<?php
class Controller_Admin_User {
    function load_action($action) {
            session_start();
            echo json_encode($this->$action());
    }
    
    protected function do_cookie() {
        $err = '';
        if(!isset($_COOKIE['user']) && empty($_COOKIE['user'])){
            $err = 'Please login';
        }
        if(empty($err)) {
            return array('status' => 'ok');
        }else{
            return array('status' => 'error', 'session' => false, 'error' => $err);
        }
    }
	
    protected function do_login() {
        require '../Additional/aes.php';
        require '../Additional/aesctr.php';
		require '../Additional/passwordLib.php';
        $timer = microtime(true);
        $pw = '!@#$%#%$^&&^*(&*)*&terajanamahatmagandhi$#%$^&**&*(&(';
        $password = AesCtr::decrypt($_POST['password'], $pw, 256);
        $user = Xssfilter::filter($_POST['username']);
        $pass = Xssfilter::filter($password);

        $arrErr = array();
        if( empty($user)){
            $arrErr['user'] = "Username is required.";
        }else{
            $sql = "SELECT udafId, udafPassword, udafName, udafEmail, udafType, udafHash, udafIsAdmin, udafImage  FROM user WHERE udafEmail='" . trim($user) . "' and udafStatus='0'";
            $cekUser = Generaldb::instance()->dbgetone($sql);
            if(empty($cekUser['udafEmail'])) {
                $arrErr['user'] = "Username Not Available";
            }
            if(!empty($pass) && !empty($cekUser)){
                if (!password_verify(trim($pass.$cekUser['udafHash']), trim($cekUser['udafPassword']))) {
                    $arrErr['pass'] = "Please Check Your Password";
                }
            }
        }

        if(empty($pass)){
            $arrErr['pass'] = "Password is required.";
            if(empty($cekUser['udafEmail'])) {
                $arrErr['user'] = "Username Not Available";
            }
        }else{
            if(!empty($cekUser)) {
                if (!password_verify(trim($pass . $cekUser['udafHash']), trim($cekUser['udafPassword']))) {
                    $arrErr['pass'] = "Please Check Your Password";
                }
            }
        }

        if(empty($arrErr)) {
			$menuTreeUser = GeneralFunction::build()->getMenuUser($cekUser['udafId'], true);
            $menuUser = json_decode($menuTreeUser, true);
            if(!isset($menuUser['status'])) {
				setcookie('user', trim($user), time() + (604800 * 30), "/");
				setcookie('userId', $cekUser['udafId'], time() + (604800 * 30), "/");
				setcookie('userRealname', $cekUser['udafName'], time() + (604800 * 30), "/");
				setcookie('userType', $cekUser['udafType'], time() + (604800 * 30), "/");
				setcookie('userIsA', $cekUser['udafIsAdmin'], time() + (604800 * 30), "/");
				setcookie('userImage', empty($cekUser['udafImage']) ? Config::load()->path() . "/Assets/img/default.png" : Config::load()->path() . "/Assets/img/" . $cekUser['udafImage'], time() + (604800 * 30), "/");
				//setcookie('menuAdmin', GeneralFunction::build()->getMenuUser($cekUser['udafId'], true), time() + (604800 * 30), "/");	
			
                /* Page URL after Login */
                //$rsAfterLogin = Generaldb::instance()->dbgetone("SELECT menuLink FROM user_access LEFT JOIN menu ON (udacAccess = menuId) WHERE udacUdafId = '".$cekUser['udafId']."' AND menuChild != 0 LIMIT 1");
                $rsAfterLogin = Generaldb::instance()->dbgetone("SELECT menuLink FROM user_access LEFT JOIN menu ON (udacAccess = menuId) WHERE udacUdafId = '".$cekUser['udafId']."' AND menuLink IS NOT NULL AND menuLink != '' LIMIT 1");
                $afterLogin = $rsAfterLogin['menuLink'];
                /* ==================== */

                //$success =  array('status' => 'ok', 'session' => true, 'url' => $afterLogin, 'a' => $cekUser['udafIsAdmin']);
				$success =  array('status' => 'ok', 'session' => true, 'url' => $afterLogin, 'a' => $cekUser['udafIsAdmin'], 'menuAccess' => $menuTreeUser);
            }else{
                $arrErr['progress'] = "Your Account being processed!";
                //return array('status' => 'error', 'session' => false, 'error' => 'Your Account being processed!');
            }
            if(!empty($arrErr)) {
                return array('status' => 'error', 'session' => false, 'error' => $arrErr);
            }else{
                return $success;
            }
        }else{
            return array('status' => 'error', 'session' => false, 'error' => $arrErr);
        }

	}
	
	protected function do_addproductlist() {
		setcookie('userProductList', $_POST['id'], time() + (604800 * 30), "/");
		return array('status' => 'ok');
	}
    
    protected function do_logout() {
        unset($_COOKIE['user']);
        unset($_COOKIE['userId']);
        unset($_COOKIE['userRealname']);
		unset($_COOKIE['userProductList']);
		unset($_COOKIE['userType']);
		unset($_COOKIE['userIsA']);
		//unset($_COOKIE['menuAdmin']);
		unset($_COOKIE['userImage']);
		
		setcookie('user', null, -1, '/');
		setcookie('userId', null, -1, '/');
		setcookie('userRealname', null, -1, '/');
		setcookie('userProductList', null, -1, '/');
		setcookie('userType', null, -1, '/');
		setcookie('userIsA', null, -1, '/');
		//setcookie('menuAdmin', null, -1, '/');
		setcookie('userImage', null, -1, '/');
		header("location:" . Config::load()->path());
        //return array('status' => 'ok', 'session' => false);
    }
}