<?php
    require_once '../../includes/connect_endpoint.php';
    require_once '../../includes/inputvalidation.php';

    function update_exchange_rate($db) {
        $query = "SELECT api_key, provider FROM fixer WHERE user_id = :userId";
        $stmt = $db->prepare($query);
        $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
        $result = $stmt->execute();

        if ($result) {
            $row = $result->fetchArray(SQLITE3_ASSOC);
            
            if ($row) {
                $apiKey = $row['api_key'];
                $provider = $row['provider'];

                $codes = "";
                $query = "SELECT id, name, symbol, code FROM currencies";
                $result = $db->query($query);
                while ($row = $result->fetchArray(SQLITE3_ASSOC)) {
                    $codes .= $row['code'].",";
                }
                $codes = rtrim($codes, ',');

                $query = "SELECT u.main_currency, c.code FROM user u LEFT JOIN currencies c ON u.main_currency = c.id WHERE u.id = :userId";
                $stmt = $db->prepare($query);
                $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
                $result = $stmt->execute();
                $row = $result->fetchArray(SQLITE3_ASSOC);
                $mainCurrencyCode = $row['code'];
                $mainCurrencyId = $row['main_currency'];

                if ($provider === 1) {
                    $api_url = "https://api.apilayer.com/fixer/latest?base=EUR&symbols=" . $codes;
                    $context = stream_context_create([
                        'http' => [
                            'method' => 'GET',
                            'header' => 'apikey: ' . $apiKey,
                        ]
                    ]);
                    $response = file_get_contents($api_url, false, $context);
                } else {
                    $api_url = "http://data.fixer.io/api/latest?access_key=". $apiKey . "&base=EUR&symbols=" . $codes;
                    $response = file_get_contents($api_url);
                }

                $apiData = json_decode($response, true);

                $mainCurrencyToEUR = $apiData['rates'][$mainCurrencyCode];

                if ($apiData !== null && isset($apiData['rates'])) {
                    foreach ($apiData['rates'] as $currencyCode => $rate) {
                        if ($currencyCode === $mainCurrencyCode) {
                            $exchangeRate = 1.0;
                        } else {
                            $exchangeRate = $rate / $mainCurrencyToEUR;
                        }
                        $updateQuery = "UPDATE currencies SET rate = :rate WHERE code = :code AND user_id = :userId";
                        $updateStmt = $db->prepare($updateQuery);
                        $updateStmt->bindParam(':rate', $exchangeRate, SQLITE3_TEXT);
                        $updateStmt->bindParam(':code', $currencyCode, SQLITE3_TEXT);
                        $updateStmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
                        $updateResult = $updateStmt->execute();
                    }
                    $currentDate = new DateTime();
                    $formattedDate = $currentDate->format('Y-m-d');

                    $query = "SELECT * FROM last_exchange_update WHERE user_id = :userId";
                    $stmt = $db->prepare($query);
                    $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
                    $result = $stmt->execute();
                    $row = $result->fetchArray(SQLITE3_ASSOC);

                    if ($row) {
                        $query = "UPDATE last_exchange_update SET date = :formattedDate WHERE user_id = :userId";
                    } else {
                        $query = "INSERT INTO last_exchange_update (date, user_id) VALUES (:formattedDate, :userId)";
                    }

                    $stmt = $db->prepare($query);
                    $stmt->bindParam(':formattedDate', $formattedDate, SQLITE3_TEXT);
                    $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
                    $resutl = $stmt->execute();

                    $db->close();
                }
            } 
        }
    }

    $query = "SELECT main_currency FROM user WHERE id = :userId";
    $stmt = $db->prepare($query);
    $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);
    $result = $stmt->execute();
    $row = $result->fetchArray(SQLITE3_ASSOC);
    $mainCurrencyId = $row['main_currency'];

    function sanitizeFilename($filename) {
        $filename = preg_replace("/[^a-zA-Z0-9\s]/", "", $filename);
        $filename = str_replace(" ", "-", $filename);
        $filename = str_replace(".", "", $filename);
        return $filename;
    }

    function validateFileExtension($fileExtension) {
        $allowedExtensions = ['png', 'jpg', 'jpeg', 'gif', 'jtif', 'webp'];
        return in_array($fileExtension, $allowedExtensions);
    }

    function resizeAndUploadAvatar($uploadedFile, $uploadDir, $name) {        
        $targetWidth = 80;
        $targetHeight = 80;
    
