<?php
include "../config.php";
require "../libraries/PHPMailer/PHPMailerAutoload.php";

$mail = new phpmailer;
$mail->isSMTP();
$mail->Host = "smtp.gmail.com";
$mail->SMTPAuth = true;
$mail->Username = "gmail";
$mail->Password = "password";
$mail->SMTPSecure = true;
$mail->Port = "465";
$mail->setFrom('gmail', 'name');
$mail->isHTML(true);


if (isset($_POST['register']))
{
$sid = mysqli_real_escape_string($con, $_POST['sid']);
$email = mysqli_real_escape_string($con, $_POST['email']);
$pw = hash("sha256", mysqli_real_escape_string($con, $_POST['pw']));
$fn = mysqli_real_escape_string($con, $_POST['fn']);
$ln = mysqli_real_escape_string($con, $_POST['ln']);
$mob = mysqli_real_escape_string($con, $_POST['mob']);

$sql_validate = "SELECT schoolID FROM users WHERE schoolID=$sid";
$result_validate = $con->query($sql_validate) or die(mysqli_error($con));

if (mysqli_num_rows($result_validate) == 0)
{
$sql_register = "INSERT INTO users VALUES ('', 1, $sid, '$email', '$pw', '$fn', '$ln', '$mob', 'Pending', NOW())";
$con->query($sql_register) or die(mysqli_error($con));
$url = "http://localhost:8080/exercises/02/account/confirm.php?e=$email&pw=$pw";
$mail->addAddress($email, $fn . " " . $ln);
$mail->Subject = "Account Confirmation";
$mail->Body = "
Welcome, $fn $ln ($sid)!<br /><br />
You have successfully registered your account.
Your email address is: $email <br /><br />
Click the confirmation link below:<br />
<a href='$url' target='_blank'>$url</a>
<br /><br />
Thank you!<br/>
- Name
";

if(!$mail->send())
{
echo 'Message could not be sent.';
echo 'Mailer Error: ' . $mail->ErrorInfo;
}
else
echo 'Message has been sent';

header('location: login.php');
}
}
?>