<?php

/*
 * Create By : Ageng Maulana
 * Jakarta, 24 March 2017
 */

class Controller_Admin_Profile extends GeneralAction {

    function beforeExec() {
        parent::beforeExec();
		parent::$moduleName = "My Account";
        parent::$isAdmin = true;
        parent::$mapping = parent::generateMapping('Profile');
		
        parent::$prefix = 'udaf';
        parent::$table = 'user';
		parent::$pathupload = "../Assets/img/";
	}

    protected function do_show() {
		$getUser = Database::build()->getAllDbOne("SELECT * FROM user WHERE udafId = '".$_COOKIE['userId']."'");
		$addTpl = array("user" => $getUser, "usertype" => $_COOKIE['userIsA'], "userid" => $_COOKIE['userId']);
		parent::do_show('/Templates/Admin/profile.html', $addTpl);
    }
	
	protected function do_update() {
		$post['txtId'] = $_COOKIE['userId'];
		$post = $post + $_POST;
		$update = parent::do_update($post);
		if(!empty($update['post']['fImage'])) {
			$_COOKIE['userImage'] 	= Config::load()->path() . "/Assets/img/" . $update['post']['fImage'];
		}
		return $update;
	}
	
	function do_changepassword() {
		require Config::load()->root() . '/Additional/passwordLib.php';
		$sql = "SELECT udafId, udafPassword, udafHash FROM user WHERE udafId='" . $_COOKIE['userId'] . "' and udafStatus='0'";
		$cekUser = Generaldb::instance()->dbgetone($sql);
		$oldpass = $_POST['oldpassword'];
		$newpass = $_POST['newpassword'];
		$cnpass = $_POST['cnpassword'];
		$error = "";
		if(empty($oldpass)) {
			$error .= "Old Password Is Empty \n";
		}
		if(empty($newpass)) {
			$error .= "New Password Is Empty \n";
		}
		if(empty($cnpass)) {
			$error .= "Confirm Password Is Empty \n";
		}
		if($newpass != $cnpass) {
			$error .= "Confirm Password Not Match \n";
		}
		if(empty($error)) {
			if (password_verify(trim($oldpass.$cekUser['udafHash']), trim($cekUser['udafPassword']))) {
				$options = array(
						'cost' => 12,
					);
				$password = password_hash($newpass . $cekUser['udafHash'], PASSWORD_BCRYPT, $options)."\n";
				$update = Database::build()->updateArray("user", 'udaf', array('udafPassword' => $password), "udafId = '".$_COOKIE['userId']."'");
				return array('status' => 'ok', 'id' => $_COOKIE['userId']);
			} else {
				return array('status' => 'error', 'session' => false, 'error' => 'Check Your Password');
			}
		}else{
			return array('status' => 'error', 'session' => false, 'error' => $error);
		}
	}
}