<?php
session_start();

require_once "../includes/functions.php";
require_once "../database/dbconn.php";

//get values from form
$username = $_POST['username'];
$title = $_POST['title'];
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$street = $_POST['street'];
$town = $_POST['town'];
$postcode = $_POST['postcode'];
$state = $_POST['state'];
$contactnumber= $_POST['contactnumber'];
$email = $_POST['email'];
$password = $_POST['password'];

//set initial value of error message
$error_message = "";

//validate data
$error_message .= validate_username($username);
$error_message .= validate_title($title);
$error_message .= validate_firstname($firstname);
$error_message .= validate_lastname($lastname);
$error_message .= validate_street($street);
$error_message .= validate_town($town);
$error_message .= validate_postcode($postcode);
$error_message .= validate_state($state);
$error_message .= validate_contactnumber($contactnumber);
$error_message .= validate_email($email);
$error_message .= validate_password($password);

If ($error_message != "")
{
	include_once "register.php";
}
else
{
//store data in session variables
	$conn = connect();
	if (!$conn)
	{
		echo "testing to see";
	}
	else
	{
		$susername = sanitiseMySQL($username);
		$stitle = sanitiseMySQL($title);
		$sfirstname = sanitiseMySQL($firstname);
		$slastname = sanitiseMySQL($lastname);
		$sstreet = sanitiseMySQL($street);
		$stown = sanitiseMySQL($town);
		$spostcode = sanitiseMySQL($postcode);
		$sstate = sanitiseMySQL($state);
		$scontactnumber = sanitiseMySQL($contactnumber);
		$semail = sanitiseMySQL($email);
		$spassword = sanitiseMySQL($password);


		$query = "SELECT username from members where username = '$susername'";
		$result = mysql_query($conn, $query);
		if (!$result)
		{
			echo "did notwork";
		}
		else
		{
			$row = mysql_num_rows($result);

			if ($row >0)
			{
				$error_message = "Username in use, choose new username";
				include_once "register.php";
			}
			else
			{
				echo "ok";
			}
		}
	}


$query = "INSERT into tblusers(Username, Title, CFirstname, CLasname, Street, Town, Postcode, State, Contact_Number, Email, Password) VALUES ('$username', '$title','$firstname', '$lastname', '$street', '$town', '$postcode', '$state', '$contactnumber', '$email', '$password')";
	$result = mysql_query($conn, $query);

	if ($result)
	{
		$row = mysql_affected_rows($conn);
		echo $row;
	}
	else
	{
		die ("failed call someone!" . mysql_error($conn));
	}





}
?>