<?php

    /*
    *   Yo dude, i heard you like users!
    *   Do not change anything here unless you know what you are doing
    *
    *   ddCMS 2010
    */

    class User{

        public $data        = array();
        public $loggedin    = false;

        // Construct
        public function __construct(){
            if (isset($_SESSION["dedisrv_username"]) && isset($_SESSION["dedisrv_password"])){
                $login_check = $this->check_user($_SESSION["dedisrv_username"], $_SESSION["dedisrv_password"]);
                if ($login_check){
                    $this->loggedin = true;

                    $this->data = $login_check;
                }
            }
        }

        // Log an user in
        public function login($username, $password){
            if ($this->check_user($username, $this->user_hash($password))){
                $_SESSION["dedisrv_username"] = $username;
                $_SESSION["dedisrv_password"] = $this->user_hash($password);
            }
        }

        // Check in an user exists
        private function check_user($username, $password){
            global $mysql;

            $username = $mysql->escape($username);
            $password = $mysql->escape($password);

            $mysql_query = $mysql->query("SELECT * FROM my_user WHERE username = \"$username\" AND password = \"$password\" LIMIT 1");
            if ($mysql_query && $mysql->num_rows($mysql_query) > 0){
                $mysql_array = $mysql->fetch_array($mysql_query);
                unset($mysql_array["password"]);

                return $mysql_array;
            }else{
                return false;
            }
        }

        // Hashing function because i can, hell yeah..
        public function user_hash($string){
            return hash("sha256", sha1($string . "_encdiIaVwr"));
        }

        public function get_fromid($id){
            global $mysql;

            $id = (int)$mysql->escape($id);

            $mysql_query = $mysql->query("SELECT * FROM my_user WHERE id = $id LIMIT 1");
            if ($mysql_query && $mysql->num_rows($mysql_query) > 0){
                $mysql_array = $mysql->fetch_array($mysql_query);
                unset($mysql_array["password"]);

                return $mysql_array;
            }else{
                return false;
            }
        }

    }

?>