<?php

  	header("Access-Control-Allow-Origin: *");
	header("Content-Type: application/json");
  	header('Access-Control-Allow-Methods: POST');
	header('Access-Control-Allow-Headers: Access-Control-Allow-Headers,Content-Type,Access-Control-Allow-Methods, Authorization, X-Requested-With');

	include_once "../../config/Database.php";
	include_once "../../models/User.php";
	include_once "../../models/Session.php";

	include_once "../../utils.php";

	$database = new Database();
	$DBConnection = $database->connect();

	$user = new User($DBConnection);

	$data = json_decode(file_get_contents("php://input"));

	$user->user_fname = htmlspecialchars(strip_tags($data->fname));
	$user->user_lname = htmlspecialchars(strip_tags($data->lname));
	$user->user_email = htmlspecialchars(strip_tags($data->email));
	$user->user_phone = htmlspecialchars(strip_tags($data->phone));
	$user->user_role = "user";

	if ($user->register())
	{
  		$session = new Session($DBConnection);
  		$session->session_key = generateRandomString(32);
  		$session->session_user = $user->getID();
  		$session->save();

  		echo json_encode(
  			array("message" => $session->session_key, "type" => "success")
  		);
	}
	else
  		echo json_encode(
  			array(
  				"message" => "Registration process failed!",
  				"type" => "error"
  			)
  		);