<?php
	require_once('UserRepositoryInterface.php');

	class UserRepository implements UserRepositoryInterface {
		protected $db;

		public function __construct($db) {
			$this->db = $db;
		}

		public static function checkToken($token, $conn) {
			try {
				$queryToken = "SELECT id FROM utente WHERE token='".$token."'";
				//echo "<br/>".$queryToken."<br/>";
				$result = $conn->query($queryToken);
				return ($result->rowCount()>0);
			} catch (PDOException $e) {
				echo $e->getMessage();
				return false;
			}
		}

		public function registerUser($user, $password) {
			$status = array();
			
			try {

				if (!$this->checkUserName($user)) {
					$status["id"] = -1;
					$status["return"] = 1;
					return $status;
				}

				if (!$this->checkEmail($user)) {
					$status["id"] = -1;
					$status["return"] = 2;
					return $status;
				}

				$hashedPwd = password_hash($password, PASSWORD_DEFAULT);

				$query = "INSERT INTO utente(username, password, nominativo, cell, email, is_owner)
	    				VALUES ('".$user->username."',
	    						'".$hashedPwd."',
	    						'".$user->nominativo."',
	    						'".$user->cell."',
	    						'".$user->email."',
	    						'".$user->is_owner."')";
				
				//echo "<br/>".$query."<br/>";	

				$this->db->exec($query);
				$status["id"] = $this->db->lastInsertId();
				$status["return"] = 0;
				return $status;
				//echo "New record created successfully";
			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["id"] = -1;
				$status["return"] = 3;
				return $status;
			}

		}

		public function loginUser($username, $password) {
			$status = array();

			try {
				$query = "SELECT id, password, email FROM utente WHERE username='".$username."'";
				$result = $this->db->query($query);
				$row = ($result->rowCount()>0) ? $result->fetch() : null;

				if (!is_null($row) && password_verify($password, $row["password"])) {
					$newToken = sha1($row["email"].session_id().time());

					$queryToken = "UPDATE utente
									SET token='".$newToken."'
									WHERE id=".$row["id"];

					//echo "<br/>".$queryToken."<br/>";

					$this->db->exec($queryToken);

					$status["return"] = 0;
					$status["id"] = $row["id"];
					$status["token"] = $newToken;
				} else {
					$status["return"] = 1;
					$status["id"] = -1;
					$status["token"] = "";
				}

				return $status;

			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["return"] = 2;
				$status["id"] = -1;
				$status["token"] = "";
				return $status;
			}
		}

		//true se username è disponibile, false altrimenti
		protected function checkUserName($user) {
			$query = "SELECT count(*) from utente WHERE username='".$user->username."'";
			$result = $this->db->query($query);
			return ($result->fetchColumn() == "0");
		}

		//true se email è disponibile, false altrimenti
		protected function checkEmail($user) {
			$query = "SELECT count(*) from utente WHERE email='".$user->email."'";
			$result = $this->db->query($query);
			return ($result->fetchColumn() == "0");
		}

		public function setAvatar($user_id, $avatar_url) {
			$status = array();

			try {
				$query = "UPDATE utente
							SET avatar='".$avatar_url."'
	    					WHERE id=".$user_id;	

				$this->db->exec($query);
				$status["return"] = 0;
				$status["avatar_path"] = $avatar_url;
				return $status;
			} catch (PDOException $e) {
				echo $e->getMessage();
				$status["return"] = 1;
				$status["avatar_path"] = "";
				return $status;
			}
		}

	}

?>