<?php

    include 'config.php';

    $username = $_POST['username'];
    $username = mysql_real_escape_string($username);

    $firstname = $_POST['firstname'];
    $lastname = $_POST['lastname'];

    $password = $_POST['password'];
    $password = mysql_real_escape_string($password);

    $security = md5("$password");

    if ($_POST['submit']&&$username&&$password&&$firstname&&$lastname)
    {
        $query = "INSERT INTO userinfo (userid, username, firstname, lastname, password) VALUES ('','$username', '$firstname', '$lastname', '$security')";
        $result = mysql_query($query);
        mkdir("users/$username/", 0700);

        echo "Welcome to the community, $username!";
    }
    else { echo "Something went wrong! Make sure you entered your name and password(and confirm).. Thats all we know."; }

?>