php-personal/backend/users/index.php

<?php

class Post {
  //db backend stuff
  private $conn;
  private $table = 'users';

  //post properties
  public $id;
  public $rol;
  public $name;
  public $password;
  public $softDelete;
  public $createdAt;
  public $identify;
  public $hash;

  //constructor with db connection
  public function __construct($db) {
    $this->conn = $db;
  }

  //create user
  public function create() {
    $query = '';
    //create query
    $query .= 'INSERT INTO ';
    $query .= "{$this->table} ";
    $query .= 'SET ';
    $query .= 'rol = :rol, ';
    $query .= 'name = :name, ';
    $query .= 'password = :password ';
    //prepare statement
    $stmt = $this->conn->prepare($query);
    //clean data
    $this->rol = htmlspecialchars(strip_tags($this->rol));
    $this->name = htmlspecialchars(strip_tags($this->name));
    $this->password = htmlspecialchars(strip_tags($this->password));

    //sha512 will be build in the client
    $security_database_password = crypt($this->password, '$6$');

    //binding of parameters
    $stmt->bindParam(':rol', $this->rol);
    $stmt->bindParam(':name', $this->name);
    $stmt->bindParam(':password', $security_database_password);
    //execute the query
    if ($stmt->execute()) {
      return true;
    }

    //print error if something goes wrong
    printf("Error %s. \n", $stmt->error);
    return false;
  }

  //read users
  public function read() {
    $query =  '';
    //create query
    $query .= 'SELECT ';
    $query .= 'id, ';
    $query .= 'rol, ';
    $query .= 'name, ';
    $query .= 'password, ';
    $query .= 'softDelete, ';
    $query .= 'createdAt ';
    $query .= "FROM {$this->table} ";
    $query .= 'ORDER BY ';
    $query .= 'createdAt DESC';

    //prepare statement
    $stmt = $this->conn->prepare($query);
    //execute query
    $stmt->execute();

    return $stmt;
  }

  //update users
  public function update_rol() {
    $query = '';
    //update query
    $query .= 'UPDATE ';
    $query .= "{$this->table} ";
    $query .= 'SET ';
    $query .= 'rol = :rol ';
    $query .= 'WHERE id = :id ';
    //prepare statement
    $stmt = $this->conn->prepare($query);
    //clean data
    $this->id = htmlspecialchars(strip_tags($this->id));
    $this->rol = htmlspecialchars(strip_tags($this->rol));

    //binding of parameters
    $stmt->bindParam(':id', $this->id);
    $stmt->bindParam(':rol', $this->rol);

    //execute the query
    if ($stmt->execute()) {
      return true;
    }

    //print error if something goes wrong
    printf("Error %s. \n", $stmt->error);
    return false;
  }

  public function update_softDelete() {
    $query = '';
    //update query
    $query .= 'UPDATE ';
    $query .= "{$this->table} ";
    $query .= 'SET ';
    $query .= 'softDelete = :softDelete ';
    $query .= 'WHERE id = :id ';
    //prepare statement
    $stmt = $this->conn->prepare($query);
    //clean data
    $this->id = htmlspecialchars(strip_tags($this->id));
    $this->softDelete = htmlspecialchars(strip_tags($this->softDelete));

    //binding of parameters
    $stmt->bindParam(':id', $this->id);
    $stmt->bindParam(':softDelete', $this->softDelete);

    //execute the query
    if ($stmt->execute()) {
      return true;
    }

    //print error if something goes wrong
    printf("Error %s. \n", $stmt->error);
    return false;
  }

  //update password users
  public function update_password() {
    $query = '';
    //update query
    $query .= 'UPDATE ';
    $query .= "{$this->table} ";
    $query .= 'SET ';
    $query .= 'password = :password ';
    $query .= 'WHERE id = :id ';
    //prepare statement
    $stmt = $this->conn->prepare($query);
    //clean data
    $this->id = htmlspecialchars(strip_tags($this->id));
    $this->password = htmlspecialchars(strip_tags($this->password));

    //sha512 will be build in the client
    $security_database_password = crypt($this->password, '$6$');

    //binding of parameters
    $stmt->bindParam(':id', $this->id);
    $stmt->bindParam(':password', $security_database_password);

    //execute the query
    if ($stmt->execute()) {
      return true;
    }

    //print error if something goes wrong
    printf("Error %s. \n", $stmt->error);
    return false;
  }

  //soft delete user
  public function soft_delete() {
    $query = '';
    //soft delete query
    $query .= 'UPDATE ';
    $query .= "{$this->table} ";
    $query .= 'SET ';
    $query .= 'softDelete = :softDelete ';
    $query .= 'WHERE id = :id ';
    //prepare statement
    $stmt = $this->conn->prepare($query);
    //clean data
    $this->id = htmlspecialchars(strip_tags($this->id));
    $this->softDelete = htmlspecialchars(strip_tags($this->softDelete));
    //binding of parameters
    $stmt->bindParam(':id', $this->id);
    $stmt->bindParam(':softDelete', $this->softDelete);
    //execute the query
    if ($stmt->execute()) {
      return true;
    }

    //print error if something goes wrong
    printf("Error %s. \n", $stmt->error);
    return false;
  }

  //user identification
  public function identify() {
    $query =  '';
    //create query
    $query .= 'SELECT ';
    $query .= 'name, ';
    $query .= 'password, ';
    $query .= 'softDelete ';
    $query .= "FROM {$this->table} ";
    $query .= 'WHERE name = ? ';

    //prepare statement
    $stmt = $this->conn->prepare($query);
    //binding param
    $stmt->bindParam(1, $this->identify);
    //execute query
    $stmt->execute();

    $row = $stmt->fetch(PDO::FETCH_ASSOC);

    if (!is_array($row)) {
      return false;
    }

    if ($row['softDelete'] == 1) {
      return false;
    }

    if (hash_equals($row['password'], crypt($this->hash, $row['password']))) {
      return true;
    }

    return false;
  }

  //is duplicate user
  public function is_new_user() {
    $query =  '';
    //create query
    $query .= 'SELECT ';
    $query .= 'name ';
    $query .= "FROM {$this->table} ";
    $query .= 'WHERE name = ? ';

    //prepare statement
    $stmt = $this->conn->prepare($query);
    //binding param
    $stmt->bindParam(1, $this->name);
    //execute query
    $stmt->execute();

    $row = $stmt->fetch(PDO::FETCH_ASSOC);

    if (!is_array($row)) {
      return true;
    }

    if ($row['name']) {
      return false;
    }

    return false;
  }

  //is super user
  public function is_super_user() {
    $query =  '';
    //create query
    $query .= 'SELECT ';
    $query .= 'rol, ';
    $query .= 'softDelete ';
    $query .= "FROM {$this->table} ";
    $query .= 'WHERE name = ? ';

    //prepare statement
    $stmt = $this->conn->prepare($query);
    //binding param
    $stmt->bindParam(1, $this->identify);
    //execute query
    $stmt->execute();

    $row = $stmt->fetch(PDO::FETCH_ASSOC);

    if (!is_array($row)) {
      return false;
    }

    if ($row['softDelete'] == 1) {
      return false;
    }

    if ($row['rol'] == 1) {
      return false;
    }

    return true;
  }

  //read single user
  public function read_single() {
    $query =  '';
    //create query
    $query .= 'SELECT ';
    $query .= 'id, ';
    $query .= 'rol, ';
    $query .= 'name, ';
    $query .= 'password, ';
    $query .= 'softDelete, ';
    $query .= 'createdAt ';
    $query .= "FROM {$this->table} ";
    $query .= 'WHERE id = ? ';

    //prepare statement
    $stmt = $this->conn->prepare($query);
    //binding param
    $stmt->bindParam(1, $this->id);
    //execute query
    $stmt->execute();

    $row = $stmt->fetch(PDO::FETCH_ASSOC);

    $this->rol = $row['rol'];
    $this->name = $row['name'];
    $this->softDelete = $row['softDelete'];

    return $stmt;
  }

}

?>