UserController.php

<?php

require_once("model/User.php");
require_once("model/Thread.php");
require_once("ViewHelper.php");


class UserController {

    private static $rules = [

        "username" => [
            "pattern" => "/^[a-zA-Z0-9_]{3,20}$/",
            "message" => "Username must be 3-20 characters and contain only letters, numbers, and underscores."
        ],
        "email" => [
            "pattern" => "/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/",
            "message" => "Please enter a valid email address."
        ],
        "password" => [
            "pattern" => "/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/",
            "message" => "Password must be at least 8 characters and include uppercase, lowercase, number, and special character."
        ]
    ];

    public static function login() {

        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
            ViewHelper::render("view/user/login.php", [], "view/layout/layout-no-navbar.php");
            return;
        }

        $username = trim($_POST["username"] ?? "");
        $password = $_POST["password"] ?? "";

        if ($username === "" || $password === "") {
            ViewHelper::render("view/user/login.php", [
                "error" => "Please enter your username/email and password.",
                "username" => $username
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        $user = User::verifyUser($username, $password);
        if ($user) {
            $_SESSION["user"] = $user;
            ViewHelper::redirect(BASE_URL);
        } else {
            ViewHelper::render("view/user/login.php", [
                "error" => "Invalid username/email or password.",
                "username" => $username
            ], "view/layout/layout-no-navbar.php");
        }
    }

    public static function register() {
        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {

            ViewHelper::render("view/user/register.php", [], "view/layout/layout-no-navbar.php");
            return;
        }

        $username = trim($_POST["username"] ?? "");
        $email = trim($_POST["email"] ?? "");
        $password = $_POST["password"] ?? "";

        if ($username === "" || $email === "" || $password === "") {
            ViewHelper::render("view/user/register.php", [
                "error" => "Please fill in all required fields.",
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        if (!preg_match(self::$rules["username"]["pattern"], $username)) {
            ViewHelper::render("view/user/register.php", [
                "error" => self::$rules["username"]["message"],
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        if (!preg_match(self::$rules["email"]["pattern"], $email)) {
            ViewHelper::render("view/user/register.php", [
                "error" => self::$rules["email"]["message"],
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        if (!preg_match(self::$rules["password"]["pattern"], $password)) {
            ViewHelper::render("view/user/register.php", [
                "error" => self::$rules["password"]["message"],
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        $existingUserByName = User::getUserByUsername($username);
        if ($existingUserByName) {
            ViewHelper::render("view/user/register.php", [
                "error" => "This username is already taken.",
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        $existingUserByEmail = User::getUserByEmail($email);
        if ($existingUserByEmail) {
            ViewHelper::render("view/user/register.php", [
                "error" => "This email is already registered.",
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
            return;
        }

        $user = User::createUser($username, $email, $password);
        if ($user) {
            ViewHelper::redirect(BASE_URL . "user/login");
        } else {
            ViewHelper::render("view/user/register.php", [
                "error" => "Unable to create account. Please try again.",
                "username" => $username,
                "email" => $email
            ], "view/layout/layout-no-navbar.php");
        }
    }

    public static function showProfile($qUsername) {
        if ($_SERVER['REQUEST_METHOD'] === 'GET' && isset($_GET["qUser"])) {
            $qUser = User::getUserByCredential($qUsername);
            if ($qUser) {
                $threads = array_filter(Thread::getAllThreads(), function ($t) use ($qUser) {
                    return (int)$t['user_id'] === (int)$qUser['id'];
                });

                $threadCount = count($threads);

                ViewHelper::render("view/user/profile.php", ["qUsername" => $qUsername, "threads" => $threads, "qUser" => $qUser, "threadCount" => $threadCount]);
            } else {
                ViewHelper::render("view/alert.php", ["type" => "danger", "heading" => "Invalid Profile", "message" => "The user profile you are trying to access does not exist."]);
            }
        } else {
            ViewHelper::render("view/alert.php", ["type" => "danger", "heading" => "Invalid Profile", "message" => "The user profile you are trying to access does not exist."]);
        }
    }

    public static function updateProfile() {
        if (!isset($_SESSION["user"])) {
            ViewHelper::redirect(BASE_URL . "user/login");
            return;
        }

        $user = User::getUserById($_SESSION["user"]["id"]);
        $error = "";
        $success = "";

        if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            if (isset($_POST["username"]) && isset($_POST["email"])) {
                $username = trim($_POST["username"] ?? "");
                $email = trim($_POST["email"] ?? "");

                if ($username === "" || $email === "") {
                    $error = "Please fill in all required fields.";
                } elseif (!preg_match(self::$rules["username"]["pattern"], $username)) {
                    $error = self::$rules["username"]["message"];
                } elseif (!preg_match(self::$rules["email"]["pattern"], $email)) {
                    $error = self::$rules["email"]["message"];
                } else {
                    $existingUserByName = User::getUserByUsername($username);
                    if ($existingUserByName && $existingUserByName["id"] != $_SESSION["user"]["id"]) {
                        $error = "This username is already taken.";
                    } else {
                        $existingUserByEmail = User::getUserByEmail($email);
                        if ($existingUserByEmail && $existingUserByEmail["id"] != $_SESSION["user"]["id"]) {
                            $error = "This email is already registered.";
                        } else {
                            $updated = User::updateUserProfile($_SESSION["user"]["id"], $username, $email);
                            if ($updated) {
                                $_SESSION["user"]["username"] = $username;
                                $_SESSION["user"]["email"] = $email;
                                $success = "Profile updated successfully!";
                                $user = User::getUserById($_SESSION["user"]["id"]);
                            } else {
                                $error = "Failed to update profile. Please try again.";
                            }
                        }
                    }
                }
            }

            if (isset($_POST["current_password"]) && isset($_POST["new_password"]) && isset($_POST["confirm_password"])) {
                $currentPassword = $_POST["current_password"] ?? "";
                $newPassword = $_POST["new_password"] ?? "";
                $confirmPassword = $_POST["confirm_password"] ?? "";

                if ($currentPassword === "" || $newPassword === "" || $confirmPassword === "") {
                    $error = "Please fill in all password fields.";
                } elseif (!preg_match(self::$rules["password"]["pattern"], $newPassword)) {
                    $error = self::$rules["password"]["message"];
                } else {
                    $passwordUpdated = User::updateUserPassword($_SESSION["user"]["id"], $currentPassword, $newPassword, $confirmPassword);
                    if ($passwordUpdated) {
                        $success = "Password updated successfully!";
                    } else {
                        $error = "Current password is incorrect or passwords do not match.";
                    }
                }
            }
        }

        ViewHelper::render("view/user/userSettings.php", [
            "user" => $user,
            "error" => $error,
            "success" => $success
        ]);
    }

    public static function logout() {
        session_unset();
        session_destroy();
        ViewHelper::redirect(BASE_URL);
    }

    public static function deleteAccount() {
        if (!isset($_SESSION["user"])) {
            ViewHelper::redirect(BASE_URL . "user/login");
            return;
        }

        $userId = $_SESSION["user"]["id"];
        $deleted = User::deleteUserById($userId);
        if ($deleted) {
            session_unset();
            session_destroy();
            ViewHelper::render("view/alert.php", ["type" => "success", "heading" => "Account Deleted", "message" => "Your account has been deleted successfully."]);
        } else {
            ViewHelper::render("view/alert.php", ["type" => "danger", "heading" => "Error", "message" => "Failed to delete account. Please try again."]);
        }
    }
}