View file reg.php

<?php

$reg = "reg";
if($_GET['page']==$reg)
{
include ("head.php");

echo <<< sss
<div class="nav">
<form action=reg.php?page=add method=post>
Ник: *<br />
<input name="user" maxlength="15" type="text" value=""><br />
Пароль: * <br />
<input name="pass" maxlength="20" type="text" value=""><br />
Имя:<br />
<input name="name" maxlength="15"type="text" value=""><br />
Пол: <br />
<select size="1" name="pol">
  <option value="Мужской">Мужской</option>
  <option value="Женский">Женский</option>
</select><br />
E-mail:<br />
<input name="email" maxlength="70" type="text" value=""><br />
<input type='submit' value='Регистрировать'>
</form>
</div>
<div class="nav">
• <a href="index.php">Назад</a>
</div>
sss;

include ("foot.php");
exit();
}

$add = "add";
if($_GET['page']==$add)
{
include ("conf.php");


$user = htmlspecialchars(mysql_real_escape_string(trim($_POST['user'])));
$pass = htmlspecialchars(mysql_real_escape_string(trim($_POST['pass']))); if ($pass == ''){unset($pass); }
$email = htmlspecialchars(mysql_real_escape_string(trim($_POST['email'])));
$pol = htmlspecialchars(mysql_real_escape_string(trim($_POST['pol'])));
$name = htmlspecialchars(mysql_real_escape_string(trim($_POST['name'])));



$count_users = mysql_result(mysql_query("SELECT COUNT(*) FROM userlist WHERE user='$user'",$db),0);
if ($count_users)
{


include ("head.php");
echo "<div class='nav'>Извините, введённый вами ник уже зарегистрирован. Введите другой ник.</div>";
echo <<<sss
<div class='nav'>
• <a href="reg.php?page=reg">Назад</a>
</div>
sss;
include ("foot.php");
}
if (isset($user) && isset($pass))
{
$result = mysql_query("INSERT INTO userlist (user,pass,email,pol,name) VALUES ('$user','$pass','$email','$pol','$name')");

if ($result == 'true')
{
include ("head.php");
echo "<div class='nav'>Вы успешно зарегистрировались!</p>";
echo "<b>Ваш ник:</b> ".$user." <br />";
echo "<b>Ваш пароль:</b> ".$pass." <br />";
echo <<<sss
<form name="" action="menu.php" method="get">
<input name="user" type="hidden" value="$user">
<input name="pass" type="hidden" value="$pass">
<input type="submit" value="Войти"></form>
</div>
sss;
include ("foot.php");
exit();
}
}
else
{
include ("head.php");
echo "<div class='nav'>Ошибка регистрации!</div>";
echo <<<sss
<div class='nav'>
• <a href="reg.php?page=reg">Назад</a>
</div>
sss;
include ("foot.php");
}
}





?>