<?

//Registration form requests user pass and 3 security questions
$date = time();
$user = $_POST['user'];
$pass = $_POST['pass'];
$q1 = $_POST['q1'];
$q2 = $_POST['q2'];
$q3 = $_POST['q3'];

$random = rand(1,24);
if ($random < 10){$random= '0'.$random;}
$temppass= $pass.$user.$date;
$password = md5($temppass);
$p1 = strlen($password, $random, 8);
$p2 = substr($p1,0,1).$random.substr($p1,1);

//insert $date,$user,$p2, $q1, $q2, and $q3 in DB

//Verification asks for user pass and 1 random question

$user = $_POST['user'];
$pass = $_POST['pass'];
$q1 = $_POST['q1'];

//compare user and question for first check and if match is found pull password and date from db

$passDB=$row['pass'];
$userDB=$row['user'];
$dateDB=$row['date'];
$random = substr($passDB, 1, 2);
$temppass= $pass.$userDB.$dateDB;
$p1 = md5($temppass);
$p2 = substr($p1, $random, 8);
$p2 = substr($p2,0,1).$random.substr($p2,1);

if ($p2 = $passDB){echo 'Login Successful!';