Codice PHP:
function InsertNewUser($name,$surname,$username,$email,$password,$status,$usergroup ,$isadmin ,$phone,$signature,$namberrandom )
{
global $dbcore;
$adduser = $dbcore->query("insert into user
(
`userid`,`usergroupid`,`name`,`surname`,`email`,`phone`,`signature`,
`username`,`password`,`passwordtext`,`status`,`activation`,`isadmin`,
`tipo`,`dateadd`,`lastvisit`,`lastactivity`,`usertimezone`,`ipadress`,
`useragent`,`namberrandom`
)values(
null,
'".intval($usergroup)."',
'".$dbcore->escape($name)."',
'".$dbcore->escape($surname)."',
'".$dbcore->escape($email)."',
'".$dbcore->escape($phone)."',
'".$dbcore->escape($signature)."',
'".$dbcore->escape($username)."',
'".md5($password)."',
'".$dbcore->escape($password)."' ,
'".intval($status)."',
'1',
'".intval($isadmin)."',
'".intval($usergroup)."',
'".time()."',
'',
'',
'0',
'".$_SERVER['REMOTE_ADDR']."',
'".$_SERVER['HTTP_USER_AGENT']."',
'". $namberrandom ."'
)")or die(mysql_error());
if(!$adduser)
{
return false;
}
return true ;
}
e qui la chiamo cosi :
Codice PHP:
if(!isset($email) or !FormatEmail(trim( $email ))){
$infomessage = 'email not correct';
PrintErrorBox($infomessage);
}
else if(!isset($password) or $password ==''){
$infomessage = 'One of the required field(s) is empty';
PrintErrorBox($infomessage);
}
else if(!isset($confirmpassword) or $confirmpassword ==''){
$infomessage = 'One of the required field(s) is empty';
PrintErrorBox($infomessage);
}
else if($password != $confirmpassword ){
$infomessage = 'The passwords entered do not match';
PrintErrorBox($infomessage);
}
else{
if(Namberrandom())
$namberrandom = Namberrandom();
$adduser = InsertNewUser($name,$surname,$username,$email,$password,$status,$usergroup ,$level,$isadmin ,$phone,$signature,$namberrandom);
if($adduser)
{
Redirect("index.php?_n=content&_s=manageuser");
$infomessage = 'User ' .$surname . ' inserted successfully';
PrintInfoBox($infomessage);
}else{
$infomessage = '<::::::::::::::<ERROR>:::::::::::::::>';
PrintErrorBox($infomessage);
}