<form action="reg.php" method="POST" name="Register">
<?
$user=$_POST['user'];
$pass=$_POST['pass'];
$repass=$_POST['repass'];
$mail=stripslashes($_POST['mail']);

if(eregi('[^a-zA-Z0-9]',$user) || eregi('[^a-zA-Z0-9]',$pass) || eregi('[^a-zA-Z0-9]',$repass)){
echo"<font color='#FF0000'>Use only letters and numbers</font><br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
elseif(empty($user) || empty($pass) || empty($repass) || empty($mail)){
echo"<font color='#FF0000'>Some fields where left blank.Try again!</font><br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
else{
if($pass!=$repass){
echo"<font color=#FF0000>The passwords you have enterd aren't the same</font><br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
elseif ($error!=1){
if($md5==1){
$user_check=mssql_num_rows(mssql_query("select memb___id from memb_info where memb___id='$user'"));
$mail_check=mssql_num_rows(mssql_query("select mail_addr from memb_info where mail_addr='$mail'"));
if($user_check==1){
echo"Username already in use<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
elseif ($mail_check==1){
echo"E-Mail aready in user<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
if($error!=1){
$run1 = mssql_query("SET IDENTITY_INSERT MEMB_INFO ON");
$run2 = mssql_query("INSERT INTO MEMB_INFO (memb_guid,memb___id,memb__pwd,memb_name,sno__numb,post_code,addr_info,addr_deta,tel__numb,mail_addr,phon_numb,fpas_ques,fpas_answ,job__code ,appl_days,modi_days,out__days,true_days,mail_chek,bloc_code,ctl1_code) VALUES ('1','$user',[dbo].[fn_md5]['$pass','$user'],'$user', '1','1234','11111','7777777','12343','$mail','$mail','Syko','Syko','1','2003-11-23','2003-11-23','2003-11-23','2003-11-23','1','0','1')");
if(!$run1 or !$run2){
echo"Account registration failed.<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
}
else{
echo"Account registration sccsessful.";
}
}

}
elseif ($md5==0){
$user_check=mssql_num_rows(mssql_query("select memb___id from memb_info where memb___id='$user'"));
$mail_check=mssql_num_rows(mssql_query("select mail_addr from memb_info where mail_addr='$mail'"));
if($user_check==1){
echo"Username already in use<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
elseif ($mail_check==1){
echo"E-Mail aready in user<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
$error=1;
}
if($error!=1){
$run3 = mssql_query("SET IDENTITY_INSERT MEMB_INFO ON");
$run4 = mssql_query("INSERT INTO MEMB_INFO (memb_guid,memb___id,memb__pwd,memb_name,sno__numb,post_code,addr_info,addr_deta,tel__numb,mail_addr,phon_numb,fpas_ques,fpas_answ,job__code ,appl_days,modi_days,out__days,true_days,mail_chek,bloc_code,ctl1_code) VALUES ('1','$user','$pass','$user', '1','1234','11111','0000','12343','$mail','$mail','Question','Answer','1','2012-11-01','2012-11-013','2012-11-01','2012-11-01','1','0','1')" );
if(!$run3 or !$run4){
echo"Account registration failed.<br /><br />
<a href='index.php?page=register' target='_self'>Back to registration</a>";
}
else{
echo"Account registration sccsessful.";
}
}

}
}

}
?>
</form>