<?php
/**
 * Created by PhpStorm.
 * User: erhanlammar
 * Date: 23/04/16
 * Time: 10:13
 */

include_once("Db.class.php");

class User{

    // todo: 1 private variabelen aanmaken voor firstname, lastname, ...
    private $_db;
    private $m_sUsername;
    private $m_sFirstname;
    private $m_sLastname;
    private $m_sEmail;
    private $m_sPassword;
    private $m_sPasswordconfirmation;

    //private $m_sProfileimage;
    //private $m_susersid;

    // todo: 2 getters & setters!

    public function __set($p_sProperty, $p_vValue){
        switch($p_sProperty){
            case "Username":
                if(!empty($p_vValue)){
                    $this->m_sUsername = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld username.
                    throw new exception("vergeet geen username in te vullen");
                }
            case "Firstname":
                if(!empty($p_vValue)){
                    $this->m_sFirstname = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld firstname.
                    throw new exception("Uw voornaam hebben we echt wel nodig");
                }
            case "Lastname":
                if(!empty($p_vValue)){
                    $this->m_sLastname = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld lastname.
                    throw new exception("Heeft u geen achternaam?");
                }
            case "Email":
                if(!empty($p_vValue)){
                    $this->m_sEmail = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld email.
                    throw new exception("Wij hebben uw email nodig om u op de hoogte te houden");
                }
            case "Password":
                if(!empty($p_vValue)){
                    $this->m_sPassword = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld firstname.
                    throw new exception("Zonder wachtwoord geen login");
                }
            case "Passwordconfirmation":
                if(!empty($p_vValue)){
                    $this->m_sPasswordconfirmation = $p_vValue;
                    break;
                }else{
                    //opvangen van leeg veld firstname.
                    throw new exception("Zonder wachtwoord geen login");
                }
        }
    }
    public function __get($p_sProperty){
        switch($p_sProperty){
            case "Username":
                return $this->m_sUsername;
                break;
            case "Firstname":
                return $this->m_sFirstname;
                break;
            case "Lastname":
                return $this->m_sLastname;
                break;
            case "Email":
                return $this->m_sEmail;
                break;
            case "Password":
                return $this->m_sPassword;
                break;
            case "Passwordconfirmation":
                return $this->m_sPasswordconfirmation;
                break;
            }
    }

    private function checkPasswordConfirmation(){
        if($this->m_sPassword == $this->m_sPasswordconfirmation){
            return true;
        }else{
            throw new exception("wachtwoorden komen niet overeen");
        }
    }


    public function signup(){
        if(!$this->checkEmail()){
            throw new exception("Dit emailadres bestaat al neem een ander of ga naar login");
        }
        if(!$this->checkUsername()){
            throw new exception("De username die u gekozen heeft bestaat al!!");
        }
        if(!$this->checkPasswordConfirmation()){
            throw new exception("De registratie is niet correct verlopen. Check alles nog eens");
        }
        $conn = new PDO("mysql:host=localhost;dbname=IMDstagram", "root","");
        $options= ['cost' => 12];
        $this->m_sPassword = password_hash($this->m_sPassword, PASSWORD_DEFAULT, $options);
        $statement = $conn->prepare("INSERT INTO users(
          username,
          firstname,
          lastname,
          email,
          password
          )
          VALUES(
          :username,
          :firstname,
          :lastname,
          :email,
          :password
          )
          ");
        $statement->bindValue(":username", $this->m_sUsername);
        $statement->bindValue(":firstname", $this->m_sFirstname);
        $statement->bindValue(":lastname", $this->m_sLastname);
        $statement->bindValue(":email", $this->m_sEmail);
        $statement->bindValue(":password", $this->m_sPassword);
        return $statement->execute();

    }

    public function checkEmail(){

        $PDO = Db::getInstance();
        $stmt = $PDO->prepare("SELECT * FROM users WHERE email= :email");
        $stmt->bindValue(":email", $this->m_sEmail, PDO::PARAM_STR);
        $stmt->execute();

        if( $stmt->rowCount() > 0 ){
            return false;
            throw new exception( "" ) ;
        }
        else{

            return true;

        }
    }
    public function checkUsername(){

        $PDO = Db::getInstance();
        $stmt = $PDO->prepare("SELECT * FROM users WHERE username= :username");
        $stmt->bindValue(":username", $this->m_sUsername, PDO::PARAM_STR);
        $stmt->execute();

        if( $stmt->rowCount() > 0 ){
            return false;
            throw new exception( "" ) ;
        }
        else{
            return true;

        }
    }

    public function loggingIn(){
        if(!empty($this->m_sUsername) && !empty($this->m_sPassword)){
            $PDO = Db::getInstance();
            $stmt = $PDO->prepare("SELECT * FROM users WHERE username = :username");
            $stmt->bindValue(":username", $this->m_sUsername, PDO::PARAM_STR);
            $stmt->execute();

            if($stmt->rowCount() > 0){
                $result = $stmt->fetch(PDO::FETCH_ASSOC);
                $password = $this->m_sPassword;
                $hash = $result['password'];

                if(password_verify($password, $hash)){
                    session_start();
                    $_SESSION["loggedIn"] = $result['usersid'];
                    session_write_close();
                    return true;
                }else{
                    return false;
                }
            }
        }
    }
    public function Update($userid){
        echo $userid;
        echo " UPDATE users SET username= '" . $this->m_sUsername . "', email = '" . $this->m_sEmail . "', password = '" . $this->m_sPassword . "' WHERE usersid = '" . $userid . "'";
        $PDO = Db::getInstance();
        if(!empty($this->m_sUsername) && !empty($this->m_sEmail) && !empty($this->m_sPassword) && !empty($this->m_sPasswordconfirmation)){
            if($this->m_sPassword == $this->m_sPasswordconfirmation){
                $options= ['cost' => 12];
                $this->m_sPassword = password_hash($this->m_sPassword, PASSWORD_DEFAULT, $options);

                $stmt = $PDO->prepare("UPDATE users SET username= :username, email = :email, password = :password WHERE usersid = :usersid");
                $stmt->bindValue(":usersid", $userid, PDO::PARAM_INT);
                $stmt->bindValue(":username", $this->m_sUsername, PDO::PARAM_STR);
                $stmt->bindValue(":email", $this->m_sEmail, PDO::PARAM_STR);
                $stmt->bindValue(":password", $this->m_sPassword, PDO::PARAM_STR);
                if($stmt->execute()){
                    // success
                    throw new exception("Je aanpassingen zijn doorgevoerd");
                }else{
                    // error
                    throw new exception("Je hebt ergens een fout ingevuld");
                }
            }else{
                // Mismatch password
                throw new exception("Wachtwoorden komen niet overeen");
            }
        }else{
            // some values are not set
            throw new exception("Je hebt enkele velden niet ingevuld");
        }
    }
}