You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
85 lines
1.8 KiB
PHP
85 lines
1.8 KiB
PHP
|
|
<?php
|
|
|
|
if (empty($_POST["nfc"])) {
|
|
die("hey, you forgot your nfc here ]]");
|
|
// $errnfc = "hey, you forgot your nfc here ]]";
|
|
// exit;
|
|
}
|
|
|
|
if (empty($_POST["name"])) {
|
|
die("Name is required");
|
|
}
|
|
|
|
if ( ! filter_var($_POST["email"], FILTER_VALIDATE_EMAIL)) {
|
|
die("are you sure this is an email? ]]");
|
|
}
|
|
|
|
if (strlen($_POST["password"]) < 8) {
|
|
die("password must be at least 8 characters");
|
|
}
|
|
|
|
if ( ! preg_match("/[a-z]/i", $_POST["password"])) {
|
|
die("password must contain at least one letter");
|
|
}
|
|
|
|
if ( ! preg_match("/[0-9]/", $_POST["password"])) {
|
|
die("password must contain at least one number");
|
|
}
|
|
|
|
if ($_POST["password"] !== $_POST["password_confirmation"]) {
|
|
die("passwords must match");
|
|
}
|
|
|
|
$password_hash = password_hash($_POST["password"], PASSWORD_DEFAULT);
|
|
|
|
$mysqlinfc = require __DIR__ . "/database.php";
|
|
|
|
//$sqlnfc = "SELECT EXISTS (SELECT * FROM user WHERE nfc = '%d')";
|
|
$sqlnfc = sprintf("SELECT EXISTS (SELECT * FROM nfc WHERE nfc = '%d')",$mysqlinfc->real_escape_string($_POST["nfc"]));
|
|
|
|
//print_r($sqlnfc);
|
|
$result = $mysqlinfc->query($sqlnfc);
|
|
//print_r($result);
|
|
|
|
$user = $result->fetch_row();
|
|
print_r($user);
|
|
print_r($user[0]);
|
|
|
|
if ($user[0] > 0 ) {
|
|
|
|
$mysqli = require __DIR__ . "/database.php";
|
|
|
|
$sql = "INSERT INTO user (name, email, password_hash, nfc)
|
|
VALUES (?, ?, ?, ?)";
|
|
|
|
$stmt = $mysqli->stmt_init();
|
|
|
|
if ( ! $stmt->prepare($sql)) {
|
|
die("SQL error: " . $mysqli->error);
|
|
}
|
|
|
|
$stmt->bind_param("ssss",
|
|
$_POST["name"],
|
|
$_POST["email"],
|
|
$password_hash,
|
|
$_POST["nfc"]);
|
|
|
|
if ($stmt->execute()) {
|
|
header("Location: signup-success.html");
|
|
exit;
|
|
|
|
} else {
|
|
|
|
if ($mysqli->errno === 1062) {
|
|
die("email already taken");
|
|
} else {
|
|
die($mysqli->error . " " . $mysqli->errno);
|
|
}
|
|
}
|
|
} else {
|
|
die("token not here");
|
|
}
|
|
|
|
?>
|