<?php

//If your want to use other class function or method you must require the class into this class.
//../ means that back to previous file location(Example : Souce File/Control, added ../ will be Souce File/)
require("../Config/DBConnection.php");
require("../Model/Account.php");

//Reset All SESSION
function resetSess() {
	unset($_SESSION['AccountId']);
	unset($_SESSION['userName']);
	unset($_SESSION['userPass']);
	unset($_SESSION['Name']);
	unset($_SESSION['Address']);
	session_destroy();
}

//Create User
if (isset($_POST['AddUser'])) {	//POST is to get the from the form in post method with the button name of AddUser
	session_start();			//If you are using SESSION to past data you must include this session_start
	extract($_POST);
	$instance = DBConnection::getInstance();
	$conn = $instance->getConnection();


	$userName = $_POST['userName'];		// the userName,userPass,Name, and Address are from the form input field name and put the value inside the variable
	$userPass = $_POST['userPass'];
	$Name = $_POST['Name'];
	$Address = $_POST['Address'];


	$sql = "INSERT INTO account (Username, password, name ,address) VALUES (?, ?, ?, ?)";		//Sql Insert Statement
	$stmt = $conn->prepare($sql);

	$stmt->bindParam(1, $userName);
	$stmt->bindParam(2, $userPass);
	$stmt->bindParam(3, $Name);
	$stmt->bindParam(4, $Address);

	$stmt->execute();
	if ($stmt) {
		$_SESSION['Success'] = "Account Created Successfully";
	}
	header("refresh:0; url=../View/index.php");			//refresh and return to the index page
}

//Read All Account 
function getAllAccount() {				//function that retrieve all account and return
	extract($_POST);
	$instance = DBConnection::getInstance();
	$conn = $instance->getConnection();
	$arrAccount = array();
	$count = 0;

	$sql = $conn->prepare("SELECT * FROM account");

	if ($sql->execute(array())) {

		while ($row = $sql->fetch(PDO::FETCH_ASSOC)) {
			$id = $row["id"];
			$UserName = $row["Username"];
			$UserPass = $row["password"];
			$Name = $row["name"];
			$Address = $row["address"];

			$Account = new Account($id, $UserName, $UserPass, $Name, $Address);		//I am creating the Account class to store all the account data into it
			$arrAccount[$count] = $Account;
			$count ++;
		}
		return $arrAccount;
	}
}

//Search
if (isset($_POST['SearchUsr'])) {
	session_start();
	extract($_POST);
	$instance = DBConnection::getInstance();
	$conn = $instance->getConnection();

	$UserName = $_POST['userName'];

	$sql = "SELECT * FROM account WHERE Username = ?";
	$stmt = $conn->prepare($sql);
	$stmt->bindParam(1, $UserName);
	$stmt->execute();
	$rowCount = $stmt->fetchObject();
	$count = $stmt->rowCount();

	if ($count > 0) {
		$_SESSION['AccountId'] = $rowCount->id;
		$_SESSION['userName'] = $rowCount->Username;
		$_SESSION['userPass'] = $rowCount->password;
		$_SESSION['Name'] = $rowCount->name;
		$_SESSION['Address'] = $rowCount->address;
	} else {
		$_SESSION['AccountId'] = '';
		$_SESSION['userName'] = '';
		$_SESSION['userPass'] = '';
		$_SESSION['Name'] = '';
		$_SESSION['Address'] = '';
	}


	header("refresh:0; url=../View/index.php");
}

//Update Account 
if (isset($_POST['UpdateUsr'])) {
	session_start();
	extract($_POST);
	$instance = DBConnection::getInstance();
	$conn = $instance->getConnection();
	
	if ($_POST['accID'] === ""){
		$_SESSION['Failed'] = "cannot be empty";
        echo "<script>window.location = '../View/index.php'</script>";
	}
	else{
		$id =$_POST['accID'];
		$UserPass =$_POST['password'];
		$Name = $_POST['name'];
		$Address = $_POST['address'];
		
		$sql = "UPDATE account SET password = ?, name = ?, address = ? WHERE id = ?";
        $stmt = $conn->prepare($sql);
        $stmt->bindParam(1, $UserPass);
        $stmt->bindParam(2, $Name);
        $stmt->bindParam(3, $Address);
		$stmt->bindParam(4, $id);

        $stmt->execute();
		$_SESSION['Success'] = "Account Updated Successfully";
		header("refresh:0; url=../View/index.php");
	}
}

//Delete Account	
if (isset($_POST['DeleteUser'])) {
	session_start();
	extract($_POST);
	$instance = DBConnection::getInstance();
	$conn = $instance->getConnection();
	
	$ID = $_POST['AccID'];

	$sql = "SELECT * FROM account WHERE id = ?";
	$stmt = $conn->prepare($sql);
	$stmt->bindParam(1, $ID);
	$stmt->execute();
	$rowCount = $stmt->fetchObject();
	$count = $stmt->rowCount();
	
	if ($count > 0) {
		$sql = "DELETE FROM account WHERE id = ?";
		$stmt = $conn->prepare($sql);
		$stmt = $conn->prepare($sql);
		$stmt->execute(array($ID));
		$_SESSION['Success'] = "Account Deleted Successfully";
		header("refresh:0; url=../View/index.php");
	}
	else{
		$_SESSION['Failed'] = "Account Not Found";
		header("refresh:0; url=../View/index.php");
	}
}
?>