<?php

class User
{
    const DB_PATH = './example.db';

    private $id = NULL;
    private $username = NULL;
    private $password = NULL;
    private $email = NULL;
    private $date = NULL;

    public function __construct($id)
    {
        if(!is_int($id))
            throw new InvalidArgumentException('User class constructor expects integer, value given was: '.$id);
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('SELECT * FROM users WHERE id = :id');
        $query->bindParam(':id', $id, PDO::PARAM_INT);
        $query->execute();

        $query->bindColumn('id', $this->id, PDO::PARAM_INT);
        $query->bindColumn('username', $this->username, PDO::PARAM_STR);
        $query->bindColumn('password', $this->password, PDO::PARAM_STR);
        $query->bindColumn('email', $this->email, PDO::PARAM_STR);
        $query->bindColumn('date', $this->date, PDO::PARAM_INT);
        $query->fetch(PDO::FETCH_BOUND);
        if($this->id == NULL)
            throw new OutOfBoundsException('No such ID found in database: '.$id);
    }


    public function getID()
    {
        return $this->id;
    }

    public function getUsername()
    {
        return $this->username;
    }

/*  public function getPassword()
    {
        return $this->password;
    }*/

    public function getEmail()
    {
        return $this->email;
    }

    public function getDate()
    {
        return $this->date;
    }


    public function setUsername($username)
    {
        if(!User::validateUsername($username))
            throw new InvalidArgumentException('Invalid username passed to setUsername() method: '.$username);
        if(!User::availableUsername($username))
            throw new InvalidArgumentException('Unavailable username passed to setUsername() method: '.$username);
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('UPDATE users SET username=:username WHERE id=:id');
        $query->bindParam(':username', $username, PDO::PARAM_STR);
        $query->bindParam(':id', $this->id, PDO::PARAM_INT);
        $query->execute();
        $this->username = $username;
    }

    public function setPassword($password)
    {
        if(!User::validatePassword($password))
            throw new InvalidArgumentException('Invalid password passed to setPassword() method: '.$password);
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('UPDATE users SET password=:password WHERE id=:id');
        $query->bindParam(':password', sha1($password), PDO::PARAM_STR);
        $query->bindParam(':id', $this->id, PDO::PARAM_INT);
        $query->execute();
        $this->password = sha1($password);
    }

    public function setEmail($email)
    {
        if(!User::validateEmail($email))
            throw new InvalidArgumentException('Invalid email passed to setEmail() method: '.$email);
        if(!User::availableEmail($email))
            throw new InvalidArgumentException('Unavailable email passed to setEmail() method: '.$email);
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('UPDATE users SET email=:email WHERE id=:id');
        $query->bindParam(':email', $email, PDO::PARAM_STR);
        $query->bindParam(':id', $this->id, PDO::PARAM_INT);
        $query->execute();
        $this->email = $email;
    }


    public function loggedIn()
    {
        if(isset($_POST['username']) && isset($_POST['password']))
        {
            if($_POST['username'] != $this->username)
                return false;
            if(sha1($_POST['password']) != $this->password)
                return false;
        }
        else if(isset($_COOKIE['username']) && isset($_COOKIE['password']))
        {
            if($_COOKIE['username'] != $this->username)
                return false;
            if(sha1($_COOKIE['password']) != $this->password)
                return false;
        }
        else
        {
            return false;
        }
        return true;
    }


    public static function add($username, $password, $email)
    {
        if(!User::validateUsername($username))
            throw new InvalidArgumentException('Invalid username passed to User::add() method: '.$username);
        if(!User::validatePassword($password))
            throw new InvalidArgumentException('Invalid password passed to User::add() method: '.$password);
        if(!User::validateEmail($email))
            throw new InvalidArgumentException('Invalid email passed to User::add() method: '.$email);
        if(!User::availableUsername($username))
            throw new InvalidArgumentException('Unavailable username passed to User::add() method: '.$username);
        if(!User::availableEmail($email))
            throw new InvalidArgumentException('Unavailable email passed to User::add() method: '.$email);
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('INSERT INTO users(username, password, email, date) VALUES(:username, :password, :email, :date)');
        $query->bindParam(':username', $username, PDO::PARAM_STR);
        $query->bindParam(':password', sha1($password), PDO::PARAM_STR);
        $query->bindParam(':email', $email, PDO::PARAM_STR);
        $query->bindParam(':date', time(), PDO::PARAM_STR);
        $query->execute();
    }


    public static function validateUsername($username)
    {
        if(preg_match("/^\w{4,32}$/", $username))
            return true;
        return false;
    }

    public static function validatePassword($password)
    {
        if(preg_match("/^.{6,128}$/", $password))
            return true;
        return false;
    }

    public static function validateEmail($email)
    {
        if(preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i", $email))
            return true;
        return false;
    }


    public static function availableUsername($username)
    {
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('SELECT COUNT (*) FROM users WHERE username = :username');
        $query->bindParam(':username', $username, PDO::PARAM_STR);
        $query->execute();
        if($query->fetchColumn() == 0)
            return true;
        return false;
    }

    public static function availableEmail($email)
    {
        $db = new PDO('sqlite:./example.db');
        $query = $db->prepare('SELECT COUNT (*) FROM users WHERE email = :email');
        $query->bindParam(':email', $email, PDO::PARAM_STR);
        $query->execute();
        if($query->fetchColumn() == 0)
            return true;
        return false;
    }


    public static function setupDB()
    {
        $db = new PDO('sqlite:'.User::DB_PATH);

        $query = $db->prepare('CREATE TABLE IF NOT EXISTS users(id INTEGER PRIMARY KEY, username TEXT NOT NULL UNIQUE COLLATE NOCASE, password TEXT NOT NULL, email TEXT NOT NULL UNIQUE COLLATE NOCASE, date INTEGER NOT NULL)');
        $query->execute();
    }
}

?>