<?php
    // Error management
    ini_set('display_errors', 1);
    error_reporting(E_ALL | E_STRICT);

    define('TITLE', 'Register');
    require('template/header.php');

    require('includes/connection.php');
    require('includes/cookie.php');

    if (!loggedin()) {

        if ( isset($_POST['submitted']) ) { // Form is submitted

            $problemlist = array();

            // Validate firstname
            $firstname = trim($_POST['firstname']);
            if (empty($firstname)) {
                $problemlist[] = 'First name is empty';
            }

            // Validate lastname
            $lastname = trim($_POST['lastname']);
            if (empty($lastname)) {
                $problemlist[] = 'Last name is empty';
            }

            // Validate username
            $username = trim($_POST['username']);
            if (empty($username)) {
                $problemlist[] = 'Username is empty';
            } else if ( mysql_num_rows(mysql_query("SELECT username FROM users WHERE username='$username'")) != 0 ) {
                $problemlist[] = 'Username is already taken';
            }

            // Validate password
            $password = trim($_POST['password']);
            $password2 = trim($_POST['password2']);
            if ($password != $password2) {
                $problemlist[] = 'Passwords do not match';
            } elseif (strlen($password) < 6) {
                $problemlist[] = 'Password must be at least 6 characters';
            }


            if (!empty($problemlist)) { // Redisplay the form
?>

<?php
echo '<ul id="errorlist">';
foreach ($problemlist as $prob) {
    echo "<li class=\"error\">$prob</li>";
}
echo '</ul>';
?>

<form action="register.php" method="post" id="regform">
    <p>
    <label for="username">First Name:</label>
    <input type="text" name="firstname" size="30" value="<?php echo $_POST['firstname']; ?>" />
    </p>

    <p>
    <label for="username">Last Name:</label>
    <input type="text" name="lastname" size="30" value="<?php echo $_POST['lastname']; ?>" />
    </p>

    <p>
    <label for="username">Username:</label>
    <input type="text" name="username" size="30" value="<?php echo $_POST['username']; ?>" />
    </p>

    <p>
    <label for="password">Password:</label>
    <input type="password" name="password" size="30" />
    </p>

    <p>
    <label for="password2">Confirm Password:</label>
    <input type="password" name="password2" size="30" />
    </p>

    <input type="submit" name="submit" value="Register" />
    <input type="hidden" name="submitted" value="true" />
</form>

<?php
            } else { // Enter data in DB

                $firstname = mysql_real_escape_string($firstname);
                $lastname = mysql_real_escape_string($lastname);
                $username = mysql_real_escape_string($username);
                $password = sha1($password);

                $query = "INSERT INTO users (id, firstname, lastname, username, password)
                        VALUES (0, '$firstname', '$lastname', '$username', '$password')";

                if (@mysql_query($query)) {
                    echo '<p>Successfully registered</p>';
                } else {
                    echo '<p style="color: red;">Could not execute the query because:<br />' . mysql_error() . '</p>
                        <p>The query being run was: ' . $query . '</p>';
                }

            }

        } else { // Form is NOT submitted
?>

<form action="register.php" method="post" id="regform">
    <p>
    <label for="username">First Name:</label>
    <input type="text" name="firstname" size="30" />
    </p>

    <p>
    <label for="username">Last Name:</label>
    <input type="text" name="lastname" size="30" />
    </p>

    <p>
    <label for="username">Username:</label>
    <input type="text" name="username" size="30" />
    </p>

    <p>
    <label for="password">Password:</label>
    <input type="password" name="password" size="30" />
    </p>

    <p>
    <label for="password2">Confirm Password:</label>
    <input type="password" name="password2" size="30" />
    </p>

    <input type="submit" name="submit" value="Register" />
    <input type="hidden" name="submitted" value="true" />
</form>

<?php
        } // End submitted IF

    } else {
        echo '<br /><br /><br /><p class="error" style="font-size: 120%">You are already logged in</p><br /><br /><br />';
    }

    mysql_close();

    require('template/footer.php');
?>