Untitled diff
建立於 差異永不過期
<?php
<?php
ob_start();
ob_start();
session_start();
session_start();
include_once 'connection.php';
include_once 'connection.php';
$error = false;
$error = false;
if(isset($_POST['signup'])){
if(isset($_POST['signup'])){
//prevent sql injection
//prevent sql injection
$name = trim($_POST['imie']);
$name = trim($_POST['imie']);
$name = strip_tags($name);
$name = strip_tags($name);
$name = htmlspecialchars($name);
$name = htmlspecialchars($name);
$surname = trim($_POST['nazwisko']);
$surname = trim($_POST['nazwisko']);
$surname = strip_tags($surname);
$surname = strip_tags($surname);
$surname = htmlspecialchars($surname);
$surname = htmlspecialchars($surname);
$login = trim($_POST['userlogin']);
$login = trim($_POST['userlogin']);
$login = strip_tags($login);
$login = strip_tags($login);
$login = htmlspecialchars($login);
$login = htmlspecialchars($login);
$pass = trim($_POST['haslo']);
$pass = trim($_POST['haslo']);
$pass = strip_tags($pass);
$pass = strip_tags($pass);
$pass = htmlspecialchars($pass);
$pass = htmlspecialchars($pass);
$pass_conf = trim($_POST['haslo_confirm']);
$pass_conf = trim($_POST['haslo_confirm']);
$pass_conf = strip_tags($pass_conf);
$pass_conf = strip_tags($pass_conf);
$pass_conf = htmlspecialchars($pass_conf);
$pass_conf = htmlspecialchars($pass_conf);
$date = trim($_POST['date']);
$date = trim($_POST['date']);
$date = strip_tags($date);
$date = strip_tags($date);
$date = htmlspecialchars($date);
$date = htmlspecialchars($date);
$email = trim($_POST['e-mail']);
$email = trim($_POST['e-mail']);
$email = strip_tags($email);
$email = strip_tags($email);
$email = htmlspecialchars($email);
$email = htmlspecialchars($email);
$phone = trim($_POST['telefon']);
$phone = trim($_POST['telefon']);
$phone = strip_tags($phone);
$phone = strip_tags($phone);
$phone = htmlspecialchars($phone);
$phone = htmlspecialchars($phone);
//name validation
//name validation
if(empty(($name)){
if(empty($name)){
$error = true;
$error = true;
$nameError = "Musisz wpisać imię";
$nameError = "Musisz wpisać imię";
}
}
else if(!preg_match("/^[a-zA-Z ]",$name))){
else if(!preg_match("/^[a-zA-Z ]",$name)){
$error = true;
$error = true;
$nameError = "Imię musi zawierać tylko znaki z alfabetu"
$nameError = "Imię musi zawierać tylko znaki z alfabetu";
}
}
//surname validation
//surname validation
if(empty(($surname)){
if(empty($surname)){
$error = true;
$error = true;
$nameError = "Musisz wpisać imię";
$nameError = "Musisz wpisać imię";
}
}
else if(!preg_match("/^[a-zA-Z ]",$surname))){
else if(!preg_match("/^[a-zA-Z ]",$surname)){
$error = true;
$error = true;
$surnameError = "Nazwisko musi zawierać tylko znaki z alfabetu"
$surnameError = "Nazwisko musi zawierać tylko znaki z alfabetu";
}
}
//email validation
//email validation
if ( !filter_var($email,FILTER_VALIDATE_EMAIL) ) {
if ( !filter_var($email,FILTER_VALIDATE_EMAIL) ) {
$error = true;
$error = true;
$emailError = "Wprowadź poprawny adres email";
$emailError = "Wprowadź poprawny adres email";
}
}
else {
else {
// check email exist or not
// check email exist or not
$query = "SELECT email FROM users WHERE email='$email'";
$query = "SELECT email FROM users WHERE email='$email'";
$result = mysql_query($query);
$result = mysql_query($query);
$count = mysql_num_rows($result);
$count = mysql_num_rows($result);
if($count!=0){
if($count!=0){
$error = true;
$error = true;
$emailError = "Ten email jest już w użyciu";
$emailError = "Ten email jest już w użyciu";
}
}
}
}
// password validation
// password validation
if (empty($pass) || empty($pass_conf) ){
if (empty($pass) || empty($pass_conf) ){
$error = true;
$error = true;
$passError = "Please enter password.";
$passError = "Please enter password.";
} else if(strlen($pass) < 6) || strlen($pass_conf) < 6) {
} else if(strlen($pass) < 6 || strlen($pass_conf) < 6) {
$error = true;
$error = true;
$passError = "Password must have atleast 6 characters.";
$passError = "Password must have atleast 6 characters.";
}
}
$password - hash('sha256', $pass);
$password - hash('sha256', $pass);
if(!$error){
if(!$error){
$query = "INSERT INTO users(imie,nazwisko,userlogin,haslo,date,email,telefon) VALUES('$name','$surname','$login','$password','$date','$email','$phone')";
$query = "INSERT INTO users(imie,nazwisko,userlogin,haslo,date,email,telefon) VALUES('$name','$surname','$login','$password','$date','$email','$phone')";
$res = mysql_query($query);
$res = mysql_query($query);
if($res){
if($res){
$errTyp = "success";
$errTyp = "success";
$errMSG = "Rejestracja kompletna, możesz się teraz zalogować";
$errMSG = "Rejestracja kompletna, możesz się teraz zalogować";
unset($name);
unset($name);
unset($surname);
unset($surname);
unset($login);
unset($login);
unset($pass);
unset($pass);
unset($pass_conf);
unset($pass_conf);
unset($date);
unset($date);
unset($email);
unset($email);
unset($phone);
unset($phone);
}
}
else{
else{
$errTyp = "danger";
$errTyp = "danger";
$errMSG = "Coś poszło nie tak. Spróbuj później";
$errMSG = "Coś poszło nie tak. Spróbuj później";
}
}
}
}
}
}
?>
?>