<?php
session_start(); //mesti ada
include_once 'securimage/securimage.php';

$securimage = new Securimage();
if ($securimage->check($_POST['captcha_code']) == false) {
//kod tidak tepat
echo "<h1><p align='center' >Kod tidak tepat.</p></h1><br /><br />";
echo "<p align='center' >Please <a href='form.php'>comeback</a> and try again.</p>";
exit;
}
else {
echo "<p align='center'>Kod tepat!</p>"; //do something here



//dapatkan semua variable dari form
$val1 = $_POST['matric_number'];
$val2 = $_POST['name'];
$val3 = $_POST['course'];
$val4 = $_POST['faculty'];
$val5 = $_POST['phone_number'];
$val6 = $_POST['email'];
$val7 = $_POST['country'];
$val8 = $_POST['course1'];
if ($_POST['submit']=="submit")
{
for ($i=0; $i < sizeof ($val8); $i++){
$query="INSERT INTO course (Course Name) VALUES ('".$val8[$i]."')";
mysql_query($query) or die(mysql_error());
}
}
$val9 = $_POST['suggestion'];

//connect to database
$con = mysql_connect("localhost", "root", "070809");
mysql_select_db("kursus_kemahiran_db", $con);

//query - semak nama log/nama sekiranya sudah di daftarkan
$query2 = "SELECT * FROM registration_form WHERE Name = '$val2' OR Matric Number = '$val1'";
$result = mysql_query($query2, $con);
$count= mysql_num_rows($result);
if ($count){
//nama log dan nama sudah didaftar
header("Location:form.php");
}

else {
//nama log dan nama boleh diguna

//query - daftarkan pengguna baru
$query3 = "INSERT INTO registration_form (Matric Number, Name, Course, Faculty, Phone Number, email, Country, Suggestion) VALUES ('$_POST[matric_number]', '$_POST[name]', '$_POST[course]', '$_POST[faculty]', '$_POST[phone_number]', '$_POST[email], '$_POST[country]', '$_POST[suggestion]')";
$result = mysql_query($query3);

}


}?>

$query2 = "SELECT * FROM registration_form WHERE Name = '$val2' OR Matric Number = '$val1'";
$count= mysql_num_rows($result);
if ($count){
//nama log dan nama sudah didaftar
header("Location:form.php");
}

else {
//nama log dan nama boleh diguna

//query - daftarkan pengguna baru
$query3 = "INSERT INTO registration_form (Matric Number, Name, Course, Faculty, Phone Number, email, Country, Suggestion) VALUES ('$_POST[matric_number]', '$_POST[name]', '$_POST[course]', '$_POST[faculty]', '$_POST[phone_number]', '$_POST[email], '$_POST[country]', '$_POST[suggestion]')";
$result = mysql_query($query3);

}