<?php

class ValidationException extends Exception {}

class InsideDatabaseException extends Exception {}

/* Username based on firstname and lastname, max 12 chars */
function generate_username($data) {
    $firstname = preg_replace('/[^\w]/', '', $data['firstname']);
    $firstname = substr(strtolower($firstname), 0, 5);

    $lastname = preg_replace('/[^\w]/', '', $data['lastname']);
    $lastname = substr(strtolower($lastname), 0, 2);
    $rand = substr(uniqid("", true), -5);

    return $firstname.$lastname.$rand;
}
if( !function_exists('hash_ldap_password') ) {
    function hash_ldap_password($raw_password) {
        $salt = openssl_random_pseudo_bytes(4);
        return '{SSHA}' . base64_encode(sha1( $raw_password.$salt, TRUE ). $salt);
    }
}
function update_card_with_user($phone, $activation_code, $user_id) {
    global $conn;

    $sql = "UPDATE din_card SET user_id=$user_id,owner_phone_number=NULL WHERE owner_phone_number='$phone' AND card_number=$activation_code";
    $res = $conn->query($sql);
    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
}

function add_user($data, $source) {
    global $conn;

    /* User table  */
    $phone = $data['phone']; // used later
    unset($data['phone']);
    $activation_code = isset($data['activation_code']) ? $data['activation_code'] : null;
    unset($data['activation_code']);
    unset($data['user_id']);

    /* Add our own initial values */
    $data['username'] = generate_username($data);
    $data['source'] = $source;
    $data['registration_status'] = "partial";

    /* Membership expiry */
    /* One year from today (default) */
    if( !isset($data['purchased']) ) {
        $data['purchased'] = date_create();
    }
    /* ...or one year from specified date */
    $data['expires'] = date_format(date_modify($data['purchased'], "+1 year"), "Y-m-d");
    unset($data['purchased']); // dont save purchase date

    /* Trial membership (special case, ignored if not in autumn) */
    $in_autumn = intval(date("n")) >= 8 && intval(date("n")) <= 12;
    if( isset($data['membership_trial']) && $in_autumn) {
        $data['expires'] = date_format(date_create("first day of january next year"), "Y-m-d");
    }

    $cols = array_keys($data);
    $values = array_values($data);

    // FIXME: Decode UTF-8 values... why?
    $values = array_map("utf8_decode", $values);

    $sth = $conn->autoPrepare("din_user", $cols, DB_AUTOQUERY_INSERT);
    $res = $conn->execute($sth, $values);

    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }

    $user_id = get_user_id_by_username($data['username']);

    /* Phonenumber table */
    $validated_sources = array('snapporder', 'sms');
    $phone_number_validated = in_array($source, $validated_sources) ? 1 : 0;
    $cols = array('user_id', 'number', 'validated');
    $values = array($user_id, $phone, $phone_number_validated);

    $sth = $conn->autoPrepare("din_userphonenumber", $cols, DB_AUTOQUERY_INSERT);
    $res = $conn->execute($sth, $values);

    /* Card table */
    if($source == 'card') {
        update_card_with_user($phone, $activation_code, $user_id);
        log_userupdate($user_id, "Kortnummer $activation_code knyttet til bruker.");
    }

    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }

    log_userupdate($user_id, "User registered."); // for legacy
    if( isset($data['membership_trial']) && $in_autumn) {
        log_userupdate($user_id, "Medlemskap registrert via $source. Gratis medlemskap (".$data['membership_trial'].").");
    } else {
        log_userupdate($user_id, "Medlemskap registrert via $source.");
    }

    return $user_id;
}

function __get_cards($value) {
    if($value === "") {
        return array();
    }
    $u_cs = array();
    $u_cards = explode(",", $value);
    foreach ($u_cards as $c) {
        list($card_number, $card_is_active) = explode(";", $c);
        $u_cs[] = array(
            'card_number' => $card_number,
            'is_active' => $card_is_active
        );
    }
    return $u_cs;
}

