mirror of
https://github.com/Xkeeper0/jul.git
synced 2025-05-19 00:30:21 -07:00
682028379e
Closes #71. This removes a bunch of old references to $x_hacks['host'], which was intended to allow this codebase to run two separate forums at the same time based on what hostname it was accessed from. This isn't used any more, so out it goes
154 lines
5.5 KiB
PHP
154 lines
5.5 KiB
PHP
<?php
|
|
|
|
if ($_POST['action'] == "Register" && $_POST['homepage']) {
|
|
header("Location: http://acmlm.no-ip.org/board/register.php");
|
|
die();
|
|
}
|
|
|
|
|
|
require 'lib/function.php';
|
|
require 'lib/layout.php';
|
|
$ipstart=substr($userip,0,6);
|
|
print $header;
|
|
|
|
if ($adminconfig['registrationdisable'])
|
|
die("$tblstart<br>$tccell2>Registration is disabled. Please contact an admin if you have any questions.$tblend$footer");
|
|
|
|
|
|
if (!$_POST[action]){
|
|
$descbr="</b>$smallfont<br></center> ";
|
|
print "
|
|
<body onload=window.document.REPLIER.username.focus()>
|
|
<form ACTION=register.php NAME=REPLIER METHOD=POST>
|
|
<br>$tblstart
|
|
|
|
$tccellh colspan=2>Login information</td><tr>
|
|
$tccell1><b>User name:</b>$descbr The name you want to use on the board.</td>
|
|
$tccell2l width=50%>$inpt=name SIZE=25 MAXLENGTH=25><tr>
|
|
$tccell1><b>Password:</b>$descbr Enter any password up to 32 characters in length. It can later be changed by editing your profile.<br><br>Warning: Do <b>not</b> use unsecure passwords such as '123456', 'qwerty', or 'pokemon'. It'll result in an instant IP ban.</td>
|
|
$tccell2l width=50%>$inpp=pass SIZE=13 MAXLENGTH=64><tr>
|
|
$tccellh> </td>$tccellh> <tr>
|
|
$tccell1> </td>$tccell2l>
|
|
$inph=action VALUE=\"Register\">
|
|
$inps=submit VALUE=\"Register account\"></td>
|
|
</table>
|
|
<div style='visibility: hidden;'><b>Homepage:</b><small> DO NOT FILL IN THIS FIELD. DOING SO WILL RESULT IN INSTANT IP-BAN.</small> - $inpt=homepage SIZE=25 MAXLENGTH=255></div>
|
|
|
|
</form>
|
|
|
|
";
|
|
}
|
|
|
|
if ($_POST['action']=='Register') {
|
|
|
|
if ($_POST['name'] == "Blaster") {
|
|
$sql -> query("INSERT INTO `ipbans` SET `ip` = '". $_SERVER['REMOTE_ADDR'] ."', `date` = '". ctime() ."', `reason` = 'Idiot'");
|
|
@xk_ircsend("1|". xk(7) ."Auto-IP banned Blaster with IP ". xk(8) . $_SERVER['REMOTE_ADDR'] . xk(7) ." on registration.");
|
|
die("$tccell1>Thank you, $username, for registering your account.<br>".redirect('index.php','the board',0).$footer);
|
|
}
|
|
|
|
/* do curl here */
|
|
$ch = curl_init();
|
|
curl_setopt ($ch,CURLOPT_URL, "http://". $_SERVER['REMOTE_ADDR']);
|
|
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
|
|
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 3); // <---- HERE
|
|
curl_setopt ($ch, CURLOPT_TIMEOUT, 5); // <---- HERE
|
|
$file_contents = curl_exec($ch);
|
|
curl_close($ch);
|
|
|
|
if (
|
|
stristr($file_contents, "proxy")
|
|
|| stristr($file_contents, "forbidden")
|
|
|| stristr($file_contents, "it works")
|
|
|| stristr($file_contents, "anonymous")
|
|
|| stristr($file_contents, "filter")
|
|
|| stristr($file_contents, "panel")
|
|
) {
|
|
|
|
$adjectives = array(
|
|
"shitlord",
|
|
"shitheel",
|
|
"shitbag",
|
