signup.php

<?php
session_start();
require 'db.php';

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Collecting data from form
    $username = trim($_POST['username']);
    $email = trim($_POST['email']);
    $password = $_POST['password'];

    // Validation
    if (empty($username) || empty($email) || empty($password)) {
        echo "All fields are required!";
        exit;
    }

    // Check if user exists
    $stmt = $pdo->prepare("SELECT * FROM users WHERE email = ? OR username = ?");
    $stmt->execute([$email, $username]);
    if ($stmt->rowCount() > 0) {
        echo "User already exists. Please use a different email or username.";
        exit();
    }

    // Hash password and insert user into database
    $hashedPassword = password_hash($password, PASSWORD_BCRYPT);
    $stmt = $pdo->prepare("INSERT INTO users (username, email, password) VALUES (?, ?, ?)");
    if ($stmt->execute([$username, $email, $hashedPassword])) {
        // Set a session message for success
        $_SESSION['signup_success'] = "Signup successful! You can now login.";
        header('Location: login_signup.php'); // Redirect to login page
        exit();
    } else {
        echo "Something went wrong. Please try again.";
    }
}
?>