private string GenerateArandomPass()
        {
            const string valid = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890";
            StringBuilder res = new StringBuilder();
            Random rnd = new Random();
            int length = 7;
            while (0 < length--)
            {
                res.Append(valid[rnd.Next(valid.Length)]);
            }
            return res.ToString();

        }

        public void AdminEmail(string email, string randomPass)
        {


            MailMessage message = new MailMessage();

            // Reciever's Email
            message.To.Add(email);

            // Email Subject
            message.Subject = "Welcome To Our Humble Fitness Application ";

            // Sender's Email
            message.From = new MailAddress("fitness.weightlossapp@gmail.com", "Fitness App");

            // Email Body
            message.IsBodyHtml = true;
            string htmlBody = "<h3>Hi</h3><br><h3>Welcome&nbsp;to <strong><u>FitnessApp</u>,</strong></h3><br>" +
                              "<ul><li>your password :'" + randomPass + "' </li><br><li>Change it as early as possible </li><br><li>Point 3</li><br></ul><br><p>Please contact us</p><br>";
            message.Body = htmlBody;


            SmtpClient smtp = new SmtpClient("smtp.gmail.com", 587);
            smtp.EnableSsl = true;
            smtp.Credentials = new System.Net.NetworkCredential("fitness.weightlossapp@gmail.com", "m3leshyFitness21");
            smtp.Send(message);
        }


        public void newAdminInsertaion(string email, string password)
        {
            int adminId = 0;
            string type = "Admin*";
            string query = "Select min(PK_AdminID) from Admin ";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(query, Connection);
            adminId = (int)cmd.ExecuteScalar();
            Connection.Close();
            string query2 = "insert into Account Values(@adminId , @email, @password , @type);";
            Connection.Open();
            SqlCommand cmd2 = new SqlCommand(query2, Connection);
            cmd2.Parameters.AddWithValue("@adminId", adminId);
            cmd2.Parameters.AddWithValue("@email", email);
            cmd2.Parameters.AddWithValue("@password", password);
            cmd2.Parameters.AddWithValue("@type", type);
            cmd2.ExecuteReader();
            Connection.Close();
        }

        public string AdminType(int accountID )
        {
            string query = "select Type from Account where AccountID=@accountID ";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue("@accountID", accountID);
            SqlDataReader dr = cmd.ExecuteReader();
            dr.Read();
            string type = (string)dr["Type"];
            Connection.Close();
            return type;


        }
        public void AddNewAdmin(string email, string firstName , string lastName)
        {

            string query = "insert into Admin(FirstName,LastName) values (@firstName,@lastName)";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue("@firstName", firstName);
            cmd.Parameters.AddWithValue("@lastName", lastName);
            cmd.ExecuteReader();
            Connection.Close();
            string password = GenerateArandomPass();
            string encryptedPassword = EncryptPassword(password);
            AdminEmail(email, password);
            newAdminInsertaion(email, encryptedPassword);
        }

        public bool checkOldPass(int accountID, string oldPass)
        {
            string OldPassword = EncryptPassword(oldPass);
            string password = "";
            Connection.Open();
            string query = "Select Password from  Account where AccountID=@accountID ;";
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue("@accountID", accountID);
            password = cmd.ExecuteScalar().ToString();
            Connection.Close();
            if (password == OldPassword)
            {
                return true;

            }
            else
            {
                return false;
            }
        }

        public void ModifyAdminPassword(int accountID, string newPass)
        {
            string newPassword = EncryptPassword(newPass);
            string type = "Admin";
            string query = "Update Account Set Password=@newPassword , Type =@type where AccountID = @accountID   ";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue("@newPassword", newPassword);
            cmd.Parameters.AddWithValue("@type", type);
            cmd.Parameters.AddWithValue("@accountID", accountID);
            cmd.ExecuteNonQuery();
            Connection.Close();

        }

        public string NumberOFUsers()
        {
            string total = "";
            Connection.Open();
            string query = "select Count(PK_UserID) from [User];";
            SqlCommand cmd = new SqlCommand(query, Connection);
            total = cmd.ExecuteScalar().ToString();
            Connection.Close();
            return total;
        }


