<?php

/*
 	Auth class

 */

class Auth {

	private $salt = 'N89hmcd9f';

	function __construct () {
	}

	function validateLogin($user, $pass) {

		global $database;

		if ($stmt = $database->prepare("SELECT * FROM users WHERE username = ? AND password = ?")) {
			$stmt->bind_param("ss", $user, md5($pass . $this->salt));
			$stmt->execute();
			$stmt->store_result();

			// success

			if ($stmt->num_rows > 0) {
				$stmt->close();
				return TRUE;
			}

			// error

			else {
				$stmt->close();
				return FALSE;
			}
		}

		else {
				die("ERROR: Could not prepare Statement");
		}
	}

	function checkLoginStatus() {
		if(isset($_SESSION["loggedin"])) {
			return TRUE;
		}
		else {
			return FALSE;
		}
	}

	function logout () {
		session_destroy();
		session_start();
	}

}


?>