<?php

require_once 'db.function.php';
require_once 'util.function.php';

//print_r($_POST);

if(count($_POST) != count(array_filter($_POST, 'trim'))) {
    print '{"err":"All fields are required.", "focus":"input[name='. array_search('', $_POST) .']"}';
    exit;
}
$_POST['pword_hash'] = hash('sha256', $_POST['pword']);
$_POST['pword'] =  $_POST['pword2'] = $_POST['submit'] = '';
$_POST = array_filter($_POST);
$fields = array_keys($_POST);
$fields_clean = array_filter($fields, 'isSafeForSQL');
if(count($fields) != count($fields_clean)) {
    exit;
}
$vals = array_values($_POST);
$qmarks = array_fill(0, count($fields), '?');

$db = getDB();
if($db->getOne("select researcher_id from researcher where email = ?", $_POST['email'])) {
    print '{"err":"Email address is already registered. Please use the Forgot Password link to recover your password.", "focus":"input[name=email]"}';
    exit;
}
if($db->getOne("select researcher_id from researcher where username = ?", $_POST['username'])) {
    print '{"err":"Username is taken. Please choose another", "focus":"input[name=username]"}';
    exit;
}
$db->query('insert into researcher ('. join(',', $fields) . ') values ('.join(',', $qmarks) . ')', $vals);
$db->commit();
$admins = $db->getCol("select email from researcher where admin = 1");
mail(join(',', $admins), "New DASR registration: $_POST[firstname] $_POST[lastname]", "A new user has registered for DASR. Please go to\n\nhttp://$_SERVER[SERVER_ADDR]/DASR_2011/approve.php\n\nto approve the account.", "From: DASR <phao@bu.edu>");

//file_put_contents("/tmp/reg.log", print_r($fields, true) . print_r($vals, true));

print '{"err":""}';

?>