Advertisement
Guest User

Code

a guest
Dec 16th, 2016
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 1.94 KB | None | 0 0
  1. <?php
  2. echo "Starting registeruser.php<br>";
  3. $servername = "localhost";
  4. $username = "u437128601_admin";
  5. $password = "sqladmin2016";
  6. $dbname = "u437128601_all";
  7.  
  8. // Create Connection
  9.  
  10. $conn = new mysqli($servername, $username, $password, $dbname);
  11.  
  12. // Check Connection
  13. if ($conn->connect_error) {
  14.     die("Connection failed: " . $conn->connect_error);
  15. }
  16. echo "Connected successfully<br>";
  17.  
  18.     // Validate, Sanitize and Execute
  19.    
  20.     /*if ($username == "" || $username == !isset($username)) {
  21.         die("Empty string!");
  22.     } else {
  23.         $username = filter_var($username, FILTER_SANITIZE_STRING);
  24.     }
  25.     */
  26.  
  27.     // Prepare and Bind
  28.    
  29.     if ($stmt = $conn->prepare("INSERT INTO WebsiteUsers (username, password, email, growid, world, gender) VALUES (?, ?, ?, ?, ?, ?)")) {
  30.         $stmt->bind_param("ssssss", $username, $password, $email, $growid, $world, $gender);
  31.     } else {
  32.         echo "Prepare() returned false! VAR_DUMP RESULTS: ";
  33.         var_dump(error);
  34.     }
  35.    
  36.     // Set Parameters & Filter
  37.  
  38.     $username = filter_input(INPUT_POST, 'u_username', FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_LOW);
  39.     echo $username;
  40.     $password = $_POST['u_pwd'];
  41.     $email = $_POST['u_email'];
  42.     $growid =  $_POST['u_growid'];
  43.     $world = $_POST['u_world'];
  44.     $gender = $_POST['u_gender'];
  45.  
  46.     $password = filter_var($password, FILTER_SANITIZE_STRING);
  47.     $email = filter_var($email, FILTER_SANITIZE_EMAIL);
  48.     $growid = filter_var($growid, FILTER_SANITIZE_STRING);
  49.     $world = filter_var($world, FILTER_SANITIZE_STRING);
  50.     $gender = filter_var($gender, FILTER_SANITIZE_STRING);
  51.    
  52.     $stmt->execute();
  53.    
  54.     /* NON-PREPARED STATEMENT
  55.     $query = "INSERT INTO WebsiteUsers (username, password, email, growid, world, gender) VALUES ('$username', '$password', '$email', '$growid', '$world', '$gender')";
  56.     $data = mysql_query ($query)or die(mysqli_error());
  57.     if ($data) {
  58.        echo "Registration completed.";
  59.     }
  60.     */
  61. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement