<?

/*



   Copyright (c), 1999, 2000 - phpauction



   This program is free software; you can redistribute it and/or modify

   it under the terms of the GNU General Public License as published by

   the Free Software Foundation (version 2 or later).



   This program is distributed in the hope that it will be useful,

   but WITHOUT ANY WARRANTY; without even the implied warranty of

   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

   GNU General Public License for more details.



   You should have received a copy of the GNU General Public License

   along with this program; if not, write to the Free Software

   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.



*/




  include "./includes/messages.inc.php";
  include "./includes/config.inc.php";
  include "./includes/countries.inc.php";
  include "./includes/checkage.inc.php";

  //--
  getSessionVars();
  $auction_id = $sessionVars["CURRENT_ITEM"];

if (empty($action))
{
  $action="first";
}

if ($REQUEST_METHOD=="POST" && $action=="first")
{
  if ($TPL_name && $TPL_nick && $TPL_password && $TPL_repeat_password && $TPL_email &&
     $TPL_address && $TPL_city && $TPL_prov && $TPL_country && $TPL_zip && $TPL_phone)
  {

    //-- Explode birthdate into DAY MONTH YEAR
    $DATE = explode(".",$TPL_birthdate);
    $birth_day     = $DATE[0]; //1
    $birth_month   = $DATE[1]; //0
    $birth_year   = $DATE[2];
    $DATE = "$birth_year$birth_month$birth_day";


    // Freemail-Filter einsetzen
    $emailsplit = explode("@",$TPL_email);
    $emaildomain = $emailsplit[1];


    $query = "select * from freemail order by freemail";
    $result = mysql_query($query);
    if(!$result)
    {
            print $ERR_001." - ".mysql_error();
            exit;
    }
    $num = mysql_num_rows($result);

    $filteron = "0";
    $i = 0;
    while($i < $num)
    {
      $provider = mysql_result($result,$i,"freemail");
      if ($provider == $emaildomain)
      {
        $filteron = "1";
      }

      $i++;
    }


    if (strlen($TPL_nick)<6)
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_107;
    }
    else if ($filteron == "1")
    {
      $TPL_err=1;
      $TPL_errmsg="Die angegebene eMail-Adresse stammt von einem Provider, der auf diesem System gesperrt wurde!";
    }
    else if (strlen ($TPL_password)<6)
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_108;
    }
    else if ($TPL_password!=$TPL_repeat_password)
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_109;
    }
    else if (strlen($TPL_email)<5)    //Primitive mail check
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_110;
    }
    else if (strlen($TPL_zip)<4) //Primitive zip check
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_606;
    }
    else if (strlen($TPL_phone)<3) //Primitive phone check
    {
      $TPL_err=1;
      $TPL_errmsg=$ERR_607;
    }
    else if (!ereg("^[0-9]{2}.[0-9]{2}.[0-9]{4}$",$TPL_birthdate)) //Birthdate check
    {
      $TPL_err = 1;
      $TPL_errmsg = $ERR_043;
    }
    else if(!CheckAge($birth_day,$birth_month,$birth_year))
    {
      $TPL_err = 1;
      $TPL_errmsg = $ERR_113." ".$birth_day." ".$birth_month." ".$birth_year;
    }
    else
    {
      $sql="SELECT nick FROM users WHERE nick=\"". AddSlashes ($TPL_nick)."\"";
      $res=mysql_query ($sql);
      if (mysql_num_rows($res)==0)
      {


        $id = md5(uniqid(rand()));
        $id = eregi_replace("[a-f]","",$id);


        $TPL_id_hidden=$id;
        $TPL_nick_hidden=$TPL_nick;
        $TPL_password_hidden=$TPL_password;
        $TPL_name_hidden=$TPL_name;
        $TPL_email_hidden=$TPL_email;
      }
      else
      {
        $TPL_err=1;
        $TPL_errmsg=$ERR_111; // Selected user already exists
      }


