<?php
include('config.php');
dbConn();

$error = "";
$show_form = 1;

$email = "";
$password = "";
$display_name = "";

if (isset($_POST['email'])) {

/* / CHECK SECURITY CODE
	if( $_SESSION['security_code'] != $_POST['security_code'] || empty($_SESSION['security_code']) ) {
		$error .= "&bull;  Invalid security code!<br />";
	}
	unset($_SESSION['security_code']);
*/
// # OF ATTEMPTS
	if($_POST["attempts"]) {
		$attempts = $_POST["attempts"];
	} else {
		$attempts = 0;
	}

// CHECK EMAIL ADDRESS
	$exp = "^[a-z\'0-9]+([._-][a-z\'0-9]+)*@([a-z0-9]+([._-][a-z0-9]+))+$";
	if(!eregi($exp, $_POST['email'])) {
		$error .= "&bull;  Invalid e-mail address!<br />";
	}

// CHECK FOR EMAIL ADDRESS
$check_em = mysql_query("SELECT member_id FROM cms_members WHERE email = '".addslashes($_POST['email'])."'");
$check_em_num = mysql_num_rows($check_em);

	if ($check_em_num > 0 ) {
		$error .= "&bull;  This e-mail address is already a member!<br / >";
	}

// POST VARS
$email = addslashes($_POST['email']);
$password = addslashes($_POST['password']);
$display_name = addslashes($_POST['display_name']);
$birthday = $_POST['byear']."-".$_POST['bmonth']."-".$_POST['bday'];
/*
$first_name = addslashes($_POST['first_name']);
$last_name = addslashes($_POST['last_name']);
$addr_street = addslashes($_POST['addr_street']);
$addr_city = addslashes($_POST['addr_city']);
$addr_state = addslashes($_POST['addr_state']);
$addr_zip = addslashes($_POST['addr_zip']);
$addr_country = addslashes($_POST['addr_country']);
$phone_number = addslashes($_POST['phone_number']);
*/
$send_news = $_POST['send_news'];

// CHECK FOR DISPLAY_NAME
$check_dn = mysql_query("SELECT member_id FROM cms_members WHERE display_name = '".$display_name."'");
$check_dn_num = mysql_num_rows($check_dn);

	if ($check_dn_num > 0 ) {
		$error .= "&bull;  That display name is already in use!<br / >";
	}

	if ($error == "") {
		$show_form = "0";
		// MAKE 25 CHAR ALPHANUMERIC CODE TO CONFIRM
		$rvalues = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890";
		$rlen = strlen($rvalues);
		$confirm = "";
		for($i=0;$i<25;$i++) {
			$confirm .= substr($rvalues, rand(1, $rlen), 1);
		}
		// SQL INSERT
		/*
		$sql = "INSERT INTO cms_members SET
join_date='$today',
email='$email',
password='$password',
display_name='$display_name',
birthday='$birthday',
firstname='$first_name',
lastname='$last_name',
addr_street='$addr_street',
addr_city='$addr_city',
addr_state='$addr_state',
addr_zip='$addr_zip',
addr_country='$addr_country',
phone_number='$phone_number',
send_news='$send_news'";
*/
		$sql = "INSERT INTO cms_members SET
join_date='$today',
email='$email',
password='".md5($password)."',
display_name='$display_name',
birthday='$birthday',
send_news='$send_news'";


    if (@mysql_query($sql)) {

		$member_id = mysql_insert_id();
		$preconfirm = mysql_query("INSERT INTO cms_members_confirm SET member_id='".$member_id."', email='".$_POST['email']."', code='".$confirm."'");

		// SEND CONFIRMATION E-MAIL
		$subject = " ** XFanClubs.COM MEMBER CONFIRMATION E-MAIL ** ";
		$to = $_POST['email'];
		$headers = "From: XFanClubs.com <no-reply@tammysands.com>\r\n" .
					 'X-Mailer: PHP/' . phpversion() . "\r\n" .
					 "MIME-Version: 1.0\r\n" .
					 "Content-Type: text/html; charset=utf-8\r\n" .
					 "Content-Transfer-Encoding: 8bit\r\n\r\n";

		$message = "You have requested a membership to XFanClubs.com and you have specified this address ($email) as your contact e-mail.<br><br>";
		$message .= "If you did not make this request at XFanClubs.com, please ignore this email.<br><br>";
		$message .= "If you did make this request, you must confirm your e-mail address by visiting the following link:<br><br>";
		$message .= "<a href=\"http://www.xfanclubs.com/confirm.php?email=".$_POST['email']."&code=".$confirm."\">http://www.xfanclubs.com/confirm.php?email=".$_POST['email']."&code=".$confirm."</a><br><br>";
		$message .= "Thank You,<br>- XFanClubs";

		mail($to, $subject, $message, $headers);
		//printf("<meta http-equiv=\"Refresh\" content=\"0;url=./thanks.php\">");

		}
	}
}

print mysql_error();

