<?php
include "database.php";

	class User{

		public $db;

		function __construct() {
            $this->db = new Database();

			if(mysqli_connect_errno()) {
                echo "Error: Impossibile connettersi al database";
			        exit;
			}
		}

		//registrazione
		public function reg_user($name,$username,$pass,$email){

			$pass = md5($pass);
            $sql="SELECT * FROM users WHERE uname='$unome' OR uemail='$uemail'";

			//controllo sul db
			$check =  $this->db->query($sql) ;
			$count_row = $check->num_rows;

			//username non in db
			if ($count_row == 0){
				$sql1="INSERT INTO users SET uname='$nome', upass='$pass', fullname='$fullname', uemail='$email'";
				$result = mysqli_query($this->db,$sql1) or die(mysqli_connect_errno()."Dati non inseriti");
        		return $result;
			}
			else { return false;}
		}

		//login
		public function check_login($emailusername, $pass){

            $pass= md5($pass);
			$sql2="SELECT id from users WHERE email='$emailusername' or name='$emailusername' and pass='$pass'";

			//controllo in db
        	$result = mysqli_query($this->db,$sql2);
        	$user_data = mysqli_fetch_array($result);
        	$count_row = $result->num_rows;

	        if ($count_row == 1) {
	            // sessioni
	            $_SESSION['login'] = true;
	            $_SESSION['uid'] = $user_data['uid'];
	            return true;
	        }
	        else{
			    return false;
			}
    	}

    	//mostrare nome
    	public function get_fullname($uid){
    		$sql3="SELECT nome FROM users WHERE uid = $uid";
	        $result = mysqli_query($this->db,$sql3);
	        $user_data = mysqli_fetch_array($result);
	        echo $user_data['nome'];
    	}

    	//start session
	    public function get_session(){
	        return $_SESSION['login'];
	    }

	    public function user_logout() {
	        $_SESSION['login'] = FALSE;
	        session_destroy();
	    }

	}
?>