connect_error) { die("
Connection failed: " . $conn->connect_error . "
"); } // Initialize an empty message variable $message = ""; // 2. PROCESS FORM SUBMISSION WHEN USER CLICKS REGISTER if ($_SERVER["REQUEST_METHOD"] == "POST") { $user = trim($_POST['username']); $pass = trim($_POST['password']); if (!empty($user) && !empty($pass)) { // Securely hash the password so it isn't saved as plain text $hashed_password = password_hash($pass, PASSWORD_DEFAULT); // Check if username already exists in the database $check_stmt = $conn->prepare("SELECT id FROM users WHERE username = ?"); $check_stmt->bind_param("s", $user); $check_stmt->execute(); $check_stmt->store_result(); if ($check_stmt->num_rows > 0) { $message = "Username already taken! Try another one.
"; } else { // Username is unique, proceed to insert into database $stmt = $conn->prepare("INSERT INTO users (username, password) VALUES (?, ?)"); $stmt->bind_param("ss", $user, $hashed_password); if ($stmt->execute()) { $message = "Registration successful! You can now log in.
"; } else { $message = "Something went wrong. Please try again.
"; } $stmt->close(); } $check_stmt->close(); } else { $message = "Please fill in all fields.
"; } } $conn->close(); ?>