$section_header = "Join XFanClubs.com";
include('mod_html_top.php');

if ($show_form == 1) {
?>
<script language="JavaScript" type="text/JavaScript">
function checkForm(form)
{
    if( !form.email.value )
    {
        alert("A valid e-mail address is required");
        return false;
    }
		    if( !form.password.value )
    {
        alert("A Password is required");
        return false;
    }
		    if( !form.display_name.value )
    {
        alert("You need a display name");
        return false;
    }

}
</script>
<form method="post" action="<? echo $_SERVER['PHP_SELF']; ?>" onsubmit="return checkForm(this)" name="join">
<table width="500" border="0" align="center" cellpadding="0" cellspacing="10">
<?php
if (!$error == "") {
?>
  <tr>
    <td colspan="2"><span class="brown24px"> Error(s):</span><br /><span class="brown18px"><? echo $error; ?></span><br /></td>
  </tr>
<?php
}
?>
  <tr>
    <td><div align="right" class="brown13pxbold">e-mail address</div></td>
    <td><input name="email" type="text" value="<? echo stripslashes($email); ?>" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">password</div></td>
    <td><input name="password" type="password" value="<? echo stripslashes($password); ?>" maxlength="15"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">display name</div></td>
    <td><input name="display_name" type="text" value="<? echo stripslashes($display_name); ?>" maxlength="100"/>
    Check!-&gt; ajax</td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">birthday</div></td>
    <td><select name="bmonth">
<?
for ($i=1;$i<13;$i++) {
	if ($i == $_POST['bmonth']) {
		echo "<option selected=\"selected\" value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	} else {
		echo "<option value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	}
}
?>
        </select>
        <select name="bday">
<?
for ($i=1;$i<32;$i++) {
	if ($i == $_POST['bday']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
        </select>
<select name="byear">
<?
$eightteen = date("Y")-18;
for ($i=$eightteen;$i>1940;$i--) {
	if ($i == $_POST['byear']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
</select></td>
  </tr>
    <tr>
    <td><div align="right" class="brown13pxbold">recieve news updates via e-mail?</div></td>
    <td><select name="send_news"><option value="1" selected="selected">Yes</option><option value="0">No</option></select></td>
  </tr>
  <? /*
      <tr>
    <td><div align="right" class="brown13pxbold">security code</div></td>
    <td><img src="captcha.php" /></td>
  </tr>
    <tr>
    <td><div align="right" class="brown13pxbold">type security code</div></td>
    <td><input name="security_code" type="text"/></td>
  </tr>
  <?
  */
	/*
    <tr>
    <td colspan="2"><div align="center" class="brown18px"><br />
      <br />fields below are required only if you make a purchase.<br />
    </div></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">first name</div></td>
    <td><input name="first_name" type="text" value="<? echo stripslashes($first_name); ?>" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">last name</div></td>
    <td><input name="last_name" type="text" value="<? echo stripslashes($last_name); ?>" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">street address</div></td>
    <td><input name="addr_street" type="text" value="<? echo stripslashes($addr_street); ?>" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">city</div></td>
    <td><input name="addr_city" type="text" value="<? echo stripslashes($addr_city); ?>" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">state</div></td>
    <td><select name="addr_state">
	<option value="">Choose State - US Residents</option>
	<?
	foreach($states as $key=>$value) {
        	echo "<option value=\"$key\"";
		if($addr_state == $key) {
               		echo " selected=\"selected\"";
		}
        	echo ">$value</option>\n";
	}
	?>
	</select></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">zip</div></td>
    <td><input name="addr_zip" type="text" value="<? echo stripslashes($addr_zip); ?>" maxlength="15"/></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">country</div></td>
    <td><select name="addr_country" style="width:140px;">
        <option value="">Choose Country</option>
        <? foreach($countries as $key=>$value) {
                echo "<option value=\"$key\"";
                if($addr_country == $key) {
                        echo " selected=\"selected\"";
		}
                echo ">$value</option>\n";
        }
				?>
        </select></td>
  </tr>
  <tr>
    <td><div align="right" class="brown13pxbold">phone number</div></td>
    <td><input name="phone_number" type="text" value="<? echo stripslashes($phone_number); ?>" maxlength="255"/></td>
  </tr>
	*/
	?>
  <tr>
    <td colspan="2"><br /><div align="center"><a href="javascript:document.join.submit();" class="pagination"><span>Sign-Up!</span></a></div></td>
  </tr>
</table>
<input type="hidden" name="attempts" value="<? echo $attempts; ?>" />
</form>
<?php
} else {
?>
<table width="500" border="0" align="center" cellpadding="0" cellspacing="5">
  <tr>
    <td colspan="2"><div align="center" class="brown18px">Thank You!</div><br />You should receive an e-mail shorty with a link to confirm this is your e-mail address!</td>
  </tr>
  </table>
<?php
}

include('mod_html_middle.php');

include('mod_side_new_photosets.php');
include('mod_side_rate_models.php');
include('mod_side_rate_photosets.php');

include('mod_html_bottom.php');
?>