2 || $atype < 1) $atype = 2; $problems = []; if(isset( $_GET["U"], $_GET["AC"] )){ $verify_username = $_GET["U"]; $verify_token = $_GET["AC"]; $hmac = GenHmacMessage($verify_username, "UserActivation", false); $hmac_hash = bin2hex(base64_url_decode($verify_token)); if(strlen($hmac_hash) != 64){ print_r(strlen($hmac_hash)); echo("INCOMPLETE Activation Code!
"); include("footer.php"); exit(); } else{ print("
Attempting to Activate your account...
"); if(hash_equals($hmac_hash, $hmac)) { if(user_exists($verify_username)) { $user_id = get_userid($verify_username); if(!get_email_activation_status($user_id)) { $connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'"); $stmt = $connect->prepare("UPDATE Users SET EmailActivated='YES' WHERE Id=?"); $stmt->bind_param("i", $user_id); $stmt->execute(); echo(' COMPLETED: Successfully Enabled your Account. You may Log in with your name and password at the upper right.

'); include("footer.php"); exit(); } else{ echo("ACCOUNT ALREADY ACTIVATED: Your account has already been activated. Please login with your username and password.

"); include("footer.php"); exit(); } } } echo("FAILED: Invalid User/Code Combination. After 50 hours unactivated accounts are removed from the system. So if it's been over 2 days, you will have to try signing up again.

"); include("footer.php"); exit(); } } else if(isset( $_POST['user'],$_POST['pass1'],$_POST['pass2'],$_POST['sex'],$_POST['email'],$_POST['age'],$_POST['passreqq'],$_POST['passreqa'] ,$_POST['A'])) { if(isset($_POST["cbr"])) { if($_POST['cbr'] !== "OK") array_push($problems, "You need to read the RULES and agree to follow them!"); } else { array_push($problems, "You need to read the RULES and agree to follow them!"); } if(isset($_POST["cbt"])) { if($_POST['cbt'] !== "OK") array_push($problems, "You need to read the Terms and Conditions agree to be bound by them!"); } else { array_push($problems, "You need to read the Terms and Conditions agree to be bound by them!"); } if($_POST['A'] == 1){ if(isset($_POST["cbp"])) { if($_POST['cbp'] !== "OK") array_push($problems, "You need to have Parental Permission!"); } else { array_push($problems, "You need to have Parental Permission!"); } } if($_POST['pass1'] !== $_POST['pass2']) array_push($problems, "Passwords must match!"); $username = $_POST['user']; $password = $_POST['pass1']; $age = intval($_POST['age'],10); $email = $_POST['email']; $reset_question = $_POST['passreqq']; $reset_answer = $_POST['passreqa']; $country = $_POST['country']; $gender = $_POST['sex']; if(preg_match('/[^A-Za-z]/', $username)) array_push($problems, "Username must contain ONLY Letters."); $username_len = strlen($username); if($username_len < 3) array_push($problems, "Username must be at least 3 characters long."); if($username_len > 16) array_push($problems, "Username must be less than 16 characters long."); if(preg_match('/[A-Z]{2,}/',$username)) array_push($problems, "Username should be formatted with the first letter of each word capitalized. ( For example: BlueBunny )"); if(strtoupper($username)[0] !== $username[0]) array_push($problems, "Username should be formatted with the first letter of each word capitalized. ( For example: BlueBunny )"); if(preg_match('/[^A-Za-z0-9]/',$password)) array_push($problems, "Password must contain ONLY Letters and numbers."); $password_len = strlen($password); if($password_len < 6) array_push($problems, "Password must be at least 6 characters long."); if($password_len > 16) array_push($problems, "Password must be less than 16 characters long."); if(!preg_match('/[0-9]/',$password)) array_push($problems, "Password must contain at least one number."); if(!preg_match('/[a-zA-Z]/',$password)) array_push($problems, "Password must contain at least one letter."); if($reset_question == "Select a question") array_push($problems, "You must select a Password Recovery Question."); if($reset_answer == "") array_push($problems, "You must Answer the Password Recovery Question."); if($country == "") array_push($problems, "Please enter your country."); if($_POST['age'] == "") array_push($problems, "Please enter your age."); if($username == $password) array_push($problems, "Username and Password can not be the same!"); if(strpos($username, $password) !== false) array_push($problems, "The password cannot be within the username!."); if(strpos($password, $username) !== false) array_push($problems, "The password cannot have the username within it!."); if(!preg_match('/^[A-Za-z0-9_.+-]*\@[A-Za-z0-9_.+-]*\.[A-Za-z0-9_.+-]{1,4}$/',$email)) array_push($problems, "Email does not appear valid, you will not be able sign in without getting the login mail."); populate_db(); $connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'"); $result = mysqli_query($connect, "SELECT MAX(Id) FROM Users"); $user_id = $result->fetch_row()[0] + 1; if($user_id == NULL) $user_id = 0; $salt = random_bytes ( 64 ); $answer_hash = hash_salt($reset_answer,$salt); $password_hash = hash_salt($password,$salt); $hex_salt = bin2hex($salt); if(user_exists($username)) array_push($problems, "Username taken. Please try a different account name."); if(count($problems) <= 0) { $activated = "NO"; if(!$email_activation){ $activated = "YES"; } $stmt = $connect->prepare("INSERT INTO Users VALUES(?,?,?,?,?,?,?,?,?,?,'NO','NO',?)"); $stmt->bind_param("isssssissss", $user_id, $username, $email, $country, $reset_question, $answer_hash, $age, $password_hash, $hex_salt, $gender, $activated); $stmt->execute(); send_activation_email($email, $username, $password); echo('

