<?php
// includes_config.php should contain your database credentials
include 'includes_config.php';

// Start the session (if you're using sessions for login)
session_start();

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = $_POST['name'];
    $email = $_POST['email'];
    $password = $_POST['password'];

    // Basic validation (add more checks as needed, e.g., email format, password strength)
    if (empty($name) || empty($email) || empty($password)) {
        $error_message = "All fields are required.";
    } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $error_message = "Invalid email format.";
    } elseif (strlen($password) < 6) {  // Example password strength check
        $error_message = "Password must be at least 6 characters long.";
    } else {
        // Hash the password securely before storing it
        $hashed_password = password_hash($password, PASSWORD_DEFAULT);

        // Check if the email already exists (prevent duplicates)
        $check_email_sql = "SELECT email FROM users WHERE email = '$email'";
        $check_email_result = $conn->query($check_email_sql);

        if ($check_email_result->num_rows > 0) {
            $error_message = "Email already exists. Please login or use a different email.";
        } else {
            // Insert data into the database
            $sql = "INSERT INTO users (name, email, password) VALUES ('$name', '$email', '$hashed_password')";

            if ($conn->query($sql) === TRUE) {
                $success_message = "Registration successful!";
                // Redirect to login or display success message
                header("Location: login.php?registration=success"); // Redirect with a parameter
                exit(); // Important: Stop further execution
            } else {
                $error_message = "Error: " . $sql . "<br>" . $conn->error;
            }
        }
    }
    $conn->close();
}
?>

<!DOCTYPE html>
<html>
<head>
    <title>Register</title>
</head>
<body>

    <h1>Register</h1>

    <?php if (isset($error_message)) { echo "<p style='color:red;'>$error_message</p>"; } ?>
    <?php if (isset($success_message)) { echo "<p style='color:green;'>$success_message</p>"; } ?>

    <form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>">  
        Name: <input type="text" name="name" required><br><br>
        Email: <input type="email" name="email" required><br><br>
        Password: <input type="password" name="password" required><br><br>
        <input type="submit" value="Submit">
    </form>

</body>
</html>
