<?php

include 'db.php';
include 'error.php';
include 'auth.php';

$username=$_POST["formUsername"];
$password=$_POST["formPassword"];


if (empty($username) || empty($password))
{


		include 'header.php';
		?>
				<span class="head0">Admin - Add User</span>
				<form name="addUser" action="admin_user_add.php" method="post">

				Username<br>
				<input type="text" name="formUsername" size="15">
				<br>
				Password<br>
				<input type="password" name="formPassword" size="15">
				<p>
				
				<input type="submit" value="submit"></form>


		<?php
		include 'footer.php';





}else
{

	
	$password=clean($password,15);
	$username=clean($username,15);
	$salt=substr($username,0,2);
	$crypted_password=crypt($password,$salt);


	if(!($connection=@mysql_connect($hostName, $dbUsername, $dbPassword)))
		die("Could not connect");

	if(!(mysql_select_db ($databaseName, $connection)))
		showerror();

		$insertQuery="INSERT INTO users VALUES(\"$username\",\"$crypted_password\")";
	
	
	//echo($insertQuery);

	if((@mysql_query($insertQuery,$connection)) && mysql_affected_rows()==1)
		{
		include 'header.php';
		echo "User added successfully";
		include 'footer.php';
			
		}
	else{
		include 'header.php';
		echo "There has been an error, please try again";
		include 'footer.php';
		}



	mysql_close($connection);



}
?>

