<?php

function dbEsc($theString) {
    $theString = mysql_real_escape_string($theString);
    return $theString;
}

function dbError(&$xmlDoc, &$xmlNode, $theMessage) {
    $errorNode = $xmlDoc->createElement('mysqlError', $theMessage);
    $xmlNode->appendChild($errorNode);
}

function createToken($user_id) {

}

function PHPMailer($xmlDoc, $name, $email, $subject, $message) {
     require("class.phpmailer.php");
     $parentNode = $xmlDoc->createElement('status');

    $mail = new PHPMailer();

    $mail->IsSMTP();  // telling the class to use SMTP
    $mail->SMTPAuth   = true; // SMTP authentication
    $mail->SMTPSecure = "tls";
    $mail->Host       = "smtp.gmail.com"; // SMTP server
    $mail->Port       = 587; // SMTP Port
    $mail->Username   = "jared314@gmail.com"; // SMTP account username
    $mail->Password   = "lnvfcqnotxajucwy";        // SMTP account password

    $mail->SetFrom('jared314@gmail.com'); // FROM


    $mail->AddAddress('jared314@gmail.com', 'Jared'); // recipient email

    $mail->Subject    = 'Contact Form Submission'; // email subject
    $mail->Body       = 'FROM: ' . $name . " " . $email . " Subject: " . $subject . " Message: " .$message;

    if(!$mail->Send()) {
      $statusNode = $xmlDoc->createElement('mail_status', 0);
      echo 'Mailer error: ' . $mail->ErrorInfo;
    } else {
      echo 'Message has been sent.';
      $statusNode = $xmlDoc->createElement('mail_status', 1);
    }

    $parentNode->appendChild($statusNode);

    return $parent;
}

function doesUserExist($dbconn, $xmlDoc, $id, $type) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    if($type == 'google') {
        $query = "select * from google_users where google_id = " . $id;
    } else if ($type == 'main') {
        $query = "select * from users where username = '" . dbEsc($id) . "';";
    }


    $result = mysql_query($query);

    if (!($result)) {
        $statusNode = $xmlDoc->createElement('status', $query);

        dbError($xmlDoc, $recordDataNode, mysql_error());
    } else {
        $statusNode = $xmlDoc->createElement('status', 'success');
    }

    $counter = 0;
    while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
        $counter = $counter + 1;
    }
    $statusNode = $xmlDoc->createElement('records', $counter);


    $recordDataNode->appendChild($statusNode);

    return $recordDataNode;
}

function addGoogleUser($dbconn, $xmlDoc, $google_id, $name, $email, $image_url) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    $query = "INSERT INTO google_users (google_id, username, name, email, img_url) " .
                "VALUES ('".$google_id."', '" . $name ."', '" . $name . "', '" . $email . "', '" . $image_url . "')";

    $result = mysql_query($query);

    if (!($result)) {
        $statusNode = $xmlDoc->createElement('status', $query);

        dbError($xmlDoc, $recordDataNode, mysql_error());
    } else {
        $statusNode = $xmlDoc->createElement('status', $google_id);
    }

    $recordDataNode->appendChild($statusNode);

    return $recordDataNode;
}

function signIn($dbconn, $xmlDoc, $username, $password) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    $username = htmlspecialchars($username);
    $password = htmlspecialchars($password);

    $salt = '';
    $query = "select salt from users where username = '".dbEsc($username). "';";
    $result = mysql_query($query);
    $row = mysql_fetch_array($result, MYSQL_ASSOC);
    $salt = $row['salt'];

    $hash = sha1($salt.$password);

    $query2 = "select user_id from users where username = '" . dbEsc($username) . "' AND password = '" . $hash . "';";

    $result2 = mysql_query($query2);

    if (!($result2)) {
        $statusNode = $xmlDoc->createElement('status', $query2);

        dbError($xmlDoc, $recordDataNode, mysql_error());
    } else {
        $statusNode = $xmlDoc->createElement('status', '');
    }

    $row2 = mysql_fetch_array($result2, MYSQL_ASSOC);
    $statusNode = $xmlDoc->createElement('token', $row2['user_id']);

    $recordDataNode->appendChild($statusNode);

    return $recordDataNode;
}

function addNewUser($dbconn, $xmlDoc, $username, $password) {
    $recordDataNode = $xmlDoc->createElement('userdata');

    $username = htmlspecialchars($username);
    $password = htmlspecialchars($password);

    $salt = rand().rand().rand().rand();
    $hash = sha1($salt.$password);

    $user_id = rand().rand().rand().rand();

    $query = "INSERT INTO users (user_id, username, password, salt) " .
                "VALUES ('".$user_id."', '" . $username ."', '" . $hash . "', '" . $salt . "')";

    $result = mysql_query($query);

    if (!($result)) {
        $statusNode = $xmlDoc->createElement('status', $query);

        dbError($xmlDoc, $recordDataNode, mysql_error());
    } else {
        $statusNode = $xmlDoc->createElement('token', $user_id);
    }

    $recordDataNode->appendChild($statusNode);

    return $recordDataNode;
}

function getConnections($dbconn, $xmlDoc, $user_id, $type) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

  $query = "SELECT * FROM tokens WHERE user_id = '".dbEsc($user_id)."' AND module_type = '".dbEsc($type)."'";

