<?php

	function change_status1($id) {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT auth1 FROM req WHERE id='$id'";
		$result = mysqli_query($conn, $query);
		$tab = mysqli_fetch_array($result);

		if ($tab['auth1']=="NIE_ZEZWOLONO") {
			$query = "UPDATE req SET auth1='ZEZWOLONO' WHERE id='$id'";
		print "asd";
		} else {
			$query = "UPDATE req SET auth1='NIE_ZEZWOLONO' WHERE id='$id'";
		print "qwe";
		}
		$result = mysqli_query($conn, $query);

		header("Location: form.php");
	}

	function change_status2($id) {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT auth2 FROM req WHERE id='$id'";
		$result = mysqli_query($conn, $query);
		$tab = mysqli_fetch_array($result);

		if ($tab['auth2']=="NIE_ZEZWOLONO") {
			$query = "UPDATE req SET auth2='ZEZWOLONO' WHERE id='$id'";
		print "asd";
		} else {
			$query = "UPDATE req SET auth2='NIE_ZEZWOLONO' WHERE id='$id'";
		print "qwe";
		}
		$result = mysqli_query($conn, $query);

		header("Location: form.php");
	}

	function change_status3($id,$acctype) {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT * FROM req WHERE id='$id'";
		$result = mysqli_query($conn, $query);
		$tab = mysqli_fetch_array($result);

		$query = "UPDATE users SET acctype='$acctype' WHERE id='$id'";

		$result = mysqli_query($conn, $query);
		header("Location: form.php");
	}

	function log_attempt($servername,$user,$pass) {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT * FROM users WHERE username='".$user."'";
		$result = mysqli_query($conn, $query);
		$tab = mysqli_fetch_array($result);
		$userpass = $tab['password'];
		$acctype = $tab['acctype'];

		if (mysqli_num_rows($result) > 0 && $userpass == md5($pass)) {
			mysqli_close($conn);

			$_SESSION['acctype'] = $acctype;
			$_SESSION['logsuccess'] = TRUE;
			header("Location: form.php");
		} else if ((mysqli_num_rows($result) == 0) && ($mbox = imap_open($servername, $user, $pass))) {
			imap_close($mbox);

			if ($conn) {
				$user = mysqli_real_escape_string($conn, $user);
				$pass = md5($pass);
				$query = "INSERT INTO users (username, password) VALUES('$user','$pass')";
				mysqli_query($conn, $query) or trigger_error(mysqli_error($conn)." in ".$query);
			} else {
				die("Błąd przy wyborze bazy danych");
			}
			mysqli_close($conn);

			$_SESSION['acctype'] = 'user';
			$_SESSION['logsuccess'] = TRUE;
			header("Location: form.php");
		} else {
			mysqli_close($conn);

			$_SESSION['logsuccess'] = FALSE;
			header("Location: index.php");
		}
	}

	function db_send($data,$imie,$nazwisko,$opis) {
		//print "$data";
		//print "$imie";
		//print "$nazwisko";
		//print "$opis";

		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		if ($conn) {
			$imie = mysqli_real_escape_string($conn, $imie);
			$nazwisko = mysqli_real_escape_string($conn, $nazwisko);
			$opis = mysqli_real_escape_string($conn, $opis);
			$query = "INSERT INTO req (data, imie, nazwisko, opis) VALUES('$data','$imie', '$nazwisko', '$opis')";
			mysqli_query($conn, $query) or trigger_error(mysqli_error($conn)." in ".$query);
		} else {
			die("Błąd przy wyborze bazy danych");
		}
		mysqli_close($conn);
		header("Location: form.php");
	}

	function get_data_portier() {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT * FROM req";
		$result = mysqli_query($conn, $query);

		$num = mysqli_num_rows($result);

		?> <div class="content"> <?php
		for ($i = 0; $i < $num; $i++) {
			$tab = mysqli_fetch_array($result);
			?> <span class="tab_name"> <?php print $tab['imie']; ?> </span><?php
			?> <span class="tab_name"> <?php print $tab['nazwisko']; ?> </span><?php
			?> <span class="tab_opis"> <?php print $tab['opis']; ?> </span><?php
			?> <span class="tab"> <?php print $tab['data']; ?> </span><?php
			if (!isset($_POST[$tab['id']])) {
				?> <form class="tab" action="form.php" method="post"><input name="<?php print $tab['id']; ?>" type="submit" value="<?php print $tab['auth1']; ?>"></input></form><?php
			} else {
				change_status1($tab['id']);
			}
		}
		?> </div> <?php
	}

	function get_data_kierownik() {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT * FROM req";
		$result = mysqli_query($conn, $query);

		$num = mysqli_num_rows($result);

		?> <div class="content"> <?php
		for ($i = 0; $i < $num; $i++) {
			$tab = mysqli_fetch_array($result);
			?> <span class="tab_name"> <?php print $tab['imie']; ?> </span><?php
			?> <span class="tab_name"> <?php print $tab['nazwisko']; ?> </span><?php
			?> <span class="tab_opis"> <?php print $tab['opis']; ?> </span><?php
			?> <span class="tab"> <?php print $tab['data']; ?> </span><?php
			?> <span class="tab"> <?php print $tab['auth1']; ?> </span><?php
			if (!isset($_POST[$tab['id']])) {
				?> <form class="tab" action="form.php" method="post"><input name="<?php print $tab['id']; ?>" type="submit" value="<?php print $tab['auth2']; ?>"></input></form><?php
			} else {
				change_status2($tab['id']);
			}
		}
		?> </div> <?php //tak nie moze byc, ze br a nie w divie kurwa
	}

	function get_data_admin() {
		$dbhost = 'localhost';
		$dblogin = 'root';
		$dbpass = '';
		$dbselect = 'doc';
		$conn = mysqli_connect($dbhost,$dblogin,$dbpass,$dbselect);
		$query = "SELECT * FROM users";
		$result = mysqli_query($conn, $query);

		$num = mysqli_num_rows($result);

		?> <div class="content"> <?php
		for ($i = 0; $i < $num; $i++) {
			$tab = mysqli_fetch_array($result);
			?> <span class="tab_name"> <?php print $tab['id']; ?> </span><?php
			?> <span class="tab_name"> <?php print $tab['username']; ?> </span><?php
			?> <span class="tab_name"> <?php print $tab['acctype']; ?> </span><?php
			if (!isset($_POST[$tab['id']])) {
				?> <form class="tab" action="form.php" method="post">
						<select name="accounttype">
						  <option value="user">User</option>
						  <option value="portier">Portier</option>
						  <option value="kierownik">Kierownik</option>
						  <option value="admin">Admin</option>
						</select>
						<input name="<?php print $tab['id']; ?>" type="submit" value="Zmień uprawnienia"></input></form><?php
			} else {
				change_status3($tab['id'],$_POST['accounttype']);
			}
		}
		?> </div> <?php
	}
?>