<?php
	require_once "check_login.php";

	$row = SysCmsLogin::where('cmsloginid', '=', (int)$_POST["cmsloginid"])->first();

	$page_settings = array(
		'formid'     => 'Sys_cms_user', // for permission
		'section'    => 'System Setting', // parent/page title
		'subsection' => 'Admin Management', // page title
		'domain'     => 'sys_cms_user', // table/model name
		'access'     => 'GNr', // for permission
	);

	require_once 'function_auth.php';

	$cmsloginid    = (int)$_POST["cmsloginid"];
	$cms_user_info = SysCmsLogin::where('cmsloginid', '=', $_SESSION["cmsloginid"])->first();
	$message       = "";

	if ($row['cmsrole'] != 'user') {
		/*if (empty($_POST["username"])) {
			$message .= _lang("Please enter User Name.") . "\\n\\n";
		}
		*/
		if (empty($_POST["username"])) {
			$message .= _lang("Please enter Login Name.") . "\\n\\n";
		}

		if (!empty($message)) {
			echo "<script>alert('" . $message . "'); history.back();</script>";
			exit;
		}
	}


	if (strlen($_POST["loginpw"]) > 0) {
		$strength = Password::strength($_POST["loginpw"], $_POST["username"]);
		if (!$strength) {
			exit(_lang('Insufficient password strength'));
		}
		$cmsloginpw = Password::hash($_POST["loginpw"]);
	}
	$nowdate = date("Y-m-d H:i:s");

	$sql        = "SELECT * FROM sys_cms_login where cmsloginname = ? AND cmsloginid <> ? ";
	$parameters = array($_POST["loginname"], $_POST["cmsloginid"]);
	$result     = bind_pdo($sql, $parameters, "selectone");
	if (!empty($result)) {
		header("Location: sys_cms_user_index.php?msg=" . _lang("You have already been assigned a login name."));
		exit;
	}

	// Modify

	if (strlen($_POST["loginpw"]) > 0) {
		if ($row['cmsrole'] == 'user') {
			$sql        = "update sys_cms_login set lastupdate=?, lastupby=?, cmsloginpw=? where cmsloginid=?";
			$parameters = array($nowdate, $_SESSION["cmsloginid"], $cmsloginpw, $_POST["cmsloginid"]);
			bind_pdo($sql, $parameters);
		} else {
			$sql        = "update sys_cms_login set cmsusername=?, cmsloginname=?, cmsrole=?, lastupdate=?, lastupby=?, cmsloginpw=? where cmsloginid=?";
			$parameters = array(aes_crypt($_POST["username"], 1), aes_crypt($_POST["username"], 1), $_POST["role_level"], $nowdate, $_SESSION["cmsloginid"], $cmsloginpw, $_POST["cmsloginid"]);
			bind_pdo($sql, $parameters);

		}
	} else {
		if ($row['cmsrole'] == 'user') {
			$sql        = "update sys_cms_login set lastupdate=?, lastupby=? where cmsloginid=?";
			$parameters = array($nowdate, $_SESSION["cmsloginid"], $_POST["cmsloginid"]);
		} else {
			$sql        = "update sys_cms_login set cmsusername=?, cmsloginname=?, cmsrole=?, lastupdate=?, lastupby=? where cmsloginid=?";
			$parameters = array(aes_crypt($_POST["username"], 1), aes_crypt($_POST["username"], 1), $_POST["role_level"], $nowdate, $_SESSION["cmsloginid"], $_POST["cmsloginid"]);
		}
		bind_pdo($sql, $parameters);
	}

	header("Location: sys_cms_user_modifyform.php?cmsloginid=" . $_POST["cmsloginid"] . "&msg=2");