num_rows < 1) { error("login", "Device ID invalid"); } //Validate email if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { error("login", "Invalid email address"); } $sql = "SELECT `id` FROM `user` WHERE `email`='" . $email . "' AND verified=1"; $query = ExecQuery($mysqli, $sql); if($query->num_rows >= 1) { error("login", "Email address is already in use."); } //Validate username $sql = "SELECT `id` FROM `user` WHERE `username`='" . $username . "'"; $query = ExecQuery($mysqli, $sql); if($query->num_rows >= 1) { error("login", "Username is already in use."); } //Validate password if($password1 != $password2) { error("login", "Passwords do not match"); } $password_hash = password_hash($password1, PASSWORD_BCRYPT); $code = $email . "~" . $device . "~"; $code .= RandomString(96 - strlen($code)); $code = str_rot13($code); $sql = "INSERT INTO user (`username`, `password`, `email`, `code`) VALUES ('$username', '$password_hash', '$email', '$code')"; ExecQuery($mysqli, $sql); $msg = "Hello " . $username . ",\n\n"; $msg .= "Please verify your LiPaccount by clicking the link below.\n"; $msg .= "Verify"; sendMail($email, "Verify LiPaccount", $msg); success("login", "An email has been sent to " . $email . " for verification"); ?>