<?php
	include("../modules/include/Config.php");
	require_once("../modules/include/sqlConn.php");
	require_once("../modules/include/Security.php");

	mssql_select_db($dbName1, $dbConn) or die ("Couln't select database $dbName1");


	if ($_POST['password1'] != $_POST['password2']) {
		header("location:./../?pwMissmatch");
	} else if (empty($_POST['nickname']) || empty($_POST['password1']) || empty($_POST['password2']) || empty($_POST['username'])) {
		header("location:./../?noData");
	} else {

		$check = new security();
		$message = null;
		if($check->is_secure($_POST['username']) == false) $message[] = "";
		if ($check->is_secure($_POST['password1']) == false) $message[] = "";
		if ($check->is_secure($_POST['password2']) == false) $message[] = "";
		if ($check->is_secure($_POST['nickname']) == false) $message[] = "";
		if(count($message) > 0) {
			for($i = 0; $i < count($message); $i++) {
				// if you print anyting to the screen before using header()
				// then header won't work

				//print $message[$i];
				header("location:./../?invalidData&message=".$message[$i]);
			}
			return;
		} else {
			$username = $_POST['username'];
			$password = md5($_POST['password2']);
			$nickname = $_POST['nickname'];
			$verifyAccount = mssql_num_rows(mssql_query("select * from TB_User where StrUserID = '$username'"));
			if($verifyAccount > 0) {
				header("location:./../?NameExists");
			} else {
				mssql_query("exec _AddUser '$username','$password','$nickname',0,0,0,0,3,3,0");
				header("location:./../?regComplete");
			}
?>