<?php
session_start();
include_once('../includes/db_connect.php');
include_once "../includes/swiftmailer/swift_required.php";
//header("Content-Type:application/json");
$now = date('Y-m-d H:i:s');
$today = date('Y-m-d');
// if(isset($_SESSION["@BMTECH#ADM"])){
//  $email = $_SESSION["@BMTECH#ADM"];
//  $chkuser = mysqli_query($con,"SELECT * FROM users WHERE email='$email'");
//   while($row = mysqli_fetch_assoc($chkuser)){
//   $uid = $row["id"];
//   }


/*<======User Management=========>*/
if(isset($_POST["yname1"])){
 $fname = trim(mysqli_real_escape_string($con, $_POST["yname"]));
 $email = trim(mysqli_real_escape_string($con, $_POST["email"]));
 $pass = trim(mysqli_real_escape_string($con, $_POST["pass"]));
 $pwd = hash("sha256",md5($pass));

  if(mysqli_num_rows(mysqli_query($con,"SELECT * FROM students WHERE email='$email'")) < 1){
  if(mysqli_query($con,"INSERT INTO students(name,email,password) VALUES('$fname','$email','$pwd')")){
   $link = "https://www.elearning.breakthroughuni.ac.ke/login";
   $notif = mysqli_fetch_assoc(mysqli_query($con,"SELECT * FROM notification_templates WHERE id='7'"));
//   $mail->Subject = $notif["subject"];
//   $mail->Body = str_replace(array("{name}","{account}","{email}","{password}","{link}"),array($fname,"1",$email,$pass,$link),$notif["body"]);
//   $mail->AddAddress($email,$fname);
//   if($mail->Send()){
    //send email
$transport = Swift_SmtpTransport::newInstance('breakthroughuni.ac.ke', 465, "ssl")
->setUsername('notification@breakthroughuni.ac.ke')
->setPassword('notif2019!');

$mailer = Swift_Mailer::newInstance($transport);
$message = Swift_Message::newInstance($notif["subject"])
->setFrom(array('notification@breakthroughuni.ac.ke' => 'Open University'))
->setTo(array($email => $fname))
->setContentType('text/html; charset=utf-8')
->setBody(str_replace(array("{name}","{account}","{email}","{password}","{link}"),array($fname,"1",$email,$pass,$link),$notif["body"]));
$numSent = $mailer->send($message);
    echo "success"; //json_encode(array('status' => 200,'message' => "SUCCESS"));
 //   }
   }
  else{
   echo "invalid";// json_encode(array('status' => 300,'message' => 'ERROR'));
   }
  }
  else{
   echo json_encode(array('status' => 401,'message' => 'EXIST'));
   }

  }

/*<=======Delete User=========>*/
if(isset($_POST["deluser"])){
  $id = trim(mysqli_real_escape_string($con, $_POST["deluser"]));
  if(mysqli_query($con,"DELETE FROM users WHERE id = '$id'")){
    echo json_encode(array('status' => 200,'message' => 'SUCCESS'));
  }
  else{
    echo json_encode(array('status' => 300,'message' => 'ERROR'));
   }
  }
//}
?>