<?php

    header('Access-Control-Allow-Origin: *');
    header('Access-Control-Allow-Methods: GET, POST');

    $servername = "localhost";
    $username = "root";
    $password = "";
    $dbname = "NoSurat";


    if(isset($_POST['kode'])){
        if($_POST['kode'] == "auth"){
            echo json_encode(autentikasi($_POST['username'], $_POST['password']));
        }

        if($_POST['kode'] == "ambil"){

            // autentikasi data setiap kali melakukan post request
            $auth = autentikasi($_POST['username'], $_POST['password']);

            // autentikasi data gagal
            if($auth == "" || $auth == false || $auth == null){
                echo "Auth failed";
                return;
            }

            // autentikasi data berhasil
            echo json_encode(ambilSemuaSurat());
        }
    }

    function ambilNol($angka){
        return $angka < 10 ? "00" : ($angka < 100 ? "0" : "");
    }

    function getNowMonthRomawi(){
        switch(date('m')){
            case '01': return 'I';
            case '02': return 'II';
            case '03': return 'III';
            case '04': return 'IV';
            case '05': return 'V';
            case '06': return 'VI';
            case '07': return 'VII';
            case '08': return 'VIII';
            case '09': return 'IX';
            case '10': return 'X';
            case '11': return 'XI';
            case '12': return 'XII';
        }
    }

    function nomorSuratTerakhir($jenis){
        $sql = "SELECT nomor_surat FROM Surat WHERE jenis = '$jenis' ORDER BY nomor_surat DESC LIMIT 1";
        $dataSQL = __execute__sql($sql);

        if($dataSQL == NULL)
            return (object) array(
                'nomor_surat' => '0'
            );

        return $dataSQL->data->fetch_assoc();
    }


    function tambahSurat($nama, $jenis, $derajat, $klasifikasi, $catatan, $yang_mengeluarkan, $username, $password){
        $auth = autentikasi($username, $password);

        if($auth == "" || $auth == false || $auth == null)
            return -99;

        $nomor_surat = ((int) nomorSuratTerakhir($jenis)['nomor_surat']) + 1;

        $sql = "INSERT INTO `Surat`(`nama`, `jenis`, `derajat`, `klasifikasi`, `catatan`, `nomor_surat`, `yang_mengeluarkan`) VALUES ('$nama', '$jenis', '$derajat', '$klasifikasi', '$catatan', '$nomor_surat', '$yang_mengeluarkan')";

        $dataSQL = __execute__sql($sql);

        if($dataSQL == NULL)
            return -1;

        return $dataSQL->data ? $nomor_surat : -1;
    }

    function ambilSurat($noSurat, $jenis){
        $sql = "SELECT id_surat, nama, (SELECT nama_jenis FROM Jenis_Surat WHERE Jenis_Surat.id = jenis) AS jenis, (SELECT prefix FROM Jenis_Surat WHERE Jenis_Surat.id = jenis) AS prefix_surat, (SELECT nama_derajat FROM Derajat WHERE Derajat.id = derajat) AS derajat, (SELECT nama_klasifikasi FROM Klasifikasi WHERE Klasifikasi.id = klasifikasi) AS klasifikasi, catatan, nomor_surat, (SELECT nama_yang_mengeluarkan FROM Yang_Mengeluarkan WHERE Yang_Mengeluarkan.id = yang_mengeluarkan) as yang_mengeluarkan FROM Surat WHERE jenis = '$jenis' AND nomor_surat = '$noSurat'";

        $dataSQL = __execute__sql($sql);

        if($dataSQL == NULL)
            return false;

        return $dataSQL->data->fetch_assoc();
    }

    function ambilSemuaSurat(){
        $sql = "SELECT * FROM Surat JOIN Jenis_Surat ON Surat.jenis = Jenis_Surat.id";

        $dataSQL = __execute__sql($sql);

        if($dataSQL == NULL)
            return false;

        $hasil = array();

        while($row = $dataSQL->data->fetch_assoc())
            array_push($hasil, $row);

        return $hasil;
    }

    function autentikasi($username, $password){
        $md5password = md5($password);
        $sql = "SELECT indeks FROM Autentikasi WHERE username = '$username' AND password = '$md5password'";

        $dataSQL = __execute__sql($sql);

        if($dataSQL == NULL)
            return false;

        return $dataSQL->data->fetch_assoc();
    }

    function __execute__sql($query){
        global $servername, $username, $password, $dbname;

        // Create connection
        $conn = new mysqli($servername, $username, $password, $dbname);

        // Check connection
        // ERROR: Gagal melakukan koneksi ke database
        if ($conn->connect_error)
            return (object)array(
                'error' => true,
                'data' => $conn->connect_error
            );

        // Request query
        $hasil = $conn->query($query);

        // Iniatializing error message variable
        $errorDB = "";

        // If query error, get the error message
        if(!$hasil)
            $errorDB = $conn->error;

        // Close connection
        $conn->close();

        // If query succes return result
        // ERROR: Gagal melakukan query pada databse
        if($hasil == true)
            return (object)array(
                'error' => false,
                'data' => $hasil
            );

        // Else return error message
        return (object)array(
            'error' => true,
            'data' => $errorDB
        );
    }
?>