1. //this is where email is suppose to be post
2.  
3.  
4.  
5. <?php
6.  
7. session_start();
8.  
9. require 'config/db.php';
10.  
11. $errors = array();
12. $username = "";
13. $email = "";
14.  
15.  
16. // if user clicks on the sign up button
17. if (isset($_POST ['signup-btn'])) {
18.  
19. $username= $_POST['username'];
20. $email = $_POST['email'];
21. $password = $_POST['password'];
22. $passwordConf = $_POST["passwordConf"];
23.  
24. }
25.  
26.  
27.  
28. //validation
29. if (empty($username)) {
30.         $errors['username'] = 'Username required';
31.        
32. }
33.  
34. if (empty($email)) {
35.         $errors['email'] = 'Email required';
36.        
37. }
38.  
39. if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
40.         $errors['email'] = 'Email address is invalid';
41. }
42.  
43. if (empty($password)) {
44.         $errors['password'] = 'Password required';
45. }
46.  
47. if (isset($password) && isset($passwordConf) && $password !== $passwordConf) {
48.         $errors['password'] = "The two password do not match";
49. }
50.  
51. $emailQuery = "SELECT * FROM users WHERE email=? LIMIT 1";
52. $stmt = $conn->prepare($emailQuery);
53. $stmt->bind_param('s', $email);
54. $stmt->execute();
55. $result = $stmt->get_result();
56. $userCount = $result->num_rows;
57. $stmt->close();
58.  
59. if ($userCount > 0) {
60.         $errors['email'] = "Email already esists";
61. }
62.  
63. if (count($errors) === 0) {
64.         $password = password_hash($passord, PASSWORD_DEFAULT);
65.         $token = bin2hex(random_bytes(50));
66.         $verified = false;
67.  
68.         $sql = "INSERT INTO users (username, email, verified, token, password) VALUES (?, ?, ?, ?, ?)";
69.         $stmt = $conn->prepare($sql);
70.         $stmt->bind_param('ssbss', $username, $email, $verified, $token, $password);
71.  
72.         if ($stmt->excute()){
73.                 //login user
74.                 $user_id = $conn->insert_id;
75.                 $_SESSION['id'] = $user_id;
76.                 $_SESSION ['username'] = $username;
77.                 $_SESSION ['email'] = $email;
78.                 $_SESSION ['verified'] = $verified;
79.                 // set flash message
80.                 $_SESSION['message'] = "You are now logged in! Continue with your upload";
81.                 $_SESSION['alert-class'] = "alert-success";
82.                 header('location: profilepage.php');
83.                 exit();
84.         }
85.         else {
86.                 $errors['db_error'] = "Database error: failed to register";
87.         }
88. }
89.  
90.  
91. // if user clicks on the login button
92.  
93. if (isset($_POST ['login-btn'])) {
94.  
95.         $username= $_POST['username'];
96.         $password = $_POST['password'];
97.        
98.        
99.        
100.        
101.         //validation
102.         if (empty($username)) {
103.                 $errors['username'] = 'Username required';
104.                
105.         }
106.  
107.                
108.         if (empty($password)) {
109.                 $errors['password'] = 'Password required';
110.         }
111.  
112. if(count($errors) ===0){
113.         $sql = "SELECT * FROM users WHERE email=? OR username=? LIMIT 1";
114.         $stmt = $conn->prepare($sql);
115.         $stmt->bind_param('ss', $username, $username);
116.         $stmt->execute();
117.         $result = $stmt->get_result();
118.         $user = $result->fetch_assoc();
119.  
120.                 if (password_verify($password, $user['password'])) {
121.                 //login sucess
122.                
123.                
124.                         $_SESSION['id'] = $user['id'];
125.                         $_SESSION['username'] = $user['username'];
126.                         $_SESSION['email'] = $user['email'];
127.                         $_SESSION['verified'] = $user['verified'];
128.                 // set flash message
129.                         $_SESSION['message'] = "You are now logged in! Continue with your upload";
130.                         $_SESSION['alert-class'] = "alert-success";
131.                         header('location: profilepage.php');
132.                         exit();
133.                 }
134.                 else {
135.                 $errors['login_fail'] = "Wrong credentials";
136.                 }
137.                
138.        
139.         }
140. }              
141.  
142. // logout user
143. if (isset($_GET['logout'])){
144.         session_destroy();
145.         unset($_SESSION['id']);
146.         unset($_SESSION['username']);
147.         unset($_SESSION['email']);
148.         unset($_SESSION['verified']);
149.         header('location: home.php');
150.         exit();
151. }