<?php        

$config = array (

        // Names of DBs
        'wname'   => 'mangos', // база мира
        'rname'   => 'realmd', // база реалмов
        'cname'   => 'characters', // база чаров
        // DB settings
        'host' => 'localhost', // адрес БД
        'user' => 'mangos', // логин к БД
        'pass' => 'mangos', // пароль к БД
        'port' => '3306', // порт к БД
);

$db1 = "realmd";                     
$db2 = "mangos";                
$db3 = "characters";            

$host = "localhost";           
$user = "mangos";                   
$pass = "mangos";                      
$port = "3306";                    

$tbc = 2;                        
$database_encoding = 'CP1251';          

$realmd = mysql_connect("$host:$port", "$user", "$pass", True);        
mysql_selectdb("$db1", $realmd);        

$world = mysql_connect("$host:$port", "$user", "$pass", True);        
mysql_selectdb("$db2", $world);        

$characters = mysql_connect("$host:$port", "$user", "$pass", True);        
mysql_selectdb("$db3", $characters);        

echo "        
<script type=\"text/javascript\">        
function isAlphaNumeric(value)        
{        
         if (value.match(/^[a-zA-Z0-9_]+$/))        
           return true;        
         return false;        
}        
function checkform(f)        
{        
         if (f.account.value == \"\")        
         {        
           alert(\"Введите логин\");        
           return false;        
         }        
         if (!isAlphaNumeric(f.account.value))        
         {        
           alert(\"Запрещенные символы в логине\");        
           return false;        
         }        
         if (f.password.value==\"\")        
         {        
           alert(\"Введите пароль\");        
           return false;        
         }        
         if (!isAlphaNumeric(f.password.value))        
         {        
           alert(\"Запрещенные символы в пароле\");        
           return false;        
         }        
         if (f.password2.value==\"\")        
         {        
           alert(\"Вы не ввели повтор пароля\");        
           return false;        
         }        
         if (f.password.value != f.password2.value)        
         {        
           alert(\"Пароли не совпадают\");        
           return false;        
         }        
         if (f.email.value==\"\")        
         {        
           alert(\"Вы не ввели e-mail\");        
           return false;        

         }        
}        
</script>";        

echo "        

<font color=#00CC00>        
</font><br><br>        
<center>        
<form method=post action=reg.php onsubmit=\"return checkform(this)\">         
<table>        

<tr>        
         <td> Имя аккаунта: <Br>        
         <input type=text name=account maxlength=20></td>        
</tr>        

<tr>        
         <td> Пароль:<Br>        
         <input type=password name=password maxlength=20></td>        
</tr>        
<tr>        
         <td> Повтор пароля: <Br>        
         <input type=password name=password2 maxlength=20></td>        
</tr>        
<tr>        
         <td> E-mail:<Br>         
         <input type=text name=email maxlength=32></td>        
</tr>        
        <tr>        
         <td colspan=2 style=\"text-align: center;\"><br><input type=submit value=Зарегистрироваться></td>        
        </tr>        
</table>        
</form></center>";        

if (isset($_POST['account'])) {        
if ($_POST['account'] && strlen($_POST['account'])<=20 && strlen($_POST['account'])>=3 && strlen($_POST['password'])>=3 && $_POST['password'] && $_POST['password2'] && $_POST['password']==$_POST['password2']) {        
         if (!eregi("^[a-zA-Z0-9_]+$", $_POST['account']))        
           die ("<p>Error: SQL-Injection</p>");        
         if (!eregi("^[a-zA-Z0-9_]+$", $_POST['password']))        
           die ("<p>Error: SQL-Injection</p>");        
           $pass = ($_POST['password']);        
           $username = ($_POST['account']);        
           $result = mysql_query("SELECT * FROM account WHERE username='".$_POST['account']."' AND sha_pass_hash='$pass'", $realmd);        
           if (mysql_num_rows($result) != 0) {        
               echo "<center><p><font color=#CC0000><b>Такой аккаунт уже есть!</b></font></p></center>";        
           } else {        
             if (!mysql_query("INSERT INTO account (username, sha_pass_hash, email, expansion) VALUES ('$username', SHA1(CONCAT(UPPER('$username'),':',UPPER('$pass'))), '".$_POST['email']."', $tbc)", $realmd)) {echo "<center><p><font color=#CC0000><b>Ошибка</b></font></p></center>";} else {echo "<center><p><font color=#00CC00><b>Аккаунт успешно зарегестрирован!</b></font></p></center>";}
           }        
} else {        
           echo "<center><p><font color=#CC0000><b>Проверьте правильность ввода!</b></font></p></center>";        
}        
}        

?>