<?php
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");
header("Content-Type: application/json");

$conn = require(__DIR__ . '/../utils/bd.php');
$param = json_decode(file_get_contents('php://input'));

function generateRandomPassword($length = 16) {
    $characters = 'ABCDEFGHI@JKLMNPQRSTUVWabcdeefghjkmnpqrstuvwwxyzXYZ123456789';
    $charactersLength = strlen($characters);
    $password = '';
    for ($i = 0; $i < $length; $i++) {
        $password .= $characters[random_int(0, $charactersLength - 1)];
    }
    return $password;
}

if (isset($param->name)) {
    try {
        $date            = date("Y-m-d");
        $identifiant     = time();
        $text            = $identifiant . $param->name;
        $passwordgenerated = generateRandomPassword(16);
        $cle_secrete     = hash('sha256', $text);
        $password        = sha1($passwordgenerated);
        $password_backoffice = sha1("1234");

        $req = $conn->prepare("INSERT INTO `users`(`identifiant`, `email`, `cle_secrete`, `nom_entreprise`, `password`, `password_backoffice`, `firstuse`, `accessLevel`) VALUES (:identifiant, :email, :cle_secrete, :nom_entreprise, :password, :password_backoffice, :firstuse, :accessLevel)");
        $status = $req->execute(array(
            ':identifiant'        => $identifiant,
            ':email'              => $param->email,
            ':cle_secrete'        => $cle_secrete,
            ':nom_entreprise'     => $param->name,
            ':password'           => $password,
            ':password_backoffice'=> $password_backoffice,
            ':firstuse'           => 0,
            ':accessLevel'        => $param->accessLevel
        ));

        $lastId = $conn->lastInsertId();

        if ($status) {
            $trueIdentifiant = $lastId . $identifiant;
            $req = $conn->prepare("UPDATE `users` SET `identifiant`=:identifiant WHERE `id`=:id");
            $req->execute(array(':identifiant' => $trueIdentifiant, ':id' => $lastId));

            if ($req->rowCount() > 0) {
                $req = $conn->prepare("INSERT INTO `soldes`(`identifiant`, `nom_entreprise`, `solde_client`, `solde_megalink`) VALUES (:identifiant, :nom_entreprise, :solde_client, :solde_megalink)");
                $req->execute(array(':identifiant' => $trueIdentifiant, ':nom_entreprise' => $param->name, ':solde_client' => 0, ':solde_megalink' => 0));

                foreach (['wave', 'orange money'] as $service) {
                    foreach (['in', 'out'] as $typeop) {
                        $req = $conn->prepare("INSERT INTO `commissionnement`(`identifiant`, `nom_entreprise`, `service`, `typeop`, `taux`) VALUES (:identifiant, :nom_entreprise, :service, :typeop, :taux)");
                        $req->execute(array(':identifiant' => $trueIdentifiant, ':nom_entreprise' => $param->name, ':service' => $service, ':typeop' => $typeop, ':taux' => 4.5));
                    }
                }

                echo json_encode(array("status" => "ok", "message" => "Création de compte réussie", "password" => $passwordgenerated));
            } else {
                echo json_encode(array("status" => false, "message" => "Échec de la mise à jour de l'identifiant"));
            }
        } else {
            echo json_encode(array("status" => false, "message" => "Échec de la création du compte"));
        }
    } catch (Exception $e) {
        echo json_encode(array("status" => false, "message" => "Problème de connexion à la base de données: " . $e->getMessage()));
    }
} else {
    echo json_encode(array("status" => false, "message" => "Le champ 'name' est obligatoire"));
}