<?php

if (isset($_POST['submit'])) {

    //include_once 'dbh.inc.php';

    $dbServername = "shareddb-f.hosting.stackcp.net";
    $dbUsername = "pulseradioweb-323689e4";
    $dbPassword = "iamdatabase1";
    $dbName = "pulseradioweb-323689e4";
    $conn = mysqli_connect($dbServername, $dbUsername, $dbPassword, $dbName);

    $first = mysqli_real_escape_string($conn, $_POST['first']);
    $last = mysqli_real_escape_string($conn, $_POST['last']);
    $email = mysqli_real_escape_string($conn, $_POST['email']);
    $uid = mysqli_real_escape_string($conn, $_POST['uid']);
    $pwd = mysqli_real_escape_string($conn, $_POST['pwd']);

    //Error handlers
    //Has everything been filled out?
    if (empty($first) || empty($last) || empty($email) || empty($uid) || empty($pwd)) {
        header("Location: ../register.php?signup=empty");
        exit();
    } else {
        //Check if input charecters are valid
        if (!preg_match("/^[a-zA-Z]*$/", $first) || !preg_match("/^[a-zA-Z]*$/", $last)) {
            header("Location: ../register.php?signup=invalidchar");
            exit();
        } else {
            //Check if email is valid
            if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
                header("Location: ../register.php?signup=invalidemail");
                exit();
            } else {
                $sql = "SELECT * FROM users WHERE user_uid='$uid'";
                $result = mysqli_query($conn, $sql);
                $resultCheck = mysql_num_rows($result);

                if ($resultCheck > 0) {
                    header("Location: ../register.php?signup=usertaken");
                    exit();
                } else {
                    //Password Hashing
                    $hashedPwd = password_hash($pwd, PASSWORD_DEFAULT);
                    //Insert user to db
                    $sql = "INSERT INTO users (user_first, user_last,
                    user_email, user_uid, user_pwd) VALUES ('$first',
                    '$last', '$email', '$uid', '$hashedPwd');";
                    mysqli_query($conn, $sql);
                    header("Location: ../register.php?signup=success");
                    exit();
                }
            }
        }
    }

} else {
    header("Location: ../register.php");
    exit();
}