<?php
session_start();
class user
{
    private $db;
    function __construct($con)
    {
        $this->db = $con;
    }
    public function regCreation($fullname, $username, $email, $password)
    {
        try
        {
            $authNew = $this->db->prepare("SELECT * FROM users WHERE email=:email");
            $authNew->execute(array(
               ":email" => $email
            ));
            if($authNew->rowCount() > 0) {
                echo "This email is already registered to someone";
            } else {
                $vid = rand(100000000, 999999999);
                $authVID = $this->db->prepare("SELECT * FROM users WHERE vid=:virid");
                $authVID->execute(array(
                    ":virid" => $vid
                ));
                if($authVID->rowCount() > 0) {
                    echo "Failed: VID already exists";
                } else {
                    $hhPassword = password_hash($password, PASSWORD_DEFAULT);
                    $stmt = $this->db->prepare("INSERT INTO users(fullname, username, email, password, vid) VALUES(:fname, :uname, :email, :pword, :vid)");
                    $stmt->bindParam(":fname", $fullname);
                    $stmt->bindParam(":uname", $username);
                    $stmt->bindParam(":email", $email);
                    $stmt->bindParam(":pword", $hhPassword);
                    $stmt->bindParam(":vid", $vid);
                    $stmt->execute();
                    return $stmt;
                }
            }
        } catch(PDOException $e) {
            $e->getMessage();
        }
    }
    public function logUser($username, $password)
    {
        try
        {
            $stmt = $this->db->prepare("SELECT * FROM users WHERE username=:uname");
            $stmt->execute(array(
                ":uname" => $username
            ));
            $row = $stmt->fetch(PDO::FETCH_ASSOC);
            if($stmt->rowCount() > 0)
            {
                if(password_verify($password, $row["password"]))
                {
                    $_SESSION["userVid"] = $row['vid'];
                    $_SESSION["userName"] = $row["username"];
                    $_SESSION["userEmail"] = $row["email"];
                    return true;
                }
                else
                {
                    return false;
                }
            }
        } catch(PDOException $e) {
            $e->getMessage();
        }
    }
    public function loggedIn()
    {
        if(isset($_SESSION['userVid']))
        {
            return true;
        }
    }
    public function reDirect($url)
    {
        header("Location: $url");
    }
    public function logOutUser()
    {
        session_destroy();
        unset($_SESSION['userVid']);
        unset($_SESSION['userName']);
        unset($_SESSION['userEmail']);
        return true;
    }
}