<?php
//including database connection
	include 'connection.php';

//checking if form data were sent
	if($_SERVER['REQUEST_METHOD'] == 'POST'){

//avoiding sql injections and storing data in variables
	$fname = mysqli_real_escape_string($conn, $_POST['fname']);
	$lname = mysqli_real_escape_string($conn, $_POST['lname']);
	$username = $_POST['username'];
	$email = filter_var(trim($_POST['email']), FILTER_SANITIZE_EMAIL);
	$pass = mysqli_real_escape_string($conn, trim($_POST['pass']));
	$pass1 = mysqli_real_escape_string($conn, trim($_POST['pass1']));
	$adresa = mysqli_real_escape_string($conn, trim($_POST['adresa']));
	$birth_month = $_POST['birth_month'];
	$birth_day = $_POST['birth_day'];
	$dateofbirth = $_POST['dateofbirth'];

//creating $errors array
	$errors = array();

	if(empty($fname)){

//storing data in array
		$errors[] = "Molimo unesite vase ime";
	}elseif(is_numeric($fname)){
			$errors[] ="Greska prilikom unosa imena";
	}else{
		if(count_chars($fname) < 3){
			$errors[] = "Vase ime ne moze biti krace od tri slova";
		}
	}
	if(empty($lname)){
		$errors[] = "Molimo unesite vase prezime";
	}elseif(is_numeric($lname)){
			$errors[] ="Greska prilikom unosa imena";
	}else{
		if(count_chars($lname) < 3){
			$errors[] = "Vase prezime ne moze biti krace od tri slova";
		}
	}
	if(empty($username)){
		$errors[] = "Molimo unesite vase korisnicko ime";
	}elseif(is_numeric($username)){
			$errors[] ="Greska prilikom unosa imena";
	}else{
		if(count_chars($username) < 4){
			$errors[] = "Vas username ne moze biti krace od tri slova";
		}
	}
	if(empty($email)){
		$errors[] = "Molimo unesite vas email";
	}else{
		if(!filter_var($email, FILTER_VALIDATE_EMAIL)){
		$errors[] = "Greska u unosu email adrese";
		}
	}
	if(empty($pass)){
		$errors[] = "Molimo unesite vas password";
	}else{
		if(count_chars($pass) < 6){
			$errors[] = "Password mora imati najmanje sest znakova";
		}
	if(empty($pass1)){
		$errors[] = "Molimo potvrdite vas password";
	}
	if(empty($birth_month)){
		$errors[] = "Molimo unesite vas mjesec rodjenja";
	}
	if(empty($birth_day)){
		$errors[] = "Molimo unesite vas dan rodjenja";
	}
	if(empty($dateofbirth)){
		$errors[] = "Molimo unesite vasu godinu rodjenja";
	}elseif(!is_numeric($dateofbirth)){
	$errors[] = "Pogresno ste unijeli godinu rodjenja";
	}elseif($dateofbirth < 1900){
		$errors[] = "Pogresno ste unijeli godinu rodjenja, broj je preveliki";
	}
	if(empty($adresa)){
			$errors[] = "Molimo unesite vasu adresu";
	}
	$q = "SELECT * FROM user WHERE username = '{$username}'";
	$r = mysqli_query($conn, $q);
	if(mysqli_num_rows($r) > 0){
 	 die('<h2 class = "error">'. 'Username je vec zauzet. Molimo uzmite drugi' . '</h2>');
	}
	$q = "SELECT * FROM user WHERE email = '{$email}'";
	$r = mysqli_query($conn, $q);
	if(mysqli_num_rows($r) > 0){
 	 die('<h2 class = "error">'. 'Korisnik sa ovom email adresom je vec registrovan. Ukoliko ste zaboravili sifru, kontaktirajte nas' . '</h2>');
	}
	if($pass != $pass1){
		$errors[] = 'Sifre se ne poklapaju. Molimo pokusajte ponovo';
	}

//checking if $errors is empty - if not cheking where did error occurred
	if(empty($errors)){
	$q = "INSERT INTO user (name, last_name, username, email,
	password, birth_month, birth_day, dateofbirth, adresa, reg_date)
	VALUES ('$fname','$lname','$username','$email',sha1('$pass'),'$birth_month','$birth_day', '$dateofbirth','$adresa', now())";
	$r = mysqli_query($conn, $q);
	if($r){
	echo "<p>Uspjesno ste registrovani"  . " "  . $fname .  " " . $lname . "</p>";
	}
	}else{
	echo '<h2 class = "error">'. "Sljedece greske su pronadjene:" . '</h2>' ;
	foreach($errors as $msg){
	echo '<h2 class = "error">' . $msg . '</h2>' . '<br>';
													}
	}

}

}

?>