      $sql="SELECT email FROM users WHERE email=\"". AddSlashes ($TPL_email)."\"";
                        $res=mysql_query ($sql);
                        if (mysql_num_rows($res)==0)
                        {

                      $id = md5(uniqid(rand()));
                      //$id = eregi_replace("[a-f]","",$id);

                                $TPL_id_hidden=$id;
                                $TPL_nick_hidden=$TPL_nick;
                                $TPL_password_hidden=$TPL_password;
                                $TPL_name_hidden=$TPL_name;
                                $TPL_email_hidden=$TPL_email;
                        }
                        else
                        {
                                $TPL_err=1;
                                $TPL_errmsg=$ERR_115; // Selected user already exists
                        }

      if($TPL_err == 0)
      {
      	
        $time = time();
        $today_1 = date("Y-m-d",$time);      
        $sql="INSERT INTO users (id, nick, password, name, address, city, prov, country, zip, phone, email, reg_date,
		rate_sum,  rate_num, birthdate, suspended, status, newsletter, refid)
              VALUES (\"$TPL_id_hidden\", \"". Addslashes ($TPL_nick_hidden)."\", \""
                         . md5($MD5_PREFIX.Addslashes ($TPL_password_hidden))."\", \""
                         . Addslashes ($TPL_name_hidden)."\", \""
                         . AddSlashes ($TPL_address)."\", \""
                         . AddSlashes ($TPL_city)."\", \""
                         . AddSlashes ($TPL_prov)."\", \""
                         . AddSlashes ($TPL_country)."\", \""
                         . AddSlashes ($TPL_zip)."\", \""
                         . AddSlashes ($TPL_phone)."\", \""
                         . AddSlashes ($TPL_email_hidden)."\",'$today_1', 0,0,$DATE,1,\""
                         . AddSlashes ($TPL_status)."\", \""
                         . AddSlashes ($TPL_newsletter)."\", \""
                         . AddSlashes ($refid)."\")";
        $res=mysql_query ($sql);
        if ($res==0)
        {
          $TPL_err=1;
          $TPL_errmsg=mysql_error ();//"Error updating users data";
        }
        else
        {

          //-- Get actual users and auctions counters
          $query = "select users from counters";
          $result_counters = mysql_query($query);
          while ($row = mysql_fetch_array($result_counters))
          {
                $users_counter = $row['users'];
          }
          $users_counter = $users_counter + 1;
                        
          if(!$result_counters){
            $TPL_errmsg = $ERR_001;
          }else{
            #$users_counter = mysql_result($result_counters,0,"users") + 1;

            //-- Update counters table

            $query = "update counters set users = $users_counter";

            $result_update_counters = mysql_query($query);
            if(!$result_update_counters){
              $TPL_errmsg = $ERR_001;
            }
          }


          $buffer = file("./includes/usermail.inc.php");
          $i = 0;
          $j = 0;
            while($i < count($buffer))
          {
            if(!ereg("^#(.)*$",$buffer[$i]))
            {
              $skipped_buffer[$j] = $buffer[$i];
              $j++;
            }
          $i++;
          }
          //--Reteve message

          $message = implode($skipped_buffer,"");

          //--Change TAGS with variables content

          $message = ereg_replace("<#c_id#>",AddSlashes($TPL_id_hidden),$message);
          $message = ereg_replace("<#c_name#>",AddSlashes($TPL_name_hidden),$message);
          $message = ereg_replace("<#c_nick#>",AddSlashes($TPL_nick_hidden),$message);
          $message = ereg_replace("<#c_address#>",AddSlashes($TPL_address),$message);
          $message = ereg_replace("<#c_city#>",AddSlashes($TPL_city),$message);
          $message = ereg_replace("<#c_prov#>",AddSlashes($TPL_prov),$message);
          $message = ereg_replace("<#c_zip#>",AddSlashes($TPL_zip),$message);
          $message = ereg_replace("<#c_country#>",AddSlashes($countries[$TPL_country]),$message);
          $message = ereg_replace("<#c_phone#>",AddSlashes($TPL_phone),$message);
          $message = ereg_replace("<#c_email#>",AddSlashes($TPL_email_hidden),$message);
          $message = ereg_replace("<#c_password#>",AddSlashes($TPL_password_hidden),$message);
          $message = ereg_replace("<#c_sitename#>",$SITE_NAME,$message);
          $message = ereg_replace("<#c_siteurl#>",$SITE_URL,$message);
          $message = ereg_replace("<#c_adminemail#>",$adminEmail,$message);
          $message = ereg_replace("<#c_confirmation_page#>",$SITE_URL."confirm.php?id=$TPL_id_hidden",$message);

