Account creation webpage

[barinar]

I made my account creation page using a lot of different templates.

The only problem I'm having is that the flag value that gets put into the account database is 4 instead of 44 which I read is what it needs to be for WOTLK.

Here's the code for the selection of account type:

<th>Account Type:</th><td align="center">
<select name="tbc" type="select">
<option value="8">TBC</option>
<option selected value="44">WOTLK</option>
</select></td>

The template didn't even have the option thing on it so I added it.


Here's the code for how it is used for the database:

$query = "INSERT INTO `accounts` (`login`,`password`,`lastip`, `email`, `flags`) 
VALUES ('".mysql_real_escape_string($_POST['login'])."', 
'".mysql_real_escape_string($_POST['password'][0])."', 
'".$_SERVER['REMOTE_ADDR']."', 
'".mysql_real_escape_string($_POST['email'])."', 
'".mysql_real_escape_string($_POST['tbc'][0])."';

Before I added the options, ".mysql_real_escape_string($_POST['tbc'][0])." was just "8" so all account were tbc automatically.

So, why is it making "flag" equal to 4 instead of 44?

[ReppzYouTube]

Yea i got same proberlem i thought it was a PHP error or somthing

[pcrew]

try using "array" or "switch" instead

[TheSpidey]

Problem is with "mysql_real_escape_string($_POST['tbc'][0])"
$_POST['tbc'] is the string containing that field's value; $_POST['tbc'][0] contains only the first character of that field.

[barinar]

I fixed it yesterday, but you were right spidey.

I changed the codes to:

$query = "INSERT INTO `accounts` (`login`,`password`,`lastip`, `email`, `flags`) VALUES ('".mysql_real_escape_string($_POST['login'])."', '".mysql_real_escape_string($_POST['password'][0])."', '".$_SERVER['REMOTE_ADDR']."', '".mysql_real_escape_string($_POST['email'])."', '".mysql_real_escape_string($_POST['flags'])."')"

Select form:

<select name="flags" type="select">
<option value="8">TBC</option>
<option selected value="44">Wotlk</option>
</select></td>

Really the only significant change was taking out the [0](changed the name to flags, but that really didn't do anything at first)

[TheSpidey]

mysql_real_escape_string($_POST['password'][0])

Only takes the first character of the password. Not good

[barinar]

The passwords in the database are full.

[bsod-staff14]

If you need some help with this im good at it heres my yahoo: [email protected] or email me at: [email protected]