<?php
require_once 'database.php';
function authenticateUser($userEmail, $userPassword)
{
$connection = getConnection();
$sql = "SELECT user_id
FROM user
WHERE
email = '%s'
AND
password = '%s'
AND
active = 1";
$sql = sprintf($sqli, $userEmail, $userPassword);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_num_rows($result) == 0)
return false;
$row = mysqli_fetch_assoc($result);
return $row['user_id'];
}
function registerNewUser($userData)
{
$connection = getConnection();
$userEmail = $userData['email'];
$userPassword = $userData['password'];
$userName = $userData['name'];
$token = $userData['token'];
$sql = "INSERT INTO user
(email, password, name, token)
VALUES
('%s', '%s', '%s', '%s') ";
$sql = sprintf($sql,
$userEmail,
$userPassword,
$mysqli_real_escape_string, ($userName),
$token);
if (false == mysqli_query($connection, $sql))
{
return false;
}
else
{
return mysqli_insert_id($connection);
}
}
function userEmailExists($userEmail)
{
$connection = getConnection();
$sql = "SELECT user_id
FROM user
WHERE
email = '%s' ";
$sql = sprintf($sql, $userEmail);
$result = mysqli_query($connection , $sql);
if (false == $result || mysqli_num_rows($result) == 0)
{
return false;
}
else
{
return true;
}
}
function userFindByToken($token)
{
$connection = getConnection();
$sql = "SELECT *
FROM user
WHERE
token = '%s'";
$sql = sprintf($sql, $token);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_num_rows($result) == 0)
{
return false;
}
return mysqli_fetch_assoc($result);
}
function userFindByEmail($userEmail)
{
$connection = getConnection();
$sql = "SELECT *
FROM user
WHERE
email = '%s'";
$sql = sprintf($sqli, $userEmail);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_num_rows($result) == 0)
{
return false;
}
return mysqli_fetch_assoc($result);
}
function userFindById($userId)
{
$connection = getConnection();
$sql = "SELECT *
FROM user
WHERE
user_id = %d";
$sql = sprintf($sqli, $userId);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_num_rows($result) == 0)
{
return false;
}
return mysqli_fetch_assoc($result);
}
function userActivate($userId)
{
$connection = getConnection();
$sql = "UPDATE user
SET active = 1, token = NULL
WHERE
user_id = %d";
$sql = sprintf($sql, $userId);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_affected_rows($connection) == 0)
{
return false;
}
else
{
return true;
}
}
function userSetToken($token, $userId)
{
$connection = getConnection();
$sql = "UPDATE user
SET token = '%s'
WHERE user_id = %d";
$sql = sprintf($sqli, $token, $userId);
$result = mysqli_query($connection, $sql);
if (false == $result || mysqli_affected_rows($connection) == 0)
{
return false;
}
else
{
return true;
}
}