<?php
include("db.php");

error_reporting(E_ALL);
$error = "";
if(isset($_POST['submit']))
{

	$firstname = mysql_real_escape_string($_POST['firstname']);
	$surname = mysql_real_escape_string($_POST['surname']);
	$username = mysql_real_escape_string($_POST['username']);
	$pass = mysql_real_escape_string($_POST['pass']);
	$pass2 = mysql_real_escape_string($_POST['pass2']);
	$email = mysql_real_escape_string($_POST['email']);
	if (!firstname || !$surname || !$username || !$pass || !$pass2 || !$email)
			{
			$error = "Somthing Is Wrong Please Enter All The Infomation Were Theres a*";
			}else{


				if ($username > 5)
				{
				$error = "Username Must Be Bigger Than Four Letters Long<p />";
				}else
				{
				$check = mysql_query("SELECT * FROM users WHERE username='$username'");
					if (mysql_num_rows($check) == 1)
						{
						$error = "Username Taken, Try Agian<p />";
						}else
							{
							$username;
							}

							if(isset($_COOKIE['reff']))
								{
								$reff = mysql_real_escape_string($_COOKIE['reff']);
								mysql_query("UPDATE users SET `referrals`=`referrals` + 1 WHERE `username`='".$_COOKIE['reff']."'") or die( mysql_error());
								}else
								{
								$reff = "admin";
								}
								$user_ip = $_SERVER['REMOTE_ADDR'];

									if($pass == $pass2)
									{
									$pass = md5($pass);
									mysql_query("INSERT INTO users (firstname, surname, username, password, email, user_ip, referral) VALUES ('$firstname', '$surname', '$username', '$pass', '$email','$user_ip','$reff')")or die( mysql_error());
									header("location: login.php");
									}
									else{
									$error = "Passwords Don't Match<p />";
										}



							if ($error == "")
							{
								//nuffin
							}
							else
								{
							echo "<div align='center'>";
							echo "<table class='Error' border='1'>";
							echo "<tr></tr>";
							echo "<td align='left'>Error: <strong>$error</strong></td>";
							echo "<tr></tr>";
							echo "</table>";
							echo "</div>";
								}


				}
}
include("head.php");
?>
<div align="center">
<table id="register" boder="1">
<form action="" method="POST">
<th align="center">Register For Free<th>
<tr></tr>
<td align="right"><label>First Name :</label><input type="text" name="firstname" id="firstname">*</td>
<tr></tr>
<td align="right"><label>Surname :</label><input type="text" name="surname" id="surname">*</td>
<tr></tr>
<td align="right"><label>Username :</label><input type="text" name="username" id="username">*</td>
<tr></tr>
<td align="right"><label>Password :</label><input type="password" name="pass" id="pass">*</td>
<tr></tr>
<td align="right"><label>Retype Password :</label><input type="password" name="pass2" id="pass2">*</td>
<tr></tr>
<td align="right"><label>Email :</label><input type="text" name="email" id="email">*</td>
<tr></tr>
<td align="center"><input type="submit" name="submit" value="Register"></td>
<tr></tr>
</form>
</table>
<div>