<?php
/**
 * This is the Session Controller class.
 *
 * @author donal.ellis@rmit.edu.au
 */
session_start();

require_once(LIBRARY_PATH . DS . 'Template.php');
require_once(APP_PATH . DS . 'models/User.php');

class SessionController {

  public function __construct() {
    $this->template = new Template;
    $this->template->template_dir = APP_PATH . DS . 'views' . DS . 'session' . DS;

    $this->template->title = 'Log in';
  }

  public function add() {
    if (isset($_SESSION['session']['error'])) {
      $this->template->error = $_SESSION['session']['error'];
      unset($_SESSION['session']['error']);
    }

    $this->template->display('add.php');
  }

  public function create() {
    // TODO
    // get username and password
    // and validate them against values in db
    if (!$user = User::retrieve(array('username' => $_POST['username']))) {
      // user doesn't exist
      // redirect back to login page
      $_SESSION['session']['error'] = "You cannot login with those details";
      header("Location: /Test/session/new");
      exit;
    }
    if ($_POST['password'] != $user->password) {
      // password is wrong
      // redirect back to login page
      $_SESSION['session']['error'] = "You cannot login with those details";
      header("Location: /Test/session/new");
      exit;
    }
    // credentials are correct
    // add user to session
    // redirect to users show page
    $_SESSION['user']['user_id'] = $user->user_id;
    $_SESSION['user']['account_type_id'] = $user->account_type_id;
    header("Location: /Test/users/{$user->user_id}");
    exit;
  }

  public function destroy() {
    $_SESSION = array();
    if (ini_get('session.use_cookies')) {
      $params = session_get_cookie_params();
      setcookie(session_name(), '', time() - 42000,
        $params['path'], $params['domain'],
        $params['secure'], $params['httponly']
      );
    }
    session_destroy();

    header("Location: /Test/session/new", false);
    exit;
  }
}