namespace Auth;
use ConnectDB;

class User
{
   private $username;
   private $db;
   private $user_id;

   private $db_host = "localhost";
   private $db_name = "cms";
   private $db_user = "root";
   private $db_pass = "";

   private $is_authorized = false;

public function __construct($username = null, $password = null)
{
    $this->username = $username;
    $this->connectDb($this->db_name, $this->db_user, $this->db_pass, $this->db_host);
}

public function __destruct()
{
    $this->db = null;
}

/**
 * @return bool
 */
public static function isAuthorized()
{
    if (!empty($_SESSION["user_id"])) {
        return (bool) $_SESSION["user_id"];
    }
    return false;
}

/**
 * @param $password
 * @param null $salt
 * @param int $iterations
 * @return array
 */
public function passwordHash($password, $salt = null, $iterations = 10)
{
    $salt || $salt = uniqid();
    $hash = md5(md5($password . md5(sha1($salt))));

    for ($i = 0; $i < $iterations; ++$i) {
        $hash = md5(md5(sha1($hash)));
    }

    return array('hash' => $hash, 'salt' => $salt);
}

/**
 * @param $username
 * @return bool
 */
public function getSalt($username) {
    $query = "select salt from users where username = :username limit 1";
    $sth = $this->db->prepare($query);
    $sth->execute(
        array(
            ":username" => $username
        )
    );
    $row = $sth->fetch();
    if (!$row) {
        return false;
    }
    return $row["salt"];
}

/**
 * @param $username
 * @param $password
 * @param bool $remember
 * @return bool
 */
public function authorize($username, $password, $remember=false)
{
    $query = "select id, username from users where
        username = :username and password = :password limit 1";
    $sth = $this->db->prepare($query);
    $salt = $this->getSalt($username);

    if (!$salt) {
        return false;
    }

    $hashes = $this->passwordHash($password, $salt);
    $sth->execute(
        array(
            ":username" => $username,
            ":password" => $hashes['hash'],
        )
    );
    $this->user = $sth->fetch();

    if (!$this->user) {
        $this->is_authorized = false;
    } else {
        $this->is_authorized = true;
        $this->user_id = $this->user['id'];
        $this->saveSession($remember);
    }

    return $this->is_authorized;
    //return $hashes['hash'];
}

/**
 *
 */
public function logout()
{
    if (!empty($_SESSION["user_id"])) {
        unset($_SESSION["user_id"]);
    }
}

/**
 * @param bool $remember
 * @param bool $http_only
 * @param int $days
 */
public function saveSession($remember = false, $http_only = true, $days = 7)
{
    $_SESSION["user_id"] = $this->user_id;

    if ($remember) {
        // Save session id in cookies
        $sid = session_id();

        $expire = time() + $days * 24 * 3600;
        $domain = ""; // default domain
        $secure = false;
        $path = "/";

        $cookie = setcookie("sid", $sid, $expire, $path, $domain, $secure, $http_only);
    }
}

/**
 * @param $username
 * @param $password
 * @return mixed
 * @throws Exception
 */
public function create($username, $password) {
    $user_exists = $this->getSalt($username);

    if ($user_exists) {
        throw new Exception("User exists: " . $username, 1);
    }

    $query = "insert into users (username, password, salt)
        values (:username, :password, :salt)";
    $hashes = $this->passwordHash($password);
    $sth = $this->db->prepare($query);

    try {
        $this->db->beginTransaction();
        $result = $sth->execute(
            array(
                ':username' => $username,
                ':password' => $hashes['hash'],
                ':salt' => $hashes['salt'],
            )
        );
        $this->db->commit();
    } catch (PDOException $e) {
        $this->db->rollback();
        echo "Database error: " . $e->getMessage();
        die();
    }

    if (!$result) {
        $info = $sth->errorInfo();
        printf("Database error %d %s", $info[1], $info[2]);
        die();
    }

    return $result;
}

/**
 * @param $db_name
 * @param $db_user
 * @param $db_pass
 * @param $db_host
 * @return $this
 */
public function connectdb($db_name, $db_user, $db_pass, $db_host)
{
    try {
        $this->db = new pdo("mysql:host=$db_host;dbname=$db_name", $db_user, $db_pass);
    } catch (pdoexception $e) {
        echo "database error: " . $e->getmessage();
        die();
    }
    $this->db->query('set names utf8');

    return $this;
}
}
class ChangePass extends User{
private $username;
private $db;

private $db_host = "localhost";
private $db_name = "cms";
private $db_user = "root";
private $db_pass = "";

public function __construct($username = null, $password = null)
{
    $this->username = $username;
    $this->connectDb($this->db_name, $this->db_user, $this->db_pass, $this->db_host);
}

public function __destruct()
{
    $this->db = null;
}



private function updatePassInDb ($username, $newpass)
{

    $query  = "UPDATE `users` SET `password` = :password, `salt` = :salt WHERE `username` = :username";
    $hashes = $this->passwordHash($newpass);
    $sth = $this->db->prepare($query);
    try {
        $this->db->beginTransaction();
        $result = $sth->execute(
            array(
                ':username' => $username,
                ':password' => $hashes['hash'],
                ':salt' => $hashes['salt'],
            )
        );
        $this->db->commit();
    } catch (PDOException $e) {
        $this->db->rollback();
        echo "Database error: " . $e->getMessage();
        die();
    }

    if (!$result) {
        $info = $sth->errorInfo();
        printf("Database error %d %s", $info[1], $info[2]);
        die();
    }

    return $result;

}
public function changePassword ($current_login, $current_psw, $newpass)
{
    $result_auth = $this->authorize($current_login, $current_psw);
    if($result_auth === true){
        $result =  $this->updatePassInDb($current_login, $newpass);
        return $result;
    }else{
        return $result_auth;
    }
    //return $result_auth;
}
}

$obj_change_psw = new AuthChangePass();
$result = $obj_change_psw->changePassword($current_login, $current_psw,     $new_pass);

$obj_change_psw = new AuthChangePass();
$result = $obj_change_psw->changePassword($current_login, $current_psw, $new_pass);