<?php
// Connects to your Database
/* DO NOT FUCKING USE ROOT!!!!!!!!!!!!! MAKE A USER FOR THIS SHIT!!!!!!!!*/
$conn = mysql_connect("localhost", "root", "passwordhere") or die(mysql_error());
mysql_select_db("register", $conn) or die(mysql_error());

//This code runs if the form has been submitted
if (isset($_POST['submit'])) {

//This makes sure they did not leave any fields blank
if (!isset($_POST['username']) || !isset($_POST['email']) || !isset($_POST['pass']) || !isset($_POST['pass2'])) {
die('You did not complete all of the required fields');
}

/* escape your shit or let any schmuck execute DROP MYSQL */
// here we encrypt the password and add slashes if needed
/* sha1 is more secure - just for the record*/
$_POST['pass'] = md5($_POST['pass']);
$_POST['pass'] = mysql_real_escape_string($_POST['pass']);
$_POST['username'] = mysql_real_escape_string($_POST['username']);
$_POST['email'] = mysql_real_escape_string($_POST['email']);

$check = mysql_query("SELECT username FROM users WHERE username = '" . $_POST['username'] . "'", $conn)
or die(mysql_error());
$check2 = mysql_num_rows($check);

//if the name exists it gives an error
if ($check2 != 0) {
die('Sorry, the username '.$_POST['username'].' is already in use.');
}

// this makes sure both passwords entered match
if ($_POST['pass'] != $_POST['pass2']) {
die('Your passwords did not match. ');
}

// now we insert it into the database
$insert = sprintf("INSERT INTO users (username, email, password) VALUES ('%s', '%s', '%s');",
  $_POST['username'], $_POST['email'], $_POST['pass']);
$add_member = mysql_query($insert, $conn);

/* close the db */
mysql_close($conn);
?>


<h1>Registered</h1>
<p>Thank you, you have registered - you may now login</a>.</p>

<?php
}
else
{
?>


<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<table border="0">
<tr><td>Username:</td><td>
<input type="text" name="username" maxlength="60">
</td></tr>
<tr><td>Password:</td><td>
<input type="password" name="pass" maxlength="10">
</td></tr>
<tr><td>Confirm Password:</td><td>
<input type="password" name="pass2" maxlength="10">
</td></tr>
<tr><th colspan=2><input type="submit" name="submit" value="Register"></th></tr> </table>
</form>

<?php
}
?>