<?php
    ob_start();

    $host="localhost";
    $username="root";
    $password="";
    $db_name="muubo";
    $tbl_name="members";

    mysql_connect("$host", "$username", "$password")or die("cannot connect");
    mysql_select_db("$db_name")or die("cannot select DB");

    $firstname = $_POST['firstname'];
    $username = $_POST['username'];
    $password = md5($_POST['password']);
    $password2 = md5($_POST['password2']);
    $emailaddress = $_POST['emailaddress'];

    $passwordmatch = 0;
    $usernametaken = 0;
    $emailtaken = 0;

    if($password == $password2)
    {
        $user = mysql_query("SELECT * FROM $tbl_name WHERE (username = '$username')");

        if(mysql_num_rows($user) > 0)
        {
            echo "Username already exists!";
            exit;
        }

        else
        {
            $user = mysql_query("SELECT * FROM $tbl_name WHERE (emailaddress = '$emailaddress')");

            if(mysql_num_rows($user) > 0)
            {
                echo "This email address is already taken.";
                exit;
            }

            else
            {
                mysql_query("INSERT INTO $tbl_name (username, password, emailaddress, firstname) VALUES ('$username', '$password', '$emailaddress', '$firstname')");

                setcookie("muubo_user", $username, time() + 31536000, "/");
                setcookie("muubo_pass", $password, time() + 31536000, "/");
                setcookie("muubo_email", $username, time() + 31536000, "/");
                setcookie("muubo_name", $password, time() + 31536000, "/");

                header("location:home.php");
            }
        }
    }

    else
    {
        header("location:register.html");
        $passwordmatch = 1;
    }

    ob_end_flush();
?>