|
"douche",
|
|
"douchebag",
|
|
"douchenozzle",
|
|
"fuckwit",
|
|
"FUCKER",
|
|
"script-kiddie",
|
|
"dumbfuck extraordinare",
|
|
);
|
|
|
|
shuffle($adjectives);
|
|
|
|
$sql -> query("INSERT INTO `ipbans` SET `ip` = '". $_SERVER['REMOTE_ADDR'] ."', `date` = '". ctime() ."', `reason` = 'Reregistering fuckwit'");
|
|
@xk_ircsend("1|". xk(7) ."Auto-IP banned proxy-abusing $adjectives[0] with IP ". xk(8) . $_SERVER['REMOTE_ADDR'] . xk(7) ." on registration. (Tried to register with username $name)");
|
|
die("$tccell1>Thank you, $name, for registering your account.<br>".redirect('index.php','the board',0).$footer);
|
|
}
|
|
|
|
|
|
|
|
|
|
$users = $sql->query('SELECT name FROM users');
|
|
$username = substr(trim($name),0,25);
|
|
$username2 = str_replace(' ','',$username);
|
|
$username2 = str_replace(' ','',$username2);
|
|
$username2 = preg_replace("' 'si",' ',$username2);
|
|
$username2 = preg_replace("' 'si",'',$username2);
|
|
$username2 = stripslashes($username2);
|
|
print $tblstart;
|
|
$userid=-1;
|
|
while ($user=$sql->fetch($users)) {
|
|
$user[name]=str_replace(' ','',$user['name']);
|
|
$user[name]=str_replace(' ','',$user['name']);
|
|
if (strcasecmp($user[name],$username2)==0) $userid=$u;
|
|
}
|
|
$nomultis = $sql->fetchq("SELECT * FROM `users` WHERE `lastip` = '$REMOTE_ADDR'");
|
|
// $nomultis = false;
|
|
|
|
if ($userid==-1 and $pass and $pass != "123" and $name && ( !$nomultis || $isadmin )) {
|
|
if(!mysql_num_rows($users)) $userlevel=3;
|
|
$currenttime=ctime();
|
|
$ipaddr=getenv("REMOTE_ADDR");
|
|
|
|
$ircout['name'] = stripslashes($name);
|
|
$ircout['ip'] = $ipaddr;
|
|
|
|
$sql->query("INSERT INTO `users` SET `name` = '$name', `password` = '". md5($pass) ."', `powerlevel` = '0', `postsperpage` = '20', `threadsperpage` = '50', `lastip` = '$ipaddr', `layout` = '1', `scheme` = '0', `lastactivity` = '$currenttime', `regdate` = '$currenttime'") or print mysql_error();
|
|
$newuserid = mysql_insert_id();
|
|
$sql->query("UPDATE users SET `password` = '".getpwhash($pass, $newuserid)."' WHERE `id` = '$newuserid'");
|
|
|
|
$ircout['id'] = $newuserid;
|
|
xk_ircout("user", $ircout['name'], $ircout);
|
|
|
|
$sql->query("INSERT INTO `users_rpg` (`uid`) VALUES ('". $newuserid ."')") or print mysql_error();
|
|
print "$tccell1>Thank you, $username, for registering your account.<br>".redirect('index.php','the board',0);
|
|
|
|
} else {
|
|
|
|
|
|
if ($userid != -1) {
|
|
$reason = "That username is already in use.";
|
|
} elseif ($nomultis) {
|
|
$reason = "You have already registered! (<a href=profile.php?id=$nomultis[id]>here</a>)";
|
|
} elseif (!$username || !$password) {
|
|
$reason = "You haven't entered a username or password.";
|
|
} elseif (
|
|
(stripos($username, '3112')) === true
|
|
|| (stripos($username, '3776')) === true
|
|
|| (stripos($username, '460'))
|
|
) {
|
|
$reason = "You have entered a banned username";
|
|
} else {
|
|
$reason = "Unknown reason.";
|
|
}
|
|
|
|
print "
|
|
$tccell1>Couldn't register the account. $reason
|
|
<br>".redirect("index.php","the board",0);
|
|
}
|
|
print $tblend;
|
|
}
|
|
|
|
print $footer;
|
|
printtimedif($startingtime);
|