<?php
	
function get___() {
	echo 'Accomods API is running.'; exit;
}

//**********************************************************************************************************//
// DATABASE FUNCTIONS **************************************************************************************//

function dbconnect() {
/*
    if ( stristr($_SERVER['HTTP_HOST'], 'localhost') ) {
        $username = 'root';
        $password = 'root';
        $dbname = 'accomods_api';
    }
    else if ( stristr($_SERVER['HTTP_HOST'], 'apidev.accomods.com') ) {
        $username = 'awaldron_accomods_dev';
        $password = 'XgDpNjbMiSpK';
        $dbname = 'awaldron_accomods_dev';
    }
    else if ( stristr($_SERVER['HTTP_HOST'], 'api.accomods.com') ) {
        $username = 'awaldron_accomods';
        $password = '$7FuE1MuvBp';
        $dbname = 'awaldron_accomods';
    }
*/
    $username = 'awaldron_accomods';
    $password = '$7FuE1MuvBp';
    $dbname = 'awaldron_accomods';

    $db = new mysqli('localhost', $username, $password, $dbname);
    if ($db->connect_errno) {
        response( 500, ['success' => false, 'errors' => ['Error connecting to the database.']]);
    } 
    return $db;
}


//**********************************************************************************************************//
// CORS FUNCTIONS ******************************************************************************************//

function cors() {

    // Allow from any origin
	// Specify domains from which requests are allowed
	header('Access-Control-Allow-Origin: *');
	
	// Specify which request methods are allowed
	header('Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS');
	
	// Additional headers which may be sent along with the CORS request
	header('Access-Control-Allow-Headers: X-Requested-With,Authorization,Content-Type');
	
	// Set the age to 1 day to improve speed/caching.
	header('Access-Control-Max-Age: 86400');

    // Access-Control headers are received during OPTIONS requests
    if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
            // may also be using PUT, PATCH, HEAD etc
            header("Access-Control-Allow-Methods: GET, POST, PUT, HEAD, DELETE, OPTIONS");

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']))
            header("Access-Control-Allow-Headers: {$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']}");

        exit(0);
    }
}



//**********************************************************************************************************//
// BACKDOOR LOGIN TO CATALYST ******************************************************************************//

function backdoor_login() {
    $postData = 'grant_type=password&organization=accomods&isCustomer=true&username=waldo97@gmail.com&password=test123';

    // create curl resource
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, "https://admin.inmotionapp.net/api/v1/token");
    //curl_setopt($ch, CURLOPT_URL, "https://api.bimcatalyst.dev/v2/session/login");

    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded'));
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

    // $output contains the output string
    $data = curl_exec($ch);

    // close curl resource to free up system resources
    curl_close($ch);

    return $data;
}



//**********************************************************************************************************//
// API FUNCTIONS *******************************************************************************************//

function validate_body( $args, $rules ) {

    $valid = true;
    $errors = [];

    if ($args !== false && $rules !== false) {
        foreach ($rules as $param => $rule) {
            // CHECK REQUIRED
            if (strstr($rule,'req')) {
                if (empty($args[$param])) {
                    $valid = false;
                    $errors[] = $param.' is required.';
                }
            }
            // CHECK EMAIL
            if (strstr($rule,'email')) {
                if (!filter_var($args[$param], FILTER_VALIDATE_EMAIL)) {
                    $valid = false;
                    $errors[] = $param.' is not a valid email address.';
                }
            }
        }
    }

    if (!$valid) {
        response( 400, ['success'=>false,'errors'=>$errors]);
    }
    return true;
}

function validate_token( $uid ) {
    // IF uid==0 THEN THROW ERROR INVALID TOKEN
    if ($uid !== false && $uid === 0) {
        response( 401, ['success'=>false,'errors'=>['Security token invalid.'.$_SERVER['HTTP_AUTHORIZATION']]]);
    }
}

function validate_admin( $is_admin ) {
    // IF is_admin==0 THEN THROW ERROR NOT AUTHORIZED
    if (!$is_admin) {
        response( 401, ['success'=>false,'errors'=>['Unauthorized. User must be an admin.']]);
    }
}

function response( $responseCode=200, $responseBody=[] ) {
    http_response_code($responseCode);
    header('Content-Type: application/json');
    echo json_encode($responseBody);
    exit;
}


