<?php

class WebsiteUser{
    /* Host address for the database */
    protected static $DB_HOST = "localhost";
    /* Database username */
    protected static $DB_USERNAME = "rwmolito_eater";
    /* Database password */
    protected static $DB_PASSWORD = "cst@8238";
    /* Name of database */
    protected static $DB_DATABASE = "rwmolito_eatery";

    private $username;
    private $password;
    private $mysqli;
    private $dbError;
    private $authenticated = false;

    function __construct() {
        $this->mysqli = new mysqli(self::$DB_HOST, self::$DB_USERNAME,
                self::$DB_PASSWORD, self::$DB_DATABASE);
        if($this->mysqli->errno){
            $this->dbError = true;
        }else{
            $this->dbError = false;
        }
    }
    public function authenticate($username, $password){
        $loginQuery = "SELECT AdminID, Username, Password, AdminLevel, Lastlogin FROM adminusers WHERE username = $username AND password = $password";
        $stmt = $this->mysqli->prepare($loginQuery);
        $stmt->bind_param('ss', $username, $password);
        $stmt->execute();
        $stmt->store_result();

		$num_rows = $stmt->num_rows;

		$stmt->bind_result($AdminID, $username, $password, $AdminLevel, $Lastlogin);

        if($num_rows == 1){
            $this->username = $username;
            $this->password = $password;
            $this->authenticated = true;
        }
        $stmt->free_result();
    }

    public function isAuthenticated(){
        return $this->authenticated;
    }

    public function hasDbError(){
        return $this->dbError;
    }
    public function getUsername(){
        return $this->username;
    }
}
?>