<?php

    //https://websitebeaver.com/prepared-statements-in-php-mysqli-to-prevent-sql-injection
    //Connection
    require("db.php");

    // Fetching The Data From Client Side
   #Full name to first, middle, last name
    $nameParts = preg_split("/[\s,]/", $_POST["fullName"]);
    $fName = $nameParts[0];
    $mName = $nameParts[1];
    $lName = $nameParts[2];
 #############################################################
    $phoneNumber = $_POST["phoneNumber"];
    $gender = $_POST["gender"];
    $emailId = $_POST["emailId"];
    $userName = $_POST["userName"];
    $passWord = $_POST["passWord"];

    //Query
    $stmt = $conn->prepare("INSERT INTO profile (First_Name,Middle_Name,Last_Name,Contact_Number,Email_Id,Gender,User_Name,Pass_Word) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");

    //Insert
    $stmt->bind_param("ssssssss", $fName, $mName, $lName, $_POST['$phoneNumber'], $_POST['$emailId'], $_POST['$gender'], $userName, $passWord);
    $stmt->execute();
    $stmt->close();

    echo "Signed Up!";

    header("Location:Login.php");
?>