        /////////////////////////////////////////unTested //////////////////////////////

        public void DeleteAfeedBack(int accountID)
        {
            string query = "delete from Feedback where FK_Feedback_UserID=@accountID";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue("@accountID", accountID);
            cmd.ExecuteNonQuery();
            Connection.Close();
        }
                                                   // /// /// /// /// /// //

        public void DeleteUser(int accountID)
        {


            string feedbackDelete = "delete from Feedback where FK_Feedback_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd = new SqlCommand(feedbackDelete, Connection);
            cmd.Parameters.AddWithValue("@accountID", accountID);
            SqlDataReader dr = cmd.ExecuteReader();
            dr.Close();
            Connection.Close();

            string userWorkoutDelete = "delete from UserWorkout where  FK_UserWorkout_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd2 = new SqlCommand(userWorkoutDelete, Connection);
            cmd2.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd2.ExecuteReader();
            dr.Close();
            Connection.Close();

            string accountDelete = "delete from  Account where  AccountID=@accountID;";
            Connection.Open();
            SqlCommand cmd3 = new SqlCommand(accountDelete, Connection);
            cmd3.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd3.ExecuteReader();
            dr.Close();
            Connection.Close();

            string challengeDelete = "delete from  UserChallenge where FK_UserChallenge_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd4 = new SqlCommand(challengeDelete, Connection);
            cmd4.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd4.ExecuteReader();
            dr.Close();
            Connection.Close();

            string planDelete = "delete from  UserPlanDay where FK_UserPlanDay_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd5 = new SqlCommand(planDelete, Connection);
            cmd5.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd5.ExecuteReader();
            dr.Close();
            Connection.Close();

            string weightDelete = "delete from  UserWeight where  FK_UserWeight_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd6 = new SqlCommand(weightDelete, Connection);
            cmd6.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd6.ExecuteReader();
            dr.Close();
            Connection.Close();

            string foodDelete = "delete from  UserFood where FK_UserFood_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd7 = new SqlCommand(foodDelete, Connection);
            cmd7.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd7.ExecuteReader();
            dr.Close();
            Connection.Close();

            string userDelete = "delete from [User] where PK_UserID=@accountID;";
            Connection.Open();
            SqlCommand cmd8 = new SqlCommand(userDelete, Connection);
            cmd8.Parameters.AddWithValue("@accountID", accountID);
            dr = cmd8.ExecuteReader();
            dr.Close();
            Connection.Close();

        }
                                                 // /// /// /// /// /// //

        public List<int> Rating()
        {
            Connection.Open();
            var rateList = new List<int>();
            for (int i = 1; i <= 5; i++)
            {
                int rate = 0;
                string query = "select count(FK_Feedback_UserID) from Feedback where Rating = @i;";

                SqlCommand cmd = new SqlCommand(query, Connection);
                rate = (int)cmd.ExecuteScalar();

                rateList.Add(rate);

            }
            Connection.Close();
            return rateList;
        }


        // don't forget to put the image to bute array function on clicking the button before accessing this function
        public void AddNewChallenge(byte[] image, string name, string description, int targetMinutes, string reward, string dueDate, int workoutID)
        {
            Connection.Open();

            SqlCommand cmd = new SqlCommand("AddChallenge", Connection);
            cmd.CommandType = CommandType.StoredProcedure;
            cmd.Parameters.AddWithValue("@Image", image);
            cmd.Parameters.AddWithValue("@Name", name);
            cmd.Parameters.AddWithValue("@Description", description);
            cmd.Parameters.AddWithValue("@TargetMinutes", targetMinutes);
            cmd.Parameters.AddWithValue("@Rewards", reward);
            cmd.Parameters.AddWithValue("@DueDate", dueDate);
            cmd.Parameters.AddWithValue("@Fk_Challenge_WorkoutID", workoutID);
            cmd.ExecuteNonQuery();

            Connection.Close();

        }




        // UNFINISHED//
        public List<UserModel> LoadAUser(string search)
        {
            UserModel currentUser = new UserModel();

            string firstName = "";
            string lastName = "";
            string email = "";
            string searching = search + '%';


            string query = "select photo , FirstName , LastName , Email from [User] inner join Account  on PK_UserID = AccountID  where FirstName like @search;";
            SqlCommand cmd = new SqlCommand(query, Connection);
            cmd.Parameters.AddWithValue(" @search", searching);
            SqlDataReader dr = cmd.ExecuteReader();
            while (dr.Read())
            {
                if (dr.HasRows == true)
                {
                    if (dr["Photo"] != DBNull.Value)
                        currentUser.ProfilePhoto.ByteArray = (byte[])dr["Photo"];

                    firstName = dr["FirstName"].ToString();
                    lastName = dr["LastName"].ToString();
                    email = dr["Email"].ToString();

                }

            }


        }