using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Data.SqlClient;
using System.Configuration;
using System.Security.Cryptography;
using System.Text;

namespace LoginApp.DataAccess
{
    public class DataAccessLayer
    {
        static SqlConnection Database1Connection = new SqlConnection(ConfigurationManager.ConnectionStrings["Database1"].ToString());

        public static bool AddUser(string Username, string Password , string Email, string FirstName, string LastName)
        {
            bool Success = false;
            string Query = string.Format("INSERT INTO [Users] (username, password , email, first_name, last_name) VALUES ('{0}','{1}','{2}','{3}','{4}')", Username,md5EncodePassword(Password), Email, FirstName, LastName);
            SqlCommand SqlCommand = new SqlCommand(Query, Database1Connection);
            Database1Connection.Open();
            SqlDataReader SqlDataReader = SqlCommand.ExecuteReader();
            Database1Connection.Close();
            return true;
        }

        public static string md5EncodePassword(string OriginalPassword)
        {
            Byte[] OriginalBytes;
            Byte[] EncodedBytes;
            MD5 md5;
            // Convert the original password to bytes; then create the hash
            md5 = new MD5CryptoServiceProvider();
            OriginalBytes = ASCIIEncoding.Default.GetBytes(OriginalPassword);
            EncodedBytes = md5.ComputeHash(OriginalBytes);
            // Bytes to string
            return System.Text.RegularExpressions.Regex.Replace(BitConverter.ToString(EncodedBytes), "-", "").ToLower();

        }

        public static bool UserIsValid(string Username, string Password)
        {
            bool Authenticated = false;

            string Query = string.Format("SELECT * FROM [Users] WHERE username = '{0}' AND password = '{1}' ", Username, md5EncodePassword(Password));

            SqlCommand SqlCommand = new SqlCommand(Query, Database1Connection);
            Database1Connection.Open();
            SqlDataReader SqlDataReader = SqlCommand.ExecuteReader();
            Authenticated = SqlDataReader.HasRows;
            Database1Connection.Close();
            return Authenticated;
        }
    }
}