<?php
class user_manage{
    public  $login, $pass;
    private $noRegistredMsg   = "Usuário Inexistente ";
    private $noCorrectpassMsg = "Senha Inválida ";
    private $nologgedMsg      = "Refaça o Login ";
    private $loggedMsg        = "Olá ";

    private $userRegistredMsg   = "Este nome de usuário já foi cadastrado ";
    private $mailRegistredMsg   = "Este email já foi cadastrado ";
    private $inputEmptyMsg      = "Favor preencha todos os campos ";
    private $mailInvalidMsg     = "Email inválido";
    private $userInvalidMsg     = "Caracteres inválidos no nome de usuário ";
    private $userSizeInvalidMsg = "Insira no máximo 6 caracteres no nome de usuário ";
    private $passSizeInvalidMsg = "Insira uma senha com pelo menos 6 caracteres ";

    private $mailconfirmMsg      = "Email confirmado com sucesso ";
    private $mailconfirmErrorMsg = "Não foi possivel confirmar seu email ";

    private $updatepassMsg       = "Senha atualizada ";
    private $updatepassErrorMsg  = "Não foi possível atualizar sua senha ";

    private $dbuser = "root";
    private $dbpass = "";


function database_connect(){
        $sql = mysql_connect('localhost', $this->dbuser, $this->dbpass);
        mysql_select_db('bugs', $sql);
        return $sql;
    }


function validate($type,$login,$pass){
        $db = $this->database_connect();
        $userSearch = mysql_query("SELECT * FROM usuarios WHERE user='".$login."'",$db);

        $linha = mysql_fetch_array($userSearch);
            if($linha["pass"] == $pass && $linha["tipo"] == $type) {
                $this->logged=true;}
            else{ $this->loginstatus = $this->nologgedMsg; }
        }


function login($login,$pass){
        $db = $this->database_connect();
        $userSearch = mysql_query("SELECT * FROM usuarios WHERE user='".$login."'",$db);
        $mailSearch = mysql_query("SELECT * FROM usuarios WHERE mail='".$login."'",$db);

        if(mysql_num_rows($userSearch) == 0 && mysql_num_rows($mailSearch) == 0) {
        $this->loginstatus = $this->noRegistredMsg;
        }else{
        ob_start();
        session_start();
        $linha = mysql_fetch_array($userSearch);
            if($linha["pass"] == $pass) {
                $_session["pass"] = $linha["pass"];
                $_session["type"] = $linha["tipo"];
                $_session["user"] = $linha["user"];
                $_session["uid"]  = $linha["uid"];
                $_session["time"] = time();
                $this->logged=true;
                $this->loginstatus = $this->loggedMsg.$linha["user"]; }
            else{ $this->loginstatus = $this->noCorrectpassMsg; }
            }
        }

function register($user, $mail, $pass, $type){
        $db = $this->database_connect();
        $userSearch = mysql_query("SELECT * FROM usuarios WHERE user='".$user."'",$db);
        $mailSearch = mysql_query("SELECT * FROM usuarios WHERE mail='".$mail."'",$db);

        if(empty($user)||empty($pass)||empty($mail)){
        $this->registerstatus = $this->inputEmptyMsg ;}
         elseif(!preg_match("/^[\w-]+(\.[\w-]+)*@(([A-Za-z\d][A-Za-z\d-]{0,61}[A-Za-z\d]\.)+[A-Za-z]{2,6}|\[\d{1,3}(\.\d{1,3}){3}\])$/",$mail)){
        $this->registerstatus = $this->mailInvalidMsg ;}
         elseif(!preg_match("/^[\w\d]+/",$user)){
        $this->registerstatus = $this->userInvalidMsg ;}
         elseif(strlen($user) > 6){
        $this->registerstatus = $this->userSizeInvalidMsg ;}
         elseif(strlen($pass) < 6 || strlen($pass) > 15 ){
        $this->registerstatus = $this->passSizeInvalidMsg ;}
         elseif(mysql_num_rows($mailSearch) != null) {
        $this->registerstatus = $this->mailRegistredMsg;}
         elseif(mysql_num_rows($userSearch) != null){
        $this->registerstatus = $this->userRegistredMsg;}
         else{
            $this->registerstatus = true;
            mysql_query("INSERT INTO usuarios (user,pass,mail,tipo,status) VALUES ('".$user."','".sha1($pass)."','".$mail."','user','1')");
            $this->login($user,$pass);}
        }

function mailconfirm($mail, $auth){
        $db = $this->database_connect();
        $authSearch = mysql_query("SELECT mail FROM usuarios WHERE auth='".$auth."'",$db);

        if(mysql_num_rows($authSearch) != null) {
        mysql_query("UPDATE usuarios SET status='2' WHERE mail='".$mail."'");
        $this->mailconfirmstatus = $this->mailconfirmMsg;}
         else{
        $this->mailconfirmstatus = $this->mailconfirmErrorMsg;}
        }

function updatepass($user, $oldpass, $newpass){
        $db = $this->database_connect();
        $userSearch = mysql_query("SELECT * FROM usuarios WHERE user='".$user."'",$db);
        $this->login($user, $oldpass);

        if(strlen($newpass) < 6 || strlen($newpass) > 15){
        $this->updatepassstatus = $this->passSizeInvalidMsg ;}
         elseif($this->loginstatus == $this->loggedMsg.$user){
        mysql_query("UPDATE usuarios SET pass='".sha1($newpass)."' WHERE user='".$user."'",$db) or die(mysql_error());
        $this->updatepassstatus = $this->updatepassMsg;}
         else{
        $this->updatepassstatus = $this->updatepassErrorMsg;}
        }

}

?>