<?php


 session_start();

 $conn = new mysqli("localhost", "root", "", "userdb") OR die("Error: ". mysqli_error($conn));

 if (isset($_POST['save'])) {
    if (!empty($_POST['username']) && !empty($_POST['email']) && !empty($_POST['password']) && !empty($_POST['password2'])) {


        $username = mysql_real_escape_string($_POST['username']);
        $email = mysql_real_escape_string($_POST['email']);
        $password = mysql_real_escape_string($_POST['password']);
        $password2 = mysql_real_escape_string($_POST['password2']);



        if ($password == $password2) {
            $password = md5($password);


            $iQuery = "INSERT INTO users(username, email, password) values(?, ?, ?)";

            $stmt = $conn->prepare($iQuery);
            $stmt->bind_param("sss", $username, $email, $password);

            if ($stmt->execute()) {
            $_SESSION['msg'] = "The account has been created.";
            $_SESSION['alert'] = "alert alert-success";

            header("location: login.php");
                }


            $stmt->close();
            $conn->close();
        }

        else{

            $_SESSION['msg'] = "Passwords do not match.";
            $_SESSION['alert'] = "alert alert-warning";



        }



    }
 }


?>