<?php

class DBEngine
{
var $link;
var $result;

function Connect()
{
$link = mysql_connect("localhost", "root", "cubahack001");

if(!$link)
print("Error connecting to the database<br/>");

mysql_select_db("sms");

return $link;
}

function Close()
{
mysql_close();
}

        /*
         * User Class
         */
function ValidateUserCredentials($username, $password)
{
$username = addslashes($username);
$password = addslashes($password);

$result = mysql_query("SELECT * from user WHERE username=\"" . $username . "\" and password=\"" . $password . "\"");

if($result)
{
if(mysql_num_rows($result) > 0)
{
return true;
}
else
return false;
}
return -1;
}

function IsUserActive($username)
{
$username = addslashes($username);

$result = mysql_query("SELECT active from user WHERE username=\"" . $username . "\"");

if($result)
{
if(mysql_num_rows($result) > 0)
{
$row = mysql_fetch_assoc($result);
return ($row["active"] == 1);
}
else
return -1;
}
return -1;
}

function GetUserByUsername($username)
{
$username = addslashes($username);

$result = mysql_query("SELECT * from user WHERE username=\"" . $username . "\"");

if($result)
{
if(mysql_num_rows($result) > 0)
{
$row = mysql_fetch_assoc($result);
return $row;
}
else
return -1;
}
return -1;
}

        function InsertUser($name, $secondName, $lastName, $email, $credit, $active, $username, $password)
        {
$name = addslashes($name);
$secondName = addslashes($secondName);
$lastName = addslashes($lastName);
$email = addslashes($email);
$username = addslashes($username);
$password = addslashes($password);

if(!is_numeric($credit)) return false;
if(!is_numeric($active) && !is_bool($active)) return false;

$sql = "INSERT INTO user (name, second_name, last_name, email, credit, active, username, password) VALUES " .
"('" . $name  . "', " .
"'" . $secondName . "', " .
"'" . $lastName . "', " .
"'" . $email . "', " .
"" . $credit . ", " .
"" . $active . ", " .
"'" . $username . "', " .
"'" . $password . "')";
mysql_query($sql);
return (mysql_affected_rows() > 0);
        }

        function UpdateUser($id, $name, $secondName, $lastName, $email, $credit, $active, $username, $password)
        {
$name = addslashes($name);
$secondName = addslashes($secondName);
$lastName = addslashes($lastName);
$email = addslashes($email);
$username = addslashes($username);
$password = addslashes($password);

            if(!is_numeric($id)) return false;
if(!is_numeric($credit)) return false;
if(!is_numeric($active) && !is_bool($active)) return false;

$sql = "UPDATE user SET ".
"name=\"" . $name . "\", " .
"second_name=\"" . $secondName .  "\", " .
"last_name=\"" . $lastName . "\", " .
"email=\"" . $email . "\", " .
"credit=" . $credit . ", " .
"active=" . $active . ", " .
"username=\"" . $username . "\", " .
"password=\"" . $password . "\" " .
                "WHERE id=" . $id;

mysql_query($sql);
return (mysql_affected_rows() > 0);
        }

        /*
         * Rate Class
         */
function GetRateByCode($code)
{
$code = addslashes($code);

$result = mysql_query("SELECT * from rate WHERE code=" . $code . "");

if($result)
{
if(mysql_num_rows($result) > 0)
{
$row = mysql_fetch_assoc($result);
return $row;
}
else
return -1;
}
return -1;
}

function GetRateCodes()
{
            $i = 0;
$codes = "";

$result = mysql_query("SELECT code from rate");

if($result)
{
    while ($row = mysql_fetch_assoc($result))
                {
    $codes[$i] = $row["code"];
                    $i++;
                }
                return $codes;
}
return -1;
}
}

?>

-- phpMyAdmin SQL Dump
-- version 2.10.3
-- http://www.phpmyadmin.net
--
-- Host: localhost
-- Generation Time: Nov 12, 2011 at 07:36 PM
-- Server version: 5.0.51
-- PHP Version: 5.2.6

SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";

--
-- Database: `sms`
--

-- --------------------------------------------------------

--
-- Table structure for table `user`
--

CREATE TABLE `user` (
  `id` varchar(20) NOT NULL,
  `name` varchar(20) NOT NULL,
  `second_name` varchar(20) NOT NULL,
  `last_name` varchar(20) NOT NULL,
  `email` varchar(20) NOT NULL,
  `credit` varchar(20) NOT NULL,
  `username` varchar(20) NOT NULL,
  `password` varchar(20) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

--
-- Dumping data for table `user`
--