<?php 

class sql extends dbconn { public function __construct() { $this->initDBO();
}

function debug($str) {
	echo $str."<br />";
	exit;
}



public function add_user() {

    $db = $this->dblocal;
	    
     $username = $_REQUEST['username'];
    $password = $_REQUEST['cryptpass'];
	
	// delete user
	$result =  $db->prepare("DELETE FROM members WHERE user_name = '".$username."'");
	$result->execute();
  
//old broken func//	$result = mysql_query("INSERT INTO members SET user_name = '".$username."', user_passwd = OLD_PASSWORD('".$password."'), user_group = 'members'");
	$result =  $db->prepare("INSERT INTO members SET user_name = '".$username."', user_passwd = '".$password."', user_group = 'members'");
    $result->execute();
	if (!$result) {
		echo "*failed*|ERROR|query_failed: ".mysql_error();
		debug(mysql_error());
	} else {
		echo "OK|success|*success*";
	}
}

public function upgrade_user() {
    // do nothing
    echo "OK|success|*success*";
}

public function change_password() {
   $db = $this->dblocal;  
    // get vars
    $username         = mysql_real_escape_string($_REQUEST['username']);
    $newUsername     = (isset($_REQUEST['new_username'])&&!empty($_REQUEST['new_username']))?$_REQUEST['new_username']:$_REQUEST['username'];
    $newUsername     = mysql_real_escape_string($newUsername);
    $newPassword     = mysql_real_escape_string($_REQUEST['new_cryptpass']);
    
    // update password
    $result = $db->prepare("UPDATE members SET user_name = '".$newUsername."', user_passwd = '".$newPassword."' WHERE user_name = '".$username."'");
    $result->execute();
    if (!$result) {
        echo "*failed*|ERROR|query_failed: ".mysql_error();
        debug(mysql_error());
    } else {
        echo "OK|success|*success*";
    }
}


public function delete_user() { 
   $db = $this->dblocal; 
    // get vars
    $username = mysql_real_escape_string($_REQUEST['username']);
    
    // delete user
    $result = $db->prepare("DELETE FROM members WHERE user_name = '".$username."'");
    $result->execute();
    if (!$result) {
        echo "*failed*|ERROR|query_failed: ".mysql_error();
        debug(mysql_error());
    } else {
        echo "OK|success|*success*";
    }
}

public function expire_user() {
    delete_user();
}

public function check_user() {
 
 $db = $this->dblocal;
    if (!isset($_REQUEST['username'])) {
        echo "*failed*|ERROR|missing_username";
        return;
    }
  
    $username = mysql_real_escape_string($_REQUEST['username']);
    $result = $db->prepare("SELECT * FROM members WHERE user_name = '".$username."'");
    $result->execute();
    if (!$result) {
        echo "*failed*|ERROR|query_failed: ".mysql_error();
        debug(mysql_error());
    } else {
 $cnt[1] =  $result->fetchAll(PDO::FETCH_ASSOC);
 $cnt[2] =  $result->rowCount();
        if ($cnt[2] > 0) {
            echo "OK|found|*success*";
        } else {
            echo "*failed*|NOTOK|not_found";
        }
    }
    
}

 }
?>