<?php
/**
 * Copyright (C) 2013 nZEDb
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
require_once realpath(dirname(dirname(dirname(__DIR__))) . DIRECTORY_SEPARATOR . 'bootstrap.php');

use nntmux\db\Settings;
use nntmux\ColorCLI;
use nntmux\Users;

$colorCLI = new ColorCLI();

$warning = <<<WARNING
This script will (re)set the password hashes for older hashes,
before the change of hashing mchanism, with the user's email
..as the new password.
  It is intended for use ONLY if you have a *lot* of users, as this is not
secure (a user's email addresses may be known to other users). If you only have
a few users then run setUsersPasswordHash.php for each of them instead.
WARNING;
$usage = "\nUsage: php {$argv[0]} <IUnderStandTheRisks>";

echo $colorCLI->warning($warning);
if ($argc != 2) {
	exit($colorCLI->error("\nWrong number of parameters$usage"));
} else if ($argv[1] !== 1 && $argv[1] != '<IUnderStandTheRisks>' && $argv[1] != 'IUnderStandTheRisks' && $argv[1] != 'true') {
	exit($colorCLI->error("\nInvalid parameter(s)$usage"));
}

$pdo = new Settings();

$users = $pdo->query("SELECT id, username, email, password FROM users");
$update = $pdo->Prepare('UPDATE users SET password = :password WHERE id = :id');

$Users = new Users(['Settings' => $pdo]);

foreach ($users as $user) {
	if (needUpdate($user)) {
		$hash = $Users->hashPassword($user['email']);
		if ($hash !== false) {
			$update->execute([':password' => $hash, ':id' => $user['id']]);
			echo $colorCLI->primary('Updating hash for user:') . $user['username'];
		} else {
			echo $colorCLI->error('Error updating hash for user:') . $user['username'];
		}
	}
}

function needUpdate($user)
{
	global $colorCLI;
	$status = true;
	if (empty($user['email'])) {
		$status = false;
		echo $colorCLI->error('Cannot update password hash - Email is not set for user: ' . $user['username']);
	} else if (preg_match('#^\$.+$#', $user['password'])) {
		$status = false;
		echo $user['username'] . $colorCLI->primary(' is already using new style hash ;-)');
	}
	return $status;
}