speed wrote [ Register or Signin to view external links. ]

[ Register or Signin to view external links. ]

Lol, I don't think that gif could be used in a better way.

OP, I consider you get better at PHP before endeavouring on such an ambitious project.

1) Don't do all that JS w/ embedded PHP stuff; it won't work. It's also wildly insecure and could potentially lead to a lot of problems for your site's security.
2) Don't handle a db connection like that. Learn OOP and use dependency injection. Also, ditch mysqli and just go with PDO; it'll save you time and potential girlfriends in the long run.
3) Learn PHP security. After 4 mins of looking around the repo; already found an SQLi vulnerability: [ Register or Signin to view external links. ]
4) As speed noticed, don't use an md5 constant hash as your salt. I'd also argue you've be better off just using the password_hash() function rather than doing it via crypt().
5) Oh, look, another SQLi vulnerability [ Register or Signin to view external links. ]

Please consider learning OOP PHP (along w/ SOLID and design patterns) and simple security measures before you continue with this.

I actually just found a more ridiculous error:

[ Register or Signin to view external links. ]
You're trying to close a mysqli connection via mysql_close() ?
That will not work and, if you update to PHP7 with that, you'll throw an error because that driver API (all mysql_* functions) are removed in PHP7.

Please, learn what you're doing.

speed wrote [ Register or Signin to view external links. ]

[ Register or Signin to view external links. ]

Enlighten me speed.

Go all out on the description.

Huge update to the thread!
I will no longer be adding people on Skype
If you are wondering why I chose discord, it is because it looks the same
on every device and has great permission features unlike Skype.
Also it is more secure.

+1 this topic. Idea is well thought out and is organised.

Sys wrote Enlighten me speed.

Go all out on the description.

First off, crypt is extremely weak, even with proper salting.
Second, they committed their salt, making it effectively useless.
Third, the SQL vulnerabilities that Obscure pointed out.

Those 3 together pretty much guarantee that anyone who wants to can not only get into the database, but reverse the hashes relatively easily.

The code is extremely insecure.

What's your USP for this site to make it competitive vs others or is it just for the programming experience?