Hello,
I have added a CSRF token on the register (client-side) the element is hidden you can right click view-source and see it for yourself the CSRF token is generated when user enter registration page and is stored in a $_SESSION variable - this will prevent any middle party in the middle of attack.
Feel free to tamper with the CSRF token on your register page

Thank you for your constructive criticism and i have given you 3 merits
merit.