          mail($TPL_email_hidden,"$MSG_098",$message,"From:$SITE_NAME <$adminEmail>\nReplyTo:$adminEmail");

          if ($NEWUSER_MAIL == "1")
          {
          $buffer2 = file("./includes/usermail2.inc.php");
          $i = 0;
          $j = 0;
            while($i < count($buffer2))
          {
            if(!ereg("^#(.)*$",$buffer2[$i]))
            {
              $skipped_buffer2[$j] = $buffer2[$i];
              $j++;
            }
          $i++;
          }
          //--Reteve message

          $message = "";
          $message = implode($skipped_buffer2,"");

          //--Change TAGS with variables content

          $message = ereg_replace("<#c_id#>",AddSlashes($TPL_id_hidden),$message);
          $message = ereg_replace("<#c_name#>",AddSlashes($TPL_name_hidden),$message);
          $message = ereg_replace("<#c_nick#>",AddSlashes($TPL_nick_hidden),$message);
          $message = ereg_replace("<#c_address#>",AddSlashes($TPL_address),$message);
          $message = ereg_replace("<#c_city#>",AddSlashes($TPL_city),$message);
          $message = ereg_replace("<#c_prov#>",AddSlashes($TPL_prov),$message);
          $message = ereg_replace("<#c_zip#>",AddSlashes($TPL_zip),$message);
          $message = ereg_replace("<#c_country#>",AddSlashes($countries[$TPL_country]),$message);
          $message = ereg_replace("<#c_phone#>",AddSlashes($TPL_phone),$message);
          $message = ereg_replace("<#c_email#>",AddSlashes($TPL_email_hidden),$message);
          $message = ereg_replace("<#c_password#>",AddSlashes($TPL_password_hidden),$message);
          $message = ereg_replace("<#c_sitename#>",$SITE_NAME,$message);
          $message = ereg_replace("<#c_siteurl#>",$SITE_URL,$message);
          $message = ereg_replace("<#c_adminemail#>",$adminEmail,$message);
          $message = ereg_replace("<#c_confirmation_page#>",$SITE_URL."confirm.php?id=$TPL_id_hidden",$message);

          mail($adminEmail,"Ein neuer Benutzer hat sich angemeldet!",$message,"From:$SITE_NAME <$adminEmail>\nReplyTo:$adminEmail");
          }


        }
      } // if($TPL_err == 0)
    }
  }
  else
  {
    $TPL_err=1;
    $TPL_errmsg="$ERR_112"; // Data missing
  }
}



  include "header.php";

if (($REQUEST_METHOD=="GET" && $action=="first") || ($REQUEST_METHOD=="POST" && $action=="first" && $TPL_err))
{
  $country="";
  while (list ($code, $name)=each ($countries))
  {
    $bodi = $code + 1;
    $country .="<option value=\"$bodi\"";
/*
    if ($code==$TPL_country)
    {
      $country .= " selected";
    }
*/
    $country .=">$name</option>\n";
  }



  include "templates/template_register_php.html";
}


if ($REQUEST_METHOD=="POST" && $action=="first" && !$TPL_err)
{
  include "templates/template_registered_php.html";
}
  include "footer.php";

  $TPL_err=0;
  $TPL_errmsg="";
?>