<?php
//use $_SESSION to store error information
$username = mysql_real_escape_string($_POST["tfUsername"]);
$password = mysql_real_escape_string($_POST["tfPassword"]);
$passwordConfirm = mysql_real_escape_string($_POST["tfPasswordConfirm"]);
$email = mysql_real_escape_string($_POST["tfEmail"]);
$emailConfirm = mysql_real_escape_string($_POST["tfEmailConfirm"]);
$country = mysql_real_escape_string($_POST["sCountry"]);
$bBlank=false;
$bUsernameTaken=false;
if ($username == "")
{
$bBlank=true;
}
$bPwNotPwCon=!($password == $passwordConfirm);
$bEmNotEmCon=!($email == $emailConfirm);
//Styles
/*function getStyle()
{
$styleFont="arial";
$styleColor="red";
$styleFontSize="11";
$s = "<p style=\"font-family:".$styleFont."; color:".$styleColor."; font-size:".$styleFontSize."px\">";
return $s;
}
$sUserTaken = getStyle()."That username is already taken</p>";
$sPwNotPwCon = getStyle()."Your password and confirm password do not match</p>";
$sEmNotEmCon = getStyle()."Your email and confirm email do not match</p>";*/
//End Styles
$mysqlCon = mysql_connect("localhost", "root", "root");
if (!$mysqlCon)
{
die("Unable to connect, ".mysql_error());
}
mysql_select_db("main", $mysqlCon);
$query = sprintf("SELECT * FROM Users WHERE username = '%s'", mysql_real_escape_string($username));
$result = mysql_query($query, $mysqlCon);
$iNumRows = mysql_num_rows($result);
if ($iNumRows > 0)
{
$bUsernameTaken=true;
}
$bContinue = !$bUsernameTaken and !$bPwNotPwCon and !$bEmNotEmCon and !bBlank;
//echo (sprintf("bCon %b, bUser %b, bPwNotPwon %b, bEmNotEmCon %b, bBlank %b", $bContinue, !$bUsernameTaken, !$bPwNotPwCon, !$bEmNotEmCon, !$bBlank));
if ($bContinue)
{
$sqlQuery = sprintf("INSERT INTO Users (id,username, password, email, country) VALUES ('%s','%s','%s','%s', '%s')", 0, mysql_real_escape_string($username), mysql_real_escape_string($password), mysql_real_escape_string($email), mysql_real_escape_string($country));
$queryResult = mysql_query($sqlQuery, $mysqlCon);
if (!$queryResult)
{
die("Error, ".mysql_error());
}
header('Location: signupcomplete.php');
}
mysql_close($mysqlCon);
?>