<?php
if ($_SERVER["REQUEST_METHOD"] == "POST"){
  include 'dbcon.php';
  $username = mysqli_real_escape_string($connection, $_POST['name']);
  $useremail = mysqli_real_escape_string($connection,$_POST['email']);
  $password = mysqli_real_escape_string($connection, $_POST['psw']);

  //Error-hanterare
  //Kolla efter tomma fält
  if (empty($username) || empty($useremail) || empty($password)){
    header("Location: ../index.php?registration=empty");
    exit();
  }
  else{
    //Kollar om input-chars är valid
    if (!preg_match("/^[a-zA-Z]*$/", $username)){
      header("Location: ../index.php?registration=invalid");
      exit();
    }
    else{
      //Kollar om email är valid
      if(!preg_match("/.+@.+\..+/", $_POST['email'])){
        header("Location: ../index.php?registration=invalidemail");
        exit();
      }
      else{
        $email = $_POST['email'];
        $sql = "SELECT * FROM users WHERE email='$email'";
        $result = mysqli_query($connection, $sql);
        $resultCheck = mysqli_num_rows($result);
        if ($resultCheck > 0) {
          header("Location: ../index.php?registration=usertaken");
          exit();
        }
        else{
          //Hashar pw
          //genRandomString skapar en slumpad sträng. Längden på strängen blir vad du sätter $length till. Varje gång loopen körs slumpas en av charsen och läggs till i randomString.
          function genRandomString($length = 10)
           {
            $chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ@£$%&+';
            $charsLength = strlen($chars);
            $randomString = '';
            for ($i = 0; $i < $length; $i++)
            {
                $randomString .= $chars[rand(0, $charsLength - 1)];
            }
            return $randomString;
          }
          $salt = sha1(genRandomString($length = 10), FALSE);
          $cryptedpw = md5($password.$salt);
          //Insertar användaren i databasen
          $query3 = "INSERT INTO users (email, password, username, salt) VALUES('$useremail', '$cryptedpw', '$username', '$salt')";
          mysqli_query($connection, $query3);
          header("Location: ../accountCreated.php?registration=success");
          exit();
        }
      }
    }
  }
}
else{
  exit("error");
}
  echo "error";
?>