<?php
session_start();
$onward = true;

/*
 * Virgin Mobile Free Fest Sweepstakes submission code
 *
 * Please edit the following lines to fit your installation.
 *
 */

$databaseLocation = 'localhost'; // generally, this is "localhost";
$databaseUsername = 'marrsent_michael';
$databasePassword = 'michaelPW';
$databaseName = 'marrsent_virgin';

/* x message */
$successMessage = "Thank you for your submission!";

/* returned error messages */
$errorText['header'] = 'There were a few problems with your submission';
$errorText['missingData'] = 'Not all requred data was given';
$errorText['invalidEmail'] = 'The email you submitted isn\'t valid';
$errorText['invalidPhoneNumber'] = 'That doesn\'t look like a good phone number';
$errorText['invalidMobileNumber'] = 'That doesn\'t look like a good cell phone number';
$errorText['invalidAge'] = 'You must check that you are 13 years of age before you can participate';

/*
 * don't edit anything below this line unless you know what you're doing
 */

include 'SqlBuilder.php';

// blank variables
$errors = array();

// if submit was pressed
if (isset($_POST['input-submit']) && $_POST['input-submit'] == '1') {

	// inputs we'll be wanting
	$getThese = array(
		'sex',
		'first-name',
		'middle-initial',
		'last-name',
		'address-1',
		'address-2',
		'city',
		'state',
		'zip-code',
		'phone-number',
		'mobile-number',
		'birth-month',
		'birth-day',
		'birth-year',
		'email-address',
		'check-updates',
		'check-wireless-updates',
		'age-cert'
		);

	// these could be null, and we don't want that...
	$couldBeNull = array(
		'sex',
		'check-updates',
		'check-wireless-updates',

		);

	// roll through the inputs that could be null and set them to zero if they're not set
	foreach($couldBeNull as $value) {
		if (!isset($_POST['input-' . $value])) {
			$_POST['input-' . $value] = 0;
		}
	}

	// grab the inputs we want
	foreach($getThese as $value) {
		$inputs[$value] = $_POST['input-' . $value];
	}

	$_SESSION['sticky'] = $_POST;

	function inputToDatabase(&$inputs, &$errorText) {
		// these inputs are required
		foreach(array('first-name', 'last-name', 'phone-number', 'email-address') as $value) {
			if (strlen($inputs[$value]) == 0) {
				return $errorText['missingData'];
			}
		}

		// validate email address
		// init some blank variables for the matches
		$matches = array();

		// check if the email address passes and give us some matching parts.
		if (eregi(
		"^[\._a-z0-9-]+((\+[\._a-z0-9-]+))*@[a-z0-9-]+(\.[a-z0-9-]+)*\.(([a-z]{2,3})|(aero|coop|info|jobs|mobi|museum|name|travel))$",
		$inputs['email-address'],
		$matches)) {
			/*
			// if the local piece of the email holds a plus sign (using filters)
			if (isset($matches[1]) && strstr($matches[1], '+')) {
				$inputs['email-address-send'] = $inputs['email-address']; // switch it up
				$inputs['email-address'] = substr_replace($inputs['email-address-send'], '', strpos($inputs['email-address'], $matches[1]), strlen($matches[1])); // remove the filter for the send to address
			} else {
				$inputs['email-address-send'] = &$inputs['email-address']; // no filter there, point them both to the same address
			}
			*/
		} else {
			return $errorText['invalidEmail'];
		}

		// reset $matches
		$matches = array();

		// validate their phone number if they submitted it
		if (strlen($inputs['phone-number']) > 0 && !eregi(
		"^([0-9]( |-)?)?(\(?[0-9]{3}\)?|[0-9]{3})( |-)?([0-9]{3}( |-)?[0-9]{4}|[0-9]{7})$",
		$inputs['phone-number'], $matches)) {
			return $errorText['invalidPhoneNumber'];
		}

		// reset $matches
		$matches = array();

		// validate their mobile number if they submitted it
		if (strlen($inputs['mobile-number']) > 0 && !eregi(
		"^([0-9]( |-)?)?(\(?[0-9]{3}\)?|[0-9]{3})( |-)?([0-9]{3}( |-)?[0-9]{4}|[0-9]{7})$",
		$inputs['mobile-number'], $matches)) {
			return $errorText['invalidMobileNumber'];
		}

		if ($inputs['age-cert'] != '1') {
			return $errorText['invalidAge'];
		}

		// create a new sql builder object
		$sql = new SqlBuilder();

		// roll through all the inputs and throw 'em in
		foreach($inputs as $key => $value) {
			$sql->insert('submissions', $key, $value);
		}
		// log the users IP address
		$sql->insert('submissions', 'ip-address', (isset($_SERVER['HTTP_X_FORWARD_FOR']) ? $_SERVER['HTTP_X_FORWARD_FOR'] : $_SERVER['REMOTE_ADDR']));

		$query = $sql->build('insert');

		global $databaseLocation, $databaseUsername, $databasePassword, $databaseName;
		$db = new mysqli($databaseLocation, $databaseUsername, $databasePassword, $databaseName);

		if ($db->query($query)) {
			$_POST = array();
			return 'success';
		}

		return false;
	}

	$errors[] = inputToDatabase($inputs, $errorText);
}

function displayErrors(&$errorText, &$errors) {
	if (count($errors) > 0 && $errors[0] != null) {
		if ($errors[0] == 'success') {
			global $successMessage;

			unset($_SESSION['sticky']);
			$_SESSION['message'] = $successMessage; // Set our message in the session
			header('Location: thanks.php '); // Onward
			exit;



		} else {
			$errorOutput = implode('</li><li>', $errors);
			$_SESSION['errors'] = "<div id=\"errors\"><span id=\"error-header\">". $errorText['header'] ."</span><ul><li>". $errorOutput ."</li></ul></div>";
			header('Location: index.php ');
			exit;
		}
	} else {
		header('Location: index.php ');
		exit;
	}
}

displayErrors($errorText, $errors);
?>