<title>Signing up... | Project Club</title>
<?php
    session_start();
    $servername = "oi censor matey";
    $serverusername = "le censor";
    $serverpassword = "censoraed";
    $serverdbname = "censored";
    $conn = new mysqli($servername, $serverusername, $serverpassword, $serverdbname);
    $uid = $_POST['uname'];
    $psw = $_POST['psw'];
    $email = $_POST['email'];
    $phone = $_POST['phone'];
    $phonecarrier = $_POST['phonecarrier'];
    $web = $_POST['web'];
    $fname = $_POST['fname'];
    $lname = $_POST['lname'];
    $accdeletecode = rand(1111111111, 2147483647);
    $chatverif = rand(1111111111, 2147483647);
    $phoneverif = rand(111111, 999999);
    $date = date('F jS Y h:i:s A');
    $ip = $_SERVER['REMOTE_ADDR'];
    $bday = $_POST['bday'];
    $bmonth = $_POST['bmonth'];
    $byear = $_POST['byear'];
    $plan = $_POST['plan'];
    if($plan == "0.00"){$paid = "YES";}else{$paid = "NO";}
    $emailverifsign1 = rand(1111111111, 2147483647);$emailverifsign2 = rand(1111111111, 2147483647);$emailverifsign3 = rand(1111111111, 2147483647);$emailverifsign4 = rand(1111111111, 2147483647);$emailverifsign5 = rand(1111111111, 2147483647);$emailverifsign6 = rand(1111111111, 2147483647);$emailverifsign7 = rand(1111111111, 2147483647);$emailverifsign8 = rand(1111111111, 2147483647);$emailverifsign9 = rand(1111111111, 2147483647);$emailverifsign10 = rand(1111111111, 2147483647);
    $emailverif = $emailverifsign1 . $emailverifsign2 . $emailverifsign3 .  $emailverifsign4 . $emailverifsign5 . $emailverifsign6 . $emailverifsign7 . $emailverifsign8 . $emailverifsign9 . $emailverifsign10;
    $hashedpwd = password_hash($psw, PASSWORD_DEFAULT);
    $hashedphoneverif = password_hash($phoneverif, PASSWORD_DEFAULT);
    $hashedaccdelete = password_hash($accdeletecode, PASSWORD_DEFAULT);
    $hashedemailverif = password_hash($emailverif, PASSWORD_DEFAULT);
    $sql = "SELECT * FROM login WHERE username = '$uid' OR email = '$uid' ";
    if(empty($_POST['email'])){header("Location: /en/signup?emptyEMAIL");}
    if(empty($_POST['rep-email'])){header("Location: /en/signup?emptyREPEMAIL");}
    if($_POST['email'] !== $_POST['rep-email']){header("Location: /en/signup?emailNOMATCH");}
    if($_POST['psw'] !== $_POST['rep-psw']){header("Location: /en/signup?pswNOMATCH");}
    if(empty($_POST['uname'])){header("Location: /en/signup?emptyUNAME");}
    if(empty($_POST['phone'])){header("Location: /en/signup?emptyPHONE");}
    if($_POST['phonecarrier'] == "none"){header("Location: /en/signup?emptyPHONECARR");}
    if($_POST['plan'] == "none"){header("Location: /en/signup?emptyPLAN");}
    if(empty($_POST['fname'])){header("Location: /en/signup?emptyFNAME");}
    if(empty($_POST['lname'])){header("Location: /en/signup?emptyLNAME");}
    if(empty($_POST['web'])){header("Location: /en/signup?emptyWEB");}
    if(empty($_POST['psw'])){header("Location: /en/signup?emptyPSW");}
    if(empty($_POST['rep-psw'])){header("Location: /en/signup?emptyREPSW");}
    if(empty($_POST['bday'])){header("Location: /en/signup?emptyBDAY");}
    if(empty($_POST['bmonth'])){header("Location: /en/signup?emptyBMONTH");}
    if(empty($_POST['byear'])){header("Location: /en/signup?emptyBYEAR");}
    if (!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {header("Location: /en/signup?invalidEMAIL");}
    if (strlen($_POST['uid']) < 6){header("Location: /en/signup?usernameLESS6");}
    if (strlen($_POST['bday']) !== 2){header("Location: /en/signup?bdayNOT2");}
    if (strlen($_POST['bmonth']) !== 2){header("Location: /en/signup?bmonthNOT2");}
    if (strlen($_POST['byear']) !== 4){header("Location: /en/signup?byearNOT4");}
    if (strlen($_POST['uid']) > 16){header("Location: /en/signup?usernameMORE16");}
    if (strlen($_POST['psw']) < 5){header("Location: /en/signup?passwordLESS6");}
    if (strlen($_POST['psw']) > 16){header("Location: /en/signup?passwordMORE16");}
    if (!preg_match("/^[a-zA-Z ]*$/",$_POST['fname'])) {header("Location: /en/signup?fnameWHITESPACE");}
    if (!preg_match("/^[a-zA-Z ]*$/",$_POST['lname'])) {header("Location: /en/signup?lnameWHITESPACE");}
    $resultusernamecheck = $conn->query("SELECT id FROM login WHERE username = '$uid'");if($resultusernamecheck->num_rows == 0) {header("Location: /en/signup?usernameTAKEN");}
    $resultemailcheck = $conn->query("SELECT id FROM login WHERE email = '$email'");if($resultemailcheck->num_rows == 0) {header("Location: /en/signup?emailTAKEN");}
    $resultphonecheck = $conn->query("SELECT id FROM login WHERE phone = '$phone'");if($resultemailcheck->num_rows == 0) {header("Location: /en/signup?phoneTAKEN");}
    $resultwebcheck = $conn->query("SELECT id FROM login WHERE website = '$web'");if($resultwebcheck->num_rows == 0) {header("Location: /en/signup?webTAKEN");}
    if (strlen($_POST['phone']) !== 10){header("Location: /en/signup?phoneNOT10");}
    $phoneto = "$phone@$phonecarrier";
    $phonefrom = "support@4424cub.xyz";
    $phonemessage = "Congradulations! You successfully created an account on Project Club.nYour phone verification code is $phoneverif. Have fun!";
    $phoneheaders = "From: Project Club Phone Verification";
    mail($phoneto, '', $phonemessage, $phoneheaders);

