<?php

//Start session
session_start();


//Get data nad encrypt password
$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);
$email = mysql_real_escape_string($_POST['email']);
$first_name = mysql_real_escape_string($_POST['first_name']);
$last_name = mysql_real_escape_string($_POST['last_name']);

$salt = rand_string(CRYPT_SALT_LENGTH);

$encrypted_password = crypt($password, $salt);

//Connect to DB and Table
$connect = mysql_connect('localhost', 'root', '') or die(mysql_error());
$db = mysql_select_db('loginscript', $connect);

//Check for blank or taken fields
if(!isset($username)) {
    die('Please enter a username.<br /><a href="register.html">Return</a>');
}
if(!isset($password)) {
    die('Please enter a password.');
}
if(!isset($email)) {
    die('Please enter an email address.');
}
if(!isset($first_name)) {
    die('Please enter a first name.');
}
if(!isset($last_name)) {
    die('Please enter a last name.');
}

$nameQuery = mysql_query("SELECT username FROM users WHERE username = $username");
$emailQuery = mysql_query("SELECT email FROM users WHERE email = $email");

if($nameQuery) {
    die('Username already taken.');
}
if($emailQuery) {
    die('Email already taken.');
}

//Functions
function rand_string( $length ) {
    $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

    $str = "";

    $size = strlen( $chars );

    for( $i = 0; $i < $length; $i++ ) {
        $str .= $chars[ mt_rand( 0, $size - 1 ) ];
    }

    return $str;
}

echo CRYPT_SALT_LENGTH ;

//Insert data if all fields are correct and not taken
$query = mysql_query("INSERT INTO users VALUES('', '$username', '$encrypted_password', '$first_name', '$last_name', '$email', '0', '$salt')") or die(mysql_error());



mysql_close();


?>