Guild Registration Script

[Oninuva]

Created by Oninuva

1.0 Features

- Character Name
- Class
- Level

1.1

-Reduced Pages needed to One

1.2

-Nicer Font
-Black Background
-Changed levels from options to input box
-Added WoW Logo

With just a few edits you can have your own registration page! All you need is PHP, an Email, and Webspace.

The Demo

Download Links:

RapidShare

MMOwns

 

[DDRtists]

That took like, what, 3 minutes to code?

404 error, on the link.

 

[Chocobo]

404 Not Found
The requested URL /registration/register.html does not exist.

We can't look.

 

[DDRtists]

I've found 4 or 5 exploits you can do with the code you are offering.

 

[mase]

You probably should use MySQL (if you are then you should list it under the web host reqs.
And this type of script would be interesting if people could implement it into forums and CMSes and etc.

 

[Oninuva]

Link updated.

 

[mase]

Lol, "61 - 19"
for the levels it would be alot easier to use an input box than options lol.

 

[Oninuva]

Fixed to your liking

 

[DDRtists]

I'm the level LOL druid.

 

[mase]

DDRtists your such a critic lol.

 

[phyrex1an]

I'm not an expert in php mail injection but using mail with uncleaned userdata is an easy way to be abused as a spam sender.

Suggested reading: http://www.securephpwiki.com/index.php/Email_Injection

Just as a fyi, if your form can be abused your host will probably take it down as soon as a spammer find it.

 

[Oninuva]

I plan to add cookies soon.

 

[mase]

I have a no name no level hunter lol.

 

[DDRtists]

I plan to add cookies soon.

Whats that going to do?

 

[sqrage]

Whats that going to do?

I think that was in reply to "people can spam your email/site"

but they still can, they'd just have to erase the cookie

 

[Oninuva]

You know, a large majority of people do not know how to "erase" cookies.

 

[phyrex1an]

When I say 'email injection' I don't mean that people can spam you, I say that they can spam whoever person they want with the help of your form. And those who know how to test mail forms for email injection know how to erase cookies and they also won't use a browser that handles cookies for there abuse.

NEVER use a client side technology (cookies, url, javascript, ect) as only verification and/or validation.

 

[mase]

Just made a column in a db table that is labeled 'emailed' or w/e then set it 0 if they haven't been mailed and 1 if the have then in a php function check if they have been mailed or not.