    $result = mysql_query($query);

    if (!($result)) {
        $statusNode = $xmlDoc->createElement('status', $query);

        dbError($xmlDoc, $recordDataNode, mysql_error());
    } else {
        $statusNode = $xmlDoc->createElement('status', 'success');
    }


  while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
    $theChildNode = $xmlDoc->createElement('connection');
    $theChildNode->setAttribute('name', $row['computer_name']);

    $datetime1 = strtotime($row['last_seen']);
    $datetime2 = time();
    $diff = $datetime2-$datetime1;
    if ($diff > 200) {
        $theChildNode->setAttribute('active', false);
    } else {
        $theChildNode->setAttribute('active', true);
    }

    $recordDataNode->appendChild($theChildNode);
  }
    $recordDataNode->appendChild($statusNode);
    return $recordDataNode;
}

function getLogs($dbconn, $xmlDoc, $user_id) {
    //main XML element to return
    $recordDataNode = $xmlDoc->createElement('recorddata');

    //get users tokens and scanner names
    $query = "SELECT * from tokens where user_id = '".dbEsc($user_id)."'";
    $result = mysql_query($query);
    while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
        $theScannerNode = $xmlDoc->createElement('scanner');
            $nameNode = $xmlDoc->createElement('name');
            $nameNode->setAttribute('name', $row['computer_name']);
            $datetime1 = strtotime($row['last_seen']);
            $datetime2 = time();
            $diff = $datetime2-$datetime1;
            if ($diff > 200) {
                $nameNode->setAttribute('active', false);
            } else {
                $nameNode->setAttribute('active', true);
            }
        $theScannerNode->appendChild($nameNode);
        //for each scanncer, get last 10 visitors
        $query2 = "SELECT DISTINCT(ign) AS ign from logs where token = '".dbEsc($row['token'])."' ORDER BY timestamp DESC LIMIT 10";
        $result2 = mysql_query($query2);
        while ($row2 = mysql_fetch_array($result2, MYSQL_ASSOC)) {
            $VistorNode = $xmlDoc->createElement('visitor');
            $VistorNode->setAttribute('ign', $row2['ign']);
            $VistorNode->setAttribute('token', $row['token']);
            $theScannerNode->appendChild($VistorNode);

        }
        $recordDataNode->appendChild($theScannerNode);
    }

    return $recordDataNode;
}

function getPlayerData($dbconn, $xmlDoc, $ign, $token) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    $query = "SELECT * from logs where token = '".dbEsc($token)."' AND ign = '".dbEsc($ign)."' ORDER BY timestamp DESC LIMIT 50";
    $result = mysql_query($query);
    while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
        $VistorNode = $xmlDoc->createElement('record');
        $VistorNode->setAttribute('ign', $row['ign']);
        $VistorNode->setAttribute('event', $row['event']);
        $VistorNode->setAttribute('time', $row['timestamp']);
        $VistorNode->setAttribute('discription', $row['discription']);
        $recordDataNode->appendChild($VistorNode);
    }
    return $recordDataNode;
}

function getUser($dbconn, $xmlDoc, $user_id) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    $query2 = "SELECT username from users where user_id = '".dbEsc($user_id)."'";
    $result2 = mysql_query($query2);
    $row2 = mysql_fetch_array($result2, MYSQL_ASSOC);
    $userNode = $xmlDoc->createElement('user');
    $userNode->setAttribute('username', $row2['username']);

    $recordDataNode->appendChild($userNode);

    $query3 = "UPDATE users SET last_seen = NOW() WHERE user_id = '".dbEsc($user_id)."'";
    $result3 = mysql_query($query3);

    return $recordDataNode;
}

function loadRedstoneControls($dbconn, $xmlDoc, $user_id) {
    $recordDataNode = $xmlDoc->createElement('recorddata');

    $query = "SELECT * from tokens where user_id = '".dbEsc($user_id)."' AND module_type = '4'";
    $result = mysql_query($query);

    while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
        $controlNode = $xmlDoc->createElement('controls');
        $controlNode->setAttribute('name', $row['computer_name']);

        $datetime1 = strtotime($row['last_seen']);
        $datetime2 = time();
        $diff = $datetime2-$datetime1;
        if ($diff > 200) {
            $controlNode->setAttribute('active', false);
        } else {
            $controlNode->setAttribute('active', true);
        }

        $query2 = "SELECT * from redstone_controls where token = '".$row['token']."'";
        $result2 = mysql_query($query2);

        if (!($result2)) {
            $statusNode = $xmlDoc->createElement('status', $query);

            dbError($xmlDoc, $recordDataNode, mysql_error());
        } else {
            $statusNode = $xmlDoc->createElement('status', 'success');
        }

        $row2 = mysql_fetch_array($result2, MYSQL_ASSOC);

        $controlNode->setAttribute('top', $row2['top']);
        $controlNode->setAttribute('bottom', $row2['bottom']);
        $controlNode->setAttribute('front', $row2['front']);
        $controlNode->setAttribute('back', $row2['back']);
        $controlNode->setAttribute('left', $row2['left']);
        $controlNode->setAttribute('right', $row2['right']);

        $recordDataNode->appendChild($controlNode);

    }
    $recordDataNode->appendChild($statusNode);
    return $recordDataNode;
}

?>