        $timestamp = time();
        $originalFileName = $uploadedFile['name'];
        $fileExtension = strtolower(pathinfo($originalFileName, PATHINFO_EXTENSION));
        $fileExtension = validateFileExtension($fileExtension) ? $fileExtension : 'png';
        $fileName = $timestamp . '-avatars-' . sanitizeFilename($name) . '.' . $fileExtension;
        $uploadFile = $uploadDir . $fileName;
    
        if (move_uploaded_file($uploadedFile['tmp_name'], $uploadFile)) {
            $fileInfo = getimagesize($uploadFile);
    
            if ($fileInfo !== false) {
                $width = $fileInfo[0];
                $height = $fileInfo[1];
    
                // Load the image based on its format
                if ($fileExtension === 'png') {
                    $image = imagecreatefrompng($uploadFile);
                } elseif ($fileExtension === 'jpg' || $fileExtension === 'jpeg') {
                    $image = imagecreatefromjpeg($uploadFile);
                } elseif ($fileExtension === 'gif') {
                    $image = imagecreatefromgif($uploadFile);
                } elseif ($fileExtension === 'webp') {
                    $image = imagecreatefromwebp($uploadFile);
                } else {
                    // Handle other image formats as needed
                    return "";
                }
    
                // Enable alpha channel (transparency) for PNG images
                if ($fileExtension === 'png') {
                    imagesavealpha($image, true);
                }
    
                $newWidth = $width;
                $newHeight = $height;
    
                if ($width > $targetWidth) {
                    $newWidth = $targetWidth;
                    $newHeight = ($targetWidth / $width) * $height;
                }
    
                if ($newHeight > $targetHeight) {
                    $newWidth = ($targetHeight / $newHeight) * $newWidth;
                    $newHeight = $targetHeight;
                }
    
                $resizedImage = imagecreatetruecolor($newWidth, $newHeight);
                imagesavealpha($resizedImage, true);
                $transparency = imagecolorallocatealpha($resizedImage, 0, 0, 0, 127);
                imagefill($resizedImage, 0, 0, $transparency);
                imagecopyresampled($resizedImage, $image, 0, 0, 0, 0, $newWidth, $newHeight, $width, $height);
    
                if ($fileExtension === 'png') {
                    imagepng($resizedImage, $uploadFile);
                } elseif ($fileExtension === 'jpg' || $fileExtension === 'jpeg') {
                    imagejpeg($resizedImage, $uploadFile);
                } elseif ($fileExtension === 'gif') {
                    imagegif($resizedImage, $uploadFile);
                } elseif ($fileExtension === 'webp') {
                    imagewebp($resizedImage, $uploadFile);
                } else {
                    return "";
                }
    
                imagedestroy($image);
                imagedestroy($resizedImage);
                return "images/uploads/logos/avatars/".$fileName;
            }
        }
    
        return "";
    }

    if (isset($_SESSION['username']) && isset($_POST['email']) && $_POST['email'] !== "" 
        && isset($_POST['avatar']) && $_POST['avatar'] !== ""
        && isset($_POST['main_currency']) && $_POST['main_currency'] !== ""
        && isset($_POST['language']) && $_POST['language'] !== "") {
        
        $email = validate($_POST['email']);
        
        $query = "SELECT email FROM user WHERE id = :user_id";
        $stmt = $db->prepare($query);
        $stmt->bindValue(':user_id', $userId, SQLITE3_TEXT);
        $result = $stmt->execute();
        $user = $result->fetchArray(SQLITE3_ASSOC);
        
