<?php
include "general.php";
include "connect.php";
include 'sendmailclient.php';


function getFullname( $email,$domain)
{
 include "connect.php";
 $cnt ="";
 $query ="select fullname from plainmotorsinvestors where email='". $email ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
  
   mysqli_close($con);
   return "Database error please try again";
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	$cnt = $row['fullname'];
	//$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			




function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	

function Checklogin( $email,$domain,$password)
{
  //echo $password;
 $cnt ="";
 include "connect.php";
  $query ="select * from plainmotorsinvestors where email='". $email ."' and password ="."password('".$password."')". "and domain='".$domain."'";
//echo $query;

//exit();

if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
  var_dump( mysqli_error($con));
   echo "nosa";
    mysqli_close($con);
	//exit();
    return "-1";
	
    die();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt."nosa2";
//exit();
mysqli_close($con);
return $cnt;
die();
}			





function updateLastlogin( $email,$domain)
{
include "connect.php";
 $cnt ="";
 //$con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
    //echo mysqli_error($con);
    //mysqli_close($con);
    //return "-1";
    //die();
   //}
 $query ="update plainmotorsinvestors set lastlogin ='". date('Y-m-d H:i:s')."' where email='". $email ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
   
    mysqli_close($con);
    return "-1";
    die();
}

$cnt ="yes";
mysqli_close($con);
return $cnt;
die();
}			





function verifyuser($email,$domain)
{
 include "connect.php";
 $cnt ="";

 $query ="select mlock from plainmotorsinvestors where email='". $email ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  return "Database error please try again";
   mysqli_close($con);
   exit();
}
$smsprofile ="";
//echo "User balance cannot be retrived";
while($row = mysqli_fetch_array($result))
{
	$smsprofile = $row['mlock'];
	//return $cnt;
}

return $smsprofile;
}



function getphonenumber($email,$domain)
{
 include "connect.php";
 $cnt ="";

 $query ="select phonenumber from userlogin where email='". $email ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  return "Database error please try again";
   mysqli_close($con);
   exit();
}
$smsprofile ="";
//echo "User balance cannot be retrived";
while($row = mysqli_fetch_array($result))
{
	$smsprofile = $row['phonenumber'];
	//return $cnt;
}

return $smsprofile;
}



//**************************
//**************************
// end of function


 $email =$_POST["email"];   
 //echo $username ."<br>";
 $password =$_POST["password"];   
//echo $password." nosa<br>";//
 
date_default_timezone_set('Africa/Lagos'); 

 $response = Checklogin( $email,$domain,$password);



if ($response =="-1"){

     header('Location: login.php?err=1');
   die();
}

if ($response ==""){

     header('Location: login.php?err=2');
   die();
}
if ($response =="yes"){
      
	$response = updateLastlogin( $email,$domain);
     if ($response =="yes") 
	 {
	    $mlock = verifyuser( $email,$domain);
		$_SESSION['phone']=getphonenumber($email,$domain);
		$_SESSION['fullname'] = getFullname($email,$domain);
		$_SESSION['email'] =$email;
		
		if($mlock =="1")
		{
		 header('Location: login.php?err=100');
		// header('Location: /verifyuser.php');
		exit();
		}else{
		
        $rand = strtoupper(substr(uniqid(sha1(time())),0,4));
	    $_SESSION['clientlogin'] =$rand;
		
		
		$_SESSION['loginuser'] ="yes";
    $_SESSION['phone']=getphonenumber($email,$domain);
		$_SESSION['fullname'] = getFullname($email,$domain);
		$_SESSION['email'] =$email;
        header('Location: /dashboard/index.php');
		exit();
		}
	 }   
	 else
	 {
	    header('Location: login.php?err=1');
		
	  }
   die();
}


 
?>