<?php

    include 'config.php';

    $username = $_POST['username'];
    $username = mysql_real_escape_string($username);

    $firstname = $_POST['firstname'];
    $lastname = $_POST['lastname'];

    $password = $_POST['password'];
    $password = mysql_real_escape_string($password);

    $security = md5("$password");

    if ($_POST['submit']&&$username&&$password&&$firstname&&$lastname)
    {
        $user_check = "SELECT * FROM userinfo WHERE username='$username'";
        $user_num = num_rows($user_check)
        if ($user_num == 1){
            echo "Sorry, this username is already taken.";
        }
        else {
            $query = "INSERT INTO userinfo (userid, username, firstname, lastname, password) VALUES ('','$username', '$firstname', '$lastname', '$security')";
            $result = mysql_query($query);
            mkdir("/users/$username/", 0700);

            echo "Welcome to the community, $username!";
        }
    }
    else { echo "Something went wrong! Make sure you entered your name and password(and confirm).. Thats all we know."; }

?>