        $oldEmail = $user['email'];

        if ($oldEmail != $email) {
            $query = "SELECT email FROM user WHERE email = :email AND id != :userId";
            $stmt = $db->prepare($query);
            $stmt->bindValue(':email', $email, SQLITE3_TEXT);
            $stmt->bindValue(':userId', $userId, SQLITE3_INTEGER);
            $result = $stmt->execute();
            $otherUser = $result->fetchArray(SQLITE3_ASSOC);
            
            if ($otherUser) {
                $response = [
                    "success" => false,
                    "errorMessage" => translate('email_exists', $i18n)
                ];
                echo json_encode($response);
                exit();
            }
        }

        $avatar = $_POST['avatar'];
        $main_currency = $_POST['main_currency'];
        $language = $_POST['language'];

        if (! empty($_FILES['profile_pic']["name"])) {
            $file = $_FILES['profile_pic'];

            $fileType = mime_content_type($_FILES['profile_pic']['tmp_name']);
            if (strpos($fileType, 'image') === false) {
                $response = [
                    "success" => false,
                    "errorMessage" => translate('fill_all_fields', $i18n)
                ];
                echo json_encode($response);
                exit();
            }
            $name = $file['name'];
            $avatar = resizeAndUploadAvatar($_FILES['profile_pic'], '../../images/uploads/logos/avatars/', $name);
        }

        if (isset($_POST['password']) && $_POST['password'] != "") {
            $password = $_POST['password'];
            if (isset($_POST['confirm_password'])) {
                $confirm = $_POST['confirm_password'];
                if ($password != $confirm) {
                    $response = [
                        "success" => false,
                        "errorMessage" => translate('passwords_dont_match', $i18n)
                    ];
                    echo json_encode($response);
                    exit();
                }
            } else {
                $response = [
                    "success" => false,
                    "errorMessage" => translate('passwords_dont_match', $i18n)
                ];
                echo json_encode($response);
                exit();
            }
        }

        if (isset($_POST['password']) && $_POST['password'] != "") {
            $sql = "UPDATE user SET avatar = :avatar, email = :email, password = :password, main_currency = :main_currency, language = :language WHERE id = :userId";
        } else {
            $sql = "UPDATE user SET avatar = :avatar, email = :email, main_currency = :main_currency, language = :language WHERE id = :userId";
        }
        
        $stmt = $db->prepare($sql);
        $stmt->bindParam(':avatar', $avatar, SQLITE3_TEXT);
        $stmt->bindParam(':email', $email, SQLITE3_TEXT);
        $stmt->bindParam(':main_currency', $main_currency, SQLITE3_INTEGER);
        $stmt->bindParam(':language', $language, SQLITE3_TEXT);
        $stmt->bindParam(':userId', $userId, SQLITE3_INTEGER);

        if (isset($_POST['password']) && $_POST['password'] != "") {
            $hashedPassword = password_hash($password, PASSWORD_DEFAULT);
            $stmt->bindParam(':password', $hashedPassword, SQLITE3_TEXT);
        }

        $result = $stmt->execute();

        if ($result) {
            $cookieExpire = time() + (30 * 24 * 60 * 60);
            $oldLanguage = isset($_COOKIE['language']) ? $_COOKIE['language'] : "en";
            $root = str_replace('/endpoints/user', '', dirname($_SERVER['PHP_SELF']));
            $root = $root == '' ? '/' : $root;
            setcookie('language', $language, $cookieExpire, $root);
            $_SESSION['avatar'] = $avatar;
            $_SESSION['main_currency'] = $main_currency;

            if ($main_currency != $mainCurrencyId) {
                update_exchange_rate($db);
            }

            $reload = $oldLanguage != $language;

            $response = [
                "success" => true,
                "message" => translate('user_details_saved', $i18n),
                "reload"  => $reload
            ];
            echo json_encode($response);
        } else {
            $response = [
                "success" => false,
                "errorMessage" => translate('error_updating_user_data', $i18n)
            ];
            echo json_encode($response);
        }

        exit();
    } else {
        $response = [
            "success" => false,
            "errorMessage" => translate('fill_all_fields', $i18n)
        ];
        echo json_encode($response);
        exit();
    }
?>