package util;

import java.util.*;
import java.sql.*;
import javax.sql.DataSource;
import com.mysql.jdbc.jdbc2.optional.MysqlDataSource;
import java.io.*;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import java.math.BigInteger;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
public class sql{
    private boolean connect;
    private Connection c;
    private MysqlDataSource dataSource;

    private static String ConfigConnection = null;
    private static String ConfigUsername = null;
    private static String ConfigPassword = null;
    private static int ConfigPort = 0;
    private String hashPassword(String password) {
        String hashword = null;
        try {
        MessageDigest md5 = MessageDigest.getInstance("MD5");
        md5.update(password.getBytes());
        BigInteger hash = new BigInteger(1, md5.digest());
        hashword = hash.toString(16);

        } catch (NoSuchAlgorithmException nsae) {

        }
        return hashword;
        }

    public boolean checkLogin(String userName, String ip, String pass)
    {
        Pattern pattern = Pattern.compile("\\A[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1}\\.[0-9]{1,3}\\z");
        Matcher matcher = pattern.matcher(ip);
        if (!matcher.matches()) return false;
        if (userName.contains("\"")) return false;
        if (userName.contains("\'")) return false;
        if (pass.contains("\"")) return false;
        if (pass.contains("\'")) return false;
    String passw =hashPassword(pass);
    ArrayList result=null;
    String Q="";
    Q="SELECT password FROM hackerforum.users WHERE name = \"" + userName + "\" AND password = \"" + passw + "\" AND ip = \""+ip+"\"";
            result = (ArrayList)this.process(Q);
                        this.close();
            if (result== null || result.size() == 0) {
                    return(false);
            }
                        return true;
    }


    public sql(String Connection,String DB,String Username,String Password){

        if(ConfigConnection == null) {
            try {
                BufferedReader BR = new BufferedReader(new FileReader("db.ini"));
                ConfigConnection = BR.readLine();
                ConfigUsername = BR.readLine();
                ConfigPassword = BR.readLine();
                ConfigPort = new Integer(BR.readLine());
            } catch (Exception e) {
            //  e.printStackTrace();
            }

            if(ConfigConnection == null) {
                ConfigConnection = "localhost";
                ConfigUsername = "root";
                ConfigPassword = "";
                ConfigPort = 3306;
            } else {
                System.out.println("Configuration file sucessfully loaded.");
            }
        }

        Connection = ConfigConnection;
        Username = ConfigUsername;
        Password = ConfigPassword;

        connect=false;

        //Connect to the database.
        c=null;
        dataSource = new MysqlDataSource();
        dataSource.setDatabaseName(DB);
        dataSource.setServerName(Connection);
        dataSource.setPort(ConfigPort);
        try{
            c = dataSource.getConnection(Username,Password);
            connect=true;
        }catch(Exception e){
            //Throw a loggable error here
        }
    }

    public sql() {

    }

    /**
    ArrayList process()<br />
    Returns an ArrayList of strings representing a flattend collection
    of MySql matches. CMD is an SQL query.
    */
    public ArrayList process(String cmd){
            ArrayList returnMe=null;
            if(connect==false)
                return(null);

            Statement stmt=null;
            try{
                stmt = this.c.createStatement();
                stmt.setEscapeProcessing(false);
                ResultSet rs = stmt.executeQuery(cmd);
                while (rs.next()){
                    int i=1;
                    boolean or=false;
                    while(!or){
                        try{
                            String s=rs.getString(i);
                            if(returnMe==null)
                                returnMe=new ArrayList();
                            returnMe.add(s);

                            i++;
                        }catch(Exception ore){
                            or=true;
                        }
                    }
                }
            }catch(Exception ee){
//ee.printStackTrace();
                try{//Maybe it's an update.
                    int i = stmt.executeUpdate(cmd);
                }catch(Exception ue){
                    //ue.printStackTrace();
                }
            }

        return(returnMe);
    }

    public void close(){
        try{
            c.close();
        }catch(Exception e){
            e.printStackTrace();
        }
    }
}