<script type="text/javascript" src="../js/formvalidation.js" ></script>

<table class="data" style="width:962px;margin:8px auto;">
	<tr class="theader">
		<td>Add a new user
		</td>
	</tr>
	<tr>
		<td style="font-size:13px;line-height:45px;">

<?php

	// Connect to database
	require('connect.php');

	// Check for submission
	if(isset($_POST['adduser'])) {
		// Set some variables
		$username = mysqli_real_escape_string($db,$_POST['username']);
		$password = md5(mysqli_real_escape_string($db,$_POST['password']));
		$fullname = mysqli_real_escape_string($db,$_POST['fullname']);
		$linkedcode = mysqli_real_escape_string($db,$_POST['linkedcode']);
		$level = mysqli_real_escape_string($db,$_POST['level']);

		// Allowed code duplicates
		$multicodes = array("BJB001","ADM");

		// Check database for duplicates, ignore house codes
		if(in_array($linkedcode,$multicodes)) {
			$check = mysqli_query($db,"SELECT * FROM users WHERE username = '$username' OR fullname = '$fullname'")
				or die(print_r(mysqli_error($db)));
		} else {
			$check = mysqli_query($db,"SELECT * FROM users WHERE username = '$username' OR fullname = '$fullname' OR linkedcodes = '$linkedcode'")
				or die(print_r(mysqli_error($db)));
		}

			if(mysqli_num_rows($check) >= 1) {
				echo "<p class='error-msg2'>A user like this already exists!</p>";
			} else {

				// Insert user into database
				$adduser = mysqli_query($db,"INSERT INTO users (username, password, fullname, linkedcodes, level) VALUES ('$username', '$password', '$fullname', '$linkedcode', '$level')");

				// Check query success
				if(!$adduser) {
					die(print_r(mysqli_error($db)));
				} else {
					echo "<p class='success-msg'>User added successfully!</p>";
				}
			}
	}

?>
		<form method="POST" name="adduser" action="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>?action=add" onsubmit="return adduserForm();">
			Username: <input class="login-fields" type="text" name="username"><br />
			Password: <input class="login-fields" type="password" name="password"><br />
			Full Name: <input class="login-fields" type="text" name="fullname"><br />
			Linked Customer Code: <input class="login-fields" type="text" name="linkedcode"><br />
			User Level: <select name="level">
				<option value="0">Standard User</option>
				<option value="1">Administrator</option>
			</select>
			<p><input type="submit" name="adduser" value="Add User"></p>
		</form>
		</td>
	</tr>
</table>