X-Git-Url: http://andersk.mit.edu/gitweb/sql-web.git/blobdiff_plain/1389493c540d4def6423bfb4ad05bf3dcc3e6156..79ffa7719bedd98ba94a37c1217dbafe56ea1a72:/signup.php

diff --git a/signup.php b/signup.php
index fa93c8b..96aba8c 100644
--- a/signup.php
+++ b/signup.php
@@ -1,4 +1,7 @@
 <?php
+/*
+	(c) 2005 Joe Presbrey
+*/
 
 require_once('mitsql.cfg.php');
 require_once('mitsql.lib.php');
@@ -16,11 +19,18 @@ if (isLoggedIn()) {
 		$err[] = 'Please install a valid certificate.';
 	} else {
 		if (isPost() && $LoginSSL->canSignup()) {
-			$u = new User($LoginSSL->getUserId());
-			$u->signup($i_p1);
-			$LoginSSL->refresh();
-			sess('Login', $LoginSSL);
-			redirect('login', true);
+			if (empty($i_p1)) {
+				$err[] = 'Your password may not be blank.';
+			} elseif ($i_p1 != $i_p2) {
+				$err[] = 'Your confirmation password does not match.';
+			} else {
+				$u = new User($LoginSSL->getUserId());
+				$u->signup($i_p1);
+				$LoginSSL->refresh();
+				redirect('login', true);
+			}
+		} elseif (isPost()) {
+			$err[] = 'You may not signup.';
 		}
 	}
 }