if (isset($_POST['username'], $_POST['password'])){
$stmt = $conn->prepare("SELECT username, email FROM users WHERE username=? OR email=?");
$stmt->bind_param("ss", $_POST['username'], $_POST['email']);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
if (!$row) {
$sql = "INSERT INTO users (username,email,password,role) VALUES (?,?,?,'user')";
$stmt = $conn->prepare($sql);
$stmt->bind_param("sss", $_POST['username'], $_POST['email'], $password);
$password = password_hash($_POST['password'], PASSWORD_DEFAULT);
$stmt->execute();
header('Location: index.html');
exit;
} elseif ($row['email'] == $_POST['email']) {
$fsmsg = "Email taken";
} elseif ($row['username'] == $_POST['username']) {
$fsmsg = "Username taken";
}
}