/
register.php
153 lines (119 loc) · 4.01 KB
/
register.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
<?php
require_once($_SERVER['DOCUMENT_ROOT'] . "/resources/config.php");
include(FUNCTION_PATH . "/connect.php");
include(FUNCTION_PATH . "/scripts.php");
include(FUNCTION_PATH . "/mail.php");
$url = "https://" . $_SERVER['SERVER_NAME'];
// No post data sent.
if ($_SERVER['CONTENT_LENGTH'] == 0) {
header("Location: " . $url . "/error.php?msg=3");
die();
}
// User already logged in.
else if (isset($_SESSION['login'])) {
header("Location: " . $url . "/error.php?msg=4");
die();
//break;
}
else if (!isset($_POST['name']) || !isset($_POST['password']) || !isset($_POST['email'])) {
header("Location: " . $url . "/error.php?msg=4");
die();
//break;
}
$userData = $_POST;
$submitData = count($userData);
if ($submitData != 7) {
die("Invalid registration submission.");
}
else {
foreach ($userData as $key => $value) {
$userData[$key] = test_input($value);
if ($value == "") {
die("Error: " . $key . " cannot be null.");
}
}
}
$password = test_input($_POST['password']);
$password2 = test_input($_POST['password2']);
if ($userData['password'] == $userData['password2']) {
$password = sha1($userData['password']);
}
else {
die("Passwords do not match.");
}
// See if email is already in use
$sql = 'SELECT * FROM Users WHERE email = "' .$userData['email']. '"';
$result = $con->query($sql);
// Not 0 means the email already exists.
if ($result->num_rows != 0) {
header("Location: /error?msg=emailinuse");
die();
}
// Add user to db
// TODO: UPDATE VARS TO USE OBJ
$sql = 'INSERT INTO Users (name, password, email, cycle, num_year_program, major, register_date) '.
'VALUES ("'.$userData['name'].'", "'.$userData['password'].'", "'.$userData['email'].'", "'
.$userData['cycle'].'", "'.$userData['numCoops'].'", "'.$userData['major'].'", "'.time().'"
)';
if (!$con->query($sql)) {
trigger_error('Wrong SQL: ' . $sql . ' Error: ' . $con->error, E_USER_ERROR);
}
else {
$verifyLink = getVerifyLink($userData['name'], $userData['email'], $userData['cycle']);
//send_init_email($userData['name'], $userData['email'], $userData['cycle']); // Success, user has been created.
echo "Registration successful!";
}
// $majorName = getMajorName($major);
$formGroupLabel = "col-sm-4 col-sm-offset-1";
$formGroupItem = "text-primary col-sm-7";
?>
<!--
<div class="container">
<div class="row">
<div class="col-sm-8 col-sm-offset-2 formHeader text-center">
<div class="row">
<h2>Welcome to Coopswitch, <span class="text-primary"><?php echo $name; ?></span>!</h2>
<br />
</div>
<div class="row">
<div class="text-warning bg-warning lead" style="padding: 12px;">
<p class=""><strong>Please check your email to verify your account.</strong></p>
</div>
</div>
<div class="row">
<form id="registeredForm" class="form-horizontal" role="form">
<div class="form-group">
<label class="control-label <?php echo $formGroupLabel; ?>">Email</label>
<div class="<?php echo $formGroupItem; ?>">
<p class="form-control-static"><?php echo $email; ?></p>
</div>
</div>
<div class="form-group">
<label class="control-label <?php echo $formGroupLabel; ?>">Major</label>
<div class="<?php echo $formGroupItem; ?>">
<p class="form-control-static"><?php echo $majorName; ?></p>
</div>
</div>
<div class="form-group">
<label class="control-label <?php echo $formGroupLabel; ?>">Current Program</label>
<div class="<?php echo $formGroupItem; ?>">
<p class="form-control-static"><?php echo $currentProgramText; ?></p>
</div>
</div>
<div class="form-group">
<label class="control-label <?php echo $formGroupLabel; ?>">Current Cycle</label>
<div class="<?php echo $formGroupItem; ?>">
<p class="form-control-static"><?php echo $currentCycleText; ?></p>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
-->
<?php
require_once(TEMPLATES_PATH . "/footer.php");
?>
<script type="text/javascript">
</script>