65 lines
2.4 KiB
PHP
65 lines
2.4 KiB
PHP
<?php
|
|
session_start();
|
|
require_once 'config.php';
|
|
|
|
// Handle registration form submission
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
|
// Validate that required fields are provided
|
|
if (empty($_POST['username']) || empty($_POST['email']) || empty($_POST['password'])) {
|
|
echo "Please provide all required fields (username, email, and password).";
|
|
} else {
|
|
$username = $_POST['username'];
|
|
$email = $_POST['email'];
|
|
$password = $_POST['password'];
|
|
|
|
// Validate username length
|
|
if (strlen($username) < 3 || strlen($username) > 32) {
|
|
echo "Username must be between 3 and 32 characters.";
|
|
} elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
|
// Validate email format
|
|
echo "Invalid email format.";
|
|
} elseif (strlen($password) < 8 || strlen($password) > 128) {
|
|
// Validate password length
|
|
echo "Password must be between 8 and 128 characters.";
|
|
} else {
|
|
// Check if the username or email already exists
|
|
$checkQuery = "SELECT id FROM users WHERE username = ? OR email = ?";
|
|
$checkStmt = $mysqli->prepare($checkQuery);
|
|
$checkStmt->bind_param("ss", $username, $email);
|
|
$checkStmt->execute();
|
|
$checkStmt->store_result();
|
|
|
|
if ($checkStmt->num_rows > 0) {
|
|
echo "Username or email already exists. Please choose a different one.";
|
|
} else {
|
|
// Hash the password
|
|
$hashed_password = password_hash($password, PASSWORD_DEFAULT);
|
|
|
|
// Prepare and execute the SQL query using prepared statements
|
|
$insertQuery = "INSERT INTO users (username, email, password) VALUES (?, ?, ?)";
|
|
$insertStmt = $mysqli->prepare($insertQuery);
|
|
$insertStmt->bind_param("sss", $username, $email, $hashed_password);
|
|
|
|
// Execute the statement
|
|
$result = $insertStmt->execute();
|
|
|
|
if ($result) {
|
|
echo "Registration successful. <a href='pages/login.html'>Login here</a>.";
|
|
} else {
|
|
echo "Error: " . $mysqli->error;
|
|
}
|
|
|
|
// Close the statements
|
|
$insertStmt->close();
|
|
}
|
|
|
|
// Close the statement for checking existing username or email
|
|
$checkStmt->close();
|
|
}
|
|
}
|
|
}
|
|
|
|
include "pages/register.html";
|
|
|
|
?>
|