<?php

//index.php

//error_reporting(E_ALL);

session_start();

if(isset($_SESSION["user_id"]))
{
	header("location:home.php");
}

include('function.php');

$connect = new PDO("mysql:host=localhost; dbname=easenuph_hand2secure", "easenuph_hand2secure", "@#admin@#");

$message = '';
$error_user_name = '';
$error_user_email = '';
$error_user_password = '';
$user_name = '';
$user_email = '';
$user_password = '';

if(isset($_POST["register"]))
{
	if(empty($_POST["user_name"]))
	{
		$error_user_name = "<label class='text-danger'>Enter Name</label>";
	}
	else
	{
		$user_name = trim($_POST["user_name"]);
		$user_name = htmlentities($user_name);
	}

	if(empty($_POST["user_email"]))
	{
		$error_user_email = '<label class="text-danger">Enter Email Address</label>';
	}
	else
	{
		$user_email = trim($_POST["user_email"]);
		if(!filter_var($user_email, FILTER_VALIDATE_EMAIL))
		{
			$error_user_email = '<label class="text-danger">Enter Valid Email Address</label>';
		}
	}

	if(empty($_POST["user_password"]))
	{
		$error_user_password = '<label class="text-danger">Enter Password</label>';
	}
	else
	{
		$user_password = trim($_POST["user_password"]);
		$user_password = password_hash($user_password, PASSWORD_DEFAULT);
	}
if(empty($_POST["SPOCNAME"]))
	{
		$error_SPOCNAME= "<label class='text-danger'>SPOC NAME</label>";
	}
	else
	{
		$SPOCNAME = trim($_POST["SPOCNAME"]);
		$SPOCNAME = htmlentities($SPOCNAME);
	}
	if(empty($_POST["SPOCDESIGNATION"]))
	{
		$error_SPOCDESIGNATION= "<label class='text-danger'>SPOC DESIGNATION</label>";
	}
	else
	{
		$SPOCDESIGNATION = trim($_POST["SPOCDESIGNATION"]);
		$SPOCDESIGNATION = htmlentities($SPOCDESIGNATION);
	}
	
	if(empty($_POST["Mobilenumber"]))
	{
		$error_Mobilenumber= "<label class='text-danger'>Mobilenumber</label>";
	}
	else
	{
		$Mobilenumber = trim($_POST["Mobilenumber"]);
		$Mobilenumber = htmlentities($Mobilenumber);
	}
		if(empty($_POST["Selectstate"]))
	{
		$error_Selectstate= "<label class='text-danger'>Selectstate</label>";
	}
	else
	{
		$Selectstate = trim($_POST["Selectstate"]);
		$Selectstate = htmlentities($Selectstate);
	}
		if(empty($_POST["Selectdistrict"]))
	{
		$error_Selectdistrict= "<label class='text-danger'>	Selectdistrict</label>";
	}

	{
		$Selectdistrict = trim($_POST["Selectdistrict"]);
		$Selectdistrict = htmlentities($Selectdistrict);
	}
			if(empty($_POST["Pincode"]))
	{
		$error_Pincode= "<label class='text-danger'>	Pincode</label>";
	}
	else
	{
		$Pincode = trim($_POST["Pincode"]);
		$Pincode = htmlentities($Pincode);
	}
	if(empty($_POST["sanctionedbed"]))
	{
		$error_sanctionedbed= "<label class='text-danger'>	sanctionedbed</label>";
	}
	else
	{
		$sanctionedbed = trim($_POST["sanctionedbed"]);
		$sanctionedbed = htmlentities($sanctionedbed);
	}
	if(empty($_POST["Hospitalparenttype"]))
	{
		$error_sanctionedbed= "<label class='text-danger'>	Hospitalparenttype</label>";
	}
	else
	{
		$Hospitalparenttype = trim($_POST["Hospitalparenttype"]);
		$Hospitalparenttype = htmlentities($Hospitalparenttype);
	}
		if(empty($_POST["Hospitaltype"]))
	{
		$error_Hospitaltype= "<label class='text-danger'>	Hospitaltype</label>";
	}
	else
	{
		$Hospitaltype = trim($_POST["Hospitaltype"]);
		$Hospitaltype = htmlentities($Hospitaltype);
	}
		if(empty($_POST["Registrationnumber"]))
	{
		$error_Hospitaltype= "<label class='text-danger'>	Registrationnumber</label>";
	}
	else
	{
		$Registrationnumber = trim($_POST["Registrationnumber"]);
		$Registrationnumber = htmlentities($Registrationnumber);
	}
		if(empty($_POST["Authorityregistered"]))
	{
		$error_Authorityregistered= "<label class='text-danger'>	Authorityregistered</label>";
	}
	else
	{
		$Authorityregistered = trim($_POST["Authorityregistered"]);
		$Authorityregistered = htmlentities($Authorityregistered);
	}
		if(empty($_POST["myfile"]))
	{
		$error_myfile= "<label class='text-danger'>	myfile</label>";
	}
	else
	{
		$myfile = trim($_POST["myfile"]);
		$myfile = htmlentities($myfile);
	}
	if($error_user_name == '' && $error_user_email == '' && $error_user_password == '')
	{
		$user_activation_code = md5(rand());

