code is
<?php
session_start();
include("database.php");
function usernameTaken($username){
global $conn;
if(!get_magic_quotes_gpc()){
$username = addslashes($username);
}
$q = "select username from users where username = '$username'";
$result = mysql_query($q,$conn);
return (mysql_numrows($result) > 0);
}
function emailTaken($email){
global $conn;
if(!get_magic_quotes_gpc()){
$email = addslashes($email);
}
$q = "select username from users where email = '$email'";
$result = mysql_query($q,$conn);
return (mysql_numrows($result) > 0);
}
function addNewUser($username, $password, $forename, $surname, $email){
global $conn;
$q = "INSERT INTO users VALUES ('$username', '$password', '$forename', '$surname', '$email', '$mobile', '$dob', '$location')";
return mysql_query($q,$conn);
}
function displayStatus(){
$uname = $_SESSION['reguname'];
if($_SESSION['regresult']){
?>
<h1>Registered!</h1>
<p>Thank you <b><?php echo $uname;?></b>, your information has been added to the
database, you may now <a href="index.php" title="Login">log in</a>.</p>
<?php
}
else{
?>
<h1>Registration Failed</h1>
<p>We're sorry, but an error has occurred and your registration for the username <b><? echo $uname; ?></b>,
could not be completed.<br>
Please try again at a later time.</p>
<?php
}
unset($_SESSION['reguname']);
unset($_SESSION['regforename']);
unset($_SESSION['regsurname']);
unset($_SESSION['regemail']);
unset($_SESSION['regmobile']);
unset($_SESSION['regdob']);
unset($_SESSION['reglocation']);
unset($_SESSION['registered']);
unset($_SESSION['regresult']);
}
if(isset($_SESSION['registered'])){
?>
<html>
<title>Registration Page</title>
<body>
<?php displayStatus(); ?>
</body>
</html>
<?php
return;
}
if(isset($_POST['subjoin'])){
/* Make sure all fields were entered */
if(!$_POST['user'] || !$_POST['pass'] || !$_POST['forename'] || !$_POST['surname'] || !$_POST['email'] || !$_POST['mobile'] || !$_POST['dob'] || !$_POST['location'] ){
die('You didn\'t fill in a required field.');
}
/* Spruce up username, check length */
$_POST['user'] = trim($_POST['user']);
if(strlen($_POST['user']) > 30){
die("Sorry, the username is longer than 30 characters, please shorten it.");
}
/* Check if username is already in use */
if(usernameTaken($_POST['user'])){
$use = $_POST['user'];
die("Sorry, the username: <strong>$use</strong> is already taken, please pick another one.");
}
/* Check if email is already in use */
if(emailTaken($_POST['email'])){
$use = $_POST['email'];
die("Sorry, the email: <strong>$use</strong> is already taken, please pick another one.");
}
/* Add the new account to the database */
$md5pass = md5($_POST['pass']);
$_SESSION['reguname'] = $_POST['user'];
$_SESSION['regforname'] = $_POST['forename'];
$_SESSION['regsurname'] = $_POST['surname'];
$_SESSION['regemail'] = $_POST['email'];
$_SESSION['regemail'] = $_POST['mobile'];
$_SESSION['regemail'] = $_POST['dob'];
$_SESSION['regemail'] = $_POST['location'];
$_SESSION['regresult'] = addNewUser($_POST['user'], $md5pass, $_POST['forename'], $_POST['surname'], $_POST['email'], $_POST['mobile'], $_POST['dob'], $_POST['location']);
$_SESSION['registered'] = true;
echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
return;
}
else{
?>