<?php
if($decrypt_focus === '[USER_SIGNUP]'):
	if(! isset($_POST['zipcode']) OR $_POST['zipcode'] !== '' OR strlen($_POST['zipcode']) > 0):
		die(result(false, 'You are not authorized user.'));
	endif;

	$name = strip_tags(remexspace(escape($_POST['name'])));
	$email = strip_tags(remspace(sanitize_email(escape($_POST['email']))));
	$password = strip_tags(remspace(escape($_POST['password'])));
	$repassword = strip_tags(remspace(escape($_POST['repassword'])));
	$reCAPTCHA = isset($_POST['g-recaptcha-response']) ? $_POST['g-recaptcha-response'] : '';
	$responseData = gCAPTCHA($reCAPTCHA);

	$stmt = $mysqli->prepare("SELECT * FROM users WHERE email = ?") or die(result(false, "An error occurred. Please try after some time."));
	$stmt->bind_param('s', $email);
	$stmt->execute();
	$stmt->store_result();
	$count_rows = $stmt->num_rows();
	$stmt->close();

	if(empty($name)):
		die(result(false, "Please enter your full name."));
	elseif(empty($email)):
		die(result(false, "Please enter your email address."));
	elseif(!validate_email($email)):
		die(result(false, "Please enter a valid email address."));
	elseif($count_rows > 0):
		die(result(false, "Entered email address already registered with us."));
	elseif((empty($password) && strlen($password) == 0)):
		die(result(false, "Please enter your password."));
	elseif(strlen($password) < 8):
		die(result(false, "Password should be at least 8 characters long."));
	elseif((empty($repassword) && strlen($repassword) == 0)):
		die(result(false, "Please re-enter your password."));
	elseif($password !== $repassword):
		die(result(false, "Password doesn't match."));
	elseif(!$reCAPTCHA):
		die(result(false, 'Please click on the reCAPTCHA box.'));
	elseif(!$responseData->success):
		die(result(false, 'Robot verification failed, Please try again.'));
	else:
		$pass = hash('whirlpool', hash('sha512', $password) . hash('sha384', $password . md5($password)) . TOKEN);
		$hash = hash('whirlpool', hash('sha384', $password) . hash('sha512', $password . md5($password)) . TOKEN);
		$newtoken = hash('whirlpool', hash('sha384', $name) . hash('sha512', $email . md5($password)) . TOKEN);
		$status   = 'pending';
		$creation = date('Y-m-d H:i:s');

		$stmt = $mysqli->prepare("INSERT INTO users(name, email, password, hash, token, status, creation) VALUES(?, ?, ?, ?, ?, ?, ?)") or die(result(false, "An error occurred. Please try after some time."));
		$stmt->bind_param('sssssss', $name, $email, $pass, $hash, $newtoken, $status, $creation);
		$e = $stmt->execute();
		$stmt->close();
		$mysqli->close();
		if($e):
			$subject = 'Confirm Email Address on ' . $websitename;
			$body = '<div style="float:left;width:600px;background-color:#eee;padding:15px 20px 20px;text-align:center"><img src="' . $imageurl . 'logo.png" alt="' . $websitename . '" width="100" /><table border="0" cellpadding="0" cellspacing="0" style="float:left;width:100%;margin:10px auto 0px;background-color:#fff"><tr><td align="center" valign="middle" style="border:1px solid #ddd;padding:20px 0px"><h3>Email Verification</h3><br clear="all"><p>Welcome! Thanks for signing up.<br clear="all">Please click on the button below to verify your email.</p><br clear="all"><br clear="all"><a href="' . $baseurl . 'mailverify/' . urlencode($email) . '/' . urlencode($newtoken) . '/' . urlencode(str_rot13('signup')) . '" target="_blank" style="background-color:#00aff2;color:#fff;font-size:12px;text-decoration:none;padding:10px 12px">Verify Your Email</a><br clear="all"><br clear="all"><br clear="all"><p style="color:#555">If you received this email by mistake, you can safely ignore this email.</p></td></tr></table></div>';

			$to = $email;$cc = "";$bcc = "";$attachments = array();
			if($mailer == 'amazon'):
				@AmazonMail($to, $cc, $bcc, $subject, $body, $attachments, $fromname, $fromemail, $fromname, $fromemail);
			elseif($mailer == 'phpmailer'):
				@PHPMail($to, $cc, $bcc, $subject, $body, $attachments, $fromname, $fromemail, $fromname, $fromemail);
			else:
				die(result(false, "Internal server error."));
			endif;

			die(result(true, "An email has been sent containing email veryfication link to <b>{$email}</b>."));
		else:
			die(result(false, "An error occurred. Please try after some time."));
		endif;
	endif;
else:
	die(result(false, "Access Denied!."));
endif;
?>