index.php

<?php

// Start session
session_start();

// Create connection to database
include __DIR__ . "/config/database.php";

// Create Models
include __DIR__ . "/model/Customer.php";
include __DIR__ . "/model/Products.php";
include __DIR__ . "/model/Orders.php";

// Include the controller
require __DIR__ . '/controller/Controller.php';

// Initalise $userInfo
$userInfo = array();

if (isset($_SESSION["uid"])) {
    ReLogInUser(); 
}

// Check if Username is set in $userInfo and then set $username
if (isset($userInfo["Username"])) {
    $username = $userInfo["Username"];
}


// Routing
$request = $_SERVER['REQUEST_URI'];
$requestPath = parse_url($request, PHP_URL_PATH);

switch ($requestPath) {

    case '/':
    case '/home':
        handleHomeRequest();
        break;

    case '/aboutus':
        handleAboutUsRequest();
        break;

    case '/login':
        handleLoginRequest();
        break;

    case '/register':
        handleRegisterRequest();
        break;

    case '/logout':
        handleLogoutRequest();
        break;
    
    case '/contactpage':
        handleContactPageRequest();
        break;
    
    case '/basket':
        handleBasketPageRequest();
        break;
    
    case '/product':
        handleProductPageRequest();
        break;

    case '/products':
        handleProductsPageRequest();
        break;

    case '/add-to-basket':
        handleAddToBasketRequest();
        break;

    case '/update-basket':
        handleUpdateBasketRequest();
        break;
    
    case '/checkout':
        handleCheckoutPageRequest();
        break;

    case '/checkoutProcess':
        handleCheckoutProcessRequest();
        break;

    case '/orderSuccess':
        require __DIR__ . '/view/orderConfirmation.php';
        break;
    
    case '/orderFailed':
        require __DIR__ . '/view/orderFailed.php';
        break;

    case '/customer':
        handleCustomerPageRequest();
        break;
    
    case '/change-password':
        handleChangePasswordRequest();
        break;

    default:
        handle404Request();
        break;
}


/**
 * Handles home page requests
 * 
 * @return void
 */
function handleHomeRequest() {
    require __DIR__ . '/view/home.php';
}

/**
 * Handle about us page requests
 * 
 * @return void
 */
function handleAboutUsRequest() {
    require __DIR__ . '/view/aboutus.php';
}

/**
 * Handle login page requests
 * 
 * @return void
 */
function handleLoginRequest() {
    global $pdo;

    switch ($_SERVER['REQUEST_METHOD']) {

        // Display the login form for GET requests
        case 'GET':
            require __DIR__ . '/view/login.php';
            break;
        
        // Handle login form submission for POST requests
        case 'POST':
            
            $usernameOrEmail = $_POST['usernameOrEmail'];
            $password = $_POST['password'];

            $loginResult = AttemptLogin($usernameOrEmail, $password);

            // Send the user back to the homepage if login was successful
            if ($loginResult) {
                header("Location: /");
                exit();
            } else {
                // Display the login form with an error message if login failed
                require __DIR__ . '/view/login.php';
            }
    }

}

/**
 * Handle registration page requests
 * 
 * @return void
 */
function handleRegisterRequest() {
    global $pdo;

    switch ($_SERVER['REQUEST_METHOD']) {

        // Display the registration form for GET requests
        case 'GET':
            require __DIR__ . '/view/register.php';
            break;
        
        // Handle registration form submission for POST requests
        case 'POST':
            
            $registrationResult = RegisterUser($_POST);
            
            // Send the user back to the homepage if registration was successful
            if ($registrationResult === "") {
                header("Location: /");
                exit();
            } else {
                // Display the registration form with an error message if registration failed
                require __DIR__ . '/view/register.php';
            } 
    }
}

/**
 * Handle logout requests
 * 
 * @return void
 */
function handleLogoutRequest() {
    LogOut();
    header("Location: /");
    exit();
}
/**
 * Handle contact page requests
 * 
 * @return void
 */
function handleContactPageRequest() {
    require __DIR__ . '/view/contactspage.php';
}

/**
 * Handle 404 page requests
 * 
 * @return void
 */
function handle404Request() {
    http_response_code(404);
    require __DIR__ . '/view/404.php';
}

/**
* Handle requests to the product page
*
* @return void  
*/
function handleProductPageRequest() {
    global $Product;

    // Get the product ID from the URL parameter
    $productID = isset($_GET['productID']) ? intval($_GET['productID']) : 0;

    // Fetch product details based on the product ID
    $productDetails = GetProductByID($productID);

    // If the product is not found, handle it accordingly (e.g., redirect to 404)
    if (!$productDetails) {
        handle404Request();
        return;
    }

