<?php
require('../session.php'); // pastikan session.php berisi $conn dan $urlweb

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

    // --- Ambil dan sanitasi input ---
    $full_name = mysqli_real_escape_string($conn, trim($_POST['full_name']));
    $no_hp     = mysqli_real_escape_string($conn, trim($_POST['no_hp']));
    $usere     = strtolower(trim($_POST['user']));
    $user      = str_replace(' ', '', $usere);
    $email     = mysqli_real_escape_string($conn, trim($_POST['email']));
    $level     = isset($_POST['level']) ? intval($_POST['level']) : 1;
    $join_date = date('Y-m-d H:i:s');

    if (empty($user) || empty($_POST['pass'])) {
        header('Location: ' . $urlweb . '/user.php?notif=6');
        exit;
    }

    $pass = password_hash($_POST['pass'], PASSWORD_DEFAULT);

    // --- Buat cuid & userid unik ---
    $cekusere = mysqli_query($conn, "SELECT cuid FROM tb_user ORDER BY cuid DESC LIMIT 1") or die(mysqli_error($conn));
    $cus = mysqli_fetch_assoc($cekusere);
    $cuid = isset($cus['cuid']) ? ($cus['cuid'] + 1) : 1;
    $useridd = '1' . date('dmy') . $cuid;

    // --- Cek duplikat username/email ---
    $cekemail = mysqli_query($conn, "SELECT user, email FROM tb_user WHERE user = '$user' OR email = '$email' LIMIT 1") or die(mysqli_error($conn));
    if (mysqli_num_rows($cekemail) > 0) {
        header('Location: ' . $urlweb . '/user.php?notif=2');
        exit;
    }

    // --- Simpan user baru ---
    $query = mysqli_query($conn, "INSERT INTO tb_user 
        (userid, user, pass, token_id, image, full_name, email, no_hp, level, pinTrx, join_date, last_login, status, statusGame)
        VALUES 
        ('$useridd', '$user', '$pass', '0', 'avatar5.png', '$full_name', '$email', '$no_hp', '$level', '', '$join_date', '$join_date', 1, 0)")
        or die(mysqli_error($conn));

    $last_id = mysqli_insert_id($conn);

    // --- Buat saldo awal ---
    mysqli_query($conn, "INSERT INTO tb_balance 
        (userID, active, pending, transfer, payout, created_date)
        VALUES 
        ('$last_id', 0, 0, 0, 0, '$join_date')")
        or die(mysqli_error($conn));

    // --- Redirect sukses ---
    header('Location: ' . $urlweb . '/user.php?notif=1');
    exit;

} else {
    header('Location: ' . $urlweb . '/user.php?notif=7');
    exit;
}
?>