<?php

class LoginModel extends Model {
	private $db;

	function __construct() {
		$this->db = $this->dbConnection();
	}

	public function checkCredentials($identity, $password) {
		if($identity == null || $password == null) {
			$error = "Missing Details!";
			return $error;
		} else {
			return true;
		}
	}

	public function tryLogin($identity, $password) {
		try {
			$stmt = $this->db->prepare("SELECT * FROM admins WHERE admin_name=:identity");
			$stmt->execute(array(":identity"=>$identity));
			$result = $stmt->fetch(PDO::FETCH_ASSOC);
			if($result > 0) {
				if(password_verify($password, $result['admin_password'])) {
					return true;
				} else {
					$error = "Wrong Details!";
					return $error;
				}
			} else {
				$error = "Wrong Details!";
				return $error;
			}
		} catch(PDOException $exception) {
			echo $exception->getMessage();
		}
	}

	public function login($identity) {
		try {
			$stmt = $this->db->prepare("SELECT * FROM admins WHERE admin_name=:identity");
			$stmt->execute(array(":identity"=>$identity));
			$result = $stmt->fetch(PDO::FETCH_ASSOC);
			$_SESSION['admin_identity'] = hash('sha256', openssl_random_pseudo_bytes(16));
			$stmt = $this->db->prepare("UPDATE admins SET admin_token=:token WHERE admin_name=:identity");
			$stmt->execute(array(":token"=>$_SESSION['admin_identity'], ":identity"=>$identity));
		} catch(PDOException $exception) {
			echo $exception->getMessage();
		}
	}

}