<?php

class Auth extends CI_Controller{

  public function logout(){
    unset($_SESSION);
    session_destroy();
    redirect("auth/login", "refresh");
  }


  public function login(){
    $this->load->view('login');

    $this->form_validation->set_rules('username','"nazwa użytkownika"','required');
    $this->form_validation->set_rules('password','"hasło"','required|min_length[5]');

    if($this->form_validation->run() == TRUE){

      $username = $_POST['username'];
      $password = password_hash($_POST['password'], PASSWORD_DEFAULT);

      $username = htmlentities($username, ENT_QUOTES, "UTF-8");

      echo $username;
      echo $password;
      //check user in database
      $this->db->select('*');
      $this->db->from('user');
      $this->db->where(array('username' => $username, 'password' => $password));
      $query = $this->db->get();

      $user = $query->row();

      //if password is correct
      //if(password_verify($password, $user->password)){
      if($user->email){
          $this->session->set_flashdata("success", "Logowanie przebiegło pomyślnie");

          //set session variables
          $_SESSION['user_log'] = TRUE;
          $_SESSION['username'] = $user->username;

          //redirect to profile package
          redirect("user/profile", "refresh");
      }
      else{
        $this->session->set_flashdata("error", "Podane konto nie istnieje");
        //redirect("auth/login", "refresh");
      }
    }
  }


  public function register(){
    if (isset($_POST['register'])){
      $this->form_validation->set_rules('username','"nazwa użytkownika"','trim|required|is_unique[user.username]');
      $this->form_validation->set_rules('name','"imię"','trim|required');
      $this->form_validation->set_rules('surname','"nazwisko"','trim|required');
      $this->form_validation->set_rules('email','"email"','trim|required|is_unique[user.email]|valid_email');
      $this->form_validation->set_rules('password','"hasło"','trim|required|min_length[5]');
      $this->form_validation->set_rules('password2','"powtórz hasło"','trim|required|min_length[5]|matches[password]');
      //if form vaalidation true
      if($this->form_validation->run() == TRUE){

        //add user in database
        $data = array(
          'username' => $_POST['username'],
          'name' => $_POST['name'],
          'surname' => $_POST['surname'],
          'email' => $_POST['email'],
          'password' => password_hash($_POST['password'], PASSWORD_DEFAULT),
          'created_date' => date('Y-m-d')
        );
        $this->db->insert('user', $data);
        $this->session->set_flashdata("success", "Twoje konto zostało zarejestrowane. Możesz się teraz zalogować.");
        redirect("auth/register","refresh");
      }
    }
    //load view
    $this->load->view('register');
  }
}

?>