		$user_otp = rand(100000, 999999);

		$data = array(
			':user_name'		=>	$user_name,
			':user_email'		=>	$user_email,
			':user_password'	=>	$user_password,
			':user_activation_code' => $user_activation_code,
			':user_email_status'=>	'not verified',
			':user_otp'			=>	$user_otp,
			':SPOCNAME'			=>	$SPOCNAME,
			':SPOCDESIGNATION'	=>	$SPOCDESIGNATION,
		    ':Mobilenumber'	    =>	$Mobilenumber,	
			':Selectstate'			=>	$Selectstate,	
				':Selectdistrict'	=>	$Selectdistrict,
				':Pincode'			=>	$Pincode,
	   	     ':sanctionedbed'	    =>	$sanctionedbed,
	   	     ':Hospitalparenttype'			=>	$Hospitalparenttype,
	   	       ':Hospitaltype'			=>	$Hospitaltype,	
	   	       ':Registrationnumber'			=>	$Registrationnumber,
	   	       ':Authorityregistered'			=>	$Authorityregistered,
	   	        ':myfile'			=>	$myfile
		);

		$query = "
		INSERT INTO register_user 
		(user_name, user_email, user_password, user_activation_code, user_email_status, user_otp,SPOCNAME,SPOCDESIGNATION,Mobilenumber,Selectstate,Selectdistrict,Pincode,sanctionedbed,Hospitalparenttype,Hospitaltype,Registrationnumber,Authorityregistered)
		SELECT * FROM (SELECT :user_name, :user_email, :user_password, :user_activation_code, :user_email_status, :user_otp, :SPOCNAME, :SPOCDESIGNATION, :Mobilenumber, :Selectstate, :Selectdistrict, :Pincode, :sanctionedbed, :Hospitalparenttype, :Hospitaltype, :Registrationnumber, :Authorityregistered) AS tmp
		WHERE NOT EXISTS (
		    SELECT user_email FROM register_user WHERE user_email = :user_email
		) LIMIT 1
		";

		$statement = $connect->prepare($query);

		$statement->execute($data);

		if($connect->lastInsertId() == 0)
		{
			$message = '<label class="text-danger">Email Already Register</label>';
		}	
		else
		{
			$user_avatar = make_avatar(strtoupper($user_name[0]));
			$query = "
			UPDATE register_user 
			SET user_avatar = '".$user_avatar."' 
			WHERE register_user_id = '".$connect->lastInsertId()."'
			";
			$statement = $connect->prepare($query);
			$statement->execute();
			require 'class/class.phpmailer.php';
			$mail = new PHPMailer;
			$mail->IsSMTP();
			$mail->Host = 'localhost';
			$mail->Port = '25';
			$mail->SMTPAuth = true;
			$mail->Username = 'info@easenup.healthcare';
			$mail->Password = 'Happyhome@369';
			$mail->SMTPSecure = '';
			$mail->From = 'info@easenup.healthcare';
			$mail->FromName = 'Easenup Healthcare';
			$mail->AddAddress($user_email);
			$mail->WordWrap = 50;
			$mail->IsHTML(true);
			$mail->Subject = 'Verification code for Verify Your Email Address';
			$message_body = '
			<p>For verify your email address, enter this verification code when prompted: <b>'.$user_otp.'</b>.</p>
			<p>Sincerely,</p>
			';
			$mail->Body = $message_body;
			if($mail->Send())
			{
				echo '<script>alert("Please Check Your Email for Verification Code")</script>';

				header('location:email_verify.php?code='.$user_activation_code);
			}
			else
			{
				$message = $mail->ErrorInfo;
			}
		}

