import java.sql.*;
import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;

public class EditUser extends HttpServlet
{
	public void doGet(HttpServletRequest request, HttpServletResponse response)
	throws ServletException, IOException
	{
		// sets content type and gets the printer
		response.setContentType("text/html");
		PrintWriter out = response.getWriter();
		// gets user parameters from database
		String code = request.getParameter("code");
		try
		{
			// connects to database
			Class.forName ("com.mysql.jdbc.Driver");
			String url = "jdbc:mysql://localhost/application";
			Connection conn = DriverManager.getConnection(url, "root", "");
			// gets the user from the database
			Statement stmt = conn.createStatement();
			ResultSet rs = stmt.executeQuery("SELECT * FROM users WHERE `code`=" + code);
			// assing variable to the fields to populate the form
			while (rs.next()) {
				String userName = rs.getObject("name").toString();
				String userPassword = rs.getObject("password").toString();
				String userCode = rs.getObject("code").toString();
				String userStatus = rs.getObject("status").toString();
				String userLastName = rs.getObject("lastname").toString();
				// prints the user form with the current content
				out.println("<h2>edit user form</h2>");
				out.println("code: " + userCode + "<input type='hidden' name='code' value='" + userCode + "'/><br/>");
				out.println("<form name='input' action='edit' method='post'>");
				out.println("name: <input type='text' name='name' value='" + userName + "'/><br/>");
				out.println("password: <input type='text' name='password' value='" + userPassword + "'/><br/>");
				out.println("status: <select name='status'><option value='0'>normal user</option><option value='1'>administrator</option></select><br/>");
				out.println("lastname: <input type='text' name='lastname' value='" + userLastName + "'/><br/>");
				out.println("<input type='submit' value='Edit' />");
				out.println("</form>");
			}
		}
		catch (Exception e)
		{
			out.println("ERROR!! " + e);
		}
	}

	public void doPost(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException
	{
		// sets content type and gets the printer
		response.setContentType("text/html");
		PrintWriter out = response.getWriter();
		// gets values from the form
		String userName = request.getParameter("name");
		String userPassword = request.getParameter("password");
		String code = request.getParameter("code");
		String userStatus = request.getParameter("status");
		String userLastName = request.getParameter("lastname");
		try
		{
			// connects to database
			Class.forName ("com.mysql.jdbc.Driver");
			String url = "jdbc:mysql://localhost/application";
			Connection conn = DriverManager.getConnection(url, "root", "");
			// query database using SQL
			Statement stmt = conn.createStatement();
			stmt.executeUpdate("UPDATE `users` SET `name`='" + userName + "',`password`='" + userPassword + "',`status`=" + userStatus + ",`lastname`='" + userLastName + "' WHERE `code`=" + code);
			// close database connection
			conn.close ( );
			// redirects to ListUsers
			response.sendRedirect("/list");
		}
		catch (Exception e)
		{
			out.println("ERROR!! " + e);
		}
	}
}