<?php

    include 'config.php';
    // variabler fra reg formen
    $username = $_POST['username'];
    $username = mysql_real_escape_string($username);

    $firstname = $_POST['firstname'];
    $lastname = $_POST['lastname'];

    $password = $_POST['password'];
    $password = mysql_real_escape_string($password);

    $gender = $_POST['gender'];

    $security = md5("$password");

    // sjekker vis alt er fylt ut og reg knappen er trykket
    if ($_POST['submit']&&$username&&$password&&$firstname&&$lastname)
    {
        //henter data til brukernavn sjekk
        $namecheck = mysql_query("SELECT username FROM userinfo WHERE username='$username'");
        $count = mysql_num_rows($namecheck);
        //sjekker om brukernavnet eksisterer
        if ($count != 0)
        {
            die("The username is already taken. Go back and try another one.");
        }
        // vis kjønnet er gutt
        elseif ($gender = 'boy') {
            $query = "INSERT INTO userinfo (userid, username, firstname, lastname, password, gender) VALUES ('','$username', '$firstname', '$lastname', '$security', 'boy')";
            $result = mysql_query($query);
            mkdir("/users/$username", 0700);
            echo "Welcome to the community, $username! <a href='index.php'>Login here!</a>";
        }
        // vis kjønnet er jente
        elseif ($gender = 'girl') {
            $query = "INSERT INTO userinfo (userid, username, firstname, lastname, password, gender) VALUES ('','$username', '$firstname', '$lastname', '$security', 'girl')";
            $result = mysql_query($query);
            mkdir("/users/$username", 0700);
            echo "Welcome to the community, $username! <a href='index.php'>Login here!</a>";
        }
    }
    // den taperen har ikke fylt ut alt.. -____-
    else { echo "Something went wrong! Make sure you entered your name and password(and confirm).. Thats all we know."; }

?>