             return false;          
           }          
           if (!isAlphaNumeric(f.account.value))          
           {          
             alert(\"Запрещенные символы в логине\");          
             return false;          
           }          
           if (f.password.value==\"\")          
           {          
             alert(\"Введите пароль\");          
             return false;          
           }          
           if (!isAlphaNumeric(f.password.value))          
           {          
             alert(\"Запрещенные символы в пароле\");          
             return false;          
           }          
           if (f.password2.value==\"\")          
           {          
             alert(\"Вы не ввели повтор пароля\");          
             return false;          
           }          
           if (f.password.value != f.password2.value)          
           {          
             alert(\"Пароли не совпадают\");          
             return false;          
           }          
           if (f.email.value==\"\")          
           {          
             alert(\"Вы не ввели e-mail\");          
             return false;          

           }          
   }          
   </script>";          

   echo "          

   <font color=#00CC00>          
   </font><br><br>          
   <center>          
   <form method=post action=register.php onsubmit=\"return checkform(this)\">           
   <table>          

   <tr>          
           <td>Login: <Br>          
           <input type=text name=account maxlength=20></td>          
   </tr>          

   <tr>          
           <td> Password:<Br>          
           <input type=password name=password maxlength=20></td>          
   </tr>          
   <tr>          
           <td> Confirm Password: <Br>          
           <input type=password name=password2 maxlength=20></td>          
   </tr>          
   <tr>          
           <td> e-mail:<Br>           
           <input type=text name=email maxlength=32></td>          
   </tr>          
          <tr>          
           <td colspan=2 style=\"text-align: center;\"><br><input type=submit value=Зарегистрироваться></td>          
          </tr>          
   </table>          
   </form></center>";          

   if (isset($_POST['account'])) {          
   if ($_POST['account'] && strlen($_POST['account'])<=20 && strlen($_POST['account'])>=3 && strlen($_POST['password'])>=3 && $_POST['password'] && $_POST['password2'] && $_POST['password']==$_POST['password2']) {          
           if (!eregi("^[a-zA-Z0-9_]+$", $_POST['account']))          
             die ("<p>Error: SQL-Injection</p>");          
           if (!eregi("^[a-zA-Z0-9_]+$", $_POST['password']))          
             die ("<p>Error: SQL-Injection</p>");          
             $pass = ($_POST['password']);          
             $username = ($_POST['account']);          
             $result = mysql_query("SELECT * FROM account WHERE username='".$_POST['account']."' AND sha_pass_hash='$pass'", $realmd);          
             if (mysql_num_rows($result) != 0) {          
                 echo "<center><p><font color=#CC0000><b>Такой аккаунт уже есть!</b></font></p></center>";          
             } else {          
                 if (!mysql_query("INSERT INTO account (username, sha_pass_hash, gmlevel, email, expansion) VALUES ('$username', SHA1(CONCAT(UPPER('$username'),':',UPPER('$pass'))), 0, '".$_POST['email']."', $tbc)", $realmd)) {echo "<center><p><font color=#CC0000><b>Ошибка</b></font></p></center>";} else {echo "<center><p><font color=#00CC00><b>Аккаунт успешно зарегестрирован! </b></font></p></center>";}          
             }          
   } else {          
             echo "<center><p><font color=#CC0000><b>Проверьте правильность ввода!</b></font></p></center>";          
   }          
   }          

   ?>