class Session
{
    public function start()
    {
        session_start();
        if(!isset($_SESSION['sid']))
        {
            $_SESSION['gid'] = 0;
        }
        else
        {
            $admin = true;
            $mod = true;
            $member = true;
            $guest = true;

            if($_SESSION['gid']<3)
            {
                $admin = false;
            }
            else if($_SESSION['gid']<2)
            {
                $mod = false;
            }
            else if($_SESSION['gid']<1)
            {
                $member = false;
            }
            else if($_SESSION['gid']>0)
            {
                $guest = false;
            }
            else
            {
                $_SESSION['gid'] = 0;
            }
        }
    }
    public function register($username,$password)
    {
        // Check username length
        if(strlen($username)>25)
        {
            echo 'Username needs to have shorter value.';
        }
        else if(strlen($username)<3)
        {
            echo 'Username needs to have longer value.';
        }
        else
        {
            // Check password length
            if(strlen($password)>35)
            {
                echo 'Password needs to have shorter value';
            }
            else if(strlen($password)<3)
            {
                echo 'Password needs to have shorter value';
            }
            else
            {
                // Convert to Base64 for SQL insertion
                $username = base64_encode($username);
                $password = base64_encode(md5($password));

                // Before inserting, we should check to see if the user already exists
                $Database->connect();
                $sql = mysql_query("SELECT * FROM leet_users WHERE username='$username'");
                if(mysql_num_rows($sql)==1)
                {
                    echo 'User already exists.';
                }
                else
                {
                    // Time to insert!
                    $sql = mysql_query("INSERT INTO leet_users (username,password,ip,gid) VALUES ($username,$password,$_SERVER[REMOTE_ADDR],1");
                    echo base64_decode($username) . " registered.";
                }
            }
        }
    }
    public function login($username,$password)
    {
        // Converts to Base64
        $username = base64_encode($username);
        $password = base64_encode(md5($password));

        $Database->connect();
        $sql = mysql_query("SELECT * FROM leet_users WHERE username='$username'");
        if(mysql_num_rows($sql)==0)
        {
            echo 'User doesn\'t exist.';
        }
        else
        {
            while($row = mysql_fetch_array($sql))
            {
                $_SESSION['gid'] = $row['gid'];
            }
        }
    }
}