Login(2)

<?php
$db_server = mysql_connect('localhost','root','');
if(!$db_server)
die('Unable to connect to mysql'.mysql_error());
mysql_select_db('lab',$db_server)
or die('unable to connect to database '.mysql_error());
date_default_timezone_set('Africa/Cairo');
$email=$fname=$lname=$minit=$home_address=$phone_number=$bank_account=$routing_number=$shipping_address=$password="";
$fail="";
$submit = $_POST["submit"];
if($submit=="LogIn")
{
$email=$_POST["emaill1"];
$password=$_POST["password1"];
$fail = validate_email($email);
$fail .= validate_password($password);
checklogin($email,$fail,$password);
}else if($submit=="Register")
{
$email=$_POST["email"];
$fname=$_POST["fusername"];
$password=$_POST["password"];
$lname=$_POST["lusername"];
$minit=$_POST["musername"];
$home_address=$_POST["haddress"];
$phone_number=$_POST["phonenumber"];
$bank_account=$_POST["bankaccount"];
$routing_number=$_POST["routingnum"];
$shipping_address=$_POST["shipadd"];
$fail = validate_fname($fname);
$fail .= validate_lname($lname);
$fail .= validate_minname($minit);
$fail .= validate_homeadd($home_address);
$fail .= validate_phonenum($phone_number);
$fail .= validate_bankacc($bank_account);
$fail .= validate_routingnum($routing_number);
$fail .= validate_shipadd($shipping_address);
$fail .= validate_password($password);
$fail .= validate_email($email);
createuser($email,$fname,$password,$fail,$lname,$minit,$home_address,$phone_number,$bank_account,$routing_number,$shipping_address);
}

function validate_fname($fname)
{
if($fname=="")
return "first name field is empty <br>";
else
return "";
}
function validate_lname($lname)
{
if($lname=="")
return "last name field is empty <br>";
else
return "";
}
function validate_minname($minit)
{
if($minit=="")
return "middle initial name field is empty <br>";
else
return "";
}
function validate_homeadd($home_address)
{
if($home_address=="")
return "home address field is empty <br>";
else
return "";
}

function validate_phonenum($phone_number)
{
if($phone_number=="")
return "phone number field is empty <br>";
else
return "";
}
function validate_bankacc($bank_account)
{
if($bank_account=="")
return "bank account field is empty <br>";
else
return "";
}

function validate_routingnum($routing_number)
{
if($routing_number=="")
return "routing number field is empty <br>";
else
return "";
}
function validate_shipadd($shipping_address)
{
if($shipping_address=="")
return "shipping addressfield is empty <br>";
else
return "";
}

function validate_password($password)
{
if ($password == "")
return "No Password was entered<br>";
else if (strlen($password) < 6)
return "Passwords must be at least 6 characters<br>";
return "";
}
function validate_email($email)
{
if ($email == "")
return "No Email was entered<br>";
else if (!((strpos($email, ".") > 0) &&
(strpos($email, "@") > 0)) ||
preg_match("/[^a-zA-Z0-9.@_-]/", $email))
return "The Email address is invalid<br>";
return "";
}
function checklogin($emaill1,$fail,$password)
{
if($fail=="")
{
$res = mysql_query("SELECT email,password FROM member WHERE email='$emaill1'");
$row = mysql_fetch_row($res);
if($row<=0)
{
echo "This user is not found !!!<br>";
echo "<a href=\"javascript:history.go(-1)\">GO BACK To The Form</a>";
}
else if($row>0)
{
$temp2=$row[1];
if($temp2!=md5($password))
{
echo "Password is incorrect for this user !!!<br>";
echo "<a href=\"javascript:history.go(-1)\">GO BACK To The Form</a>";
exit();
}
else
{

session_start();
$_SESSION['email']=$username;
$_SESSION['password']=md5($password);
header("location: welcome.php");
 }
}
}
}


function createuser($email,$fname,$lname,$minit,$home_address,$phone_number,$bank_account,$routing_number,$shipping_address,$password,$fail)
{
if($fail=="")
{
$res = mysql_query("SELECT email,fname,password FROM member WHERE fname='$fname'");
$res1= mysql_query("SELECT email,fname,password FROM member WHERE email='$email'");
$row = mysql_fetch_row($res);
$row1 = mysql_fetch_row($res1);
if($row>0)
{

    echo "Username is already taken ,Refill the form!!!<br>";
    echo "<a href=\"javascript:history.go(-1)\">GO BACK To The Form</a>";
}
else if($row1>0)
{

    echo "This email is already registered for another username,Refill the form!!<br>";
    echo "<a href=\"javascript:history.go(-1)\">GO BACK To The Form</a>";
}
else
{
  $password=md5($password);
  if(!mysql_query("INSERT INTO member(email,fname,minit,lname, password,home_address,phone_number,bank_account,shipping_address) VALUES('$email','$fname','$minit,'$lname','$password','$home_address','$phone_number','$bank_account','$routing_number','$shipping_address')"))
die("Cant connect".mysql_error());
else
{
  session_start();
  $_SESSION['name']=$username;
  $_SESSION['password']=md5($password);
  $_SESSION['dept_id']=NULL;
  header("location: welcome2.php");
}
}
}
}

?>