<?php
include('connection.php');
include('function.php');
	$name = filter_str_param($_POST['name']);
	$lastname = filter_str_param($_POST['lastname']);
	$password = filter_str_param($_POST['password']);
	$email = filter_str_param($_POST['email']);
	required($name, $lastname, $password, $email);

	function required($name, $lastname, $password, $email) {
		$query="SELECT user_login FROM user WHERE user_login = '".mysql_real_escape_string($email)."'";
		$result = mysql_query($query) or die (mysql_error());

		if(mb_strlen($name, 'utf-8')<2 || mb_strlen($name, 'utf-8')>30) { echo "Некорректное имя"; exit(); }
		if(mb_strlen($lastname, 'utf-8')<2 || mb_strlen($lastname, 'utf-8')>30) { echo "Некорректная фамилия";exit();  }
		if(mb_strlen($email, 'utf-8')<6 || mb_strlen($email, 'utf-8')>50 || !filter_var($email, FILTER_VALIDATE_EMAIL)){ echo "Некорректный email";exit();  }
		if(mysql_num_rows($result)==1){ echo "Такой email уже существует"; exit();}
		if(mb_strlen($password, 'utf-8')<6 || mb_strlen($password, 'utf-8')>30) { echo "Некорректный пароль";exit();  }
		insert($email,$name,$lastname,$password);
	}


	function insert($email,$name,$lastname,$password){
			$hours_to = md5(date(U));
			$hours = date(U);
		$query = "INSERT INTO user (user_login,user_name,user_lastname,user_password)
				 VALUES('".mysql_real_escape_string($email)."',
				 '".mysql_real_escape_string($name)."',
				 '".mysql_real_escape_string($lastname)."',
				 '".mysql_real_escape_string($password)."')";

		$query_time = "INSERT INTO user_timeout (user_login,hash,date)
				       VALUES('$email','$hours_to','$hours')";

		$result = mysql_query($query) or die (mysql_error());

		$result_time = mysql_query($query_time) or die (mysql_error());
		echo "Вы успешно зарегестрированы!";
	}
?>