<?php
header('Content-Type: application/json');
//http://stackoverflow.com/questions/18382740/cors-not-working-php
if (isset($_SERVER['HTTP_ORIGIN'])) {
    header("Access-Control-Allow-Origin: {$_SERVER['HTTP_ORIGIN']}");
    header('Access-Control-Allow-Credentials: true');
    header('Access-Control-Max-Age: 86400');    // cache for 1 day
}

// Access-Control headers are received during OPTIONS requests
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {

    if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
        header("Access-Control-Allow-Methods: GET, POST, OPTIONS");

    if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']))
        header("Access-Control-Allow-Headers:        {$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']}");

    exit(0);
}

// get data from mobile app
$postdata = file_get_contents("php://input");

require_once("connection.php");

//http://stackoverflow.com/questions/15485354/angular-http-post-to-php-and-undefined

if (isset($postdata)) {
    // convert json format to php array format
    $request = json_decode($postdata);
     $username = $request->username;
     $password = $request->password;
//    $username = 'arhamzul@gmail.com';
//    $password = 'pass1234';
   $encrypted_password = md5(sha1($password));
    // $encrypted_password = $password;

    // put your SQL statement here
    $query = "SELECT * FROM users WHERE
        username = '$username' &&
        password = '$encrypted_password'";

    $result = $conn->query($query);
    $num_rows = mysqli_num_rows($result);

    if ($num_rows > 0) {
        $status = "pass";
        $message = "Server returns: " . $username;

        while($row = $result->fetch_assoc()) {
            $name =  $row["name"];
            $email =  $row["username"];
            $role =  $row["role"];
            $avatar =  $row["avatar"];
        }
    } else {
        $status = "fail";
        $message = "password: $password. Encrypted: $encrypted_password";
    }
} else {
    $status = "fail";
    $message = "Empty input";
}

// bina data  yang kita nak return kepada app
$data = [
    'status' => $status,
    'message' => $message,
    'name' => $name,
    'role' => $role,
    'avatar' => $avatar,
    'email' => $email,
];

// convert data di atas kepada format json
echo json_encode($data);