<?php

// Connects to your Database
require_once('include/config.php');
require_once('include/bodyin.html');
require_once('include/core.php');
dbconn();

//This code runs if the form has been submitted
if (isset($_POST['submit'])) {

//This makes sure they did not leave any fields blank
if (!$_POST['username'] | !$_POST['pass'] | !$_POST['pass2'] ) {
die('You did not complete all of the required fields');
}

print_r($_POST);
die;
// checks if the username is in use

$usercheck = sqlesc($_POST['username']);
$check = mysql_query("SELECT username FROM signup WHERE username = ".$usercheck)
or die(mysql_error());
$check2 = mysql_num_rows($check);

//if the name exists it gives an error
if ($check2 != 0) {
die('Sorry, the username '.safe($_POST['username']).' is already in use.');
}

// this makes sure both passwords entered match
if ($_POST['pass'] != $_POST['pass2']) {
die('Your passwords did not match. ');
}

$sec = mksecret();
$passhash = md5($sec.$_POST['pass'].$sec);

// now we insert it into the database
$insert = "INSERT INTO signup (username, password, secret)
VALUES (".sqlesc($_POST['username']).", ".sqlesc($passhash).", ".sqlesc($sec).")";
mysql_query($insert);
?>


<h1>Registered</h1>
<p>Thank you, new user added</a>.</p>


<?php
}
else
{
?>


<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<table border="0">
<tr><td>Username:</td><td>
<input type="text" name="username" maxlength="60">
</td></tr>
<tr><td>Password:</td><td>
<input type="password" name="pass" maxlength="10">
</td></tr>
<tr><td>Confirm Password:</td><td>
<input type="password" name="pass2" maxlength="10">
</td></tr>
<tr><th colspan=2><input type="submit" name="submit" value="Add user"></th></tr> </table>
</form>

<?php
}
?>