111 views
error_reporting(E_ALL);
require '#evan/includes/common.php';
if(isset($_POST['submitted'])) {
$error = array();
if(empty($_POST['username'])) {
$error[]="Please enter a username!";
}
if(empty($_POST['password'])) {
$error[]="Please enter a password!";
}
}
if(isset($_POST['submitted']))
{
if(empty($error)){
$query = "
SELECT
id
FROM users
WHERE
username = :username
";
$query_params = array(
':username' => $_POST['username']
);
try
{
$stmt = $db->prepare($query);
$result = $stmt->execute($query_params);
}
catch(PDOException $ex)
{
die("Failed to run query: " . $ex->getMessage());
}
$row = $stmt->fetch();
if($row)
{
$error_user = "Username already taken!";
} else {
$query = "
INSERT INTO users (
username,
password,
salt
) VALUES (
:username,
:password,
:salt
)
";
$salt = dechex(mt_rand(0, 2147483647)) . dechex(mt_rand(0, 2147483647));
$password = hash('sha256', $_POST['password'] . $salt);
$query_params = array(
':username' => $_POST['username'],
':password' => $password,
':salt' => $salt
);
try
{
$stmt = $db->prepare($query);
$result = $stmt->execute($query_params);
}
catch(PDOException $ex)
{
die("Failed to run querywetewrt");
}
header("Location: http://XX.XX.XX.XXX/evan/login.php");
die("Redirecting to #");
}
} else{
$error_message = '';
foreach($error as $key => $values) {
$error_message.= "$values";
}
$error_message.="";
}
}
?>
echo "$error_message";
if (isset($_GET['E'])) {
echo $_GET['E'];
}
echo $error_user;
?>
Username*
Password*