PHP_MySQL_DrRecords/CreateUser.php at master · creed30/PHP_MySQL_DrRecords · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
<!DOCTYPE HTML>
<html>
<head>
    <style>
        body {
            font-family: Arial;
        }
        #title {
            background-color: gray;
            border-radius: 5%;
            padding: 20px;
            width: 50%;
        }
        .error {
            color: red;
        }
    </style>
</head>
<body>

<?php
	$Username = $Password = $ConfirmPassword = "";
	$UsernameErr = $PasswordErr = $ConfirmPasswordErr = "";

	if ($_SERVER["REQUEST_METHOD"] == "POST")
	{
    	if (empty($_POST["Username"]))
		{
        	$UsernameErr = "Username is a required field";
  	  	}
		else
		{
        	$Username = test_input($_POST["Username"]);
    	}
    	if (empty($_POST["Password"]))
		{
        	$PasswordErr = "Password is a required field";
    	}
		else
		{
        	$Password = test_input($_POST["Password"]);
    	}
    	if (empty($_POST["ConfirmPassword"]))
		{
        	$PasswordErr = "Password Mismatch!";
    	}
		else
		{
        	$ConfirmPassword = test_input($_POST["ConfirmPassword"]);
    	}
    	if ($_POST["ConfirmPassword"] != $_POST["Password"])
		{
        	$PasswordErr = "Password Mismatch!";
    	}
	}

	function test_input($data)
	{
  	  $data = trim($data);
  	 $data = stripslashes($data);
  	 $data = htmlspecialchars($data);
  	 return $data;
	}
?>

<h2><div id="title">Create New User Account</div></h2>
<form method="post" action='<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>'>
    Username: <input type="text" name="Username">
    <span class="error">* <?php echo $UsernameErr;?></span>
    <br><br>
    Password: <input type="text" name="Password">
    <span class="error">* <?php echo $PasswordErr;?></span>
    <br><br>
    Confirm Password: <input type="text" name="ConfirmPassword"
    <span class="error">* <?php echo $ConfirmPasswordErr;?></span>
    <br><br>
    Type: <select name="usertype">
        <option value="Doctor">Doctor</option>
        <option value="Patient">Patient</option>
		<option value="Admin">Admin</option>
    </select>
    <br><br>

   <input type="submit" name="submit" value="Submit">
</form>

<?php
	$usertype = "";
	$con=mysqli_connect("academic-mysql.cc.gatech.edu","cs4400_Group_20","UwBacqAh","cs4400_Group_20");
	if (mysqli_connect_errno())
 	{
		echo "Failed to connect to MySQL: " . mysqli_connect_error();
  	}
	if (isset($_REQUEST['Username']) && isset($_REQUEST['Password']) && $_REQUEST['Password'] == $_REQUEST['ConfirmPassword'])
	{
		if($_POST[usertype] == "Doctor")
		{
			$usertype = "d";
		}
		if($_POST[usertype] == "Patient")
		{
			$usertype = "p";
		}
		if($_POST[usertype] == "Admin")
		{
			$usertype = "a";
		}
		$sql="INSERT INTO User(Username, Password, User_type) VALUES ('$_POST[Username]','$_POST[Password]','$usertype')";
        if (!mysqli_query($con,$sql))
		{
			die('Error: ' . mysqli_error($con));
		}

		echo "Entry was added!";
	}
	mysqli_close($con);
?>

</body>
</html>