User isn't re-directed after signing up

Question

I have a registration script written in PDO. The user is supposed to be re-directed after signing up, but instead, they stay on the same page.

Here's my database connection:

$db_username = "username";
$db_password = "password";

$con = new PDO("mysql:host=localhost;dbname=database", $db_username, $db_password);

Here's my registration script:

<?php

if(isset($_POST['submit'])) {

$username = $_POST['username'];
$password = $_POST['password'];
$email = $_POST['email'];

if (empty($username)) {
    $errorusername = 'Please enter a username';
}else{

    if (empty($password)) {
        $errorpassword = 'Please enter a password';
    }else{

        if (empty($email)) {
            $erroremail = 'Please enter an email.';
        }else{

            $password = md5($password);

            $checkusername = $stmt = $con->prepare("SELECT * FROM users WHERE username=':username'");
            if (mysqli_num_rows($checkusername) == 1)
            {
                echo "Username already exists.";
            }else{

                $status = 'Hello there!';
                $about = 'Hello!';

                $stmt = $con->prepare("INSERT INTO users (username, password, email, status, about) VALUES (:username, :password, :email, :status, :about)");

                $stmt->bindParam(':username', $_POST['username']);
                $stmt->bindParam(':password', md5($_POST['password']));
                $stmt->bindParam(':email', $_POST['email']);
                $stmt->bindParam(':status', $status);
                $stmt->bindParam(':about', $about);
                $stmt->execute();

                header('Location: index.php');
            }
        }
    }
}
}

?>

<form method="post">
<input type="text" name="username">
<input type="password" name="password">
<input type="email" name="email">
<?php echo $errorusername = !empty($errorusername) ? $errorusername : ''; ?>
<?php echo $errorpassword = !empty($errorpassword) ? $errorpassword : ''; ?>
<?php echo $erroremail = !empty($erroremail) ? $erroremail : ''; ?>
<input type="submit" name="submit">
</form>

Also, I only just switched my code from MYSQLI to PDO - are there any obvious errors as I'm not fully experienced with it.

had you found any error on page ? or you had set error_reporting(E_ALL); — Hirendrasinh S. Rathod, Apr 10 '16 at 08:58
review this for more details http://stackoverflow.com/questions/12817846/header-is-not-redirecting-php — Hirendrasinh S. Rathod, Apr 10 '16 at 09:03
Why are you using mysqli and PDO? -> `if(mysqli_num_rows($checkusername) == 1)` will not work. See [this](http://stackoverflow.com/a/13195967/4982088) post — Xorifelse, Apr 10 '16 at 09:06
I'm new to PDO... I was previously using MYSQLI. How would I change that statement into PDO? — thebob23, Apr 10 '16 at 09:08

score 0 · Answer 1 · edited Apr 10 '16 at 11:17

use your select statement like below -

if(isset($_POST['submit'])) {

$username = $_POST['username'];
$password = $_POST['password'];
$email = $_POST['email'];

if(empty($username)) {
$errorusername = 'Please enter a username';
}else{

if(empty($password)) {
$errorpassword = 'Please enter a password';
}else{

if(empty($email)) {
$erroremail = 'Please enter an email.';
}else{

$password = md5($password);

$stmt = $con->prepare("SELECT * FROM users WHERE username=':username'");
$stmt->bindParam(':username', $username);
$stmt->execute();
$total = $stmt->rowCount();
if($total == 1)
{
echo "Username already exists.";
}else{

$status = 'Hello there!';
$about = 'Hello!';


$stmt = $con->prepare("INSERT INTO users (username, password, email, status, about) VALUES (:username, :password, :email, :status, :about)");

$stmt->bindParam(':username', $_POST['username']);
$stmt->bindParam(':password', md5($_POST['password']));
$stmt->bindParam(':email', $_POST['email']);
$stmt->bindParam(':status', $status);
$stmt->bindParam(':about', $about);
$stmt->execute();

header('Location: index.php');
}
}
}
}
}

?>

<form method="post">
<input type="text" name="username">
<input type="password" name="password">
<input type="email" name="email">
<?php echo $errorusername = !empty($errorusername) ? $errorusername : ''; ?>
<?php echo $errorpassword = !empty($errorpassword) ? $errorpassword : ''; ?>
<?php echo $erroremail = !empty($erroremail) ? $erroremail : ''; ?>
<input type="submit" name="submit">
</form>

User isn't re-directed after signing up

1 Answers1