<?php
//koneksi ke database
$conn = mysqli_connect("localhost","root","","phpdasar");//hostname,username,password,nama database


function query($query){
    global $conn;
     //ambil data dari tabel mahasiswa(query data mahasiswa)
    $result = mysqli_query($conn,$query);//koneksi kedatabase,query date ke sql
    $rows = [];
    while($row= mysqli_fetch_assoc($result)) {
        $rows[] = $row;
    }
    return $rows;
}
function tambah($data){
    global $conn;

     //1. ambil data dari tiap elemen form
     $nama = htmlspecialchars($data["nama"]);
     $nim = htmlspecialchars($data["nim"]);
     $email= htmlspecialchars($data["email"]);
     $jurusan = htmlspecialchars($data["jurusan"]);

     //upload gambar dulu
     $gambar = upload();
     if( !$gambar ){
         return false;
     }

    //2.Query insert data
    $query= "INSERT INTO mahasiswa
                VALUES
                ('', '$nama' , '$nim' , '$email' , '$jurusan' , '$gambar')
                ";
    mysqli_query($conn, $query);

    return mysqli_affected_rows($conn);
}

function upload(){
    $namaFile = $_FILES['gambar']['name'];
    $ukuranFile = $_FILES['gambar']['size'];
    $error = $_FILES['gambar']['error'];
    $tmpName = $_FILES['gambar']['tmp_name'];

    //cek apakah tidak ada gambar yang diupload
    if($error === 4){
        echo "<script>
                    alert('Pilih gambar terlebih dahulu');
              </script>";
              return false;
        }

        //cek apakah gambar atau bukan
        $ekstensiGambarValid = ['jpg' , 'jpeg' , ' png'];
        $ekstensiGambar = explode('.' , $namaFile);
        $ekstensiGambar = strtolower(end($ekstensiGambar));
        if( !in_array($ekstensiGambar, $ekstensiGambarValid) ) {


             echo "<script>
                    alert('Yang anda upload bukan gambar');
                    </script>";
                return true;
        }

}

function hapus($id){
    global $conn;
    mysqli_query($conn, "DELETE FROM mahasiswa WHERE id= $id");
    return mysqli_affected_rows($conn);
}

function ubah($data){
    global $conn;

    //1. ambil data dari tiap elemen form
    $id = $data["id"];
    $nama = htmlspecialchars($data["nama"]);
    $nim = htmlspecialchars($data["nim"]);
    $email= htmlspecialchars($data["email"]);
    $jurusan = htmlspecialchars($data["jurusan"]);
    $gambar = htmlspecialchars($data["gambar"]);

   //2.Query insert data
   $query= "UPDATE mahasiswa SET
            nama = '$nama',
            nim = '$nim',
            email = '$email',
            jurusan = '$jurusan',
            gambar = '$gambar'

            WHERE id = $id
            ";
   mysqli_query($conn, $query);

   return mysqli_affected_rows($conn);
}

function cari($Keyword ){
    $query = "SELECT * FROM mahasiswa
                WHERE
                nama LIKE '%$Keyword%' OR
                nim LIKE '%$Keyword%' OR
                email LIKE '%$Keyword%' OR
                jurusan LIKE '%$Keyword%'
                ";
    return query($query);
}

function register($data){
    global $conn;

    $username = strtolower(stripslashes($data["username"]));
    $password = mysqli_real_escape_string($conn , $data["password"]);
    $password2 = mysqli_real_escape_string($conn, $data["password2"]);

    //cek username sudaha ada atau belum
    $result =mysqli_query($conn, "SELECT username FROM user WHERE username='$username' ");
    if(mysqli_fetch_assoc($result) ) {
        echo "<script>
                alert('username sudah terdaftar');
             </script>";
             return false;
    }


    //cek konfirmasi password
    if($password !== $password2){
        echo "<script>
                alert('konfirmasi password tidak sesuai');
             </script>";

             return false;
    }

    //enskripsi password
    $password = password_hash($password, PASSWORD_DEFAULT);

    //tambahkan userbaru ke database
    mysqli_query($conn, "INSERT INTO user VALUES ('' , '$username' , '$password') ");
    return mysqli_affected_rows($conn);


}

?>