signupconnect.php

<?php
session_start();

include 'db.php';
include 'ban_ipaddress.php';
//include 'ipaddress.php';
//$ipx = get_ip_address();

//if (isset($_POST['submit']) or $_POST['submit']=="0") {
//if(array_key_exists('0',$_POST['submit'])){
	$name = mysqli_real_escape_string($conn, $_POST["name"]);
	$enrollment = mysqli_real_escape_string($conn, $_POST["enrollment"]);
    $name = strtoupper($name);
    $enrollment = strtoupper($enrollment);
//}
	if (empty($name)||empty($enrollment)) 
	{
		header("location: signup?signup=empty");
		exit();
	}
	else
	{ 
        //change [6-9] as it depend for what year it has been made like 161b000 to 191b000
    if(preg_match('/^[1-1][6-9][1-1]/', $enrollment) && preg_match('/[0-9][0-9][0-9]$/', $enrollment) && strlen($enrollment)>=6 && strlen($enrollment)<=7 && strlen($name)>0)
		 	{
			$sql = "SELECT * FROM users WHERE enrollment='$enrollment'";
				$result = mysqli_query($conn,$sql);
				$resultcheck = mysqli_num_rows($result);

				if($resultcheck > 0)
				{
					header("location: signup?signup=Enrollment_number_taken");
					exit();
				} 
           			$row = mysqli_fetch_assoc($result);
   	                $date = date('Y-m-d H:i:s');
					$sql= "INSERT INTO users (name,enrollment,score,created_at,last_ques_time,ipaddress) VALUES ('$name','$enrollment','1','$date','$date','$ipx');";
					mysqli_query($conn,$sql);
					
			if($name && $enrollment) 
			{
            header('location: afterlogin');
            $_SESSION["enrollment"] = "$enrollment";
            } 
							exit();
			}
		else{
                header("location: signup?signup=invalid_Enrollment_Number");
			    exit();
		}
	}
?>