<?php

########################################
#   @Author Xenous(Lucas)
#   @Regards to Limez,XenoGFX &
#   @others who supported me during dev
########################################

define("XenCMS", true);
if (!defined("XenCMS")) {

    die ("404 Page not found");
}
        # Class users, still to be finished. #

class xUsers {

            # Checks if the name is allowed. #

        private $invalidNames = array('xenous', 'mod', 'adm', 'moderator', 'administrator', 'staff', 'manage', 'admin', 'guest', 'lucas', 'l33t', 'owner');

            # Checks if part of the name is not allowed. #

        private $invalidNamesParts = array('xenous', 'staff', 'adm', 'mod', 'system');

        # Check for user validity. #

    public function xValName($user) {

        if (strlen($user) >= 1 && strlen($user) <= 32 && ctype_alnum($user)) {

            return true;
        }
            return die('Name is invalid');
    }

         # Check for email vaidity. #

    public function xValEmail($email) {

        global $db;
        if ($db->xRows($db->xQuery("SELECT * FROM users WHERE mail = ' " . $email . " ' "))>0)

            return true;
                return preg_match("/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i", $email);
    }

         # Checks if name is allowed. #

    public function xNameBlocked($name) {

        foreach ($this->invalidNames as $blocked) {

            if(strtolower($name) !== strtolower($blocked)) {
                return true;
            }
        }
        foreach ($this->invalidNameParts as $blocked) {

            if (strpos(strltolower($name), strtolower($blocked)) !== false) {
                return true;
            }
        }
            return die('The name ' . $name . ' is not allowed on this hotel');
    }

         # Check Security Pin. #

    public function checkSec($sec) {

        if(strlen($sec) == 4 && ctype_digit($sec)) {

            return true;
        }
        return die ('Your security key must be numerical and 4 digits long.');
    }

        # Check for bans. #

   /* public function xBanCheck($user) {

        if(mysql_result(mysql_query("SELECT FROM bans WHERE value = ' " . $user . " ' ")),0) {

           return true;
        }
        return false;
    }*/

        # Add user. #

    public function xAddUser($user, $pass, $email, $credits, $pixels, $motto, $look, $rank, $sec, $vip) {

        return mysql_query("INSERT INTO users (`username`, `password`, `mail`,  `credits`, `activity_points`, `look`, `gender`, `motto`, `rank`, `vip`, `xsec`, `ip_last`, `ip_reg`)  VALUES (' " . $user . " ', ' " . $pass . " ', ' " . $email . " ', ' " . $credits . " ' , ' " . $pixels . " ' , ' " . $look . " ' , 'M', ' " . $motto . " ' , ' " . $rank . " ' , ' "  .$vip . " ' , ' "  . $sec . " ', ' " . $ip . " ', ' " .$ip . " ')");
    }
}
?>