<?php

    class login
    {

        public function logUser($user, $pw)
        {
            $checkUser = userValidate($user);
            $checkPass = passValidate($pw);
            if($checkUser && $checkPass)
            {
                $query = "SELECT * FROM users WHERE"
                        . " userName = " . $user
                        . " AND password = " . $pw;

                $result = mysql_query($query);

                $row = mysql_fetch_assoc($result);

                if(mysql_num_rows($result) != 1)
                {

                    $_SESSION['error']['login'] = 'Invalid Login';
                    return false;

                } else {

                    $_SESSION['userName'] = $row['userName'];
                    return true;

                }
                return false;
            }
            return false;
        }

        public function register($arr)
        {

            unset($arr['submit']);

            $cnt = count($arr);
            $i = 1;

            $query = "INSERT INTO users SET";
                    foreach($arr as $k => $v)
                    {
                        if($i < $cnt)
                        {
                            $query .= " " . $k . " = '" . $v .  "',";
                            $i++;
                        } else {
                            $query .= " " . $k . " = '" . $v . "'";
                        }

                    }

            $result = mysql_query($query)or trigger_error(mysql_error());

        }

        public function regForm()
        {

            $form = array(
                    'text' => array(
                            'Desired UserName' => 'userName',
                            'First Name' => 'fName',
                            'Last Name' => 'lName',
                            'E-mail' => 'email',
                            'Confirm Email' => 'emailConf'
                                    ),
                             'password' => array(
                             'Password' => 'password',
                             'Confirm Password' => 'passwordConf'
                                    )
                             );

            return $form;

        }

        public function sanitize($arr)
        {

            foreach($arr as $k => $v)
            {
                $arr[$k] = mysql_real_escape_string(trim($v));
            }

            return $arr;

        }

        public function desanitize($var)
        {

            $var = stripslashes($var);

            return $var;

        }

        public function passValidate($pw1, $pw2, $minlen=5, $maxlen=32)
        {

            if(strlen($pw1) == 0)
            {
                $_SESSION['error']['reg']['pass'] = 'Password is Blank';
                return false;
            }

            if($pw1 != $pw2)
            {

                $_SESSION['error']['reg']['pass'] = 'Passwords Don\'t Match';
                return false;

            }

            if(strlen($pw1) < $minlen)
            {

                $_SESSION['error']['reg']['pass'] = 'Password too Short - Need at least 5 Characters';
                return false;

            }

            if(strlen($pw1) > $maxlen)
            {

                $_SESSION['error']['reg']['pass'] = 'Password too Long - 32 Characters Max';
                return false;

            } else {

                unset($_POST['passwordConf']);
                return true;

            }

            return false;

        }

        public function emailValidate($em1, $em2)
        {

            if(strlen($em1) == 0)
            {
                $_SESSION['error']['reg']['email'] = 'E-mail is blank';
                return false;
            }

            if($em1 != $em2)
            {
                $_SESSION['error']['reg']['email'] = 'E-mail addresses do not match';
                return false;
            }
            $regex = "/^([a-zA-Z0-9])+([a-zA-Z0-9\._-])*@([a-zA-Z0-9_-])+([a-zA-Z0-9\._-]+)+$/";
            if(!preg_match($regex, $em1))
            {
                $_SESSION['error']['reg']['email'] = 'Invalid E-mail format';
                return false;
            } else {

                unset($_POST['emailConf']);
                return true;

            }

            return false;

        }

        public function userValidate($user, $minlen=4, $maxlen=20)
        {

            $query = "SELECT userName FROM users WHERE userName = '" . $user . "'";

            $result = mysql_query($query);

            $row = mysql_num_rows($result);

            if($row == 0)
            {
                $regex = "/[^a-z0-9_.-]/i";
                if(preg_match($regex,$user))
                {
                    $_SESSION['error']['reg']['user'] = 'Invalid Username';
                    return false;
                }

                if(strlen($user) == 0)
                {
                    $_SESSION['error']['reg']['user'] = 'Username is blank';
                    return false;
                }

                if(strlen($user) < $minlen)
                {
                    $_SESSION['error']['reg']['user'] = 'Username is too short';
                    return false;
                }

                if(strlen($user) > $maxlen)
                {
                    $_SESSION['error']['reg']['user'] = 'Username is too long';
                    return false;
                } else {
                    return true;
                }
                return false;
            } else {

                $_SESSION['error']['reg']['user'] = 'Username already exists';
                return false;

            }

        }

    }

?>