<?php

//retreive our data from post(from RegisterHtml.php)
$username = $_POST['username'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];

if($pass1 != $pass2){

	echo "Passwords do not match";
	die();
}
	//echo "Passwords do not match";

if(strlen($username) > 30){

	echo "Username must be under 30 characters";
	die();
	//echo "Username cannot be more than 30 characters long";
}

$hash = hash('sha256', $pass1); //hash the file with sha256 algorithm

//creates a 3 character sequence
function createSalt()
{
    $string = md5(uniqid(rand(), true));
    return substr($string, 0, 3);
}
$salt = createSalt();
$hash = hash('sha256', $salt . $hash);

//database portion
$dbhost = 'localhost';
$dbname = 'login';
$dbuser = 'chris';
$dbpass = '';
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
mysql_select_db($dbname, $conn);

//sanitize username
$username = mysql_real_escape_string($username); //helps prevent mysql injections
$query = "INSERT INTO users (username, password, salt)
	VALUES ('$username', '$hash', '$salt');";
mysql_query($query);
mysql_close();

header('Location: loginHtml.php'); //direct user to loginHtml.php

echo "Registry Successful";
?>