using System;
using System.Windows.Forms;

using MySql.Data.MySqlClient;
using HazardEdit;

namespace MySQL_Login_Register_Form_Tut
{
    public partial class Form1 : Form
    {
        private MySqlConnection conn;
        private string server;
        private string database;
        private string uid;
        private string password;
        private string myhwid = "";
        private string myip = "127.0.0.1";

        public Form1()
        {
            server = "";
            database = "";
            uid = "";
            password = "";

            string connString;
            connString = $"SERVER={server};DATABASE={database};UID={uid};PASSWORD={password};";

            conn = new MySqlConnection(connString);
            InitializeComponent();
        }

        private void btnRegister_Click(object sender, EventArgs e)
        {
            string user = tbUser.Text;
            string pass = _hash(tbPass.Text);

            if (Register(user, pass))
            {
                MessageBox.Show($"User {user} has been created!");
            }
            else
            {
                MessageBox.Show($"User {user} has not been created!");
            }
        }

        private void btnLogin_Click(object sender, EventArgs e)
        {
            string user = tbUser.Text;
            string pass = _hash(tbPass.Text);

            if (IsLogin(user, pass))
            {
                MessageBox.Show($"Welcome {user}!");
            }
            else
            {
                MessageBox.Show($"{user} does not exist or password is incorrect!");
            }
        }

        public bool Register(string user, string pass)
        {
            string query = $"INSERT INTO users () VALUES ();";

            try
            {
                if (OpenConnection())
                {
                    MySqlCommand cmd = new MySqlCommand(query, conn);

                    try
                    {
                        cmd.ExecuteNonQuery();
                        conn.Close();
                        return true;
                    }
                    catch (Exception ex)
                    {
                        conn.Close();
                        return false;
                    }
                }
                else
                {
                    conn.Close();
                    return false;
                }
            }
            catch (Exception ex)
            {
                conn.Close();
                return false;
            }
        }

        public bool IsLogin(string user, string pass)
        {

            string query = $"SELECT * FROM users WHERE username='{user}' AND passhash='{pass}';";

            try
            {
                if (OpenConnection())
                {
                    MySqlCommand cmd = new MySqlCommand(query, conn);
                    MySqlDataReader reader = cmd.ExecuteReader();

                    if (reader.Read())
                    {

                    }
                }
                else
                {
                    conn.Close();
                    return false;
                }
            }
            catch (Exception ex)
            {
                conn.Close();
                return false;
            }
        }

        private bool OpenConnection()
        {
            try
            {
                conn.Open();
                return true;
            }
            catch (MySqlException ex)
            {
                switch (ex.Number)
                {
                    case 0:
                        MessageBox.Show("Connection to server failed!");
                        break;
                    case 1045:
                        MessageBox.Show("Server username or password is incorrect!");
                        break;
                }
                return false;
            }
        }

        public string _hash (string pass)
        {
            pass = Hash.SHA256(Hash.SHA256(pass + "pepper123") + "123pepper");
            return pass;
        }
    }
}