<?php

final class Database extends PDO {

	private $config = [
		"Host" => "http://penguins.pw",
		"User" => "root",
		"Pass" => "Hidden##",
		"Name" => "sweater"
	];

	private $connection = null;

	public function __construct() {
		$connectionString = sprintf("mysql:dbname=%s;host=%s", $this->config["Name"], $this->config["Host"]);

		parent::__construct($connectionString, $this->config["User"], $this->config["Pass"]);
	}

	public function addUser($username, $password, $color, $email) {
		$hashedPassword = md5($password);

$query = $this->prepare( "SELECT `email` FROM `users` WHERE `email` = ?" );
$query->bindValue( 1, $email );
$query->execute();

if( $query->rowCount() > 0 ) {
     response([
			"error" => "Email is already taken"
]);
}
		$insertPenguin = "INSERT INTO `users` (`ID`, `username`, `nickname`, `password`, `email`, `RegistrationDate`, `inventory`, `colour`) VALUES ";
		$insertPenguin .= "(NULL, :username, :username, :password, :email, :date, :colour, :colour);";

	   $insertPenguins = "INSERT INTO `igloos` (`igloo`) VALUES ";
	   $insertPenguins .= "(NULL, :igloo);";

	  $insertStatementz = $this->prepare($insertPenguins);
	  $insertStatementz->bindValue(":Igloo", "1");
	  $insertStatementz->execute();

		$insertStatement = $this->prepare($insertPenguin);
		$insertStatement->bindValue(":username", $username);
		$insertStatement->bindValue(":password", $hashedPassword);
		$insertStatement->bindValue(":email", $email);
		$insertStatement->bindValue(":date", time());
		$insertStatement->bindValue(":colour", $color);

		$insertStatement->execute();
		$insertStatement->closeCursor();

		$penguinId = $this->lastInsertId();

		$this->addActiveIgloo($penguinId);
		$this->sendMail($penguinId, "sys", 0, "", time(), 125);
	}

	public function sendMail($recipientId, $senderName, $senderId, $postcardDetails, $sentDate, $postcardType) {
		$sendMail = $this->prepare("INSERT INTO `postcards` (`postcardID`, `recipient`, `mailerName`, `mailerID`, `postcardType`) VALUES (NULL, :recipient, :mailerName, :mailerID, :postcardType)");
		$sendMail->bindValue(":recipient", $recipientId);
		$sendMail->bindValue(":mailerName", $senderName);
		$sendMail->bindValue(":mailerID", $senderId);
		$sendMail->bindValue(":postcardType", $postcardType);
		$sendMail->execute();
		$sendMail->closeCursor();

		$postcardId = $this->lastInsertId();

		return $postcardId;
	}


	private function addActiveIgloo($penguinId) {
		$insertStatement = $this->prepare("INSERT INTO `igloos` (`ID`, `username`) VALUES (NULL, :username);");
		$insertStatement->bindValue(":username", $username);
		$insertStatement->execute();
		$insertStatement->closeCursor();

	$postcardIds = $this->lastInsertId();
	return $postcardIds;
	}



	public function usernameTaken($username) {
		$usernameTaken = "SELECT username FROM `users` WHERE username = :Username";

		$takenQuery = $this->prepare($usernameTaken);
		$takenQuery->bindValue(":Username", $username);
		$takenQuery->execute();

		$rowCount = $takenQuery->rowCount();
		$takenQuery->closeCursor();

		return $rowCount > 0;
	}



	public function takenUsernames($username) {
		$usernamesTaken = "SELECT username FROM `users` WHERE username LIKE :Username";

		$usernamesQuery = $this->prepare($usernamesTaken);
		$usernamesQuery->bindValue(":Username", $username . "%");
		$usernamesQuery->execute();

		$usernames = $usernamesQuery->fetchAll(self::FETCH_COLUMN);
		return $usernames;
	}

}


session_start();

function response($data) {
	die(http_build_query($data));
}

function attemptDataRetrieval($key, $session = false) {
	if(!$session && array_key_exists($key, $_POST)) {
		return $_POST[$key];
	}

    if($session && array_key_exists($key, $_SESSION)) {
        return $_SESSION[$key];
    }

	response([
		"error" => ""
	]);
}

$action = attemptDataRetrieval("action");

if($action == "validate_agreement") {
	$agreeTerms = attemptDataRetrieval("agree_to_terms");
	$agreeRules = attemptDataRetrieval("agree_to_rules");
	if(!$agreeTerms || !$agreeRules) {
		response([
			"error" => "You must agree to the Rules and Terms."
		]);
	}

	response([
		"success" => 1
	]);
} elseif($action == "validate_username") {
	$username = attemptDataRetrieval("username");
	$color = attemptDataRetrieval("colour");
	$colors = range(1, 15);

	if(strlen($username) == 0) {
		response([
			"error" => "You need to name your penguin."
		]);
	} elseif(strlen($username) < 4 || strlen($username) > 12) {
		response([
			"error" => "Penguin name is too short."
		]);
	} elseif(preg_match_all("/[0-9]/", $username) > 5) {
		response([
			"error" => "Penguin names can only contain 5 numbers."
		]);
	} elseif(!preg_match("/[A-z]/i", $username)) {
		response([
			"error" => "Penguin names must contain at least 1 letter."
		]);
    } elseif(preg_match("/[^A-Za-z0-9)(*&^$!`\_+={};:@~#>.<]/", $username)) {
		response([
			"error" => "That penguin name is not allowed."
		]);
    } elseif(!is_numeric($color) || !in_array($color, $colors)) {
		response([
			"error" => ""
		]);
	}

	$db = new Database();

	if($db->usernameTaken($username)) {
		$username = preg_replace("/\d+$/", "", $username);
		$takenUsernames = $db->takenUsernames($username);
		$i = 1;
		while(true) {
			$suggestion = $username . $i++;
			if(preg_match_all("/[0-9]/", $username) > 1) {
				response([
					"error" => "Penguin name is already taken."
				]);
			}
			if(!in_array(strtolower($suggestion), $takenUsernames)) {
				break;
			}
		}
		response([
			"error" => "Penguin name is already taken. Try $suggestion"
		]);
	}



	$_SESSION['sid'] = session_id();
	$_SESSION['username'] = $username;
    $_SESSION['email'] = $email;
	$_SESSION['colour'] = $color;

	response([
		"success" => 1,
		"sid" => session_id()
	]);

} elseif($action == "validate_password_email") {
	$sessionId = attemptDataRetrieval("sid", true);
	$username = attemptDataRetrieval("username", true);
	$color = attemptDataRetrieval("colour", true);
	$password = attemptDataRetrieval("password");
	$passwordConfirm = attemptDataRetrieval("password_confirm");
	$email = attemptDataRetrieval("email");

	if($sessionId !== session_id()) {
		response([
			"error" => ""
		]);
	} elseif($password !== $passwordConfirm) {
		response([
			"error" => "Passwords do not match."
		]);
	} elseif(strlen($password) < 4) {
		response([
			"error" => "Password is too short."
		]);
	} elseif(!filter_var($email, FILTER_VALIDATE_EMAIL)) {
		response([
			"error" => "Invalid email address."
		]);
	}

	$db = new Database();
	$db->addUser($username, $password, $color, $email);

	session_destroy();

	response([
		"success" => 1
	]);
}

?>