Your account has been added! Look for the email from '.$from_email.' with your activation code! You cannot play until you CLICK the link with your code in the email. Be sure to check your Spam email box in case it goes there. If you do not get the email soon, feel free to log in with your username and password to re-send the Activation Code to the same or a different email address. Go Back to Main Page

'); include("footer.php"); exit(); } } function generate_name(){ $dict = file_get_contents("dictonary.dic"); $words = explode("\r\n", $dict); $name = ""; while(true){ $word = $words[array_rand($words)]; if(strlen($name.$word) > 16) break; $name .= $word; if(strlen($name) > 5) if(rand(0, 100) <= 15) break; } if(user_exists($name)) $name = generate_name(); return $name; } ?>

Horse Isle Create New Account: Only one account per person. Make sure you have parental permission if under 13! 0) { echo("There were the following problems with your submission: "); for($i = 0; $i < count($problems); $i++) { echo($problems[$i]." "); } echo(""); } ?> GAME DETAILS (Take time selecting a good username, it will be your game name): In order to make the game prettier, please capitalize the first letter of each word in Username: Good:BlueBunny Not:BLUEBUNNY or bluebunny or BlUebuNNy If the username you choose is offensive in anyway, your account will be deleted as soon as it's noticed. Please do not use any part of your real name in the username. Pick something fun and original. There are some ideas on right. Desired username: " NAME="user">[3-16 letters only, capitalize first letter of each word ] Desired password: " NAME="pass1">[6-16 both letters and numbers only, case insensitive] Repeat  password: " NAME="pass2">[ same as above ] GIRL: > BOY: > [Determines whether you are referred to as 'him' or 'her' in game.] PERSONAL DETAILS (Kept private, never shared): [ Login codes sent here ] * many mail programs will mistakingly identify the Email as Spam, you may have to check your spam folders. If the email code is not received within 2 days(50hrs), the account is removed, and you will then have to add it again. "); else if($atype == 1) echo("Your PARENT'S Email: [ Login codes sent here ] * many mail programs will mistakingly identify the Email as Spam, you may have to check your spam folders. If the email code is not received within 2 days(50hrs), the account is removed, and you will then have to add it again. "); ?> Your Age: "> Your Country: "> Password Recovery Question: My favorite food My pets name My best friends first name My favorite singer My favorite sports star My favorite team My favorite cartoon character My favorite actor Answer: LEGALITIES (Only Check if TRUE!): I have Read and Understand and will follow the Rules: > I have Read and Understand the Terms and Conditions: > '); if($atype == 1){ $msg = ""; if(isset($_POST["cbp"])) if($_POST["cbp"] == "OK") $msg = "CHECKED"; echo('By clicking this I PROMISE I have parental permission: '); } ?> Go Back to Main Page

Some Random Available Names: (pick one or make up your own) '); }?> '); }?>