<?php
require_once $_SERVER['DOCUMENT_ROOT'].'/myApp/application/models/connection/Connection.php';
require_once 'IUsuario.php';
require_once 'Usuario.php';

class UsuarioDAO implements UsuarioInterface
{
	private static $instancia;
	private $db;

	function __construct()
	{
		$this->db = Connection::singletonConexion();
	}

	public function insertUsuario(Usuario $usuario)
	{
		try
		{
			$userName = mysql_real_escape_string($usuario->getUserName());
			$userMail = mysql_real_escape_string($usuario->getUserEmail());
			$userPass = mysql_real_escape_string($usuario->getUserPass());

			$new_password = password_hash($userPass, PASSWORD_DEFAULT);

			$stmt = $this->db->prepare("INSERT INTO users(user_name,user_email,user_pass)
		                                               VALUES(:uname, :umail, :upass)");

			$stmt->bindparam(":uname", $userName);
			$stmt->bindparam(":umail", $userMail);
			$stmt->bindparam(":upass", $new_password);

			$stmt->execute();

			return $stmt;
		}
		catch(PDOException $e)
		{
			echo $e->getMessage();
		}
	}

	public function insertUsuarioCompleto(Usuario $usuario)
	{
		try
		{
			$uname = mysql_real_escape_string($usuario->getUserName());
			$ulname = mysql_real_escape_string($usuario->getUserLastname());
			$umname = mysql_real_escape_string($usuario->getUserMiddlename());
			$unationality = mysql_real_escape_string($usuario->getNacionalidad());
			$usex = mysql_real_escape_string($usuario->getUserSex());
			$umail = mysql_real_escape_string($usuario->getUserEmail());
			$upass = mysql_real_escape_string($usuario->getUserPass());
			$newPassword = password_hash($upass, PASSWORD_DEFAULT);

			$stmt = $this->db->prepare("INSERT INTO users(user_name, user_lastname, user_middlename, nacionalidad, user_sex, user_email, user_pass)
		                              VALUES(:uname, :ulastname, :umiddlename, :unacionalidad, :usex, :umail, :upass)");

			$stmt->bindparam(":uname", $uname);
			$stmt->bindparam(":ulastname", $ulname);
			$stmt->bindparam(":umiddlename", $umname);
			$stmt->bindparam(":unacionalidad", $unationality);
			$stmt->bindparam(":usex", $usex);
			$stmt->bindparam(":umail", $umail);
			$stmt->bindparam(":upass", $newPassword);

			$stmt->execute();

			return $stmt;
		}
		catch (PDOException $e) {
			echo $e->getMessage();
		}

	}

	public function selectUsuarios()
	{
		try
		{

			$stmt = $this->db->prepare("SELECT * FROM users");

			$stmt->execute();

			$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);

			$usuario = null;
			$usuarios = array();

			foreach ($rows as $clave => $valor) {
				$usuario = new Usuario();
				$usuario->setUserId( $rows[$clave]["user_id"] );
				$usuario->setUserName( $rows[$clave]["user_name"] );
				$usuario->setUserLastname( $rows[$clave]["user_lastname"] );
				$usuario->setUserMiddlename( $rows[$clave]["user_middlename"] );
				$usuario->setNacionalidad( $rows[$clave]["nacionalidad"] );
				$usuario->setUserSex( $rows[$clave]["user_sex"] );
				$usuario->setUserEmail( $rows[$clave]["user_email"] );
				$usuario->setUserPass( $rows[$clave]["user_pass"] );
				array_push($usuarios, $usuario);
			}
			return $rows;
		}
		catch(PDOException $e)
		{
			echo $e->getMessage();
		}
	}

	public function deleteUsuario($userID)
	{
		try
		{
			$stmt = $this->db->prepare("DELETE FROM users WHERE user_id = :userID");
			$stmt->bindparam(":userID", $userID);
			$stmt->execute();
			$rows_affected = $stmt->rowCount();
			return $rows_affected;
		}
		catch (PDOException $e)
		{
			echo $e.getMessage();
		}

	}

	public function selectUsuarioById($idusuario)
	{
		try {
			$stmt = $this->db->prepare("SELECT * FROM users WHERE user_id = :userID");
			$stmt->bindparam(":userID", $idusuario);
			$stmt->execute();

			$row = $stmt->fetchAll(PDO::FETCH_ASSOC);

			$usuario = null;
			$usuarios = array();

			foreach ($row as $clave => $valor) {
				$usuario = new Usuario();
				$usuario->setUserId( $row[$clave]["user_id"] );
				$usuario->setUserName( $row[$clave]["user_name"] );
				$usuario->setUserLastname( $row[$clave]["user_lastname"] );
				$usuario->setUserMiddlename( $row[$clave]["user_middlename"] );
				$usuario->setNacionalidad( $row[$clave]["nacionalidad"] );
				$usuario->setUserSex( $row[$clave]["user_sex"] );
				$usuario->setUserEmail( $row[$clave]["user_email"] );
				$usuario->setUserPass( $row[$clave]["user_pass"] );
				array_push($usuarios, $usuario);
			}
			return $row;

		} catch (PDOException $e) {
			echo $e.getMessage();
		}
	}

	public function login($json)
	{
		$ajson = json_decode($json);

  	$uname = mysql_real_escape_string($ajson->{'txt_uname_email'});
  	$umail = mysql_real_escape_string($ajson->{'txt_uname_email'});
  	$upass = mysql_real_escape_string($ajson->{'txt_password'});

    try
  	{
  		$usuario = new Usuario();

  		$usuario->setUserName($uname);
  		$usuario->setUserEmail($umail);
  		$usuario->setUserPass($upass);

    		$stmt = $this->db->ejecutarConsulta("SELECT * FROM users
    											 WHERE user_name=:uname
    											 OR user_email=:umail LIMIT 1",
    											array(
    												':uname'=>$usuario->getUserName(),
    												':umail'=>$usuario->getUserEmail()
    												));

  		if($stmt)
  		{
  			if(password_verify($usuario->getUserPass(), $stmt[0]['user_pass']))
  			{
  				$_SESSION['user_session'] 	= $stmt[0]['user_id'];
        	$_SESSION['user_name'] 		= $stmt[0]['user_name'];
  				$_SESSION['inicio_session'] = date('Y-n-j H:i:s');
  				return true;
  			}
  			else
  			{
  				return false;
  			}
  		}
  	}
  	catch(PDOException $e)
  	{
  		echo $e->getMessage();
  	}
	}
}