query("SELECT setting_value FROM system_settings WHERE setting_key = 'user_registration'"); $reg_enabled = ($reg_setting && $row = $reg_setting->fetch_assoc()) ? $row['setting_value'] : '1'; if ($reg_enabled !== '1') { // Show a pretty disabled message $registration_disabled = true; } $error = ''; $success = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { // 1. Honeypot protection against spam bots if (!empty($_POST['website_url'])) { $error = 'An error occurred. Please try again.'; sleep(2); } // 2. CSRF Token Validation elseif (!validateCSRFToken()) { $error = 'Session expired or invalid request. Please refresh the page and try again.'; } // 3. IP-based rate limiting to prevent registration flooding (1 attempt per 10 seconds) else { $ip = $_SERVER['REMOTE_ADDR'] ?? '127.0.0.1'; if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) { $ip = $_SERVER['HTTP_CF_CONNECTING_IP']; } elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) { $ip = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR'])[0]; } $ip_hash = md5($ip); $rate_limit_file = sys_get_temp_dir() . DIRECTORY_SEPARATOR . 'reg_limit_' . $ip_hash; $is_rate_limited = false; if (file_exists($rate_limit_file)) { $last_time = (int)file_get_contents($rate_limit_file); if ((time() - $last_time) < 10) { $is_rate_limited = true; } } if ($is_rate_limited) { $error = 'Too many attempts from this IP. Please wait 10 seconds.'; } else { // Record this attempt @file_put_contents($rate_limit_file, time()); $name = sanitize($_POST['name'] ?? ''); $phone = sanitize($_POST['phone'] ?? ''); $password = $_POST['password'] ?? ''; $confirm_password = $_POST['confirm_password'] ?? ''; $email = $phone . '@gobotad.com'; $otp = sanitize($_POST['otp'] ?? ''); // Validation if (empty($name) || empty($phone) || empty($password) || empty($otp)) { $error = 'Please fill in all fields including the OTP'; } elseif (strlen($name) < 2 || strlen($name) > 50) { $error = 'Name must be between 2 and 50 characters'; } elseif (!validateName($name)) { $error = 'Name contains invalid characters or file extensions'; } elseif (!validatePhone($phone)) { $error = 'Invalid phone number'; } elseif (strlen($password) < 6) { $error = 'Password must be at least 6 characters'; } elseif (strlen($password) > 72) { $error = 'Password must be under 72 characters'; } elseif ($password !== $confirm_password) { $error = 'Passwords do not match'; } else { $db = getDB(); // Verify OTP if (!verifyOTP($db, $phone, $otp)) { $error = 'Invalid or expired OTP code'; } else { // Check if phone exists $sql = "SELECT id FROM users WHERE phone = ? LIMIT 1"; $stmt = $db->prepare($sql); $stmt->bind_param('s', $phone); $stmt->execute(); if ($stmt->get_result()->num_rows > 0) { $error = 'Phone number already registered'; } else { // Insert new user $hashedPassword = hashPassword($password); $sql = "INSERT INTO users (name, email, phone, password, status) VALUES (?, ?, ?, ?, 'active')"; $stmt = $db->prepare($sql); $stmt->bind_param('ssss', $name, $email, $phone, $hashedPassword); if ($stmt->execute()) { // Clean up rate limit file on successful registration if (file_exists($rate_limit_file)) { @unlink($rate_limit_file); } // ✅ WhatsApp Welcome Message WhatsAppService::sendWelcome($phone, $name); $success = 'Account created successfully! Redirecting to login...'; header('refresh:2;url=../../index.php'); } else { $error = 'Registration failed. Please try again.'; } } } } } } } ?> Create Account — GoBotad
🍔
GoFoodz

Join the Foodie
Community.

Create an account to start ordering your favorite meals, tracking your deliveries in real-time, and enjoying exclusive deals.

Create Account ✨

Sign up to get started with GoBotad

Registration Paused

We are currently not accepting new user registrations. Please check back later or contact support if you need an account.

or

Already have an account? Login here

Read More: Join the GoBotad Food Delivery Network

Creating an account with GoBotad unlocks a world of culinary delights right at your fingertips. By registering, you gain immediate access to the finest restaurants, cafes, and street food vendors across Botad. Our seamless registration process ensures that you can start browsing extensive menus, discovering new local favorites, and placing orders in a matter of seconds. We prioritize your privacy and ensure that all your personal information and delivery addresses are securely stored for quick and easy future checkouts.

As a registered GoBotad member, you will enjoy a highly personalized food ordering experience. Save your favorite meals for one-tap reordering, manage multiple delivery addresses for your home and workplace, and securely save payment methods for lightning-fast transactions. Members also receive exclusive access to daily promotional offers, massive discounts, and special loyalty rewards.