<?php

/**
 * @author Lawrence
 * @copyright 2009
 */
 	session_start();
 		include 'dbconnect.php';

	function showregister(){
		$register  = "<form action=\"adduser.php\" method=\"POST\">";
		$register .= "User:<input type=\"text\" name=\"user\" /><br />";
		$register .= "Pass:<input type=\"password\" name=\"pass\" /><br />";
		$register .= "Email:<input type=\"text\" name=\"email\" /><br />";
		$register .= "First Name:<input type=\"text\" name=\"fname\" /><br />";
		$register .= "Last Name:<input type=\"text\" name=\"lname\" /><br />";
		$register .= "<input type=\"submit\" value=\"Register\" />";
		echo $register;
	}
		function showadmin(){
		$admin  = "<fieldset>";
		$admin .= "<legend>Administrator Options</legend>";
		$admin .= "<a href=\"index.php?action=users\">Users</a> | <a href=\"index.php?action=edit\">Edit My Settings</a> | <a href=\"index.php?action=logout\">logout</a>";
		$admin .= "</fieldset>";
		echo $admin;
	}
		function showlogin(){
		$output  = "<form action=\"checkuser.php\" method=\"POST\">";
		$output .= "User:<input type=\"text\" name=\"user\" /><br />";
		$output .= "Pass:<input type=\"password\" name=\"pass\" /><br />";
		$output .= "<input type=\"submit\" value=\"Login Now\" />/<form>";
		$output .= "<form action=\"index.php?action=register\"><input type=\"button\" value=\"Register Now!\" /></form>";
		echo $output;
	}

	function error($error, $errortime){

	}

	function checklogin($user, $pass){
		$sql = "SELECT * FROM users WHERE user = '$user' AND pass = '$pass'";
		$result = mysql_query($sql);
		$count = mysql_num_rows($result);
		if($count = 1){
			$_SESSION['admin'] = $user['admin'];
			$_SESSION['user'] = $user['user'];
		}else{
			error();
		}
	}

	function showusers(){
		$sql = "SELECT * FROM users";
		$result = mysql_query($sql);
		$user = mysql_fetch_assoc($result);
		$admin  = "<fieldset>";
		$admin .= "<legend>Administrator Options</legend>";
		$admin .= "<a href=\"index.php?action=users\">Users</a> | <a href=\"index.php?action=edit\">Edit My Settings</a> | <a href=\"index.php?action=logout\">logout</a>";
		$admin .= "</fieldset>";
		$admin .= "<fieldset>";
		$admin .= "<legend>Users</legend>";
		$admin .= "<table>";
		$admin .= "<tr>";
		$admin .= "<td>ID</td>";
		$admin .= "<td>User</td>";
		$admin .= "<td>Email</td>";
		$admin .= "<td>First Name</td>";
		$admin .= "<td>Last Name</td>";
		$admin .= "<td>Delete User</td>";
		$admin .= "</tr><tr>";
		$admin .= "<td>" .$user['id']. "</td>";
		$admin .= "<td>" .$user['user']. "</td>";
		$admin .= "<td>" .$user['email']. "</td>";
		$admin .= "<td>" .$user['fname']. "</td>";
		$admin .= "<td>" .$user['lname']. "</td>";
		$admin .= "<td><form action=\"deluser.php?id=" .$user['id']. "\"><input type=\"submit\" value=\"Delete User\"</form></td>";
		$admin .= "</tr></table>";
		$admin .= "</fieldset>";
		echo $admin;
	}

	function delete($_GET['id']){

	}
 	if(isset($_GET['action'])){
 		$action = $_GET['action'];
 	}else{
 		$action = "default";
 	}

switch ($action)
{
case "register":
  	showregister();
  	break;
case "admin":
	showadmin();
	break;
case "checklogin":
	checklogin($user, $pass);
	break;
case "showusers":
	showusers();
	break;
case "delete":
	deleteuser($_GET['id']);
	break;
default:
 	showlogin();
}

?>