<?php
Class user {
    public $con;
    public function __construct($con) {
        $this->con = $con;
    }
    public function add($username,$password,$level) {
        if (@$username == null) { return false ;}
        if (@$password == null) { return false ;}
        if (@$level == null) { return false ;}
        $query = $this->con->query("INSERT INTO users
        (
        id,
        username,
        password,
        level
        )
        VALUES
        (
        '',
        '".$this->con->real_escape_string($username)."',
        '".password_hash($this->con->real_escape_string($password),PASSWORD_BCRYPT)."',
        '".$this->con->real_escape_string($level)."'
        )");
        if ($query) {return true;} else {return false;}
    }

    public function login ($username,$password) {
        if (@$username == null) { return false ;}
        if (@$password == null) { return false ;}
        $query = $this->con->query("SELECT password,level
        FROM
        users
        WHERE
        username='".$this->con->real_escape_string($username)."'
        LIMIT 1");
        $row = $query->fetch_assoc();
        if (!$query) {
            return false;
        }
        if (password_verify($password,$row['password'])) {
            session_regenerate_id();
            $_SESSION['username'] = $username;
            $_SESSION['level'] = $row['level'];
            $_SESSION['loggedin'] = true;
            return true;
        } else {
            return false;
        }
    }

    public function loggedin() {
        if ($_SESSION['loggedin'] != TRUE) {
            return false;
        } else {
            return true;
        }
    }

    public function levelcheck($level) {
        return $_SESSION['level'];
    }
}
?>