<?php
include("includes/db.php");
$firsname = mysql_real_escape_string($_POST['firstname']);
$surname = mysql_real_escape_string($_POST['surname']);
$email = mysql_real_escape_string($_POST['email']);
$pass1 = mysql_real_escape_string($_POST['pass1']);
$pass2 = mysql_real_escape_string($_POST['pass2']);
if($pass1 === $pass2)
{
$pass1 = md5($pass1);
mysql_query("INSERT INTO users (firstname, surname, email, password) VALUES ('$firstname','$surname','$email','$pass1') ")or die (mysql_error());
header("location: login.php");
}else{
header("location: login.php");
}

?>