<?php
session_start() ;
require_once(' db_connect.php ');

//SEE IF ALREADY LOGGED IN

if($_SESSION[' logged_in'] == 1)
{
//REDIRECT TO HOMEPAGE
header('Locati on: http://' . $_SERVER['HTTP _HOST'] . '');
} else {

if(isset($_POST ['submit']))< br /> {

//BEGIN CHECKING USERNAME...

if(!$_POST['us ername']) die('Alert: username field was blank.');

//array of invalid characters
$junk = array('.' , ',' , '/' , '\'' , '`' , ';' , '[' , ']' , '-', '_', '*', '&', '^', '%', '$', '#', '@', '!', '~', '+', '(', ')', '|', '{', '}', '<', '>', '?', ':', '"', '=');

//starting lenght of username
$len = strlen($_POST[ 'username']);< br />
//replace invalid characters
$_POST['userna me'] = str_replace($ju nk, '', $_POST['userna me']);
$test = $_POST['userna me'];

//if lenghts are different ($len smaller), invalid characters found, so prompt error.
if(strlen($test ) != $len) {
die('Username Error: Username contained invalid characters. You can only use A-Z, 0-9 and the

underscore (_).');
}

//Check if username already exists...

$q2 = mysql_query(&q uot;SELECT * FROM `members` WHERE `username` = '".$_POS T['username'] ."'&quo t;;
$q3 = mysql_fetch_obj ect($q2);

if($q3->user name == $_POST['userna me']) {
die('<BR> ;<BR>Sorr y, but the username "'.$q3-& gt;username.' " is taken, please choose another.');
}

//PASSWORD

if(!$_POST['pa ssword']) {
die('Error: Password field was blank');
}
if(!$_POST['ve rify_password' ]) {
die('Error: Verify Password field was blank.');
}
if($_POST['pas sword'] != $_POST['verify _password']) {
die('Error: The passwords do not match.');
}
if(strlen($_POS T['password'] ) < 6 ) {
die('Error: Your password is too short. Must be 6 or more characters in length.');
}

//ADD NEW MEMBER

$insert ="INSERT INTO `members` (username, user_password, user_email) VALUES ('".$_PO ST['username' ]."',

'".md5($ _POST['passwor d'])."' , '".$_POS T['email'].& quot;')" ;

$insert2 = mysql_query($in sert);
if(!$insert2) die(mysql_error ());

echo('Registra tion Successful, Welcome new member! You can now login to your new account.');

} else {
header("L ocation: login.php" ;;

} //end not logged in
} //end submit not pressed
?>

//user must be logged in
if($_SESSION[' logged_in'] == 1) {

?>


<h3 id="respo nd">Le ave a Reply</h3> ;
<br>

<form name="com ments" action="& lt;? $_SERVER['PHP_ SELF']; ?>" method="p ost">

<input type="hid den" name="pag e" value="&l t;? echo($_SERVER[ 'REQUEST_URI'] ); ?>"> ;
<input type="hid den" name="dat e" value="&l t;? echo(date(&quo t;F j, Y."); ?>"> ;
<input type="hid den" name="tim e" value="&l t;? echo(time()); ?>"> ;

<table width="90 %" border="0 " cellspacing=&q uot;0" cellpadding=&q uot;0"> ;
<tr>
<td><d iv align="ri ght">U sername: </div>< ;/td>
<td><i nput name="use rname" type="tex t" size="30 " value="& quot;></t d>
</tr>
<tr>
<td><d iv align="ri ght">C ontact: </div>< ;/td>
<td><i nput type="tex t" name="con tact" size="30 " value="& quot;> <i>(email or url)</i>& lt;/td>
</tr>
<td><d iv align="ri ght">S ubject: </div>< ;/td>
<td><i nput type="tex t" name="sub ject" size="30 " value="& quot;></t d>
</tr>
<tr>
<td><d iv align="ri ght">C omment: </div>< ;/td>
<td><t extarea name="com ment" cols="45 " rows="5& quot; wrap="VIR TUAL"> </textarea&g t;</td>
</tr>
<tr>
<td></ td>
<td colspan=" 2">< ;input type="res et" value="Re set" style="ba ckground: #2c2c2c; font-family: vrinda; color: white; border: 0; width:80; height= 20;">
<input type="sub mit" name="sub mit" value="Ad d Comment" style="ba ckground: #2c2c2c; font-family: vrinda; color: white; border: 0; width:80; height= 20;">& lt;/td>
</tr>
</table>
</form>
<?
} else {

if($_SESSION[' logged_in'] == 0)
echo 'You must be a registered member to comment';

}
?>