suk dik

<?php

include 'DB-connect.php';
require_once('functions.php');

	$error = 0;


	$valueUsername = mysqli_real_escape_string($link, $_POST['username']);
	$valuePassword = mysqli_real_escape_string($link, $_POST['password']);
	$valueeMail = mysqli_real_escape_string($link, $_POST['email']);
	$valueRealName = mysqli_real_escape_string($link, $_POST['realname']);
	$valueAge = mysqli_real_escape_string($link, $_POST['age']);

	$usernameQuery = "SELECT username FROM accounts WHERE username='$valueUsername'";
	$checkUsername = mysqli_query($link, $usernameQuery);

	if(0 < mysqli_num_rows($checkUsername))
	{
		echo '<script>alert("That username has already been used.");</script>';
		$error++;
	}

	if(0 === preg_match("/\S+/", $_POST['username']))
	{
		echo '<script>alert("Your username is invalid.");</script>';
		$error++;
	}

	if(0 === preg_match("/.{10,}/", $_POST['password']))
	{
		echo '<script>alert("The password entered was invalid. (Too short)");</script>';
		$error++;
	}

	if(0 === preg_match("/\S+/", $_POST['realname']))
	{
		echo '<script>alert("Please enter a real name.");</script>';
		$error++;
	}

	if (0 === preg_match("/.+@.+\..+/", $_POST['email']))
	{
		echo '<script>alert("Invalid e-mail.");</script>';
		$error++;
	}

	$emailQuery="SELECT email FROM accounts WHERE email='$valueeMail'";
	$checkEmail = mysqli_query($link, $emailQuery);

	if(0 < mysqli_num_rows($checkEmail))
	{
		echo '<script>alert("That e-mail has already been used.");</script>';
		$error++;
	}

	if(0 === preg_match("/\S+/", $_POST['age']))
	{
		echo '<script>alert("Please enter your age.");</script>';
		$error++;
	}



$uniqueSalt = unique_salt();
$hash = myhash($valuePassword, $uniqueSalt);


if ($error<1)
{

	$sql = "INSERT INTO accounts (username, password, Salt, email, realname, age) VALUES ('$valueUsername', '$hash', '$uniqueSalt', '$valueeMail', '$valueRealName', '$valueAge')";
}



if ($error<1)
{
	header("refresh:0; url= include/login.php");
	echo '<h1 style="text-align: center; font-weight:600;">Account created,</h1><h2 style="text-align: center;"> redirecting to login-page in a few seconds...</h2>';
}

else if ($error>0)
{
	echo '<script>alert("You are missing something, try again!");</script>';
	header("refresh:0; url= include/registration.php");
}
if (!mysqli_query($link, $sql))
{
       die('Error: ' . mysqli_error($link));

}



mysqli_close($link);





?>