You are already logged in!"; echo "Please logout first"; exit; } if ($_SERVER["REQUEST_METHOD"] === "POST") { if(!isset($_POST['new_username'], $_POST['new_password']) || trim($_POST['new_username']) =='' || trim($_POST['new_password']) == '') { $login_message = "Missing username or password."; } else { // Get user submitted information $new_username = trim($_POST['new_username']); $new_password = trim($_POST['new_password']); mysqli_report(MYSQLI_REPORT_OFF); // disable exceptions // Connect to the database //$conn=mysqli_connect("localhost","root","","pwd_mgr"); //// Check connection //if (mysqli_connect_errno()) { // echo "Failed to connect to MySQL: " . mysqli_connect_error(); // exit(); //} require_once __DIR__ . "/config.php"; // Insert a new user using a prepared statement to prevent SQL injection. $sql_query = "INSERT INTO login_users (username, password) VALUES (?, ?)"; $stmt = $conn->prepare($sql_query); if ($stmt === false) { $login_message = "Database error (prepare failed)."; $result = false; } else { $stmt->bind_param("ss", $new_username, $new_password); $result = $stmt->execute(); $stmt->close(); } unset($_POST['new_username']); unset($_POST['new_password']); if ($result == true) { echo "Successful registration!"; echo "
You can now use the login page"; exit; } else $login_message = "Error, probably user already exists!"; // Free result set $conn -> close(); } } ?>