//Array to store validation errors
$errmsg_arr = array();

//Validation error flag
$errflag = false;

if (isset($_POST['submit'])) {

    //Sanitize the POST values
    $first_name  = $db_controller->clean($_POST['first_name']);
    $last_name  = $db_controller->clean($_POST['last_name']);
    $email       = $db_controller->clean($_POST['email']);
    $user_name    = $db_controller->clean($_POST['user_name']);
    $password    = $db_controller->clean($_POST['password']);
    $user_role    = $db_controller->clean($_POST['user_role']);
    $departments    = $db_controller->clean($_POST['departments']);

    //Input Validations
    if($first_name == '') {
        $errmsg_arr['first_name'] = 'Please enter first name';
        $errflag = true;
    }

    if($email == '') {
        $errmsg_arr['email'] = 'Please enter Email';
        $errflag = true;
    }

    if($user_name == '') {
        $errmsg_arr['user_name'] = 'Please enter User Name';
        $errflag = true;
    }

    if($password == '') {
        $errmsg_arr['password'] = 'Please enter password';
        $errflag = true;
    }
    else{
        if(strlen($password)<6){
            $errmsg_arr['password'] = 'Please lenght must be more than 6 digits';
            $errflag = true;
        }
    }

    if($user_role == '') {
        $errmsg_arr['user_role'] = 'Please select User Role';
        $errflag = true;
    }else{

        $result_username = $db_controller->checkUsernameOrPassword('User_Name',$user_name);

        if ($result_username != '') {
            $errmsg_arr['user_name'] = 'User Name already exists';
            $errflag = true;
        }

        $result_email = $db_controller->checkUsernameOrPassword('Email',$email);

        if ($result_email != '') {
            $errmsg_arr['email'] = 'Email already exists';
            $errflag = true;
        }

        if ($user_role != '1' && $user_role != '3') {
            if($departments == '') {
                $errmsg_arr['departments'] = 'Please select departments';
                $errflag = true;
            }
        }
    }

    $user_id = $_SESSION['user_details']['user_id'];

    //If there are input validations, show errors
    if($errflag == true) {
        session_write_close();
    }else{

        $file = '';
        if (isset($_FILES['file'])) {
            $file=$_FILES['file']['name'];
            move_uploaded_file($_FILES['file']['tmp_name'],"images/user/".$file);
        }

        if ($user_role == 2) {
            $insert_query = $db_controller->insertStudentDetails($first_name,$last_name,$email,$password,1,$user_name,$departments,$file);
        }
        else{
            $insert_query = $db_controller->insertStaffDetails($user_name,$email,1,$first_name,$last_name,$password,$user_role,$departments,$file);
        }

        if ($insert_query != '') {
            $msg = "User successfully added";
        }
    }
}