registerproc

<?php

include 'database.php';
// create a variable
if($_SERVER["REQUEST_METHOD"]=="POST")
{
$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);
$idrole=$_POST['idrole'];
$name=$_POST['name'];
$icno=$_POST['icno'];
$address=$_POST['address'];
$postcode=$_POST['postcode'];
$phone=$_POST['phone'];
$email=$_POST['email'];
$bool = true;
//Execute the query

$query2 = mysql_query("SELECT * FROM employee");
while($row = mysql_fetch_array($query2))
{
    $table_employee=$row['username'];
    if($username==$table_employee)
{
    $bool=false;
    Print '<script>alert("Username has been taken !");</script>';
    Print '<script>window.location.assign("login.php");</script>';
}
}

if($bool)
{

mysqli_query($connect, "INSERT INTO employee
(username, password, idrole, name, icno, phone, address, postcode, email) VALUES ('$username','$password','$idrole','$name', '$icno', '$address', '$postcode', '$phone', '$email')");

	if(mysqli_affected_rows($connect) > 0)
	{
	Print '<script>alert("Successfully Added !");</script>';
	Print '<script>window.location.assign("login.php");</script>';

}
else {
	Print '<script>alert("Profile Not Added !");</script>';
	echo mysqli_error ($connect);
}
}
mysqli_close($connect);
}

?>