<?php
require_once 'php/config.php';

if(isset($_POST['submit'])){
   $username = htmlspecialchars($_POST['username']);
   $email = htmlspecialchars($_POST['email']);
   $password = $_POST['password'];

   if(!empty($username)){
      $req = $pdo->prepare('UPDATE users SET username = ? WHERE id = ?');
      $req->execute(array($username, $_SESSION['auth']['id']));
   }

   if(!empty($email)){
      $req = $pdo->prepare('UPDATE users SET email = ? WHERE id = ?');
      $req->execute(array($email, $_SESSION['auth']['id']));
   }

   if(!empty($password)){
      $req = $pdo->prepare('UPDATE users SET password = ? WHERE id = ?');
      $password = password_hash($password, PASSWORD_BCRYPT);
      $req->execute(array($password, $_SESSION['auth']['id']));
   }

   if(isset($_FILES['avatar']) AND !empty($_FILES['avatar']['name'])) {
      $tailleMax = 2097152;
      $extensionsValides = array('jpg', 'jpeg', 'gif', 'png');
      if($_FILES['avatar']['size'] <= $tailleMax) {
         $extensionUpload = strtolower(substr(strrchr($_FILES['avatar']['name'], '.'), 1));
         if(in_array($extensionUpload, $extensionsValides)) {
            $chemin = "users/avatars/".$_SESSION['auth']['id'].".".$extensionUpload;
            $resultat = move_uploaded_file($_FILES['avatar']['tmp_name'], $chemin);
            if($resultat) {
               $updateavatar = $pdo->prepare('UPDATE users SET avatar = :avatar WHERE id = ?');
               $updateavatar->execute(array(
                  'avatar' => $_SESSION['auth']['id'].".".$extensionUpload,
                  $_SESSION['auth']['id']
                  ));
               $success = "Votre profile est bien mis à jour";
            } else {
               $msg = "Erreur durant l'importation de votre photo de profil";
            }
         } else {
            $msg = "Votre photo de profil doit être au format jpg, jpeg, gif ou png";
         }
      } else {
         $msg = "Votre photo de profil ne doit pas dépasser 2Mo";
      }
   }
}
?>
<?php include 'views/account.view.php'; ?>