<?php
include "Header.php";

	if (!$User) {

		$Username = mysql_real_escape_string(strip_tags(stripslashes($_POST['Username'])));
		$Password =  mysql_real_escape_string(strip_tags(stripslashes($_POST['Password'])));
		$ConfirmPassword = mysql_real_escape_string(strip_tags(stripslashes($_POST['ConfirmPassword'])));
		$Email = mysql_real_escape_string(strip_tags(stripslashes($_POST['Email'])));
		$IP = $_SERVER['REMOTE_ADDR'];
		$Submit = mysql_real_escape_string(strip_tags(stripslashes($_POST['Submit'])));
					function is_alphanumeric($username)
					{
						return (bool)preg_match("/^([a-zA-Z0-9])+$/i", $username);

					}

			if ($Submit) {

				$getUser = mysql_query("SELECT * FROM Members WHERE Username='".$Username."'");
				$gU = mysql_num_rows($getUser);

				if (!$Username||!$Password||!$ConfirmPassword) {

					echo "Please fill in all fields!";
					exit;

				}

					if ($gU >= 1) {


					echo "That username is already taken!";
					exit;

					}

				elseif ($ConfirmPassword != $Password) {

					echo "Your password and confirm password do not match!";
					exit;

				}
				elseif (strlen($Username) <= 2) {

					echo "Please make your username longer than two characters!";
					exit;

				}
				elseif (strlen($Username) >= 20) {

					echo "Please make your username less than twenty characters!";
					exit;

				}
					elseif (!is_alphanumeric($Username)) {

						echo "Please keep your username between A-Z and 0-9.";
						exit;

					}



					$_PASS = hash('sha512',''.$Password.'');


					if (mysql_query("INSERT INTO Members (Username, Password, IP, Email)
					VALUES ('".$Username."','".$_PASS."','".$IP."','".$Email."')"))
					{





						$getUser = mysql_query("SELECT * FROM Members WHERE Username='".$Username."'") or die;
						$gU = mysql_fetch_object($getUser);


					echo $gU->Username;

					$_HASH = hash('whirlpool','$Username');
					$_SESSION['Username']=$_HASH;
					$_SESSION['Name']=$gU->Username;

					header("Location: Home.php");

					}
					else
					{

						echo "Register was unsuccessful.";

					}




			}

		echo "
		<form action='' method='POST'>
		<div align='left'>
			<b style='font-size:20px;'>Create a New Account</b>
			<div style='border-bottom:1px dashed #aaa;'></div>
			<table width='98%'>
				<tr>
					<td><div align='left'>
							<table style='font-size:8pt;' id='Register'>
								<tr>
									<td>
										Username
									</td>
									<td>
										<input type='text' name='Username' />
									</td>
								</tr>
								<tr>
									<td>
										Password
									</td>
									<td>
										<input type='password' name='Password' />
									</td>
								</tr>
								<tr>
									<td>
										Confirm Password
									</td>
									<td>
										<input type='password' name='ConfirmPassword' />
									</td>
								</tr>
								<tr>
									<td>
										Email
									</td>
									<td>
										<input type='text' name='Email' />
									</td>
								</tr>
								<tr>
									<td>
										<input type='submit' value='Register' name='Submit' />
									</td>
								</tr>
							</table>
					</tr>
				</table>
		";

	}


	echo "<font color='red'><b>*By registering, you must agree with our Terms Of Service.</b></font> (<a href='/TermsOfService.php'>Terms of Service</a>)";



include "Footer.php";