<?php
session_start();

// initializing variables
$fullname = "";
$username = "";
$password    = "";
$errors = array();

// connect to the database
$db = mysqli_connect('localhost', 'root', '', 'register');

// REGISTER USER
if (isset($_POST['reg_user']))
  {
  // receive all input values from the form
  $fullname = mysqli_real_escape_string($db, $_POST['fullname']);
  $username = mysqli_real_escape_string($db, $_POST['username']);
  $password = mysqli_real_escape_string($db, $_POST['password']);

  // form validation
  if (empty($fullname)) { array_push($errors, "Full name is requires"); }
  if (empty($username)) { array_push($errors, "Username is required"); }
  if (empty($password)) { array_push($errors, "Password is required"); }
  }

  //database check
  $user_check_query = "SELECT * FROM users WHERE username=$username";
  $result = mysqli_query($db, $user_check_query);
  $user = "mysqli_fetch_assoc($result)";


    if ([username]==$username) { array_push($errors, "username is already taken"); }



  if (count($errors) == 0)
  {
    $password = md5($password);

    $query = "INSERT INTO users (fullname, username, password) VALUES('$fullname', '$username', '$password')";
    mysqli_query($db, $query);
    $_SESSION[username] = $username;
    $_SESSION[success] = "You are now logged in";
    header('location: index.html');
  }


?>