<?php
// Connect to the database
require_once 'config.php';

if (isset($_POST['submit'])) {
	$login = $_POST['username'];
	$pass = $_POST['pass'];
	$passcheck = $_POST['pass2'];

	// Are any fields blank?
	if (!$login | !$pass | !$passcheck ) {
		die('One or more fields were left empty, please make sure you fill every field.');
	}
	if (!get_magic_quotes_gpc()) {
		$login = addslashes($login);
	}

	// Is this username in use?
	$check = mysql_query("SELECT login FROM clerk WHERE login = '$login'") or die(mysql_error());
	$check2 = mysql_num_rows($check);

	if ($check2 != 0) {
		die('Sorry, the username '.$login.' is already in use.');
	}

	// Do the passwords match?
	if ($pass != $passcheck) {
		die('Your passwords did not match.');
	}

	// Insert into DB
	$insert = "INSERT INTO clerk (login, PWORD) VALUES ('".$login."', '".$pass."')";
	$add_member = mysql_query($insert);
?>


<h1>Registered</h1>
<p>Thank you, you have registered - you may now <a href= login.php>login</a>.</p>

<?php
}
else
{
?>


<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<table border="0">
<tr><td>Login:</td><td>
<input type="text" name="username" maxlength="20">
</td></tr>
<tr><td>Password:</td><td>
<input type="password" name="pass2" maxlength="20">
</td></tr>
<tr><td>Confirm Password:</td><td>
<input type="password" name="passcheck" maxlength="20">
</td></tr>
<tr><td>First name:</td><td>
<input type="text" name="Fname" maxlength="30">
</td></tr>
<tr><td>Last name:</td><td>
<input type="text" name="Lname" maxlength="30">
</td></tr>
<tr><td>Address:</td><td>
<textarea name="address" cols="40" rows="5">
</textarea>
</td></tr>
<tr><th colspan=2><input type="submit" name="submit" value="Register"></th></tr> </table>
</form>

<?php
}
mysql_close();
?>