<?php

function ConnectToSql()
{
    $connect = mysql_connect(DB_ADDR, DB_USER, DB_PASS) or die(mysql_error());
    mysql_select_db(DB_DATABASE, $connect) or die ("Couldn't select the database.");
}

function CloseSql()
{
    mysql_close();
}

    $errors = array();

    if (isset($_GET["username"]) && isset($_GET["password"]) && isset($_GET["email"]) && isset($_GET["steamid"]))
    {
        ConnectToSql();

        $user = mysql_real_escape_string($_POST['username']);
        $pass = mysql_real_escape_string($_POST['password']);
        $email = mysql_real_escape_string($_POST['email']);
        $steamid = mysql_real_escape_string($_POST['steamid']);

        CloseSql();
    }
    else
    {
        $errors[] = "Required information missing";
    }

    if(filter_var($email, FILTER_VALIDATE_EMAIL))
    {
        ConnectToSql();

        $sqlemail= "SELECT email FROM forum_user WHERE email = '$email' LIMIT 1";
        $resultemail = mysql_query($sqlemail) or die(mysql_error());

        CloseSql();

        if(mysql_num_rows($resultemail) > 0)
        {
            $errors[] = "Email address taken";
        }
    }
    else
    {
        $errors[] = "Invalid email address";
    }

    if (preg_match("/^[a-zA-Z0-9]+$/", $user) == 1)
    {
        // contains only a-z and 0-9

        ConnectToSql();

        $sqlusername= "SELECT username FROM forum_user WHERE username = '$user' LIMIT 1";
        $resultusername = mysql_query($sqlusername) or die(mysql_error());

        CloseSql();

        if(mysql_num_rows($resultusername) > 0)
        {
            $errors[] = "Username taken";
        }
        elseif (strlen($user) == 0)
        {
            $errors[] = "Please enter a username";
        }
        elseif (strlen($user) > 30)
        {
            $errors[] = "Username is too long (maximum 30 characters)";
        }
    }
    else
    {
        $errors[] = "Username May only contain a-z and 0-9";
    }

    if ($pass == $pass1)
    {
        if (strlen($passunhashed) == 0)
        {
            $errors[] = "Please enter a password";
        }
    }
    else
    {
        $errors[] = "Passwords do not match";
    }

    if (count($errors) == 0)
    {
        $dateregistered = date("d/m/y", time());

        ConnectToSql();

        mysql_query("INSERT INTO forum_user (username, password, email, steamid) VALUES
        ('$user', '$pass', '$email', '$steamid')") or die(mysql_error());

        CloseSql();

        mail($email, "Thankyou for registering!", "Hello $user, thankyou for registering at Jet Guild and we home you enjoy the site and enjoy all we have to offer!");

        /*
        ?>
            <!--
            <div id="msgsuccess">
                Thank you for registering!
            </div>
            -->
        <?php
        */

    }
    else
    {
        /*
        <!--

        ?>
            <div id="msgerror">
                <?php
                foreach ($errors as &$value) {
                        echo($value . "<br />");
                }
                ?>
            </div>
        <?php

        -->
        */

        return $error[];
    }
?>