<?php

function login( $user="", $pass="" ) {
	global $_REQUEST;

	if ( !session_id() ) {
	   session_start();
	}
	
	if ( !empty( $user ) && !empty( $pass ) ) {
		$result = mysql_query( "SELECT * FROM users WHERE users.name = '$user' AND users.password = SHA1('$pass') LIMIT 1;" );
		
		if ( mysql_num_rows( $result ) > 0 ) {
			$_SESSION['bit_user'] = $user;
			
			// TODO: Dynamic URL
			if ( !$_REQUEST['ajax'] ) {
				header("Location: /");
				exit(0);
			} else {
				return true;
			}
		}
	}
	
	// TODO: Error Redirect
	echo "Error";
	exit(0);
}

function logout() {
	if ( !session_id() ) {
	   session_start();
	}
	session_unset();
	session_destroy();
	
	// TODO: Dynamic URL
	if ( !$_REQUEST['ajax'] ) {
		header("Location: /");
		exit(0);
	}
}

function loggedin() {
	if ( !session_id() ) {
	   session_start();
	}
	return !empty( $_SESSION['bit_user'] );
}

function can_register() {
	global $conf;
	return $conf['site.register'] == 'multiple' && !loggedin();
}

function get_profile() {
	global $profile;
	
	if ( empty( $profile ) ) {
		reload_profile();
	}
	
	return $profile;
}

function reload_profile() {
	global $profile;
	$user = array_key_exists('bit_user', $_SESSION) ? $_SESSION['bit_user'] : '';
	$query = mysql_query( "SELECT * FROM users WHERE users.name = '" . $user . "' LIMIT 1;" );
	$profile = mysql_fetch_assoc($query);
	$profile['password'] = '';
}

function get_profile_timezone() {
	global $conf, $timezones;

	$profile = get_profile();

	if (array_key_exists('timezone', $profile)
	&&  array_key_exists($profile['timezone'], $timezones)) {
		return $timezones[$profile['timezone']];
	}
	
	return $timezones[$conf['site.tz']];
}

function is_admin() {
	$tmp_profile = get_profile();
	return $tmp_profile['is_admin'] == '1';
}

?>