<?php
	$username = $_POST['username'];
	$email = $_POST['email'];
?>
	<div align="center"><?php echo $statusMessage; ?></div>
	<a href="forgetPw.php">Back</a>
	<a href="home.php">Home</a>
<?php
	$statusMessage = "";
?>
<?php
	$HOST = 'localhost';
	$USERNAME = 'root';
	$PASSWORD = '';
	$DB = 'fyp';

	function loginUser($username,$password){
	$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query1 = "SELECT username FROM user WHERE username='".$username."' AND password = ".$password;
	$result1 = mysqli_query($dbConn,$query1) or die(mysqli_error($dbConn));
	if(mysqli_num_rows($result1)>0){
		$loginRow = mysqli_fetch_assoc($result1);
		mysqli_close($dbConn);
		return $loginRow;
	}else{
		return false;
	}
}

function updatePassword
($username,$newPassword){
	$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query2 = "UPDATE user SET password = SHA1('$newPassword') WHERE username = '$username'";
	$result2 = mysqli_query($dbConn,$query2) or die(mysqli_error($dbConn));
	if(mysqli_affected_rows($dbConn)>0){
		mysqli_close($dbConn);
		return true;
	}else{
		return false;
	}
}
function newUser($username,$password,$email){
$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query3 = "INSERT INTO user (username,password,email) VALUES ('$username','$password','$email')";
	$result3 = mysqli_query($dbConn,$query3) or die(mysqli_error($dbConn));
	if(mysqli_affected_rows($dbConn)>0){
		mysqli_close($dbConn);
		return true;
	}else{
		return false;
	}
}



function getPasswordByUsername($username){
	$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query4 = "SELECT password from user where username ='".$username."'";
	$result4 = mysqli_query($dbConn,$query4) or die(mysqli_error($dbConn));
	if(mysqli_num_rows($result4)>0){
		$row = mysqli_fetch_assoc($result4);
		$password = $row['password'];
		mysqli_close($dbConn);
		return $password;
	}else{
		return false;
	}
}


function activate($username){
$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query5 = "UPDATE user SET activated = 1 WHERE username = '$username'";
	$result5 = mysqli_query($dbConn,$query5) or die(mysqli_error($dbConn));
	if(mysqli_affected_rows($dbConn)>0){
		mysqli_close($dbConn);
		return true;
	}else{
		return false;
	}
}
function createRandomPassword($username) {
	$chars = "ABCDEFGHJKLMNOPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz023456789";
	$i = 0;
	$pass = '' ;

	while ($i <= 8) {
		$num = mt_rand(0,58);
		$tmp = substr($chars, $num, 1);
		$pass = $pass . $tmp;
		$i++;
	}

	$dbConn = mysqli_connect($HOST, $USERNAME, $PASSWORD, $DB) or die(mysqli_connect_error());
	$query6 = "UPDATE user SET password = '".$pass."' WHERE username = '".$username."'";
	$result6 = mysqli_query($dbConn,$query6) or die(mysqli_error($dbConn));

	return $pass;
}


if(isset($_POST['forgotPassword'])){
	$username = $_POST['username'];
	$email = $_POST['email'];

	$password = createRandomPassword($username);

	if(!$password){
		echo "Get Passowrd By Username Failed. <a href='forgotPassword.php'>Forgot Password</a>";
	}

	else{
		//send email w pwd
		$name = "Forgot Passowrd";
		$emailFrom = "86023@myrp.edu.sg";
		$recipient = $email;
		$mail_body = "Your password is ".$password;
		$subject = "Forgot Password";
		$header = "From: " . $emailFrom . "";

		//ini_set("SMTP","student-mail.rp.edu.sg");

		mail($recipient, $subject, $mail_body, $header);

		$statusMessage = "E-mail Sent!";
	}
}

?>