New User Registration Form
*
indicates a required field
query($sql);
// get row count
$num_rows = $result->rowCount();
if ($num_rows > 0) {
?>
query($sql);
// todo: This code exists in two places. Ghetto (forgot password)
$_POST['uemail'] = $_POST['newemail'];
$randomstr = substr(md5(time()),0,6);
$message = "Please click on the following link to reset your password
http://pineapplepnp.com/pineapple_reset_password.php?id=$randomstr";
mail($_POST['uemail'],"Reset Password", $message, "From:Pineapple PnP ");
// delete record of previous recovery attemp
$sql = "DELETE FROM password_recover WHERE email = ?";
// execute sql statement
$sth = $db->prepare($sql);
$sth->execute(array($_POST['uemail']));
// append record with random string
$sql = "INSERT INTO password_recover SET email = ?, resetstr = ?";
// execute sql statement
$sth = $db->prepare($sql);
$sth->execute(array($_POST['uemail'],$randomstr));
// Notify customer service an order has been placed
$sql = "SELECT user.email FROM user WHERE user.customer_service=1";
$sth = $db->query ($sql);
$mailing_list = "";
while ($row = $sth->fetch (PDO::FETCH_NUM))
{
if ($mailing_list == "")
{
$mailing_list = $row[0];
}
else
{
$mailing_list = $mailing_list . ", " . $row[0];
}
}
// customer count
$sql = "SELECT user.email FROM user WHERE user.admin=?";
$prepared_array = array(0);
$sth = $db->prepare($sql);
$success = $sth->execute($prepared_array);
$customer_count = $sth->rowCount();
$message = "$_POST[newname] has signed up! There are a total of $customer_count Pineapple Pick N Place customers.";
mail($mailing_list,"New Sign Up!", $message, "From:Pineapple PnP ");
?>
User registration successful
A message has been sent to your email address to allow you to reset your password.
Accounts not claimed within 24 hours will be purged.