Practical_13_Reg.php

<?php
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    //To connect to DB
    $conn = new mysqli("localhost", "root", "Heleninh@2022", "HAC_Services");
    if ($conn->connect_error) {
        die("Connection failed: " . $conn->connect_error);
    }

    $name     = trim($_POST['name']);
    $email    = trim($_POST['email']);
    $password = $_POST['password'];
    $role     = $_POST['role'];

    //To validate input
    if (strlen($name) < 3) {
        die("Name must be at least 3 characters.");
    }

    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        die("Invalid email format.");
    }

    if (!in_array($role, ['admin', 'broker', 'buyer'])) {
        die("Invalid role selected.");
    }

    if (strlen($password) < 6) {
        die("Password must be at least 6 characters.");
    }

    // To check if email already exists
    $check = $conn->prepare("SELECT id FROM users WHERE email = ?");
    $check->bind_param("s", $email);
    $check->execute();
    $check->store_result();

    if ($check->num_rows > 0) {
        die("Email already registered. Try logging in.");
    }

    $hashed_password = password_hash($password, PASSWORD_DEFAULT);
    $sql = "INSERT INTO users (name, email, password, role) VALUES (?, ?, ?, ?)";
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("ssss", $name, $email, $hashed_password, $role);

    if ($stmt->execute()) {
        header("Location: Practical_13_Login.html?success=1");
        exit();
    } else {
        echo "Registration error: " . $stmt->error;
    }

    $check->close();
    $stmt->close();
    $conn->close();
}
?>