klasa zaposlenik

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Data;
using System.Data.Sql;
using System.Data.SqlClient;
using DataLayer;

namespace BusinessLayer
{
    public class Zaposlenik
    {
        public int Zaposlenik_ID { get; set; }
        public string Ime { get; set; }
        public string Prezime { get; set; }
        public string Username { get; set; }
        public string Password { get; set; }
        public string OIB { get; set; }
        public DateTime DatumRodjenja { get; set; }
        public string Adresa { get; set; }
        public int Razina { get; set; }
        public int Rasadnik_ID { get; set; }

        public int DodajZaposlenika()
        {
            SqlCommand Command = new SqlCommand();
            Command.CommandType = System.Data.CommandType.Text;
            Command.CommandText = "INSERT INTO Zaposlenik (OIB, Ime, Prezime, DatumRodjenja, KorisnickoIme, Lozinka, Adresa, Razina, Rasadnik_ID) VALUES (@OIB, @Ime, @Prezime, @DatumRodjenja, @KorisnickoIme, @Lozinka, @Adresa, @Razina, @Rasadnik_ID)";
            Command.Parameters.AddWithValue("@OIB", OIB);
            Command.Parameters.AddWithValue("@Ime", Ime);
            Command.Parameters.AddWithValue("@Prezime", Prezime);
            Command.Parameters.AddWithValue("@DatumRodjenja", DatumRodjenja);
            Command.Parameters.AddWithValue("@Adresa", Adresa);
            Command.Parameters.AddWithValue("@KorisnickoIme", Username);
            Command.Parameters.AddWithValue("Lozinka", Password);
            Command.Parameters.AddWithValue("Razina", Razina);
            Command.Parameters.AddWithValue("Rasadnik_ID", Rasadnik_ID);
            DBCon DB = new DBCon();
            DB.GetCon();
            return DB.IzvrsiUpit(Command);
        }
        public bool LoginTrue(string username, string password)
        {
            SqlCommand Command = new SqlCommand();
            Command.CommandType = System.Data.CommandType.Text;
            Command.CommandText = "SELECT * FROM Zaposlenik WHERE KorisnickoIme =@username and Lozinka =@password";
            Command.Parameters.AddWithValue("@username", username);
            Command.Parameters.AddWithValue("@password", password);
            DBCon DB = new DBCon();
            DB.GetCon();
            DataTable dt = DB.DohvatiDT(Command);
            if(dt.Rows.Count > 0)
            {
                return true;
            }
            else
            {
                return false;
            }
        }
        public int AdministratorTrue(string username, string password)
        {
            int adm = 0;
            SqlCommand Command = new SqlCommand();
            Command.CommandType = System.Data.CommandType.Text;
            Command.CommandText = "SELECT Razina FROM Zaposlenik WHERE KorisnickoIme =@username and Lozinka =@password";
            Command.Parameters.AddWithValue("@username", username);
            Command.Parameters.AddWithValue("@password", password);
            DBCon DB = new DBCon();
            DB.GetCon();
            adm = int.Parse(DB.DohvatiVrijednost(Command).ToString());
            return adm;
        }
        public int idRasadnik(string username, string password)
        {
            int idR = 0;
            SqlCommand Command = new SqlCommand();
            Command.CommandType = System.Data.CommandType.Text;
            Command.CommandText = "SELECT Rasadnik_ID FROM Zaposlenik WHERE KorisnickoIme =@username and Lozinka =@password";
            Command.Parameters.AddWithValue("@username", username);
            Command.Parameters.AddWithValue("@password", password);
            DBCon DB = new DBCon();
            DB.GetCon();
            idR = int.Parse(DB.DohvatiVrijednost(Command).ToString());
            return idR;
        }

        public int idZaposlenik(string username, string password)
        {
            int idZ = 0;
            SqlCommand Command = new SqlCommand();
            Command.CommandType = System.Data.CommandType.Text;
            Command.CommandText = "SELECT Zaposlenik_ID FROM Zaposlenik WHERE KorisnickoIme =@username and Lozinka =@password";
            Command.Parameters.AddWithValue("@username", username);
            Command.Parameters.AddWithValue("@password", password);
            DBCon DB = new DBCon();
            DB.GetCon();
            idZ = int.Parse(DB.DohvatiVrijednost(Command).ToString());
            return idZ;
        }
        public Zaposlenik MakeZaposlenik(DataRow row)
        {
            Zaposlenik z = new Zaposlenik();
            z.Zaposlenik_ID = int.Parse(row["Zaposlenik_ID"].ToString());
            z.Ime = row["Ime"].ToString();
            z.Prezime = row["Prezime"].ToString();
            z.OIB = row["OIB"].ToString();
            z.Adresa = row["Adresa"].ToString();
            z.Username = row["KorisnickoIme"].ToString();
            z.Password = row["Lozinka"].ToString();
            z.Razina = int.Parse(row["Razina"].ToString());
            z.Rasadnik_ID = int.Parse(row["Rasadnik_ID"].ToString());

            return z;

        }

        public static List<Zaposlenik> DohvatiSveZaposlenike()
        {
            List<Zaposlenik> ListaZaposlenika = new List<Zaposlenik>();
            SqlCommand Command = new SqlCommand();
            Command.CommandType = CommandType.Text;
            Command.CommandText = "SELECT * FROM Zaposlenik";
            DBCon DB = new DBCon();
            DB.GetCon();
            DataTable DT = DB.DohvatiDT(Command);
            foreach(DataRow dr in DT.Rows)
            {
                Zaposlenik z = new Zaposlenik();
                ListaZaposlenika.Add(z.MakeZaposlenik(dr));
            }
            return ListaZaposlenika;
        }
        public static List<Zaposlenik> DohvatiZaposlenika(string im, string prez)
        {
            List<Zaposlenik> ListaZaposlenikaB = new List<Zaposlenik>();
            SqlCommand Command = new SqlCommand();
            Command.CommandType = CommandType.Text;
            Command.CommandText = "SELECT * FROM Zaposlenik WHERE Ime = '" + im + "' AND Prezime = '" + prez + "';";
            DBCon DB = new DBCon();
            DB.GetCon();
            DataTable DT = DB.DohvatiDT(Command);
            foreach (DataRow dr in DT.Rows)
            {
                Zaposlenik k = new Zaposlenik();
                ListaZaposlenikaB.Add(k.MakeZaposlenik (dr));
            }
            return ListaZaposlenikaB;
        }
    }
}