So... I'm not a php programmer. Shall I skip these tools now then? Or shall I try to insert the code you gave me to the HTML object that was created?
I have no clue where to insert the code but maybe someone can tell me where in this code:
<?php
$database = './tvattnet_database.php';
$success_page = './pay-on-delivery-ok.php';
$activated_page = './password-recovery-error.html';
$error_message = "";
if (!file_exists($database))
{
die('User database not found!');
exit;
}
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['form_name']) && $_POST['form_name'] == 'signupform')
{
$newusername = $_POST['username'];
$newemail = $_POST['email'];
$newpassword = $_POST['password'];
$confirmpassword = $_POST['confirmpassword'];
$newfullname = $_POST['fullname'];
$extra1 = $_POST['extra1'];
$extra2 = $_POST['extra2'];
$extra3 = $_POST['extra3'];
$extra4 = $_POST['extra4'];
$extra5 = $_POST['extra5'];
$website = $_SERVER['HTTP_HOST'];
$script = $_SERVER['SCRIPT_NAME'];
$timestamp = time();
$code = md5($website.$timestamp.rand(100000, 999999));
if ($newpassword != $confirmpassword)
{
$error_message = 'Lösenord och Verifiera Lösenord är inte lika.';
}
else
if (!preg_match("/^[A-Za-z0-9-_!@$]{1,50}$/", $newusername))
{
$error_message = 'Användarnamnet är inte giltigt, kontrollera och försök igen.';
}
else
if (!preg_match("/^[A-Za-z0-9-_!@$]{1,50}$/", $newpassword))
{
$error_message = 'Lösenordet är inte giltigt, kontrollera och försök igen.';
}
else
if (!preg_match("/^[A-Za-z0-9-_!@$.' &]{1,50}$/", $newfullname))
{
$error_message = 'Namn är inte korrekt, kontrollera och försök igen.';
}
else
if (!preg_match("/^.+@.+\..+$/", $newemail))
{
$error_message = 'E-post adressen är inte korrekt. Kontrollera och försök igen.';
}
else
if (strlen($extra1) == 0)
{
$error_message = 'Fältet får inte vara tomt (Personnummer)';
}
else
if (strlen($extra2) == 0)
{
$error_message = 'Fältet får inte vara tomt (Adress)';
}
else
if (strlen($extra3) == 0)
{
$error_message = 'Fältet får inte vara tomt (Postnummer)';
}
else
if (strlen($extra4) == 0)
{
$error_message = 'Fältet får inte vara tomt (Stad)';
}
$items = file($database, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
foreach($items as $line)
{
list($username, $password, $email, $fullname) = explode('|', trim($line));
if ($newusername == $username)
{
$error_message = 'Var vänlig välj ett annat användarnamn.';
break;
}
}
if (empty($error_message))
{
$file = fopen($database, 'a');
fwrite($file, $newusername);
fwrite($file, '|');
fwrite($file, md5($newpassword));
fwrite($file, '|');
fwrite($file, $newemail);
fwrite($file, '|');
fwrite($file, $newfullname);
fwrite($file, '|0|');
fwrite($file, $code);
fwrite($file, '|');
fwrite($file, $extra1);
fwrite($file, '|');
fwrite($file, $extra2);
fwrite($file, '|');
fwrite($file, $extra3);
fwrite($file, '|');
fwrite($file, $extra4);
fwrite($file, '|');
fwrite($file, $extra5);
fwrite($file, "\r\n");
fclose($file);
$subject = 'TvättNet. - Ditt nya konto';
$message = 'Ditt nya konto är registrerat; var vänlig aktivera genom att klicka på länken nedan.';
$message .= "\r\nUsername: ";
$message .= $newusername;
$message .= "\r\nPassword: ";
$message .= $newpassword;
$message .= "\r\n";
$message .= "\r\nhttp://".$website.$script."?user=".$newusername."&code=$code";
$header = "From:
yourmail@yoursite.com"."\r\n";
$header .= "Reply-To:
yourmail@yoursite.com"."\r\n";
$header .= "MIME-Version: 1.0"."\r\n";
$header .= "Content-Type: text/plain; charset=utf-8"."\r\n";
$header .= "Content-Transfer-Encoding: 8bit"."\r\n";
$header .= "X-Mailer: PHP v".phpversion();
mail($newemail, $subject, $message, $header);
mail('
yourmail@yoursite.com', $subject, $message, $header);
header('Location: '.$success_page);
exit;
}
}
else
if (isset($_GET['code']) && isset($_GET['user']))
{
$found = false;
$items = file($database, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
foreach($items as $line)
{
list($username, $password, $emailaddress, $fullname, $active, $code) = explode('|', trim($line));
if ($username == $_GET['user'] && $code == $_GET['code'])
{
$found = true;
}
}
if ($found == true)
{
$file = fopen($database, 'w');
foreach($items as $line)
{
$values = explode('|', trim($line));
if ($_GET['user'] == $values[0])
{
$values[4] = "1";
$values[5] = "NA";
$line = '';
for ($i=0; $i < count($values); $i++)
{
if ($i != 0)
$line .= '|';
$line .= $values[$i];
}
}
fwrite($file, $line);
fwrite($file, "\r\n");
}
fclose($file);
}
else
{
die ('User not found!');
}
header("refresh:5;url=".$activated_page);
echo 'Your user account was succesfully activated. You\'ll be redirected in about 5 secs. If not, click <a href="'.$activated_page.'">here</a>.';
exit;
}
?>
