Simple-Click/process_registration.php at master · LinChaonan/Simple-Click · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

<?php

require_once("config.php");
require_once("send_mail.php");
// TODO: Extract $_POST variables, check they're OK, and attempt to login.
// Notify user of success/failure and redirect/give navigation options.

// For now, I will just set session variables and redirect.


if($_SERVER["REQUEST_METHOD"] == "POST") {

    $email = trim($_POST["email"]);
    $password = trim($_POST["password"]);
    $repeat_password = trim($_POST["repeat_password"]);
    $account_type = $_POST["accountType"];
    $phone = $_POST["phone"];
    $address = $_POST["address"];

    if (!isset($_POST['repeat_password'], $_POST['password'], $_POST['email'])) {
        echo('<script>alert("Please complete the registration form")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if (empty($_POST['repeat_password']) || empty($_POST['password']) || empty($_POST['email'])) {
        echo('<script>alert("Please complete the registration form")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        echo('<script>alert("Invalid email format")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if(strlen($password) < 6){
        echo('<script>alert("Password must have at least 6 characters")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if ($password != $repeat_password){
        echo('<script>alert("Passwords do not match")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if (((strlen($phone) > 6) and (strlen($phone) < 14)) or (strlen($phone) == 0)){

    }
    else{
        echo('<script>alert("Please enter a valid phone number")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    if ((preg_match('/^[0-9-+]{7}$/',$phone))
        or (preg_match('/^[0-9-+]{8}$/',$phone))
        or (preg_match('/^[0-9-+]{9}$/',$phone))
        or (preg_match('/^[0-9-+]{10}$/',$phone))
        or (preg_match('/^[0-9-+]{11}$/',$phone))
        or (preg_match('/^[0-9-+]{12}$/',$phone))
        or (preg_match('/^[0-9-+]{13}$/',$phone))
        or (strlen($phone) == 0))
    {

    }
    else{
        echo('<script>alert("Password enter a valid phone number")</script>');
        header("refresh:0;url=register.php");
        die();
    }

    $hashed_password = password_hash($password, PASSWORD_DEFAULT);

    $sql = "INSERT INTO user (email, password, account_type, address, phone) VALUES ('$email','$hashed_password','$account_type', '$address', '$phone')";


    if (mysqli_query($link, $sql)) {

        echo ('<script>alert("Registration Successful")</script>');
        $subject = "Welcome to Simple Click!";
        $body = "Hi there, <br/> <br/> Your registration was successful. <br/> <br/> Enjoy you journey at Simple Click! <br/> <br/> Kind regards, <br/> Simple Click Marketing Team <br/> ";
        send_email($email, $subject, $body);
    }
}
mysqli_close($link);
header("refresh:0;url=browse.php");
?>