Advertisement
conroya8

RegisterUser.php

May 9th, 2016
77
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.28 KB | None | 0 0
  1. <?php
  2.  
  3. $response = array();
  4. $response['response'] = 'false';
  5.  
  6.  
  7.  
  8. if($_SERVER["REQUEST_METHOD"]=="POST") {
  9.     require 'config.php';
  10.     require 'functions.php';
  11.        
  12.     $name = $_POST["name"];
  13.     $username =  $_POST["username"];       
  14.     $email = $_POST["email"];
  15.     $password = $_POST["password"];
  16.    
  17.     // Prevent SQl injections..    
  18.     $name = mysqli_real_escape_string($db_connect, $name);
  19.     $username = mysqli_real_escape_string($db_connect, $username);
  20.     $email = mysqli_real_escape_string($db_connect, $email);
  21.     $password = mysqli_real_escape_string($db_connect, $password);
  22.    
  23.     // Hash entered passwords and add to database.
  24.     $hashedPassword = call_user_func('hashPassword', $password);
  25.    
  26.     $checkUsername = mysqli_query($db_connect, "SELECT username FROM users WHERE username = '$username'");
  27.     $checkEmail = mysqli_query($db_connect, "SELECT email FROM users WHERE email= '$email'");
  28.    
  29.  
  30.         if(mysqli_num_rows($checkUsername) > 0 && mysqli_num_rows($checkEmail) > 0) {
  31.  
  32.             $response['response'] = 'usernameAndEmailExists';
  33.             header('Context-Type: application/json');
  34.             echo json_encode($response);
  35.  
  36.         } else if (mysqli_num_rows($checkUsername) > 0) {
  37.    
  38.             $response['response'] = 'usernameExists';
  39.             header('Context-Type: application/json');
  40.             echo json_encode($response);
  41.        
  42.         } else if (mysqli_num_rows($checkEmail) > 0) {
  43.        
  44.             $response['response'] = 'emailExists';
  45.             header('Context-Type: application/json');
  46.             echo json_encode($response);
  47.        
  48.         } else if (mysqli_num_rows($checkUsername) == 0 && mysqli_num_rows($checkEmail) == 0) {
  49.    
  50.             $query = ("INSERT INTO users(name, username, email, password) VALUES ('$name', '$username', '$email', '$hashedPassword')");
  51.  
  52.            
  53.             if(mysqli_query($db_connect, $query)) {
  54.  
  55.                 $response["response"] = 'successful';
  56.                 $query = ("SELECT * FROM users WHERE username = '$username'");
  57.                 $result = mysqli_query($db_connect, $query);
  58.                 $returnQuery = mysqli_fetch_assoc($result);
  59.                 $returnedId = $returnQuery['id'];
  60.                 $returnedScore = $returnQuery['score'];
  61.                 $response["id"] = $returnedId;
  62.                 $response["score"] = $returnedScore;
  63.                 header('Context-Type: application/json');
  64.                 echo json_encode($response);
  65.             }
  66.            
  67.    
  68.     }  else {
  69.                
  70.                 $response["response"] = 'false';
  71.     }
  72.    
  73.        
  74.     mysqli_close($db_connect);
  75.    
  76.     }
  77.    
  78.  
  79. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement