1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / .trash /
Filename : signup.php
back
<?php
session_start();
require_once '../../config/oxconfig.php';
include 'includes/functions.php';

// Set timezone for Nigeria (WAT)
date_default_timezone_set('Africa/Lagos');

// Configure error reporting (development: show errors; production: log only)
error_reporting(E_ALL);
ini_set('display_errors', 1); // Set to 0 in production

// Redirect if already logged in
if (!empty($_SESSION['email'])) {
    header("Location: dashboard");
    exit();
}

// Generate CSRF token if not already set
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

// Rate limiting settings
$max_attempts = 5;
$lockout_time = 15 * 60; // 15 minutes in seconds

// Check for lockout
if (isset($_SESSION['signup_attempts']) && $_SESSION['signup_attempts'] >= $max_attempts) {
    if (time() - $_SESSION['lockout_start'] < $lockout_time) {
        $msg = "Too many signup attempts. Please try again after " . ceil(($lockout_time - (time() - $_SESSION['lockout_start'])) / 60) . " minutes.";
        $type = "danger";
        header("Location: signup");
        exit();
    } else {
        unset($_SESSION['signup_attempts'], $_SESSION['lockout_start']);
    }
}

// Auto-detect country using IP
$ip = $_SERVER['REMOTE_ADDR'];
$country = get_country_by_ip($ip, 'United States');
//$country ="Nigeria";

// Handle referral code from URL
$referrer_code = '';
if (isset($_GET['ref']) && !empty($_GET['ref'])) {
    $referrer_code = sanitize_input($_GET['ref']);
}

// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Verify CSRF token
    if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
        $msg = "Invalid CSRF token";
        $type = "danger";
        header("Location: signup.php");
        exit();
    }

    $fullname = sanitize_input($_POST['fullname']);
    $username = sanitize_input($_POST['username']);
    $email = sanitize_input($_POST['email']);
    $country = sanitize_input($_POST['country']);
    $password = sanitize_input($_POST['password']);
    $referrer_code = sanitize_input($_POST['referrer_code']); // Use form field
    $terms = isset($_POST['terms']) && $_POST['terms'] === 'on';
    $user_agent = $_SERVER['HTTP_USER_AGENT'];
    $ip_address = $_SERVER['REMOTE_ADDR'];

    // Generate a unique referral code
    $referral_code = generate_unique_referral_code($con, $username);

    // Set default referrer code if not provided
    if (empty($referrer_code)) {
        $referrer_code = "major-l0SVBm";
    }

    // Initialize validation flag
    $is_valid = true;
    $msg = '';
    $type = 'danger';

    // Validation chain
    if ($referral_code === null) {
        $msg = "Error occurred while generating a unique referral code.";
        $_SESSION['signup_attempts'] = ($_SESSION['signup_attempts'] ?? 0) + 1;
        if ($_SESSION['signup_attempts'] >= $max_attempts) {
            $msg = "Too many signup attempts. Account locked for 15 minutes.";
            $_SESSION['lockout_start'] = time();
            header("Location: signup");
            exit();
        }
        $is_valid = false;
    } elseif (!$terms) {
        $msg = "You must agree to the Terms & Conditions.";
        $is_valid = false;
    } elseif (!preg_match("/[A-Za-z\s]{2,50}/", $fullname)) {
        $msg = "Full name must be 2-50 characters (letters and spaces only).";
        $is_valid = false;
    } elseif (!preg_match("/[a-zA-Z0-9_]{3,20}/", $username)) {
        $msg = "Username must be 3-20 characters (letters, numbers, underscores).";
        $is_valid = false;
    } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $msg = "Invalid email address.";
        $is_valid = false;
    } elseif (strlen($password) < 8 || !preg_match("/[A-Za-z].*[0-9]|[0-9].*[A-Za-z]/", $password)) {
        $msg = "Password must be at least 8 characters and include letters and numbers.";
        $is_valid = false;
    } else {
        // Check if email or username already exists
        $stmt = $con->prepare("SELECT * FROM users WHERE email = ? OR username = ?");
        $stmt->bind_param("ss", $email, $username);
        $stmt->execute();
        $result = $stmt->get_result();
        if ($result->num_rows > 0) {
            $msg = "Username or email already exists!";
            $_SESSION['signup_attempts'] = ($_SESSION['signup_attempts'] ?? 0) + 1;
            if ($_SESSION['signup_attempts'] >= $max_attempts) {
                $msg = "Too many signup attempts. Account locked for 15 minutes.";
                $_SESSION['lockout_start'] = time();
                header("Location: signup");
                exit();
            }
            $is_valid = false;
        }
        $stmt->close();
    }

    if ($is_valid) {
        // Generate OTP
        function randString($length, $charset = '123456789') {
            $str = '';
            $count = strlen($charset);
            while ($length--) {
                $str .= $charset[mt_rand(0, $count - 1)];
            }
            return $str;
        }
        $otp = randString(6);
        $stmt = $con->prepare("SELECT * FROM users WHERE code = ?");
        $stmt->bind_param("s", $otp);
        $stmt->execute();
        $result = $stmt->get_result();
        if ($result->num_rows > 0) {
            $otp = randString(6);
        }
        $stmt->close();
        $code = $otp;
           
        // Insert new user
        $hashed_password = password_hash($password, PASSWORD_DEFAULT);
        $stmt = $con->prepare("INSERT INTO users (`fullname`, `username`, `email`, `referral_code`, `referred_by`, `password`, `country`, `code`) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");
        $stmt->bind_param("ssssssss", $fullname, $username, $email, $referral_code, $referrer_code, $hashed_password, $country, $code);
        if ($stmt->execute()) {
            $newUserId = $stmt->insert_id;

            // Store device information
            $stmt = $con->prepare("INSERT INTO user_devices (user_id, user_agent, ip_address) VALUES (?, ?, ?)");
            $stmt->bind_param("iss", $newUserId, $user_agent, $ip_address);
            $stmt->execute();
            $stmt->close();

            // Handle referral notification
            if (!empty($referrer_code)) {
                $stmt = $con->prepare("SELECT id FROM users WHERE referral_code = ?");
                $stmt->bind_param("s", $referrer_code);
                $stmt->execute();
                $result = $stmt->get_result();
                if ($result->num_rows > 0) {
                    $referral_data = $result->fetch_assoc();
                    $referral_id = $referral_data['id'];
                    $bonus_message = "$username joined with your referral link";
                    $stmt_notification = $con->prepare("INSERT INTO notifications (receiver_id, action_type, body) VALUES (?, 'Referral', ?)");
                    $stmt_notification->bind_param("is", $referral_id, $bonus_message);
                    $stmt_notification->execute();
                    $stmt_notification->close();
                }
                $stmt->close();
            }

            // Set session and redirect
            $_SESSION['email'] = $email;
            $_SESSION['id'] = $newUserId;
            $_SESSION['username'] = $username;
            $msg = "Registration Successful. Redirecting...";
            $type = "success";
            unset($_SESSION['signup_attempts'], $_SESSION['lockout_start']);
            session_regenerate_id(true);

            // Redirect to the dashboard after successful signup and login
            ?>
            <script>
            setTimeout(function () {
                window.location = 'dashboard'; // Redirect to dashboard
            }, 3000);
            </script>
            <?php
        } else {
            $msg = "Error occurred during registration: " . $stmt->error;
            $type = "danger";
            $_SESSION['signup_attempts'] = ($_SESSION['signup_attempts'] ?? 0) + 1;
            if ($_SESSION['signup_attempts'] >= $max_attempts) {
                $msg = "Too many signup attempts. Account locked for 15 minutes.";
                $_SESSION['lockout_start'] = time();
                header("Location: signup");
                exit();
            }
            $stmt->close();
        }
    }
}

// Referral code generation functions
function generate_unique_referral_code($con, $username) {
    $attempts = 0;
    $max_attempts = 10;
    $referral_code = null;

    while ($attempts < $max_attempts) {
        $random_string = generateRandomCharacters(6); // Use function from functions.php
        $referral_code = substr($username, 0, 5) . '-' . $random_string;
        $stmt = $con->prepare("SELECT * FROM users WHERE referral_code = ?");
        $stmt->bind_param("s", $referral_code);
        $stmt->execute();
        $result = $stmt->get_result();
        if ($result->num_rows == 0) {
            $stmt->close();
            return $referral_code;
        }
        $stmt->close();
        $attempts++;
    }
    return null;
}
?>
<!doctype html>
<html lang="en">
<head>
    <!-- [Meta] -->
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=0, minimal-ui" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://code.jquery.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ipapi.co https://ipinfo.io https://freegeoip.app;">
    
    <title>OX Yield - Sign Up for Your Trading Platform</title>
    
    <!-- SEO Meta Tags -->
    <meta name="description" content="Sign up for OX Yield to start trading with our automated platform and maximize profits through secure, advanced strategies.">
    <meta name="keywords" content="OX Yield, automated trading, trading platform, crypto trading, profit yield, signup, investment platform, trading account">
    <meta name="author" content="OX Yield">
    <meta name="robots" content="index, follow">
    
    <!-- Canonical URL -->
    <link rel="canonical" href="https://oxyield.live/signup">
    
    <!-- Open Graph Meta Tags for Social Sharing -->
    <meta property="og:title" content="OX Yield - Sign Up for Your Trading Platform">
    <meta property="og:description" content="Join OX Yield to access automated trading strategies and achieve consistent profits.">
    <meta property="og:image" content="https://oxyield.live/assets/images/logo.png">
    <meta property="og:url" content="https://oxyield.live/signup">
    <meta property="og:type" content="website">
    <meta property="og:site_name" content="OX Yield">
    
    <!-- Twitter Card Meta Tags -->
    <meta name="twitter:card" content="summary_large_image">
    <meta name="twitter:title" content="OX Yield - Sign Up for Your Trading Platform">
    <meta name="twitter:description" content="Sign up for OX Yield to control your automated trading platform and optimize your investment returns.">
    <meta name="twitter:image" content="https://oxyield.live/assets/images/logo.png">
    
    <!-- [Favicon] icon -->
    <link rel="icon" href="assets/images/favicon.png" type="image/x-icon" />
    <!-- [Google Font : Public Sans] icon -->
    <link href="https://fonts.googleapis.com/css2?family=Public+Sans:wght@400;500;600;700&display=swap" rel="stylesheet" />
    <!-- [phosphor Icons] https://phosphoricons.com/ -->
    <link rel="stylesheet" href="assets/fonts/phosphor/duotone/style.css" />
    <!-- [Tabler Icons] https://tablericons.com -->
    <link rel="stylesheet" href="assets/fonts/tabler-icons.min.css" />
    <!-- [Feather Icons] https://feathericons.com -->
    <link rel="stylesheet" href="assets/fonts/feather.css" />
    <!-- [Font Awesome Icons] https://fontawesome.com/icons -->
    <link rel="stylesheet" href="assets/fonts/fontawesome.css" />
    <!-- [Material Icons] https://fonts.google.com/icons -->
    <link rel="stylesheet" href="assets/fonts/material.css" />
    <!-- [Template CSS Files] -->
    <link rel="stylesheet" href="assets/css/style.css" id="main-style-link" />
    <link rel="stylesheet" href="assets/css/style-preset.css" />
</head>
<body data-pc-preset="preset-1" data-pc-sidebar-theme="light" data-pc-sidebar-caption="true" data-pc-direction="ltr" data-pc-theme="light">
    <!-- [ Pre-loader ] start -->
    <div class="loader-bg">
        <div class="loader-track">
            <div class="loader-fill"></div>
        </div>
    </div>
    <!-- [ Pre-loader ] End -->

    <div class="auth-main v1">
        <div class="auth-wrapper">
            <div class="auth-form">
                <div class="card my-5">
                    <div class="card-body">
                        <div class="text-center">
                            <img src="assets/images/logo.png" alt="OX Yield Logo" class="img-fluid mb-3" style="width:150px;" />
                            <h4 class="f-w-500 mb-1">Sign Up</h4>
                            <p class="mb-3">Already have an account? <a href="login" class="link-primary ms-1">Sign In</a></p>
                        </div>
                        <?php if (!empty($msg)): ?>
                            <div class="alert alert-<?php echo htmlspecialchars($type); ?>" role="alert">
                                <?php echo htmlspecialchars($msg); ?>
                            </div>
                        <?php endif; ?>
                        <form id="signupForm" method="POST" action="" novalidate>
                            <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($_SESSION['csrf_token']); ?>">
                            <div class="mb-3">
                                <label for="fullname" class="form-label">Full Name</label>
                                <input type="text" class="form-control" id="fullname" name="fullname" placeholder="Enter full name" required pattern="[A-Za-z\s]{2,50}" value="<?php echo isset($_POST['fullname']) ? htmlspecialchars($_POST['fullname']) : ''; ?>" aria-describedby="fullnameHelp" />
                                <div class="invalid-feedback">Please enter a valid full name (2-50 characters, letters and spaces only).</div>
                            </div>
                            <div class="mb-3">
                                <label for="username" class="form-label">Username</label>
                                <input type="text" class="form-control" id="username" name="username" placeholder="Enter username" required pattern="[a-zA-Z0-9_]{3,20}" value="<?php echo isset($_POST['username']) ? htmlspecialchars($_POST['username']) : ''; ?>" onblur="checkUsernameAvailability()" aria-describedby="usernameHelp" />
                                <div class="invalid-feedback">Username must be 3-20 characters (letters, numbers, underscores).</div>
                                <div id="user-availability-status" class="form-text"></div>
                            </div>
                            <div class="mb-3">
                                <label for="email" class="form-label">Email</label>
                                <input type="email" class="form-control" id="email" name="email" placeholder="Enter email" required value="<?php echo isset($_POST['email']) ? htmlspecialchars($_POST['email']) : ''; ?>" aria-describedby="emailHelp" />
                                <div class="invalid-feedback">Please enter a valid email address.</div>
                            </div>
                            <div class="mb-3">
                                <label for="referrer_code" class="form-label">Referral Code (Optional)</label>
                                <input type="text" class="form-control" id="referrer_code" name="referrer_code" placeholder="Referral code" value="<?php echo htmlspecialchars($referrer_code); ?>" />
                            </div>
                            <div class="mb-3">
                                <label for="country" class="form-label">Country</label>
                                <select class="form-control" id="country" name="country" required>
                                    <option value="">Select Country</option>
                                    <?php
                                    // Dynamically generate country options from functions.php country_codes
                                    $country_codes = [
                                        'AF' => 'Afghanistan', 'AL' => 'Albania', 'DZ' => 'Algeria', 'AS' => 'American Samoa',
                                        'AD' => 'Andorra', 'AO' => 'Angola', 'AI' => 'Anguilla', 'AG' => 'Antigua and Barbuda',
                                        'AR' => 'Argentina', 'AM' => 'Armenia', 'AW' => 'Aruba', 'AU' => 'Australia',
                                        'AT' => 'Austria', 'AZ' => 'Azerbaijan', 'BS' => 'Bahamas', 'BH' => 'Bahrain',
                                        'BD' => 'Bangladesh', 'BB' => 'Barbados', 'BY' => 'Belarus', 'BE' => 'Belgium',
                                        'BZ' => 'Belize', 'BJ' => 'Benin', 'BM' => 'Bermuda', 'BT' => 'Bhutan',
                                        'BO' => 'Bolivia', 'BQ' => 'Bonaire', 'BA' => 'Bosnia and Herzegovina',
                                        'BW' => 'Botswana', 'BR' => 'Brazil', 'IO' => 'British Indian Ocean Territory',
                                        'BN' => 'Brunei', 'BG' => 'Bulgaria', 'BF' => 'Burkina Faso', 'BI' => 'Burundi',
                                        'KH' => 'Cambodia', 'CM' => 'Cameroon', 'CA' => 'Canada', 'CV' => 'Cape Verde',
                                        'KY' => 'Cayman Islands', 'CF' => 'Central African Republic', 'TD' => 'Chad',
                                        'CL' => 'Chile', 'CN' => 'China', 'CX' => 'Christmas Island',
                                        'CC' => 'Cocos (Keeling) Islands', 'CO' => 'Colombia', 'KM' => 'Comoros',
                                        'CG' => 'Congo', 'CD' => 'Democratic Republic of the Congo', 'CK' => 'Cook Islands',
                                        'CR' => 'Costa Rica', 'CI' => "Cote d'Ivoire", 'HR' => 'Croatia', 'CU' => 'Cuba',
                                        'CW' => 'Curacao', 'CY' => 'Cyprus', 'CZ' => 'Czech Republic', 'DK' => 'Denmark',
                                        'DJ' => 'Djibouti', 'DM' => 'Dominica', 'DO' => 'Dominican Republic',
                                        'EC' => 'Ecuador', 'EG' => 'Egypt', 'SV' => 'El Salvador',
                                        'GQ' => 'Equatorial Guinea', 'ER' => 'Eritrea', 'EE' => 'Estonia',
                                        'ET' => 'Ethiopia', 'FK' => 'Falkland Islands', 'FO' => 'Faroe Islands',
                                        'FJ' => 'Fiji', 'FI' => 'Finland', 'FR' => 'France', 'GF' => 'French Guiana',
                                        'PF' => 'French Polynesia', 'TF' => 'French Southern Territories',
                                        'GA' => 'Gabon', 'GM' => 'Gambia', 'GE' => 'Georgia', 'DE' => 'Germany',
                                        'GH' => 'Ghana', 'GI' => 'Gibraltar', 'GR' => 'Greece', 'GL' => 'Greenland',
                                        'GD' => 'Grenada', 'GP' => 'Guadeloupe', 'GU' => 'Guam', 'GT' => 'Guatemala',
                                        'GG' => 'Guernsey', 'GN' => 'Guinea', 'GW' => 'Guinea-Bissau', 'GY' => 'Guyana',
                                        'HT' => 'Haiti', 'HN' => 'Honduras', 'HK' => 'Hong Kong', 'HU' => 'Hungary',
                                        'IS' => 'Iceland', 'IN' => 'India', 'ID' => 'Indonesia', 'IR' => 'Iran',
                                        'IQ' => 'Iraq', 'IE' => 'Ireland', 'IM' => 'Isle of Man', 'IL' => 'Israel',
                                        'IT' => 'Italy', 'JM' => 'Jamaica', 'JP' => 'Japan', 'JE' => 'Jersey',
                                        'JO' => 'Jordan', 'KZ' => 'Kazakhstan', 'KE' => 'Kenya', 'KI' => 'Kiribati',
                                        'KP' => 'North Korea', 'KR' => 'South Korea', 'KW' => 'Kuwait',
                                        'KG' => 'Kyrgyzstan', 'LA' => 'Laos', 'LV' => 'Latvia', 'LB' => 'Lebanon',
                                        'LS' => 'Lesotho', 'LR' => 'Liberia', 'LY' => 'Libya', 'LI' => 'Liechtenstein',
                                        'LT' => 'Lithuania', 'LU' => 'Luxembourg', 'MO' => 'Macau',
                                        'MK' => 'North Macedonia', 'MG' => 'Madagascar', 'MW' => 'Malawi',
                                        'MY' => 'Malaysia', 'MV' => 'Maldives', 'ML' => 'Mali', 'MT' => 'Malta',
                                        'MH' => 'Marshall Islands', 'MQ' => 'Martinique', 'MR' => 'Mauritania',
                                        'MU' => 'Mauritius', 'YT' => 'Mayotte', 'MX' => 'Mexico', 'FM' => 'Micronesia',
                                        'MD' => 'Moldova', 'MC' => 'Monaco', 'MN' => 'Mongolia', 'ME' => 'Montenegro',
                                        'MS' => 'Montserrat', 'MA' => 'Morocco', 'MZ' => 'Mozambique',
                                        'MM' => 'Myanmar', 'NA' => 'Namibia', 'NR' => 'Nauru', 'NP' => 'Nepal',
                                        'NL' => 'Netherlands', 'NC' => 'New Caledonia', 'NZ' => 'New Zealand',
                                        'NI' => 'Nicaragua', 'NE' => 'Niger', 'NG' => 'Nigeria', 'NU' => 'Niue',
                                        'NF' => 'Norfolk Island', 'MP' => 'Northern Mariana Islands', 'NO' => 'Norway',
                                        'OM' => 'Oman', 'PK' => 'Pakistan', 'PW' => 'Palau', 'PS' => 'Palestine',
                                        'PA' => 'Panama', 'PG' => 'Papua New Guinea', 'PY' => 'Paraguay',
                                        'PE' => 'Peru', 'PH' => 'Philippines', 'PN' => 'Pitcairn Islands',
                                        'PL' => 'Poland', 'PT' => 'Portugal', 'PR' => 'Puerto Rico', 'QA' => 'Qatar',
                                        'RE' => 'Reunion', 'RO' => 'Romania', 'RU' => 'Russia', 'RW' => 'Rwanda',
                                        'BL' => 'Saint Barthelemy', 'SH' => 'Saint Helena',
                                        'KN' => 'Saint Kitts and Nevis', 'LC' => 'Saint Lucia',
                                        'MF' => 'Saint Martin', 'PM' => 'Saint Pierre and Miquelon',
                                        'VC' => 'Saint Vincent and the Grenadines', 'WS' => 'Samoa',
                                        'SM' => 'San Marino', 'ST' => 'Sao Tome and Principe',
                                        'SA' => 'Saudi Arabia', 'SN' => 'Senegal', 'RS' => 'Serbia',
                                        'SC' => 'Seychelles', 'SL' => 'Sierra Leone', 'SG' => 'Singapore',
                                        'SX' => 'Sint Maarten', 'SK' => 'Slovakia', 'SI' => 'Slovenia',
                                        'SB' => 'Solomon Islands', 'SO' => 'Somalia', 'ZA' => 'South Africa',
                                        'SS' => 'South Sudan', 'ES' => 'Spain', 'LK' => 'Sri Lanka', 'SD' => 'Sudan',
                                        'SR' => 'Suriname', 'SJ' => 'Svalbard and Jan Mayen', 'SZ' => 'Eswatini',
                                        'SE' => 'Sweden', 'CH' => 'Switzerland', 'SY' => 'Syria', 'TW' => 'Taiwan',
                                        'TJ' => 'Tajikistan', 'TZ' => 'Tanzania', 'TH' => 'Thailand',
                                        'TL' => 'Timor-Leste', 'TG' => 'Togo', 'TK' => 'Tokelau', 'TO' => 'Tonga',
                                        'TT' => 'Trinidad and Tobago', 'TN' => 'Tunisia', 'TR' => 'Turkey',
                                        'TM' => 'Turkmenistan', 'TC' => 'Turks and Caicos Islands', 'TV' => 'Tuvalu',
                                        'UG' => 'Uganda', 'UA' => 'Ukraine', 'AE' => 'United Arab Emirates',
                                        'GB' => 'United Kingdom', 'US' => 'United States',
                                        'UM' => 'United States Minor Outlying Islands', 'UY' => 'Uruguay',
                                        'UZ' => 'Uzbekistan', 'VU' => 'Vanuatu', 'VE' => 'Venezuela',
                                        'VN' => 'Vietnam', 'VG' => 'British Virgin Islands',
                                        'VI' => 'U.S. Virgin Islands', 'WF' => 'Wallis and Futuna',
                                        'EH' => 'Western Sahara', 'YE' => 'Yemen', 'ZM' => 'Zambia',
                                        'ZW' => 'Zimbabwe'
                                    ];
                                    foreach ($country_codes as $name) {
                                        echo '<option value="' . htmlspecialchars($name) . '"' . ($country === $name ? ' selected' : '') . '>' . htmlspecialchars($name) . '</option>';
                                    }
                                    ?>
                                </select>
                                <div class="invalid-feedback">Please select a country.</div>
                            </div>
                            <div class="mb-3 position-relative">
                                <label for="password" class="form-label">Password</label>
                                <input type="password" class="form-control" id="password" name="password" placeholder="Enter password" required minlength="8" aria-describedby="passwordHelp" />
                                <span class="position-absolute end-0 top-50 translate-middle-y me-3" id="password-toggle" onclick="togglePasswordVisibility()" style="cursor: pointer;margin-top:14px;">
                                    <i class="fa fa-eye"></i>
                                </span>
                                <div class="invalid-feedback">Password must be at least 8 characters long.</div>
                            </div>
                            <div class="mb-3 form-check">
                                <input class="form-check-input input-primary" type="checkbox" id="terms" name="terms" required />
                                <label class="form-check-label text-muted" for="terms">I agree to the <a href="#" class="text-primary">Terms & Conditions</a></label>
                                <div class="invalid-feedback">You must agree to the Terms & Conditions.</div>
                            </div>
                            <div class="d-grid mt-4">
                                <button type="submit" name="submit" class="btn btn-primary" id="signupButton">
                                    <span class="spinner-border spinner-border-sm d-none" role="status" aria-hidden="true"></span>
                                    <span class="button-text">Sign Up</span>
                                </button>
                            </div>
                        </form>
                    </div>
                </div>
            </div>
        </div>
    </div>
    <!-- [ Main Content ] end -->
    <!-- Required Js -->
    <script src="assets/js/plugins/popper.min.js"></script>
    <script src="assets/js/plugins/simplebar.min.js"></script>
    <script src="assets/js/plugins/bootstrap.min.js"></script>
    <script src="assets/js/plugins/i18next.min.js"></script>
    <script src="assets/js/plugins/i18nextHttpBackend.min.js"></script>
    <script src="assets/js/icon/custom-font.js"></script>
    <script src="assets/js/script.js"></script>
    <script src="assets/js/theme.js"></script>
    <script src="assets/js/multi-lang.js"></script>
    <script src="assets/js/plugins/feather.min.js"></script>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    
    <script>
        // Password visibility toggle
        function togglePasswordVisibility() {
            const passwordInput = document.getElementById("password");
            const passwordToggle = document.getElementById("password-toggle");
            if (passwordInput.type === "password") {
                passwordInput.type = "text";
                passwordToggle.innerHTML = '<i class="fa fa-eye-slash"></i>';
            } else {
                passwordInput.type = "password";
                passwordToggle.innerHTML = '<i class="fa fa-eye"></i>';
            }
        }

        // Username availability check
        function checkUsernameAvailability() {
            const username = document.getElementById("username").value;
            const status = document.getElementById("user-availability-status");
            if (username.length < 3) {
                status.textContent = "";
                return;
            }
            $.ajax({
                url: "includes/check_availablility.php",
                data: { username: username },
                type: "POST",
                success: function(data) {
                    status.innerHTML = data;
                },
                error: function() {
                    status.textContent = "Error checking username availability.";
                }
            });
        }

        // Client-side form validation and loading state
        (function () {
            'use strict';
            const form = document.getElementById('signupForm');
            const signupButton = document.getElementById('signupButton');
            const spinner = signupButton.querySelector('.spinner-border');
            const buttonText = signupButton.querySelector('.button-text');

            form.addEventListener('submit', function (event) {
                if (!form.checkValidity()) {
                    event.preventDefault();
                    event.stopPropagation();
                } else {
                    // Show loading state
                    signupButton.disabled = true;
                    spinner.classList.remove('d-none');
                    buttonText.textContent = 'Signing up...';
                }
                form.classList.add('was-validated');
            }, false);
        })();
    </script>
</body>
</html>