package servlets;

import beans.Korisnik;
import database.DB;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class Login extends HttpServlet {

    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");

        String username = request.getParameter("username");
        String password = request.getParameter("password");
        String type = request.getParameter("type");

        boolean error = false;
        String errMsg = "";
        if (username == null || password == null || type == null || username.length() == 0 || password.length() == 0) {
            error = true;
            errMsg = "Unesi podatke.";
            RequestDispatcher rd = request.getRequestDispatcher("/WEB-INF/login.jsp");
            rd.forward(request, response);
        } else {
            Connection con = null;
            Statement st = null;
            ResultSet rs = null;
            Korisnik korisnik = null;
            String page = "";

            try {
                con = DB.getInstance().getConnection();
                st = con.createStatement();
                String query = "SELECT * FROM korisnik WHERE username='" + username + "' AND password='" + password + "' + type='" + type + "'";
                rs = st.executeQuery(query);
                if (rs.next()) {
                    korisnik = new Korisnik();
                    korisnik.setUsername(rs.getString(username));
                    korisnik.setPassword(rs.getString(password));
                    korisnik.setType(rs.getString(type));

                    st.close();
                } else {
                    errMsg = "Nema rekorda u bazi";
                }
            } catch (SQLException e) {
                errMsg = "Exception u bazi" + e.toString();
            } finally {
                DB.getInstance().putConnection(con);
            }
            if (!error) {
                if (korisnik.getType().equals("kupac")) {
                    page = "kupac.jsp";
                } else {
                    if (korisnik.getType().equals("prodavac")) {
                        page = "prodavac.jsp";
                    }
                }
                RequestDispatcher rd = request.getRequestDispatcher("/WEB-INF/" + page);
                rd.forward(request, response);

                HttpSession session = request.getSession();
                session.setAttribute("korisnik", korisnik);

            }

        }
    }

    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");

        RequestDispatcher dispatcher //
                = this.getServletContext().getRequestDispatcher("/WEB-INF/login.jsp");
        dispatcher.forward(request, response);
    }

}