<?php
ob_start();
?>

<?php include_once "include/default-values.php" ?>

<?php
if (!isset($_SESSION["username"]) || !isset($_SESSION["id"])) {
    header("Location: " . $siteroot . "login.php");
}
?>

<?php
$error_message = "";
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if ($_POST["button"] === "DELETE") {
        // sletning med id
        $id = $_SESSION["id"];
        $res = $db_con->query("DELETE FROM users WHERE ID = '$id'");
        $error = mysqli_error($db_con);
        $res = $db_con->query("SELECT * FROM users WHERE ID = '$id'");
        $row = $res->fetch_assoc();
        if ($row) {
            echo "<pre>";
            print_r($row);
            echo "</pre>";
        } else {
            if ($error) {
                $res = $db_con->query("SELECT * FROM users WHERE ID = '$id'");
                $row = $res->fetch_assoc();
                if (isset($row)) {
                    echo $error;
                } else {
                    session_destroy();
                    header("Location: " . $siteroot . "index.php");
                    exit();
                }
            } else {
                session_destroy();
                header("Location: " . $siteroot . "index.php");
                exit();
            }
        }
    } else if ($_POST["button"] === "save") {
        $id = $_SESSION["id"];
        $username = $_POST["username"];
        $password = $_POST["password"];
        $firstName = $_POST["firstName"];
        $lastName = $_POST["lastName"];
        $address = $_POST["address"];
        $zipCode = $_POST["zipCode"];
        $country = $_POST["country"];
        $email = $_POST["email"];
        $website = $_POST["website"];
        $res = $db_con->query("SELECT * FROM users WHERE username = '$username'");
        if ($res->num_rows === 0 || $username === $_SESSION["username"]) {
            try {
                $db_con->query("UPDATE users " .
                    "SET Username = '$username', Password = '$password', Firstname = '$firstName', Lastname = '$lastName', Address = '$address', Postcode = '$zipCode', Email = '$email', Website = '$website' " .
                    "WHERE ID = '$id'");
                $_SESSION["username"] = $username;
            } catch (Exception $e) {
                $error_message .= $e->getMessage();
            }
        } else {
            $error_message .= "Username already taken! \n";
        }
    }
}
?>

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>EDEA - My Account</title>
    <link rel="stylesheet" href="<?= $siteroot; ?>css/style.css">
    <link rel="stylesheet" href="<?= $siteroot; ?>css/forms.css">
    <link rel="stylesheet" href="<?= $siteroot; ?>css/account.css">
</head>

<body>

    <?php include "include/header.php"; ?>

    <main>
        <h1>Hej, <?= $_SESSION["username"] ?>.</h1>
        <?php
        $id = $_SESSION["id"];
        $res = $db_con->query("SELECT * FROM users WHERE ID = '$id'");
        $user = $res->fetch_assoc(); ?>
        <?php if (strlen($error_message) > 0) { ?>
            <pre class="error">ERROR! <?= $error_message ?></pre>
        <?php } ?>
        <form method="POST" id="inputs" class="disabled">
            <div class="input-data required">
                <input type="text" id="username" name="username" value="<?= $user["Username"] ?>" disabled required>
                <div class="underline"></div>
                <label for="username">Brugernavn</label>
            </div>
            <div class="input-data required">
                <input type="password" id="password" name="password" value="<?= $user["Password"] ?>" disabled required>
                <div class="underline"></div>
                <label for="password">Adgangskode</label>
            </div>
            <div class="input-data">
                <input type="text" id="firstName" name="firstName" value="<?= $user["Firstname"] ?>" disabled>
                <div class="underline"></div>
                <label for="firstName">Fornavn</label>
            </div>
            <div class="input-data">
                <input type="text" id="lastName" name="lastName" value="<?= $user["Lastname"] ?>" disabled>
                <div class="underline"></div>
                <label for="lastName">Efternavn</label>
            </div>
            <div class="input-data">
                <input type="text" id="address" name="address" value="<?= $user["Address"] ?>" disabled>
                <div class="underline"></div>
                <label for="address">Adresse</label>
            </div>
            <div class="input-data">
                <input type="number" id="zipCode" name="zipCode" min="0" max="32767" value="<?= $user["Postcode"] ?>" disabled>
                <div class="underline"></div>
                <label for="zipCode">Postnummer</label>
            </div>
            <div class="input-data">
                <input type="text" id="country" name="country" value="<?= $user["Country"] ?>" disabled>
                <div class="underline"></div>
                <label for="country">Land</label>
            </div>
            <div class="input-data required">
                <input type="email" id="email" name="email" value="<?= $user["Email"] ?>" disabled required>
                <div class="underline"></div>
                <label for="email">E-mail</label>
            </div>
            <div class="input-data">
                <input type="text" id="website" name="website" value="<?= $user["Website"] ?>" disabled>
                <div class="underline"></div>
                <label for="website">Website</label>
            </div>
            <div class="input-submit">
                <button class="btn-green" name="button" value="save">Acceptér Ændringer</button>
                <button class="btn-grey" name="button" value="cancel">Fortryd Ændringer</button>
                <button name="button" value="DELETE">Slet Bruger</button>
            </div>
        </form>
        <form method="POST" class="buttons">
            <button class="btn-yellow" id="editUser" name="button" value="EDIT">Rediger bruger</button>
            <button name="button" value="DELETE">Slet bruger</button>
        </form>
    </main>
    <?php include "include/footer.php"; ?>
    <script src="<?= $siteroot; ?>js/forms.js"></script>
    <script src="<?= $siteroot; ?>js/account.js"></script>
</body>

</html>