<?php
	if(isset($_POST["email"]) && isset($_POST["username"]) && isset($_POST["score"])){
		$errors = array();

		$email = $_POST["email"];
		$username = $_POST["username"];
		$submitted_score = floatval($_POST["score"]);
		$user_id = -1;
		$current_highscore = 1000;

		//Connect to database
		require dirname(__FILE__) . '/database.php';

		//Check if the user already registered, retrieve its user_id and score value (if exist)
		if ($stmt = $mysqli_conection->prepare("SELECT u.user_id,
			(SELECT user_score FROM sc_user_scores WHERE user_id = u.user_id LIMIT 1) as user_score
			FROM sc_users u WHERE u.email = ? AND u.username = ? LIMIT 1")) {

			/* bind parameters for markers */
			$stmt->bind_param('ss', $email, $username);

			/* execute query */
			if($stmt->execute()){

				/* store result */
				$stmt->store_result();

				if($stmt->num_rows > 0){

					/* bind result variables */
					$stmt->bind_result($user_id_tmp, $score_tmp);

					/* fetch value */
					$stmt->fetch();

					$user_id = $user_id_tmp;
					$current_highscore = $score_tmp;

				}else{
					$errors[] = "User not found.";
				}

				/* close statement */
				$stmt->close();

			}else{
				$errors[] = "Something went wrong, please try again.";
			}
		}else{
			$errors[] = "Something went wrong, please try again.";
		}

		//Submit new score
		if(count($errors) == 0){
			if(is_null($current_highscore)){

				if(is_null($current_highscore)){
					//Insert new record
					if ($stmt = $mysqli_conection->prepare("INSERT INTO sc_user_scores (user_id, user_score) VALUES(?, ?)")) {

						/* bind parameters for markers */
						$stmt->bind_param('ii', $user_id, $submitted_score);

						/* execute query */
						if($stmt->execute()){

							/* close statement */
							$stmt->close();

						}else{
							$errors[] = "Something went wrong, please try again.";
						}
					}else{
						$errors[] = "Something went wrong, please try again.";
					}
				}else{
					//Update existing record
					if ($stmt = $mysqli_conection->prepare("UPDATE sc_user_scores SET user_score = ? WHERE user_id = ? LIMIT 1")) {

						/* bind parameters for markers */
						$stmt->bind_param('ii', $submitted_score, $user_id);

						/* execute query */
						if($stmt->execute()){

							/* close statement */
							$stmt->close();

						}else{
							$errors[] = "Something went wrong, please try again.";
						}
					}else{
						$errors[] = "Something went wrong, please try again.";
					}
				}

			}else{
				$errors[] = "Submitted score is lower than the current highscore, skipping...";
			}
		}

		if(count($errors) > 0){
			echo $errors[0];
		}else{
			echo "Success";
		}
	}else{
		echo "Missing data";
	}
?>