I didnt feel the need to put in a check for that, if the user is stupid enough to put their password the same as their username, they deserve to be hacked.
This is the current Submitform.php code:
<?PHP
/*----------------------------------------------------------------------*/
/* Call on top of page */
include ("../_Page/Variables.php");
include ("../_Page/Top.php");
/*----------------------------------------------------------------------*/
/* Convert Posts to Variables */
$N_USERNAME = $_POST['N_USERNAME'];
$EMAIL1 = $_POST['EMAIL1'];
$EMAIL2 = $_POST['EMAIL2'];
$PASSWORD1 = $_POST['PASSWORD1'];
$PASSWORD2 = $_POST['PASSWORD2'];
/*----------------------------------------------------------------------*/
/* Check if Passwords and E-Mail addresses match each other and that they all have values */
$VALID_MEMBER = True;
if ($PASSWORD1 == $PASSWORD2) {
$N_PASSWORD = $PASSWORD1;
} else {
echo "The Passwords specified did not match each other, please go back and check.</p>";
$VALID_MEMBER = False;
}
if ($EMAIL1 == $EMAIL2) {
$N_EMAIL = $EMAIL1;
} else {
echo "The E-Mail addresses did not match each other, please go back and check.</p>";
$VALID_MEMBER = False;
}
/*----------------------------------------------------------------------*/
/* Carry on checking things */
$SIMILAR_MEMBER = mysql_db_query ("$DATABASE","select * from TRIV_MEMBERS where USERNAME = '$N_USERNAME'");
$SIMILAR_MEMBER = mysql_num_rows ($SIMILAR_MEMBER);
if ($SIMILAR_MEMBER > 0) {
echo "Username already taken!</p>";
$VALID_MEMBER = False;
}
if ($N_USERNAME == ""){
echo "No Username specified!<br>";
$VALID_MEMBER = False;
}
if ($N_PASSWORD == ""){
echo "No Password specified!<br>";
$VALID_MEMBER = False;
}
/*----------------------------------------------------------------------*/
/* Insert the variables into the database */
if ($VALID_MEMBER == True) {
$N_LAST_LOGGED_DATE = gmdate( "Y-m-d H:i:s", mktime(date("H"),date("i"),date("s")) );
$PASSY = $N_PASSWORD;
$NEW_PASSY = '';
for ($K=0; $K<strlen($PASSY); $K++) {
$NEW_PASSY .= '*';
}
echo "Thankyou $N_USERNAME, here are your details:<p style='text-align: center;'>Username : <span style='font-weight: bold;'>$N_USERNAME</span><br>Password : <span style='font-weight: bold;'>$NEW_PASSY</span>";
if ($N_EMAIL == ""){
echo "</p>";
}else{
echo "<br>E-mail : <b>$N_EMAIL</b><br></p>";
}
mysql_query ("INSERT INTO TRIV_MEMBERS (USERNAME, PASSWORD, EMAIL, LAST_LOGGED, POINTS)
VALUES ('$N_USERNAME', '$N_PASSWORD', '$N_EMAIL', '$N_LAST_LOGGED_DATE', 0 )
");
$MESSAGE = "Thankyou for registering a Trivia Online account, Your details are below \n";
$MESSAGE .= "Name = $NAME \n";
$MESSAGE .= "Game & Login Name = $N_USERNAME \n";
$MESSAGE .= "Password = $N_PASSWORD \n";
$MESSAGE .= "E-Mail address = $N_EMAIL \n";
$MESSAGE .= "------------------------------------------------------------------ \n";
$MESSAGE .= "You can now log in and play the game \n";
mail("$N_EMAIL", "Trivia Online", "$MESSAGE", "From: $E_MAIL_ADDRESS");
}
/*----------------------------------------------------------------------*/
/* Call on bottom of page */
include ("../_Page/Bottom.php");
/*----------------------------------------------------------------------*/
?>