    $subject = $uid . ", Confirm your Email | Project Club";
    $from = 'noreply@4424club.xyz';
    $headers  = 'MIME-Version: 1.0' . "rn";
    $headers .= 'Content-type: text/html; charset=iso-8859-1' . "rn";
    $headers .= 'From: '.$from."rn";
    $emailmessage = '
    <h1 style="color:red;text-align:center;">Hi, $uid</h1>
    <p style="color:blue;text-align:center;">You used this email to create an account at Project Club.</p>
    <p style="color:blue;text-align:center;">If this was not you, please contact us at support@4424club.xyz.</p>
    <p style="color:blue;text-align:center;">If this was you, click the button below to verify your account.</p>
    <form action="https://4424club.xyz.412quack.com/en/confirm-email" method="post">
    <input type="text" name="username" value="$uid" type="hidden" style="display:none;">
    <input type="text" name="code" value="$emailverif" type="hidden" style="display:none;">
    <input style="text-align:center;text-decoration:none;display:block;font-size:16px;background-color:red;color:white;border:2px solid #f44336;margin-left:auto;margin-right:auto;" type="submit" value="Verify My Email">
    </form>
    <p style="color:blue;text-align:center;">Enjoy your stay at Project Club!</p>';
    mail($email,$subject,$emailmessage,$headers);

    /*
    $userfile = fopen("users/" . $uid . ".php", "w") or die("Error writing user file.");
    fwrite($userfile, $write);
    fclose($userfile);
    */
    $sql = "INSERT INTO login (id, username, email, phone, password, ip, date, status, profilepicturelink, phoneverifcode, phoneverified, emailverifcode, emailverified, userlevel, accdeletecode, banned, bandate, bantil, banreason, friends, friendcount, level, exp, reputation, blocks, blockcount, tokens, phonecarrier, sex, website, plan, paid, birthday, birthmonth, birthyear, chatverifcode) VALUES ('', '$uid', '$email', '$phone', '$hashedpwd', '$ip', '$date', 'NO', 'https://4424club.xyz/files/images/user.png', '$hashedphoneverif', 'NO', '$hashedemailverif', 'NO', 'Member', '$hashedaccdelete', 'NO', 'NONE', 'NONE', 'NONE', 'NONE', '0', '0', '0', '0', 'NONE', '0', '0', '$phonecarrier', 'TBA', '$web', '$plan', '$paid', '$bday', '$bmonth', '$byear', '$chatverif')";
    if (mysqli_query($conn, $sql)){header("Location: /en/signup?success");}else{header("Location: /en/signup?unknownERR");}

    mysqli_close($conn);
?>