Register

Model/UserModel.php

@@ -7,7 +7,7 @@ use PDOException;
 
 class UserModel extends Database
 {
-    public function verifyLogin($username, $password) 
+    public function loginUser($username, $password) 
     {
         $pdo = $this->linkDB();
         if (!$pdo) return ['success' => false, 'message' => 'Database connection error.'];
@@ -31,8 +31,42 @@ class UserModel extends Database
 
     function logoutUser() 
     {
-        session_unset(); // Unset all session variables
+        session_unset(); 
         session_destroy();
         return ['success' => true, 'message' => 'Logged out successfully.'];
     }
+
+
+    function registerUser($username, $password) {
+        $pdo = $this->linkDB();
+        if (!$pdo) return ['success' => false, 'message' => 'Database connection error.'];
+        $errors = [];
+        if (empty($username)) $errors[] = "Username is required.";
+        if (empty($password)) $errors[] = "Password is required.";
+        if (strlen($password) < 8) $errors[] = "Password must be at least 8 characters.";
+        if (!preg_match('/[A-Z]/', $password)) $errors[] = "Password needs an uppercase letter.";
+        if (!preg_match('/[a-z]/', $password)) $errors[] = "Password needs a lowercase letter.";
+        if (!preg_match('/[0-9]/', $password)) $errors[] = "Password needs a number.";
+        if (!preg_match('/[^A-Za-z0-9]/', $password)) $errors[] = "Password needs a special character.";
+
+        if (!empty($errors)) {
+            return ['success' => false, 'message' => "<ul><li>" . implode("</li><li>", $errors) . "</li></ul>"];
+        }
+
+        try {
+            $stmt = $pdo->prepare("SELECT id FROM users WHERE username = ?");
+            $stmt->execute([$username]);
+            if ($stmt->fetch()) {
+                return ['success' => false, 'message' => 'Username already taken.'];
+            }
+
+            $hashedPassword = password_hash($password, PASSWORD_DEFAULT);
+            $stmt = $pdo->prepare("INSERT INTO users (username, password) VALUES (?, ?)"); // Role defaults to 'user'
+            $stmt->execute([$username, $hashedPassword]);
+            return ['success' => true, 'message' => 'Registration successful! Please login.'];
+        } catch (PDOException $e) {
+            error_log("Registration Error: " . $e->getMessage());
+            return ['success' => false, 'message' => 'An error occurred during registration.'];
+        }
+    }
 }