Thanks for the replys!
It does store the roo information but not on a SQL account. the SQL is only use as catch mode to store the information temporary until you click on setup the account.... I could make the script to be on a secure site but the thing is by passing the ID input to setup the account since the ID is generate it by the script from a data file, also the admin info is crypted to the config.php file witch it will make it very dificult to crack.....
Any more ideas please... I though it was many PHP masters here....
here is the setup script file:
<?
/* */
/* Account Creation File */
/* */
include("config.php");
if (crypt($pass, $secure_pass) != $secure_pass) {
echo "<form method=post action=$PHP_SELF>Password: <input type=password name=pass><br><br><input type=submit value=Go></form>";
exit;
}
mysql_connect($my_server, $my_username, $my_password);
if ($action == "") {
$result = mysql_db_query($my_database, "SELECT * FROM $my_table;");
echo "<table width=100% border=1>";
echo "<tr>";
echo " <td width=10%>ID</td>";
echo " <td width=10%>name</td>";
echo " <td width=10%>email</td>";
echo " <td width=10%>messenger</td>";
echo " <td width=10%>domain</td>";
echo " <td width=10%>username</td>";
echo " <td width=10%>password</td>";
echo " <td width=10%>plan</td>";
echo " <td width=10%>payment</td>";
echo " <td width=10%>referer</td>";
echo "</tr>";
while ($entry = mysql_fetch_array($result)) {
echo "<tr>";
echo " <td width=10%>" . $entry["id"] . "</td>";
echo " <td width=10%>" . $entry["name"] . "</td>";
echo " <td width=10%>" . $entry["email"] . "</td>";
echo " <td width=10%>" . $entry["messenger"] . "</td>";
echo " <td width=10%>" . $entry["domain"] . "</td>";
echo " <td width=10%>" . $entry["username"] . "</td>";
echo " <td width=10%>" . $entry["password"] . "</td>";
echo " <td width=10%>" . $entry["plan"] . "</td>";
echo " <td width=10%>" . $entry["payment"] . "</td>";
echo " <td width=10%>" . $entry["referer"] . "</td>";
echo "</tr>";
$formlist .= "<option value=" . $entry["id"] . ">" . $entry["id"] . " - " . $entry["domain"] . "</option>";
}
echo "</table>";
echo "<form method=post action=$PHP_SELF>";
echo " <input type=hidden name=action value=create>";
echo " Create this entry (by ID): <select name=id>$formlist</select>";
echo " <input type=submit value=\"Create\">";
echo " <input type=hidden name=pass value=$pass>";
echo "</form>";
echo "<form method=post action=$PHP_SELF>";
echo " <input type=hidden name=action value=delete>";
echo " Delete this entry (by ID): <select name=id>$formlist</select>";
echo " <input type=submit value=\"Delete\">";
echo " <input type=hidden name=pass value=$pass>";
echo "</form>";
echo "<form method=post action=$PHP_SELF>";
echo " <input type=hidden name=action value=deleteall>";
echo " <input type=submit value=\"Delete All\">";
echo " <input type=hidden name=pass value=$pass>";
echo "</form>";
}
if ($action == "delete") {
if ($id == "") { echo "You left out the ID you wanted deleted."; exit; }
mysql_db_query($my_database, "DELETE FROM $my_table WHERE id = \"$id\";");
echo "The pending request $id has been deleted!";
}
if ($action == "create") {
if ($id == "") { echo "You left out the ID you wanted created."; exit; }
$resultX = mysql_db_query($my_database, "SELECT * FROM $my_table WHERE id = \"$id\";");
while ($result = mysql_fetch_array($resultX)) {
$creation = create_account($result["username"], $result["password"], $result["domain"], $result["plan"]);
$pos2 = strpos($creation, " (");
$pos1 = strpos($creation, "| Ip: ");
$ip_addr = substr($creation, $pos1 + 6, $pos2 - ($pos1 + 6));
$email = $result["plan"];
$email_file = file("template/$email");
for ($i = 0; $i < count($email_file); $i++) {
$line = $email_file[$i];
$line = str_replace("[NAME]", $result["name"], chop($line));
$line = str_replace("[USERNAME]", $result["username"], chop($line));
$line = str_replace("[PASSWORD]", $result["password"], chop($line));
$line = str_replace("[DOMAIN]", $result["domain"], chop($line));
$line = str_replace("[IP]", $ip_addr, chop($line));
$total .= $line . "\n";
}
echo $creation;
if (strpos($creation, "New Account Info") !== false) {
$string = "Account " . $result["id"] . "
>> Name: " . $result["name"] . "
>> Domain: " . $result["domain"] . "
>> IP: " . $ip_addr . "
>> Username: " . $result["username"] . "
>> Password: " . $result["password"] . "
>> Plan: " . $result["plan"] . "
>> Sign-Up Date: " . date("m/d/Y") . "
>> Payment Type: " . $result["payment"] . "
>> E-Mail: " . $result["email"] . "
>> Messenger: " . $result["messenger"] . "
";
$fp = fopen("accounts.txt", "a");
fputs($fp, $string);
$fp = fclose($fp);
mysql_db_query($my_database, "DELETE FROM $my_table WHERE id = \"$id\";");
mail($result["email"], "$email_subj", "<xmp>" . $total . "</xmp>", "From: $email_sender\nContent-Type: text/html");
echo "<br>Sent account information e-mail to " . $result["email"] . ".<br>Pending entry deleted.<br>Recorded client in database.<br><br>";
} else {
echo "<br>Account creation failed, manual creation required using WHM.<br><br>";
}
}
}
if ($action == "deleteall") {
mysql_db_query($my_database, "DELETE FROM $my_table;");
echo "All entries have been deleted.";
}
?>
