<?php
    class sql {

        /*
        ** mysql escape string nem akaródzik müxeni
        ** injection ellen nem védeett
        ** hoogásot megkérdezni!.
        */

        //database settings
        private $host = "localhost";
        private $user = "root";
        private $password = "";
        private $database = "proba";
        private $sql;

        function __construct() {
            $sql = new mysqli($this->host, $this->user, $this->password, $this->database);
            $sql->query("SET NAMES 'utf8'");
            $this->sql = $sql;
        }

        public function signIn($name, $password) {
            $sql = $this->sql;
            $username = $sql->real_escape_string($name);
            $stm = "SELECT *FROM users where name = '".$username."' AND password = '".$password."' ";
            if($sql->query($stm)->num_rows > 0) {
                return true;
            } else {
                return false;
            }
        }

        public function newUser($name, $email, $password) {
            $sql = $this->sql;
            $username = $sql->real_escape_string($name);
            $stm = "INSERT INTO users (`name`, `email`, `password`) VALUES ('". $username ."', '". $email ."', '". $password ."')";

            if($sql->query($stm)) {
                return true;
            } else {
                return false;
            }
        }

        public function userExist($name) {
            $sql = $this->sql;
            $stm = "SELECT * FROM users WHERE name = '".$name."'";

            if($sql->query($stm)->num_rows > 0) {
                return true;
            } else {
                return false;
            }
        }

        public function emailExist($email) {
            $sql = $this->sql;
            $stm = "SELECT * FROM users WHERE email = '".$email."'";

            if($sql->query($stm)->num_rows > 0) {
                return true;
            } else {
                return false;
            }
        }
    }