robertz · April 29, 2019 21:06
diff --git a/create.php b/create.php
 <html lang="en">

 <head>
    <meta charset="utf-8">
    <title>Create Account</title>
    <meta name="description" content="Create Account">
    <link rel="stylesheet" href="//stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
    <script src="//code.jquery.com/jquery-3.4.0.min.js"></script>
 </head>



 <body style="margin-top: 32px;">
    <div class="container">

    <?php
        $serverName = "127.0.0.1";
        $connectionInfo = array( "Database"=>"cohauth", "UID"=>"sa", "PWD"=>"password");
        $conn = sqlsrv_connect( $serverName, $connectionInfo);

        function adler32($data)
        {
            $mod_adler = 65521;
            $a = 1;
            $b = 0;
            $len = strlen($data);
            for($index = 0; $index < $len; $index++)
            {
                    $a = ($a + ord($data[$index])) % $mod_adler;
                    $b = ($b + $a) % $mod_adler;
            }

            return ($b << 16) | $a;
        }

        function game_hash_password($authname, $password)
        {
            $authname = strtolower($authname);
            $a32 = adler32($authname);
            $a32hex = sprintf('%08s', dechex($a32));
            $a32hex = substr($a32hex, 6, 2) . substr($a32hex, 4, 2) . substr($a32hex, 2, 2) . substr($a32hex, 0, 2);
            $digest = hash('sha512', $password . $a32hex, TRUE);
            return $digest;
        }

        if ( isset($_POST['authname']) && isset($_POST['password']) ) {
            
            $authname = trim($_POST['authname']);
            $password = trim($_POST['password']);

            $sql = "SELECT * FROM user_account where account = '$authname'";
            $stmt = sqlsrv_query( $conn, $sql, array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));

            $e = sqlsrv_num_rows( $stmt );

            if ($e > 0) {
                echo "<div class=\"alert alert-danger\">There is already and account with that user id!</div>";
            }
            else{
                $sql = "SELECT * FROM user_account";
                $stmt = sqlsrv_query( $conn, $sql, array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
                $id = sqlsrv_num_rows( $stmt ) + 1;
                
                $hash = bin2hex(game_hash_password($authname, $password));

                $sql1 = "INSERT INTO cohauth.dbo.user_account (account, uid, forum_id, pay_stat) VALUES ('$authname', $id, $id, 1014);";
                $sql2 = "INSERT INTO cohauth.dbo.user_auth (account, password, salt, hash_type) VALUES ('$authname', CONVERT(BINARY(128),'$hash'), 0, 1);";
                $sql3 = "INSERT INTO cohauth.dbo.user_data (uid, user_data) VALUES ($id, 0x0080C2E000D00B0C000000000CB40058);";
                $sql4 = "INSERT INTO cohauth.dbo.user_server_group (uid, server_group_id) VALUES ($id, 1);";

                $stmt = sqlsrv_query($conn, $sql1);
                $stmt = sqlsrv_query($conn, $sql2);
                $stmt = sqlsrv_query($conn, $sql3);
                $stmt = sqlsrv_query($conn, $sql4);

                echo "<div class=\"alert alert-success\">Your account should be ready to use</div>";
            }

            sqlsrv_free_stmt($stmt);

        }

    ?>
        
        <div style="display: block; width: 50%; margin: auto;">
            <form method="post">
                <label for="user">User:</label>
                <input type="text" name="authname" id="user" class="form-control" />
                <br />

                <label for="pass">Password:</label>
                <input type="text" name="password" id="pass" class="form-control" />
                <br />

                <button type="submit" class="btn btn-primary">Submit</button>
            </form>
        </div>

    </div>
 </body>

 </html>
	<html lang="en">

	<head>
	<meta charset="utf-8">
	<title>Create Account</title>
	<meta name="description" content="Create Account">
	<link rel="stylesheet" href="//stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
	<script src="//code.jquery.com/jquery-3.4.0.min.js"></script>
	</head>



	<body style="margin-top: 32px;">
	<div class="container">

	<?php
	$serverName = "127.0.0.1";
	$connectionInfo = array( "Database"=>"cohauth", "UID"=>"sa", "PWD"=>"password");
	$conn = sqlsrv_connect( $serverName, $connectionInfo);

	function adler32($data)
	{
	$mod_adler = 65521;
	$a = 1;
	$b = 0;
	$len = strlen($data);
	for($index = 0; $index < $len; $index++)
	{
	$a = ($a + ord($data[$index])) % $mod_adler;
	$b = ($b + $a) % $mod_adler;
	}

	return ($b << 16) \| $a;
	}

	function game_hash_password($authname, $password)
	{
	$authname = strtolower($authname);
	$a32 = adler32($authname);
	$a32hex = sprintf('%08s', dechex($a32));
	$a32hex = substr($a32hex, 6, 2) . substr($a32hex, 4, 2) . substr($a32hex, 2, 2) . substr($a32hex, 0, 2);
	$digest = hash('sha512', $password . $a32hex, TRUE);
	return $digest;
	}

	if ( isset($_POST['authname']) && isset($_POST['password']) ) {

	$authname = trim($_POST['authname']);
	$password = trim($_POST['password']);

	$sql = "SELECT * FROM user_account where account = '$authname'";
	$stmt = sqlsrv_query( $conn, $sql, array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));

	$e = sqlsrv_num_rows( $stmt );

	if ($e > 0) {
	echo "<div class=\"alert alert-danger\">There is already and account with that user id!</div>";
	}
	else{
	$sql = "SELECT * FROM user_account";
	$stmt = sqlsrv_query( $conn, $sql, array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
	$id = sqlsrv_num_rows( $stmt ) + 1;

	$hash = bin2hex(game_hash_password($authname, $password));

	$sql1 = "INSERT INTO cohauth.dbo.user_account (account, uid, forum_id, pay_stat) VALUES ('$authname', $id, $id, 1014);";
	$sql2 = "INSERT INTO cohauth.dbo.user_auth (account, password, salt, hash_type) VALUES ('$authname', CONVERT(BINARY(128),'$hash'), 0, 1);";
	$sql3 = "INSERT INTO cohauth.dbo.user_data (uid, user_data) VALUES ($id, 0x0080C2E000D00B0C000000000CB40058);";
	$sql4 = "INSERT INTO cohauth.dbo.user_server_group (uid, server_group_id) VALUES ($id, 1);";

	$stmt = sqlsrv_query($conn, $sql1);
	$stmt = sqlsrv_query($conn, $sql2);
	$stmt = sqlsrv_query($conn, $sql3);
	$stmt = sqlsrv_query($conn, $sql4);

	echo "<div class=\"alert alert-success\">Your account should be ready to use</div>";
	}

	sqlsrv_free_stmt($stmt);

	}

	?>

	<div style="display: block; width: 50%; margin: auto;">
	<form method="post">
	<label for="user">User:</label>
	<input type="text" name="authname" id="user" class="form-control" />
	<br />

	<label for="pass">Password:</label>
	<input type="text" name="password" id="pass" class="form-control" />
	<br />

	<button type="submit" class="btn btn-primary">Submit</button>
	</form>
	</div>

	</div>
	</body>

	</html>