<?php
session_start();
error_reporting(E_ALL);

if(array_key_exists("submit", $_POST)){
   $link = mysqli_connect("localhost","eits_Admin","WebSpinner1","EITS_Sandbox");
if(!$link){
  die("Database connection error");
}
$error = '';
if(!$_POST['email']){
  $error .= "<br/>An email address is required";
}
if(!$_POST['password']){
  $error .= "<br/>A password is required";
}

if($error != ""){
  $error = "There were errors in your form - ".$error;
} else{
  $query = "select id from secretdiary where email = '".mysqli_real_escape_string($link, $_POST['email'])."' limit 1";
  //echo $query;
  $result = mysqli_query($link, $query);
  if(mysqli_num_rows($result) > 0){
   $error = "That email address is not available.";
  } else {
    $query = "insert into secretdiary (email,password) values ('".mysqli_real_escape_string($link, $_POST['email'])."','".mysqli_real_escape_string($link,$_POST['password'])."')";

   if(!mysqli_query($link, $query)){
     $error = "Could not sign you up at this time. Please try again later.";
   } else {
    $encPass = md5(md5(mysqli_insert_id($link)).$_POST['password']);
    $query = "update secretdiary set password = '". $encPass ."' where id =" . mysqli_insert_id($link) . "limit 1";
    echo $query;
    $result = mysqli_query($link,$query);
     echo "Sign up successful.";
   }

  }
}

?>

<div id="error"><? echo $error; ?></div>
<form method="post">
<input type="email" name="email" placeholder= "Your Email">
<input type="password" name="password" placeholder="Password">
<input type="checkbox" name="stayLoggedIn" value=1>
<input type="submit" name="submit" value="Sign Up!">
</form>