-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathinsert_user.php
More file actions
49 lines (42 loc) · 2.23 KB
/
insert_user.php
File metadata and controls
49 lines (42 loc) · 2.23 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
<?php
if(isset($_POST['gender'], $_POST['fname'], $_POST['lname'], $_POST['user_email'], $_POST['user_password'])){
// CHECK IF FIELDS ARE NOT EMPTY
if(!empty(trim($_POST['fname'])) && !empty(trim($_POST['lname'])) && !empty(trim($_POST['gender'])) && !empty(trim($_POST['user_email'])) && !empty($_POST['user_password'])){
// Escape special characters.
$fname = mysqli_real_escape_string($db_connection, htmlspecialchars($_POST['fname']));
$lname = mysqli_real_escape_string($db_connection, htmlspecialchars($_POST['lname']));
$gender = mysqli_real_escape_string($db_connection, htmlspecialchars($_POST['gender']));
$user_email = mysqli_real_escape_string($db_connection, htmlspecialchars($_POST['user_email']));
// IF EMAIL IS VALID
if (filter_var($user_email, FILTER_VALIDATE_EMAIL)) {
// CHECK IF EMAIL IS ALREADY REGISTERED
$stmt = $db_connection->prepare("SELECT `user_email` FROM `users` WHERE user_email = ?");
$stmt->bind_param("s", $user_email);
$stmt->execute();
$result = $stmt->get_result();
if($result->num_rows > 0){
$error_message = "This Email Address is already registered. Please Try another.";
} else {
// IF EMAIL IS NOT REGISTERED
$user_hash_password = password_hash($_POST['user_password'], PASSWORD_DEFAULT);
// INSERT USER INTO THE DATABASE
$stmt = $db_connection->prepare("INSERT INTO `users` (firstname,lastname,gender, user_email, user_password)
VALUES (?, ?, ?, ?, ?)");
$stmt->bind_param("sssss", $fname, $lname, $gender, $user_email, $user_hash_password);
$stmt->execute();
if($stmt->affected_rows === 1){
$success_message = "Thanks! You have successfully signed up.";
} else {
$error_message = "Oops! something wrong.";
}
}
} else {
// IF EMAIL IS INVALID
$error_message = "Invalid email address";
}
} else {
// IF FIELDS ARE EMPTY
$error_message = "Please fill in all the required fields.";
}
}
?>