    // Include the productpage.php view and pass product details
    require __DIR__ . '/view/productpage.php';
}


/**
 * Handle requests to the products page
 * 
 * @return void
 */
function handleProductsPageRequest(){
   
    // Check if there is a Category in the URL
    $categoryName = isset($_GET['category']) ? $_GET['category'] : null;

    global $products;
    
    if ($categoryName) {
        $products = GetAllByCategory($categoryName);
    }

    if (!is_array($products)) {
        $products = GetAllProducts();
    }

    require __DIR__ . '/view/products.php';
}

/**
 * Handle requests to add a product to the basket
 *
 * @return void
 */
function handleAddToBasketRequest() {
    // Check if the user is logged in
    if (!isset($_SESSION['uid'])) {
        // Redirect to the login page if not logged in
        header("Location: /login");
        exit();
    }

    // Get the product ID and quantity from the POST request
    $productID = isset($_POST['productID']) ? intval($_POST['productID']) : 0;
    $quantity = isset($_POST['quantity']) ? intval($_POST['quantity']) : 1;

    // Add the product to the basket
    $addToBasketResult = AddProductToBasket($productID, $quantity);

    // Redirect to the basket page if the product was added successfully
    if ($addToBasketResult) {
        header("Location: /basket");
        exit();
    } else {
        // Redirect to the product page with an error message if the product could not be added
        header("Location: /basket");
        exit();
    }

}

/**
 * Handle requests to update the quantity of a product in the basket
 * 
 * @return void
 */
function handleUpdateBasketRequest() {
    // Check if the user is logged in
    if (!isset($_SESSION['uid'])) {
        // Redirect to the login page if not logged in
        header("Location: /login");
        exit();
    }

    // Get the product ID and quantity from the POST request
    $productID = isset($_POST['productID']) ? intval($_POST['productID']) : 0;
    $quantity = isset($_POST['quantity']) ? intval($_POST['quantity']) : 1;

    // Update the product in the basket
    $updateBasketResult = ModifyProductQuantityInBasket($productID, $quantity);

    // Redirect to the basket page if the product was updated successfully
    if ($updateBasketResult) {
        header("Location: /basket");
        exit();
    } else {
        // Redirect to the product page with an error message if the product could not be updated
        header("Location: /basket");
        exit();
    }
}

/**
* Handle requests to the basket
* 
* @return void
*/
function handleBasketPageRequest(){
    if (!isset($_SESSION['uid'])){
        header("Location:/");
    } else{
        require __DIR__ . '/view/basket.php';
    }
}

/**
 * handle requests to the checkout page
 * 
 * @return void
 */
function handleCheckoutPageRequest(){
    // Check if the user is logged in and if there are any items in the basket
    if (!isset($_SESSION['uid'])){
        header("Location:/");
    }
    $totalAmount = 0;

    $basketItems = GetCustomerBasket($totalAmount);

    if (!$basketItems) {
        header("Location:/");
    } else {
        require __DIR__ . '/view/checkout.php';
    }
}

/** 
 * Handle requests to the checkout process
 * 
 * @return void
 */
function handleCheckoutProcessRequest(){

    if (!isset($_SESSION['uid'])){
        header("Location:/");
    }

    $hasCheckedOut = CheckoutBasket();

    if (!$hasCheckedOut) {
        header("Location:/orderFailed");
    } else {
        header("Location:/orderSuccess");
    }
}

/**
 * Handle requests to the customer page
 * 
 * @return void
 */
function handleCustomerPageRequest(){
    // Check if the user is logged in
    if (!isset($_SESSION['uid'])){
        header("Location:/");
    } else {
        require __DIR__ . '/view/customer.php';
    }
}

/**
 * Handle requests to change the password
 * 
 * @return void
 */
function handleChangePasswordRequest(){
    // Check if the user is logged in
    if (!isset($_SESSION['uid'])){
        header("Location:/login");
    } 

    $currentPassword = isset($_POST['current_password']) ? $_POST['current_password'] : null;
    $newPassword = isset($_POST['new_password']) ? $_POST['new_password'] : null;
    $confirmNewPassword = isset($_POST['confirm_password']) ? $_POST['confirm_password'] : null;
    $passwordChangeResult = false;


    $updateArray = array(
        "field" => "password",
        "value" => $currentPassword,
        "newPassword" => $newPassword,
        "confirmPassword" => $confirmNewPassword
    );

    $result = UpdateCustomerDetail($updateArray);
    // Result is a string, if it is empty then the update was successful
    if ($result === "") {
        $passwordChangeResult = true;
        require __DIR__ . '/view/customer.php';
        return;
    } else {
        $passwordChangeResult = false;
        echo $result;
        print_r($updateArray);
        require __DIR__ . '/view/customer.php';
        return;
    }


}


?>