". mysqli_error());
// Select Database
$db_select=mysqli_select_db($connection, $db_database);
if (!$db_select) die ("Could not select the database:
". mysqli_error());
// Register User
if (sanitize($_POST['email']) == NULL || sanitize($_POST['password']) == NULL || sanitize($_POST['email']) == "" || sanitize($_POST['password']) == "") {
$error = "Please enter a valid username and password.";
} else {
// Parse Credentials
$email = sanitize($_POST['email']);
$password = hash('sha256', sanitize($_POST['password']));
// Query Credentials
$query = "SELECT id, is_confirmed, banned from users where email='".$email."' and password='".$password."' LIMIT 1";
$result = mysqli_query($connection, $query);
if ($row = mysqli_fetch_array($result)) {
if ($row['is_confirmed'] != 1) {
$error = "Please check your email for an activation link.";
} else if ($row['banned'] == 1) {
header('Location: banned.php');
} else {
$_SESSION['uid'] = $row['id'];
// TODO: Create redirect script based on clicked link -> Use GET Protocol
header('Location: index.php');
}
} else {
$error = "The username or password you have provided is invalid.";
}
}
}
?>