<?php
class users {
	var $db;

	function __construct(&$db) {
		$this->db = &$db;
	}

	// This method retrieves the lost password and returns it
	function checkMail($email,$type,$db) {
		$resultSet = $db->query("SELECT email FROM $type WHERE email = '$email'");
		$result = $db->getNext($resultSet);
		if(mysql_num_rows($resultSet) < 1) {
			$errors[] = "No record listed under the email <strong>$email</strong>. Please retype and try again, alternatively, <a href='register.php'>click here</a> to register a new account";
			return $errors;
		} else {
			return $result["id"];
		}
	}

	// autCheck checks the posted usernames with that of the ones in the database.
	function authCheck($username,$password,$type,$db) {
		// $type will determine which table to access (administrators or client) and is set to client if logged in from index.php or administrator if logged in from adminlogin.php
		$resultSet = $db->query("SELECT passwordhash FROM $type WHERE email = '$username'");
		$result = $db->getNext($resultSet);
		// passwordhash builds a hashed password with the users password and a random salt so that we can compare if the password matches that of the database
		$password = md5($password);
		// Check if passwords match, if so, set the sessions
		if($password == $result["passwordhash"]) {
			$_SESSION["usertype"] = $type;
			$_SESSION["active"] = 1;
			$_SESSION["id"] = session_id();
		// Get the page we're on now, and after login, log in on current page, except if page is /, adminlogin or index.php, which should goto home.php
			if(isset($_SERVER["REQUEST_URI"])) {
				if($_SERVER["REQUEST_URI"] == "/" || $_SERVER["REQUEST_URI"] == "/adminlogin.php" || $_SERVER["REQUEST_URI"] == "/index.php") {
					header("Location:home.php");
				}
			} else {
				$file = $_SERVER["REQUEST_URI"];
				header("Location:$file");
				exit;
			}
			// if authentication fails, put error in $errors database for outputting.
		} else {
			$errors = "Your username and password does not match, please try again";
			return $errors;
		}
	}

	function randPass() {
		$characters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
		$i = 0;
		$password = "";
		while($i <= 8) {
			$password .= $characters{mt_rand(0,strlen($characters))};
			$i++;
		}
		return $password;
	}

	function createNewUser($array, $validate, $db) {
		$resultsArray = $db->query("INSERT INTO client (`firstname`,`lastname`,`title`,`email`,`passwordhash`,`telephone`,`fax`,`physical`,`postal`) VALUES ('$array[fullname]','$array[lastname]','$array[title]','$array[email]','$array[passwordhash]','$array[telephone]','$array[fax]','$array[physical]','$array[postal]')");
		if($resultsArray) {
			return true;
		} else {
			$errors = "There was a problem inserted the new user into the database";
			return $errors;
		}
	}

	function sendmail($array) {
		$array["headers"] = "From:" .$array["sentfrom"]. "\r\n";
		$array["headers"] .= "Reply-To:".$array["replyto"]. "\r\n";
		$array["headers"] .= "Return-Path:".$array["sentfrom"]. "\r\n";
		$array["headers"] .= "MIME-Version: 1.0" . "\r\n";
		$array["headers"] .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";
		$errors[] = mail($array["to"],$array["subject"],$array["message"],$array["headers"]);
		if(empty($errors)) {
			return "success";
		} else {
			$errors = "Could not send registration email!";
			return $errors;
		}
	}

	// This method checks if the user is logged in, and also checks if the user is logged in as administrator or client, if neither, it will return errors which will send the user back to index.php or adminindex.php
	function checkSession() {
		if($_SESSION["id"] == session_id() && $_SESSION["active"] == 1) {
			if($_SESSION["usertype"] == 'client' || $_SESSION["usertype"] == 'administator') {
				return true;
			} else {
				$errors = "Session invalid. Please log in again ...";
				return $errors;
			}
		}
	}

	function updateUserPass($password,$id,$type,$db) {
		$resultsArray = $db->query("UPDATE $type SET password='$password' WHERE id='$id' LIMIT 1");
		if($resultsArray) {
			return true;
		} else {
			$errors = "There was an error setting the new password in the database.";
			return $errors;
		}
	}


	// this checks if the user is logged in, if not, it will attempt to log the user in, if that fails, output errors which will send the user to the login page.
	function isloggedin($username='', $password='', $type='') {
		if($this->checkSession() === true) {
			// This user is already logged in
			return true;
		} elseif(strlen($username) && strlen($password) && strlen($type)) {
			// This user is not logged in already, but they provided login information, so let's attempt to log them in:
			$output = $this->authCheck($username, $password, $type);
			if(is_array($output)) {
				// We got errors, return them
				return $output;
			}
			if($output === true) {
				return true;
			}
		}
	}
}
?>