<?php
//namespace User;
class ModelUser extends Model
{	
	//Login authentication
	public function login($data=''){
		
		$query = $this->db->query
				("SELECT u.user_id,u.firstname,u.email,r.name as role,r.role_id
					FROM admin_users u
					JOIN admin_roles r
					ON u.role_id = r.role_id
					WHERE username = '".$data['user']."' 
					AND password = '".$data['password']."'");
		return $query;		
	}
	/*/TOKEN/*/
	 public function getToken($bites=16){
	 	$token = bin2hex(openssl_random_pseudo_bytes($bites));
	 }

	/*/TODO integrate checkToken into getToken/*/
	public function generateToken($bites=16){
		return bin2hex(openssl_random_pseudo_bytes($bites));
	}
	public function checkToken($bites=16){
	 	$token = $this->generateToken($bites);
	 	$token_exist = $this->db->query
	 					("SELECT user_id FROM ".$this->prefix."admin_users WHERE confirmation_token='$token'");
	 	
	 	while ($token_exist->num_rows > 0) {
	 		$token = $this->generateToken($bites);
	 		$token_exist = $this->db->query
	 					("SELECT user_id FROM ".$this->prefix."admin_users WHERE confirmation_token='$token'");
	 	}				
	 	return $token;				

	} 
	/*/SOCIAL MEDIA/*/
	public function getSocialMedia(){
		$query = $this->db->query
			("SELECT media_id,media_name,media_title
				FROM social_media
				WHERE is_active = 1
			");
		return $query;	
	}

	/*/USERS/*/
	public function usersList($role_id=''){
		
		!empty($role_id) ? $query_role_id = "AND u.role_id >= $role_id" : $query_role_id = "";
		$query = $this->db->query
				("SELECT u.user_id,u.firstname,u.lastname,u.username,u.image,u.email,u.is_active,
					r.name as role
					FROM admin_users u
					JOIN admin_roles r
					ON u.role_id = r.role_id
					WHERE u.role_id > 0
					$query_role_id
				");
		return $query;		
	}

	 public function getUser($id=''){
	 	$query = $this->db->query
	 				("SELECT u.user_id,u.firstname,u.lastname,u.social_media,u.email,u.username,u.image,u.info,
	 					u.is_active,u.role_id,r.name as role
						FROM admin_users u
						JOIN admin_roles r
						ON u.role_id = r.role_id
						WHERE u.user_id = $id
					");
		return $query;			
	 }

	 public function getRoles($role_id){
	 	$query = $this->db->query
	 				("SELECT role_id,name as role
	 					FROM admin_roles
	 					WHERE role_id >= $role_id
	 				");
	 	return $query;			
	 }

	 public function updatePassword($user_id,$password){
	 	$query = $this->db->query
	 				("UPDATE admin_users SET password = '$password' WHERE user_id = $user_id");
	 	return $query;
	 }

	 public function updateUser($data){
	 	//IF NOT LOADING AN IMAGE
	 	!empty($data['content_image']) ?
	 	$image = $data['content_image'] :
	 	$image = '';
	 	$media_json	= '';
	 	$query = $this->db->query
	 				("UPDATE admin_users SET
	 					firstname 		= '" . $this->db->escape($data['firstname']) . "',
	 					lastname 		= '" . $this->db->escape($data['lastname']) . "',
	 					email 			= '" . $this->db->escape($data['email']) . "',
	 					username 		= '" . $this->db->escape($data['username']) . "',
	 					social_media	= '$media_json',
	 					image 			= '$image',
	 					info 			= '" . $this->db->escape($data['ajax_content']) . "',
	 					is_active 		= '" . $this->db->escape($data['is_active']) . "',
	 					role_id 		= '" . $this->db->escape($data['role_id']) . "'
	 					WHERE user_id 	= '" . (int)$data['user_id'] . "'
	 				");
	 	return $query;			
	 }

	 public function checkUser($username){
	 	$query = $this->db->query
	 				("SELECT user_id FROM admin_users WHERE username like '%$username%'");
	 	return $query;			
	 }

	 public function addUser($data){
	 	$query = $this->db->query
	 				("INSERT INTO admin_users 
	 					SET
	 					firstname 	= '" . $this->db->escape($data['firstname']) . "',
	 					lastname 	= '" . $this->db->escape($data['lastname']) . "',
	 					email 		= '" . $this->db->escape($data['email']) . "',
	 					username 	= '" . $this->db->escape($data['username']) . "',
	 					password 	= '" . $this->db->escape($data['password']) . "',
	 					image 		= '" . $this->db->escape($data['content_image']) . "',
	 					info 		= '" . $this->db->escape($data['ajax_content']) . "',
	 					created 	= '" . $this->db->escape($data['created']) . "',
	 					is_active 	= '" . $this->db->escape($data['is_active']) . "',
	 					role_id 	= '" . $this->db->escape($data['role_id']) . "'
	 				");
	 	return $query;				
	 }
	 public function getUserbyEmail($email){
		$query = $this->db->query
			("SELECT username,password FROM admin_users WHERE email='$email'");
		return $query;	
	}
}