Untitled


<head>
	<title>This is our page</title>
	<style type="text/css"></style>
</head>
<body>
<style>
.row{width:100%;display: inline-block;margin:3px;}
.label{width:25%;float:left;margin:3px;}
.input{width:49%;float:left;margin:3px;}
</style>

<?php
session_start();

getLogin();
setUser();


if($_SESSION['userid'] == ''){

?>
<h1>Login</h1>
	<form action="" method="POST" name="login" id="loginform">
		<div class="row">
			<div class="label">username</div>
			<div class="input"><input type="text" name="username" /></div>
		</div>
		<div class="row">
			<div class="label">password</div>
			<div class="input"><input type="password" name="password" /></div>
		</div>
		<div class="row">
			<div class="label"></div>
			<div class="input">
				<input type="submit" name="submit" value="Login" />
			</div>
		</div>
	</form>

<h1>Register</h1>
	<form action="" method="POST" name="login" id="loginform">
		<div class="row">
			<div class="label">firstname</div>
			<div class="input"><input type="text" name="firstname" /></div>
		</div>
		<div class="row">
			<div class="label">lastname</div>
			<div class="input"><input type="text" name="lastname" /></div>
		</div>
		<div class="row">
			<div class="label">username</div>
			<div class="input"><input type="text" name="username" /></div>
		</div>
		<div class="row">
			<div class="label">password</div>
			<div class="input"><input type="password" name="password" /></div>
		</div>
		<div class="row">
			<div class="label"></div>
			<div class="input"><input type="submit" name="submit" value="Register" /></div>
		</div>
	</form>
<?php
}else{
	echo 'logged in';
}


function setUser(){

	if($_POST['submit'] == 'Register'){
		$firstname = $_POST['firstname'];
		$lastname = $_POST['lastname'];
		$username = $_POST['username'];
		$password = $_POST['password'];
		if($firstname == ''){
			die('Please enter a firstname');
		}
		if($lastname == ''){
			die('Please enter a lastname');
		}
		if($username == ''){
			die('Please enter a username');
		}else{
			$blnExists = getUsername($username);
			if($blnExists){
				die('username already exists');
			}
		}
		if($password == ''){
			die('Please enter a password');
		}

		$db_servername = "localhost";
		$db_username = "root";
		$db_password = "";
		$db_dbname = "sussex";

		// // Create connection
		$conn = new mysqli($db_servername, $db_username, $db_password, $db_dbname);
		// // Check connection
		if ($conn->connect_error) {
		    die("Connection failed: " . $conn->connect_error);
		}


		$sql = "
		INSERT INTO tbl_users (firstname,lastname,username,password)
		VALUES
		('". $firstname ."','". $lastname ."','". $username ."',MD5('". $password ."'))
		";
		// echo ($sql);
		// die();

		$result = $conn->query($sql);
		getLogin();
		$conn->close();

	}
}


function getLogin(){

	if($_POST['submit'] == 'Login'){

		$servername = "localhost";
		$username = "root";
		$password = "";
		$dbname = "sussex";

		// // Create connection
		$conn = new mysqli($servername, $username, $password, $dbname);
		// // Check connection
		if ($conn->connect_error) {
		    die("Connection failed: " . $conn->connect_error);
		}
		$username = $_POST['username'];
		$password = $_POST['password'];

		$sql = "SELECT * FROM tbl_users where username = '" . $username . "' AND password = MD5('". $password ."')";

		$result = $conn->query($sql);
		if ($result->num_rows > 0) {
		    // // output data of each row
		    while($row = $result->fetch_assoc()) {

		    	$_SESSION['userid']=$row["id"];
		    	//setcookie('userid',$row["id"]);
		    }
		} else {
		    echo "0 results";
		}
		$conn->close();

	}
}


function getUsername($username = null){

	if($username){

		$db_servername = "localhost";
		$db_username = "root";
		$db_password = "";
		$db_dbname = "sussex";

		// // Create connection
		$conn = new mysqli($db_servername, $db_username, $db_password, $db_dbname);
		// // Check connection
		if ($conn->connect_error) {
		    die("Connection failed: " . $conn->connect_error);
		}
		$username = $_POST['username'];
		$password = $_POST['password'];

		$sql = "SELECT * FROM tbl_users where username = '" . $username . "'";

		$result = $conn->query($sql);
		if ($result->num_rows > 0) {
		    return true;
		} else {
		    return false;
		}
		$conn->close();

	}
}


?>


</body>