Untitled

<?php
require_once 'includes/global.inc.php';

$username = "";
$password = "";
$password_confirm = "";
$email = "";
$error = "";

if(isset($_POST['submit-form'])) {

$username = $_POST['username'];
$password = $_POST['password'];
$password_confirm = $_POST['password-confirm'];
$email = $_POST['email'];


$success = true;

$userTools = new UserTools();
if($userTools -> checkUsernameExists($username))
{
$error .= "That username is already taken.<br/> nr";
$success = false;
}

if($password != $password_confirm) {
$error .= "Passwords do not match.<br/> nr";
$success = false;
}

if($success)
{

$data['username'] = $username;
$data['password'] = md5($password);
$data['email'] = $email;

$newUser = new User($data);

$newUser->save(true);

$userTools -> login($username, $password);

header("Location: welcome.php");
}
}
?>

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link rel="stylesheet" href="forma.css" type="text/css">
</head>

<body>

<form action="registration.php" method="POST" id="loginform">

<div class="field">
<label>Имя пользователя:</label>
<div class="input"><input type="text" value="<?php echo $username;?>" name="username"></div>
</div>

<div class="field">
<label>Пароль:</label>
<div class="input"><input type="password" value="<?php echo $password;?>" name="password"></div>
</div>

<div class="field">
<label>Подтверждение пароля:</label>
<div class="input"><input type="password" value="<?php echo $password_confirm;?>" name="password-confirm"></div>
</div>

<div class="field">
<label>E-mail:</label>
<div class="input"><input type="text" value="<?php echo $email;?>" name="email"></div>
</div>

<div class="submit">
<button type="submit" value="Register" name="submit-form">Зарегистрироваться</button>
</div>

</form>
</body>
</html>

$userTools = new UserTools();
if($userTools -> checkUsernameExists($username))

<?php
require_once 'User.class.php';
require_once 'DB.class.php';

class UserTools {


    public function login($username, $password)

    {

        $hashedPassword = md5($password);
        $result = mysql_query("SELECT * FROM user WHERE username = '$username' AND
                password = '$hashedPassword'");
        if(mysql_num_rows($result) == 1)
        {
            $_SESSION["user"] = serialize(new User(mysql_fetch_assoc($result)));
            $_SESSION["login_time"] = time();
            $_SESSION["logged_in"] = 1;
            return true;
        }else{
            return false;
        }
    }


    public function logout() {
        unset($_SESSION['user']);
        unset($_SESSION['login_time']);
        unset($_SESSION['logged_in']);
        session_destroy();
    }

    public function checkUsernameExists($username) {
        $result = mysql_query("select id from user where username='$username'");
        if(mysql_num_rows($result) == 0)
        {
            return false;
        }else{
            return true;
        }

    }


    public function get($id)
    {
        $db = new DB();
        $result = $db->select('user', "id = $id");
        return new User($result);
    }
}

?>