//function new_token( $db, $uid ) {
//    $token = bin2hex(random_bytes(64));
//    $created = time();
//    $expires = time() + 60*60*12;
//    $ins = "INSERT INTO tokens
//            (user_id, token, created, expires) VALUES
//            (".$uid.",'".$token."',".$created.",".$expires.")";
//    if ($result = $db->query($ins)) {
//        return [
//            'token' => $token,
//            'created' => $created,
//            'expires' => $expires
//        ];
//    } else {
//        response( 400, ['success'=>false,'errors'=>['Error creating token.']]);
//    }
//}

function check_token( $db, $token ) {
	if (empty($token)) {
		return 0;
	}
    $sql = "SELECT token_id, user_id FROM tokens WHERE token='".$token."' AND expires > ".time();
    $res = qRow( $db, $sql );
    if (!empty($res['user_id'])) {
        // UPDATE TOKEN EXPIRATION
        $upd = "UPDATE tokens SET expires=".(time()+60*60*12)." WHERE token_id=".$res['token_id'];
        $db->query($upd);
        return $res['user_id'];
    } else {
        return 0;
    }
}


function generatePassword($length = 10) {
    // Define the character sets to be used in the password
    $uppercase = 'ABCDEFGHJKLMNPQRSTUVWXYZ';
    $lowercase = 'abcdefghjkmnpqrstuvwxyz';
    $numbers = '123456789';
    $symbols = '!@#$%&_+?';

    // Combine all character sets
    $allCharacters = $uppercase . $lowercase . $numbers . $symbols;

    // Initialize the password variable
    $password = '';

    // Generate the random password
    for ($i = 0; $i < $length; $i++) {
        $randomIndex = mt_rand(0, strlen($allCharacters) - 1);
        $password .= $allCharacters[$randomIndex];
    }

    return $password;
}

function generateHash($length = 10) {
    // Define the character sets to be used in the password
    $uppercase = 'ABCDEFGHJKLMNPQRSTUVWXYZ';
    $lowercase = 'abcdefghjkmnpqrstuvwxyz';
    $numbers = '123456789';
    $symbols = '!@#$%&_+?';

    // Combine all character sets
    $allCharacters = $uppercase . $lowercase . $numbers;

    // Initialize the password variable
    $password = '';

    // Generate the random password
    for ($i = 0; $i < $length; $i++) {
        $randomIndex = mt_rand(0, strlen($allCharacters) - 1);
        $password .= $allCharacters[$randomIndex];
    }

    return $password;
}



//**********************************************************************************************************//
// DB HELPER FUNCTIONS *************************************************************************************//


function qVal( $db, $sql ) {
    $res = $db->query($sql);
    if ($res->num_rows > 0) {
        $row = $res->fetch_assoc();
        foreach ($row as $k => $v) {
            return $v;
        }
    } else {
        return false;
    }
}

function qRow( $db, $sql ) {
    $res = $db->query($sql);
    if ($res->num_rows > 0) {
        $row = $res->fetch_assoc();
        return $row;
    } else {
        return false;
    }
}

function qSet( $db, $sql ) {
    $out = [];
    $res = $db->query($sql);
    while ($row = $res->fetch_assoc()) {
        $out[] = $row;
    }
    return $out;
}




function qsql( $q ) {
    if ($q->num_rows() == 0) return false;
    else {
        $r = $q->result_array();
        $r = $r[0];
        foreach ($r as $k => $v) return $v;
    }
}

function qin( $a ) {
    $in = '(';
    for ($i=0; $i < count($a); $i++) {
        if ($i > 0) $in .= ',';
        $in .= "'".$a[$i]."'";
    }
    $in .= ')';
    return $in;
}


function stripAttributes( $html, $emptyText='' ) {
    $find = ['&nbsp;', '’', '“', '”', 'o:p', '–'];
    $repl = ['', "'", '"', '"', 'p'. '-'];
    $html = preg_replace("/<([a-z][a-z0-9]*)[^>]*?(\/?)>/si",'<$1$2>', $html);
    $html = str_ireplace($find, $repl, $html);
    $html = strip_tags($html, ['p','a','br','ul','li','ol','sub','sup','strike','i','b','strong']);
    return (empty($html) ? $emptyText : $html);
}

function pp( $arr ) {
    echo '<pre>', print_r($arr), '</pre>';
}

function send_tracking_email( $html, $subject ) {
	$mail = new PHPMailer\PHPMailer\PHPMailer();
    $mail->IsSMTP();
    $mail->Mailer = "smtp";
    $mail->Host = "mail.smtp2go.com";
    $mail->Port = "2525"; // 8025, 587 and 25 can also be used. Use Port 465 for SSL.
    $mail->SMTPAuth = true;
    $mail->SMTPSecure = 'tls';
    $mail->Username = "accomods";
    $mail->Password = "dTZpM29jb3l3MjAw";

    $mail->From = 'admin@actiondriveneducation.com';
    $mail->FromName = 'Action Driven Education';
    $mail->AddAddress('awaldron@buildinmotion.com');
    $mail->AddReplyTo('admin@actiondriveneducation.com', 'Action Driven Education');

    $mail->isHTML(true);
    $mail->Subject = $subject;
    $mail->Body = $html;
    return !!$mail->Send();
}