<?php
if($decryptedfocus === '[SIGNUP]'):
	if(! isset($_POST['zipcode']) OR $_POST['zipcode'] !== '' OR strlen($_POST['zipcode']) > 0):
		die(output('You are not authorized user.'));
	endif;

	$name = filter_input(INPUT_POST, 'name');
	$name = $fn->entities($fn->escape($name));

	$email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL);
	$email = $fn->escape($email);

	$password = filter_input(INPUT_POST, 'password', FILTER_SANITIZE_STRING);
	$password = $fn->entities($fn->escape($password));

	$confirmpassword = filter_input(INPUT_POST, 'confirmpassword', FILTER_SANITIZE_STRING);
	$confirmpassword = $fn->entities($fn->escape($confirmpassword));

	$creation = date('Y-m-d H:i:s');

	$stmt = $mysqli->prepare("SELECT * FROM users WHERE email = ?") or die(output('An error occurred. Please try after some time.'));
	$stmt->bind_param('s', $email);
	$stmt->execute();
	$stmt->store_result();
	$count_rows = $stmt->num_rows();
	$stmt->close();

	if(empty($name)):
		die(output('Please enter your full name.'));
	elseif(empty($email)):
		die(output('Please enter your email ID.'));
	elseif($fn->valid_email($email) === FALSE):
		die(output('Please enter a valid email ID.'));
	elseif($count_rows > 0):
		die(output('Entered email address already registered with us.'));
	elseif((empty($password) && strlen($password) == 0)):
		die(output('Please enter your password.'));
	elseif(strlen($password) < 8):
		die(output('Password should be at least 8 characters long.'));
	elseif((empty($confirmpassword) && strlen($confirmpassword) == 0)):
		die(output('Please confirm your password.'));
	elseif($password !== $confirmpassword):
		die(output('Password doesn\'t match.'));
	else:
		if($grecaptcha === 'enabled'):
			$reCAPTCHA	  = filter_input(INPUT_POST, 'g-recaptcha-response', FILTER_SANITIZE_STRING);
			$responseData = $fn->reCAPTCHA($reCAPTCHA, $gsecretkey);

			if(!$reCAPTCHA):
				die(output('Please click on the reCAPTCHA box.'));
			elseif(!$responseData->success):
				die(output('Robot verification failed, Please try again.'));
			endif;
		endif;
		$pass = hash('whirlpool', hash('sha512', $password) . md5($password) . base64_encode($password));
		$hash = hash('whirlpool', hash('sha512', $password) . base64_encode($password) . md5($password));
		$token = hash('whirlpool', $pass.$hash);
		$creation = date('Y-m-d H:i:s');

		$stmt = $mysqli->prepare("INSERT INTO users(name, email, password, hash, token, creation) VALUES(?, ?, ?, ?, ?, ?)") or die(output('An error occurred. Please try after some time.'));
		$stmt->bind_param('ssssss', $name, $email, $pass, $hash, $token, $creation);
		$e = $stmt->execute();
		$stmt->close();
		$mysqli->close();
		if($e):
			$subject = 'Confirm Email Address on ' . $websitename;
			$message = '<div style="float:left;width:600px;background-color:#eee;padding:15px 20px 20px;text-align:center"><img src="' . $imageurl . 'logo.png" alt="' . $websitename . '" width="100" /><table border="0" cellpadding="0" cellspacing="0" style="float:left;width:100%;margin:10px auto 0px;background-color:#fff"><tr><td align="center" valign="middle" style="border:1px solid #ddd;padding:20px 0px"><h3>Email Verification</h3><br clear="all"><p>Welcome! Thanks for signing up.<br clear="all">Please click on the button below to verify your email.</p><br clear="all"><br clear="all"><a href="' . $baseurl . 'mailverify/' . urlencode($email) . '/' . urlencode($token) . '" target="_blank" style="background-color:#00aff2;color:#fff;font-size:12px;text-decoration:none;padding:10px 12px">Verify Your Email</a><br clear="all"><br clear="all"><br clear="all"><p style="color:#555">If you received this email by mistake, you can safely ignore this email.</p></td></tr></table></div>';

			$sm->send($email, '', '', $subject, $message, $fromname, $fromemail, $replyname, $replyemail);

			die(output(array('smsg' => 'An email has been sent containing email veryfication link to <b>'.$email.'</b>.')));
		else:
			die(output('An error occurred. Please try after some time.'));
		endif;
	endif;
else:
	die(output('Access Denied!'));
endif;
?>