<?php
session_start();
mysql_connect('localhost', 'root', '') or die(mysql_error());
mysql_select_db('myDatabase') or die(mysql_error());


/*Get all info inserted at the sign up page*/

$username = mysql_real_escape_string($_POST['newUser']);
$password = md5(mysql_real_escape_string($_POST['newPass']));
$passwordConfirm = md5(mysql_real_escape_string($_POST['newPassConfirm']));
$firstName = mysql_real_escape_string($_POST['firstName']);
$lastName = mysql_real_escape_string($_POST['lastName']);
$emailAddress = mysql_real_escape_string($_POST['emailAddress']);
$emailAddressConfirm = mysql_real_escape_string($_POST['emailAddressConfirm']);



/*Check to make sure confirmation fields match*/
if(($password !== $passwordConfirm) || (strtolower($emailAddress) !== strtolower($emailAddressConfirm))) {
	$_SESSION['matchIncorrect'] = 1;
	header("Location:index.php");
}

/*Send user an email verifying if the account they entered is valid*/
$verifyString = "";
for ($i=0; $i<16; $i++) {
	$verifyString .= chr(mt_rand(32,126));
}

//Add user into the database
$emailAddressSlashes=addslashes($emailAddress);
$verifyStringSlashes=addslashes($verifyString);
$atm = time();
mysql_query("INSERT INTO 'Users' ('User', 'Password', 'FirstName', 'LastName', 'emailAddress', 'createdOn', 'verifyString') VALUES ('$username', '$password', '$firstName', '$lastName', '$emailAddressSlashes','$atm' ,'$verifyStringSlashes')");