<?php

$bdd = new PDO('mysql:host=localhost;dbname=', 'root', '');
if(isset($_POST['forminscription'])) {
   $username = $_POST['username'];
   $mail = $_POST['mail'];
   $mail2 = $_POST['mail2'];
   $secretcode = sha1($_POST['secretcode']);
   $secretcode2 = sha1($_POST['secretcode2']);
   $checkUsername = $bdd->prepare("SELECT * FROM api WHERE username = ?");
   $checkUsername -> execute(array($username));
   $countUsername = $checkUsername->rowCount(0);
   $reqmail = $bdd->prepare("SELECT * FROM api WHERE email = ?");
   $reqmail->execute(array($mail));
   $mailexist = $reqmail->rowCount(0);
   $usernamelength = strlen($username);
   if(empty($_POST['username']) AND empty($_POST['mail']) AND empty($_POST['mail2']) AND empty($_POST['secretcode']) AND empty($_POST['secretcode2'])) {
    $erreur = "Vérifiez tout les champs !";
} else
      if($usernamelength >= 10) {
        $erreur = "Votre pseudo ne doit pas dépasser 10 caractères !";
      } else
        if ($countUsername == 1) {
                $erreur = "Nom d\'utilisateur déjà pris";
        } else
            if($mail != $mail2) {
            $erreur = "Les adresses mail ne correspondent pas !";
            } else
                if(filter_var($mail, FILTER_VALIDATE_EMAIL)) {
                $erreur = "Votre adresse mail n'est pas valide !";
                } else
                    if($mailexist == 1) {
                    $erreur = "Adresse mail déjà utilisée !";
                    } else
                        if($secretcode != $secretcode2) {
                        $erreur = "Les code de sécurité ne correspondent pas !";
                        } else {
                            $insertmbr = $bdd -> prepare("INSERT INTO api(username, email, code) VALUES(?, ?, ?)");
                            $insertmbr -> execute(array($username, $mail, $secretcode));
                            $validation = "Votre compte a bien été créé ! <a href=\"connexion.php\">Me connecter</a>";
        }
    }
?>