	}
}

?>
<!DOCTYPE html>
<html>
	<head>
		<title>PHP Registration with Email Verification using OTP</title>
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<script src="http://code.jquery.com/jquery.js"></script>
    	<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
	</head>
	<body>
		<br />
		<div class="container">
			<h3 align="center">Registration Form</h3>
			<br />
			<div class="panel panel-default">
				<div class="panel-heading">
					<h3 class="panel-title">Hospital Registration</h3>
				</div>
				<div class="panel-body">
					<?php echo $message; ?>
					<form method="post">
						<div class="form-group">
							<label>Hospital name</label>
							<input type="text" name="user_name" class="form-control" />
							<?php echo $error_user_name; ?>
						</div>
						<div class="form-group">
							<label>Enter Your Email</label>
							<input type="text" name="user_email" class="form-control" />
							<?php echo $error_user_email; ?>
						</div>
						<div class="form-group">
							<label>Enter Your Password</label>
							<input type="password" name="user_password" class="form-control" />
							<?php echo $error_user_password; ?>
						</div>
						<div class="form-group">
							<label>SPOC NAME</label>
							<input type="text" name="SPOCNAME" class="form-control" />
							<?php echo $error_SPOCNAME; ?>
						</div>
							<div class="form-group">
							<label>SPOC DESIGNATION</label>
							<input type="text" name="SPOCDESIGNATION" class="form-control" />
							<?php echo $error_SPOCDESIGNATION; ?>
						</div>
							<div class="form-group">
    							<label>Mobile Number</label>
							<input type="text" name="Mobilenumber" class="form-control" />
							<?php echo $error_Mobilenumber; ?>
						</div>
						<div class="form-group">
    							<label>Select State</label>
							 <label for="address">Select state<span>*</span></label>
              <select  class="form-control" name="Selectstate" id="Selectstate">
              <option value="" disabled selected>Select state</option>
              <option value="Varanasi">Uttar Pradesh</option>
        </select>
							<?php echo $error_Selectstate; ?>
						</div>
						<div class="form-group">
    							<label>	Selectdistrict</label>
							<select  class="form-control" name="Selectdistrict"id="Selectdistrict">
              <option value="" disabled selected>Select district</option>
    <option value="Varanasi">Varanasi</option>
    <option value="Lucknow">Lucknow</option>
    <option value="Jaunpur">Jaunpur</option>
    <option value="Agra">Agra</option>
    <option value="Gautam Buddh Nagar">Gautam Buddh Nagar</option>
    <option value="Prayagraj">Prayagraj</option>
  </select>
							<?php echo $error_Selectdistrict; ?>
						</div>
							<div class="form-group">
    							<label>	Pincode</label>
							<input type="text" name="Pincode" class="form-control" />
							<?php echo $error_Pincode; ?>
						</div>
							<div class="form-group">
    							<label>		sanctionedbed</label>
							<input type="text" name="sanctionedbed" class="form-control" />
							<?php echo $error_sanctionedbed; ?>
						</div>
							<div class="form-group">
    							<label>		Hospital parenttype</label>
							 <select class="form-control" id="Hospitalparenttype" name="Hospitalparenttype">
    <option value="" disabled selected>Hospital parent type </option>
    <option value="1">Single</option>
    <option value="2">Group</option>
  </select>
							<?php echo $error_Hospitalparenttype; ?>
						</div>
				
						<div class="form-group">
    							<label>		Hospitaltype</label>
						 <select class="form-control" id="Hospitaltype" name="Hospitaltype">
    <option value="" disabled selected>Hospital type </option>
    <option value="1">Public/private(corporate)</option>
    <option value="2">Government</option>
    <option value="3">Trust/charitable</option>
    <option value="4">Other</option>
  </select>
							<?php echo $error_Hospitaltype; ?>
						</div>
							<div class="form-group">
    							<label>			Registrationnumber</label>
							<input type="text" name="Registrationnumber" class="form-control" />
							<?php echo $error_Registrationnumber; ?>
						</div>
						<div class="form-group">
    							<label>			Authorityregistered</label>
							<input type="text" name="Authorityregistered" class="form-control" />
							<?php echo $error_Authorityregistered; ?>
						</div>
							<div class="form-group">
    							<label>		myfile</label>
							<input type="text" class="custom-file-input" name="myfile" class="form-control" />
							<?php echo $error_myfile; ?>
						</div>
						<div class="form-group">
							<input type="submit" name="register" class="btn btn-success" value="Click to Register" />&nbsp;&nbsp;&nbsp;
							<a href="login.php">Login</a>
						</div>
					</form>
				</div>
			</div>
		</div>
		<br />
		<br />
	</body>
</html>