<?php
	require_once('UserRepositoryInterface.php');
	require_once(dirname(__FILE__)."/../constants.php");

	class UserRepository implements UserRepositoryInterface {
		protected $db;

		public function __construct($db) {
			$this->db = $db;
		}

		public static function checkToken($token, $conn) {
			try {
				$queryToken = "SELECT id FROM utente WHERE token='".$token."'";
				//echo "<br/>".$queryToken."<br/>";
				$result = $conn->query($queryToken);
				return ($result->rowCount()>0);
			} catch (PDOException $e) {
				echo $e->getMessage();
				return false;
			}
		}

		public function registerUser($user, $password) {
			$status = array();
			
			try {

				if (!$this->checkUserName($user)) {
					$status["id"] = -1;
					$status["return"] = 1;
					return $status;
				}

				if (!$this->checkEmail($user)) {
					$status["id"] = -1;
					$status["return"] = 2;
					return $status;
				}

				$hashedPwd = password_hash($password, PASSWORD_DEFAULT);

				$query = "INSERT INTO utente(username, password, nominativo, cell, email)
	    				VALUES ('".$user->username."',
	    						'".$hashedPwd."',
	    						'".$user->nominativo."',
	    						'".$user->cell."',
	    						'".$user->email."')";
				
				//echo "<br/>".$query."<br/>";	

				$this->db->exec($query);
				$status["id"] = $this->db->lastInsertId();
				$status["return"] = 0;
				return $status;
				//echo "New record created successfully";
			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["id"] = -1;
				$status["return"] = 3;
				return $status;
			}

		}

		public function loginUser($username, $password) {
			$status = array();

			try {
				$query = "SELECT id, password, email FROM utente WHERE username='".$username."'";
				$result = $this->db->query($query);
				$row = ($result->rowCount()>0) ? $result->fetch() : null;

				if (!is_null($row) && password_verify($password, $row["password"])) {
					$newToken = sha1($row["email"].session_id().time());

					$queryToken = "UPDATE utente
									SET token='".$newToken."'
									WHERE id=".$row["id"];

					//echo "<br/>".$queryToken."<br/>";

					$this->db->exec($queryToken);

					$status["return"] = 0;
					$status["id"] = $row["id"];
					$status["token"] = $newToken;
				} else {
					$status["return"] = 1;
					$status["id"] = -1;
					$status["token"] = "";
				}

				return $status;

			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["return"] = 2;
				$status["id"] = -1;
				$status["token"] = "";
				return $status;
			}
		}

		//true se username è disponibile, false altrimenti
		protected function checkUserName($user) {
			$query = "SELECT count(*) from utente WHERE username='".$user->username."'";
			$result = $this->db->query($query);
			return ($result->fetchColumn() == "0");
		}

		//true se email è disponibile, false altrimenti
		protected function checkEmail($user) {
			$query = "SELECT count(*) from utente WHERE email='".$user->email."'";
			$result = $this->db->query($query);
			return ($result->fetchColumn() == "0");
		}

		public function getAvatar($user_id) {
			$status = array();
			try {
				$query = "SELECT avatar FROM utente WHERE id='".$user_id."'";
				$result = $this->db->query($query);
				$row = ($result->rowCount()>0) ? $result->fetch() : null;

				if (!is_null($row)) {
					$status["return"] = 0;
					$status["id"] = $user_id;
					$status["avatar"] = AVATAR_PATH.$row["avatar"];
				} else {
					$status["return"] = 1;
					$status["id"] = -1;
					$status["avatar"] = "";
				}

				return $status;

			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["return"] = 1;
				$status["id"] = -1;
				$status["avatar"] = "";
				return $status;
			}
		}

		public function setAvatar($user_id, $avatar_url) {
			$status = array();

			try {
				$query = "UPDATE utente
							SET avatar='".$avatar_url."'
	    					WHERE id=".$user_id;

	    		//echo "<br/>".$query."<br/>";	

				$this->db->exec($query);
				$status["return"] = 0;
				$status["avatar_name"] = $avatar_url;
				return $status;
			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["return"] = 1;
				$status["avatar_name"] = "";
				return $status;
			}
		}

	}

?>