WoWSimpleRegistration/application/include/user.php

<?php
/**
 * @author Amin Mahmoudi (MasterkinG)
 * @copyright    Copyright (c) 2019 - 2022, MsaterkinG32 Team, Inc. (https://masterking32.com)
 * @link    https://masterking32.com
 * @Description : It's not masterking32 framework !
 **/

use Gregwar\Captcha\CaptchaBuilder;
use Medoo\Medoo;

class user
{
    public static $captcha;

    public static function register()
    {
        if (get_config('battlenet_register')) {
            self::bnet_register();
        } else {
            self::normal_register();
        }
    }

    public static function bnet_register()
    {
        global $antiXss;
        if (!empty($_POST["password"]) && !empty($_POST["repassword"]) && !empty($_POST["email"]) && !empty($_POST["captcha"]) && !empty($_SESSION['captcha'])) {
            if (strtolower($_SESSION['captcha']) == strtolower($_POST["captcha"])) {
                unset($_SESSION['captcha']);
                if (filter_var($_POST["email"], FILTER_VALIDATE_EMAIL)) {
                    if ($_POST["password"] == $_POST["repassword"]) {
                        if (strlen($_POST["password"]) >= 4 && strlen($_POST["password"]) <= 16) {
                            if (self::check_email_exists(strtoupper($_POST["email"]))) {
                                $bnet_hashed_pass = strtoupper(bin2hex(strrev(hex2bin(strtoupper(hash("sha256", strtoupper(hash("sha256", strtoupper($_POST["email"])) . ":" . strtoupper($_POST["password"]))))))));
                                database::$auth->insert("battlenet_accounts", [
                                    "email" => $antiXss->xss_clean(strtoupper($_POST["email"])),
                                    "sha_pass_hash" => $antiXss->xss_clean($bnet_hashed_pass)
                                ]);
                                $bnet_account_id = database::$auth->id();
                                $username = $bnet_account_id . "#1";
                                $hashed_pass = strtoupper(sha1(strtoupper($username . ":" . $_POST["password"])));
                                database::$auth->insert("account", [
                                    "username" => $antiXss->xss_clean(strtoupper($username)),
                                    "sha_pass_hash" => $antiXss->xss_clean($hashed_pass),
                                    "email" => $antiXss->xss_clean(strtoupper($_POST["email"])),
                                    "reg_mail" => $antiXss->xss_clean(strtoupper($_POST["email"])),
                                    "expansion" => $antiXss->xss_clean(get_config('expansion')),
                                    "battlenet_account" => $bnet_account_id,
                                    "battlenet_index" => 1
                                ]);
                                success_msg("Your account has been created.");
                            } else {
                                error_msg("Username or Email is exists.");
                            }
                        } else {
                            error_msg("Password length is not valid.");
                        }
                    } else {
                        error_msg("Passwords is not equal.");
                    }
                } else {
                    error_msg("Use valid email.");
                }
            } else {
                error_msg("Captcha is not valid.");
            }
        }
        unset($_SESSION['captcha']);
        self::$captcha = new CaptchaBuilder;
        self::$captcha->build();
        $_SESSION['captcha'] = self::$captcha->getPhrase();
    }


    public static function normal_register()
    {
        global $antiXss;
        if (!empty($_POST["password"]) && !empty($_POST["username"]) && !empty($_POST["repassword"]) && !empty($_POST["email"]) && !empty($_POST["captcha"]) && !empty($_SESSION['captcha'])) {
            if (strtolower($_SESSION['captcha']) == strtolower($_POST["captcha"])) {
                unset($_SESSION['captcha']);
                if (preg_match("/^[0-9A-Z-_]+$/", strtoupper($_POST["username"]))) {
                    if (filter_var($_POST["email"], FILTER_VALIDATE_EMAIL)) {
                        if ($_POST["password"] == $_POST["repassword"]) {
                            if (strlen($_POST["password"]) >= 4 && strlen($_POST["password"]) <= 16) {
                                if (strlen($_POST["username"]) >= 2 && strlen($_POST["username"]) <= 16) {
                                    if (self::check_email_exists(strtoupper($_POST["email"])) && self::check_username_exists(strtoupper($_POST["username"]))) {
                                        $hashed_pass = strtoupper(sha1(strtoupper($_POST["username"] . ":" . $_POST["password"])));
                                        database::$auth->insert("account", [
                                            "username" => $antiXss->xss_clean(strtoupper($_POST["username"])),
                                            "sha_pass_hash" => $antiXss->xss_clean($hashed_pass),
                                            "email" => $antiXss->xss_clean(strtoupper($_POST["email"])),
                                            "reg_mail" => $antiXss->xss_clean(strtoupper($_POST["email"])),
                                            "expansion" => $antiXss->xss_clean(get_config('expansion'))
                                        ]);
                                        success_msg("Your account has been created.");
                                    } else {
                                        error_msg("Username or Email is exists.");
                                    }
                                } else {
                                    error_msg("Username length is not valid.");
                                }
                            } else {
                                error_msg("Password length is not valid.");
                            }
                        } else {
                            error_msg("Passwords is not equal.");
                        }
                    } else {
                        error_msg("Use valid email.");
                    }
                } else {
                    error_msg("Use valid characters for username.");
                }
            } else {
                error_msg("Captcha is not valid.");
            }
        }
        unset($_SESSION['captcha']);
        self::$captcha = new CaptchaBuilder;
        self::$captcha->build();
        $_SESSION['captcha'] = self::$captcha->getPhrase();
    }

    public static function check_email_exists($email)
    {
        if (!empty($email)) {
            $datas = database::$auth->select("account", ["id"], ["email" => Medoo::raw('UPPER(:email)', [':email' => $email])]);
            if (empty($datas[0])) {
                return true;
            }
        }
        return false;
    }

    public static function check_username_exists($username)
    {
        if (!empty($username)) {
            $datas = database::$auth->select("account", ["id"], ["username" => Medoo::raw('UPPER(:username)', [':username' => $username])]);
            if (empty($datas[0])) {
                return true;
            }
        }
        return false;
    }

    public static function get_online_players($realmID)
    {
        $datas = database::$chars[$realmID]->select("characters", array("name", "race", "class", "gender", "level"), ['LIMIT' => 49, "ORDER" => ["level" => "DESC"], "online[=]" => 1]);
        if (!empty($datas[0]["name"])) {
            return $datas;
        }
        return false;
    }
}