blogartisanal/user/verification.php

97 lines
3.2 KiB
PHP

<?php
require_once('config.php');
$page_name='Register';
include_once('top.php');
$email=htmlspecialchars(formulaires($_POST['email']));
$username=htmlspecialchars(formulaires($_POST['username']));
$passwd=htmlspecialchars(formulaires($_POST['passwd']));
$passwd2=htmlspecialchars(formulaires($_POST['passwd2']));
//// VERIFICATIONS BANALES ////
if(!$passwd || !$passwd2 || strlen($passwd) < 5)
{
echo'Your password or its confirmation is inexistant or your password is less than 5 characters<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
if($passwd!=$passwd2)
{
echo'Passwords don\'t match !<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
if(!$username || strlen($username) > 15)
{
echo'Your username is inexisant or is more than 15 caracters...<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
if(!$email)
{
echo'Your e-mail is innexistant.<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
//// VERIFICATIONS DES EXISTANCES ////
$reponse_mail=$dbh->query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error()); //verification si e-mail existe déjà
$count_mail=$reponse_mail->rowCount();
if($count_mail == 1)
{
echo'This e-mail is already taken.<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
$reponse_username=$dbh->query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error()); //verification si username existe déjà
$count_username=$reponse_username->rowCount();
if($count_username == 1)
{
echo 'This username is already taken.<br /><a href="register.php" onClick="history.Back()">Back</a>';
include_once('bottom.php');
return FALSE;
}
for ($ligne=0;$ligne<30;$ligne++)
{
@$session.=substr('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN',(rand()%(strlen('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN'))),1);
}
$passwd=md5($passwd); //Codage du password
//// DEFINIR LE PREMIER UTILISATEUR COMME ADMINISTRATEUR ////
$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error());
$count_user=$nombre_utilisateur->rowCount();
if($count_user == 0){
$user_rank = '1';
}else{
$user_rank ='0';
}
if(!isset($website_name))
{
$website_name = "Blog Artisanal";
}
//// INSCRIPTION DANS LA BDD ////
$sql_register = "INSERT INTO user ( id_user, session, username, pass, email, date, user_rank)
VALUES (:id_user, :session, :username, :pass, :email, :date, :user_rank)";
$query = $dbh->prepare($sql_register) or die ('error : '.mysql_error()); //insertion dans la bdd
$results = $query->execute(array(
"id_user" => '',
"session" => $session,
"username" => $username,
"pass" => $passwd,
"email" => $email,
"date" => '',
"user_rank" => $user_rank
));
echo'Thank you for registering to '.$website_name.'<br /><a href="index.php">Login !</a>';
include_once('bottom.php');
?>