var MDB = {
  _db: null,
  getDB: function() {
    if (!MDB._db) {
      var sqlite3 = require("sqlite3").verbose(); // uses SQLite data base
      MDB._db = new slqite3.Database("db/movieDB");
    }

    return MDB._db;
  },

  checkAuth: function(req, res, next) {
    if (!req.session.user) {
      res.redirect("/");
    } else {
      next();
    }
  },

  login: function(req, res, next) {
    if (req.session.user) {
      res.redirect("/mdb");
    }

    res.render("login");
  },

  processLogin: function(req, res, next) {
    var data = [req.body.username, req.body.password];
    var db = MDB.getDb();

    db.get(
      "SELECT * FROM users WHERE username = ? AND password = ?",
      data,
      function(err, row) {
        if (row) {
          req.session.user = row.username;
          res.redirect("/mdb");
        } else {
          res.redirect("/");
        }
      }
    );
  },

  logout: function(req, res, next) {
    delete req.session.user;
    res.redirect("/");
  },

  mdb: function(req, res, next) {
    res.send("successfully logged in");
  }
};

module.exports = MDB;