<?php
	ob_start();
	session_start();
	if( isset($_SESSION['user'])!="" ){
		header("Location: home.php");
	}
	include_once 'dbconnect.php';

	$error = false;

	if ( isset($_POST['btn-signup']) ) {

		// clean user inputs to prevent sql injections
		$name = trim($_POST['name']);
		$name = strip_tags($name);
		$name = htmlspecialchars($name);

		$email = trim($_POST['email']);
		$email = strip_tags($email);
		$email = htmlspecialchars($email);

		$pass = trim($_POST['pass']);
		$pass = strip_tags($pass);
		$pass = htmlspecialchars($pass);

		// basic name validation
		if (empty($name)) {
			$error = true;
			$nameError = "Please enter your full name.";
		} else if (strlen($name) < 3) {
			$error = true;
			$nameError = "Name must have atleat 3 characters.";
		} else if (!preg_match("/^[a-zA-Z ]+$/",$name)) {
			$error = true;
			$nameError = "Name must contain alphabets and space.";
		}

		//basic email validation
		if ( !filter_var($email,FILTER_VALIDATE_EMAIL) ) {
			$error = true;
			$emailError = "Please enter valid email address.";
		} else {
			// check email exist or not
			$mysqli_query  = sprintf("SELECT userEmail FROM users WHERE userEmail = '$email'");
			$conn         = $db->query($mysqli_query);

			$count = mysqli_num_rows($mysqli_query);
			if($count!=0){
				$error = true;
				$emailError = "Provided Email is already in use.";
			}
		}
		// password validation
		if (empty($pass)){
			$error = true;
			$passError = "Please enter password.";
		} else if(strlen($pass) < 6) {
			$error = true;
			$passError = "Password must have atleast 6 characters.";
		}

		// password encrypt using bcrypt();
		$password = password_hash($pass, PASSWORD_BCRYPT);
		// if there's no error, continue to signup

		if( !$error ) {

			$stmt = $db->prepare("INSERT INTO users (userName, userEmail, userPass) VALUES (?, ?, ?)");
			$stmt->bind_param("sss", $user, $email, $password);
			$stmt->execute();
				$errTyp = "success";
				$errMSG = "Successfully registered, you may login now";
				unset($name);
				unset($email);
				unset($pass);
			} else {
				$errTyp = "danger";
				$errMSG = "Something went wrong, try again later...";
			}



	}

	//dbconnect:
// $servername = "localhost";
// $username = "root";
// $password = "";
// $dbname = "test";
// $db = new mysqli($servername, $username, $password, $dbname);
// if ($db->connect_error) {
// die("Connection failed: " . $db->connect_error);
// }
?>