signup fix for new redirect

[sql-web.git] / signup.php

diff --git a/signup.php b/signup.php
index fa93c8b8f5d185a01cbfe1685368b1283142389d..f8de8e9c1addb288999caef139622c80152674c3 100644 (file)
--- a/signup.php
+++ b/signup.php
@@ -16,11 +16,18 @@ if (isLoggedIn()) {
                $err[] = 'Please install a valid certificate.';
        } else {
                if (isPost() && $LoginSSL->canSignup()) {
-                       $u = new User($LoginSSL->getUserId());
-                       $u->signup($i_p1);
-                       $LoginSSL->refresh();
-                       sess('Login', $LoginSSL);
-                       redirect('login', true);
+                       if (empty($i_p1)) {
+                               $err[] = 'Your password may not be blank.';
+                       } elseif ($i_p1 != $i_p2) {
+                               $err[] = 'Your confirmation password does not match.';
+                       } else {
+                               $u = new User($LoginSSL->getUserId());
+                               $u->signup($i_p1);
+                               $LoginSSL->refresh();
+                               redirect('login', true);
+                       }
+               } elseif (isPost()) {
+                       $err[] = 'You may not signup.';
                }
        }
 }