/* Get user object with group ids and membership status */
function get_user($user_id) {
    global $conn;

    /* Note: Field 'expires' can have the following meanings: 
     *  - 0000-00-00 (default): No membership (never has)
     *  - a date < NOW(): Expired membership
     *  - a date >= NOW(): Valid membership
     *  - NULL: Lifelong membership
     */
    $cols = array('users.id', 'firstname', 'lastname', 'email', 'expires', 'registration_status', 'birthdate', 'membership_trial', 'up.number');
    $sql_cards = "GROUP_CONCAT(DISTINCT c.card_number,';',c.is_active SEPARATOR ',') AS cards";
    $sql_group_ids = "GROUP_CONCAT(group_id) AS group_ids";
    $sql_is_member = "expires > NOW() OR expires IS NULL AS is_member";
    $sql = "SELECT ".implode($cols, ",").",$sql_group_ids,$sql_is_member,$sql_cards FROM din_user AS users
    LEFT JOIN din_usergrouprelationship AS ug ON users.id=ug.user_id
    LEFT JOIN din_card AS c ON c.user_id=users.id
    LEFT JOIN din_userphonenumber AS up ON up.user_id=users.id
    WHERE users.id=$user_id GROUP BY users.id";
    $res = $conn->query($sql);
    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
    if($res->numRows() === 0) {
        return false;
    }
    $res->fetchInto($user);

    /* Membership status according to spec.
     * Status codes:
     * 0 - Registered
     * 1 - Member
     * 2 - Active member
     */
    $groups = explode(",", $user['group_ids']);
    $user['membership_status'] = 0;

    if($user['is_member'] !== "0") {
        // Group id mappings 1:dns-alle, 2: dns-aktiv, 3:administrator, 4+:orgunits/special groups
        if(in_array("2", $groups)) {
            $user['membership_status'] = 2;
        } else {
            $user['membership_status'] = 1;
        }
    }
    /* Cards */
    $user['cards'] = __get_cards($user['cards']);


    /* Clean up user object */
    unset($user['is_member']);
    unset($user['group_ids']);
    $user['memberid'] = $user['id']; // rename
    unset($user['id']);
    if($user['birthdate'] == "0000-00-00") {
        unset($user['birthdate']);
    }
    if($user['membership_trial'] === "") {
        unset($user['membership_trial']);
    }

    /* FIXME: Double encode fields as utf-8... why? */
    foreach($user as $key => $value) {
        if(is_string($value)) {
            $user[$key] = utf8_encode($value);
        }
    }
    return $user;
}

function renew_user($data) {
    global $conn;

    /* Cleanup for user table */
    $phone = $data['phone'];
    unset($data['phone']);
    $user_id = $data['user_id'];
    unset($data['user_id']);
    unset($data['type']);

    /* Our own values */
    $source = "snapporder";
    if( isset($data['source']) ) {
        $source = $data['source'];
    }
    unset($data['source']);

    /* Membership expiry */
    /* One year from today (default) */
    if( !isset($data['purchased']) ) {
        $data['purchased'] = date_create();
    }
    /* ...or one year from specified date */
    $data['expires'] = date_format(date_modify($data['purchased'], "+1 year"), "Y-m-d");
    unset($data['purchased']); // dont save purchase date

    /* Trial membership (special case, ignored if not in autumn) */
    $in_autumn = intval(date("n")) >= 8 && intval(date("n")) <= 12;
    if( isset($data['membership_trial']) && $in_autumn) {
        $data['expires'] = date_format(date_create("first day of january next year"), "Y-m-d");
    }

    // FIXME: Decode UTF-8 values... why?
    foreach($data as $key=>$value) {
        if(is_string($value)) {
            $data[$key] = utf8_decode($value);
        }
    }

    $res = $conn->autoExecute("din_user", $data, DB_AUTOQUERY_UPDATE, "id=$user_id");

    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }

    /* Phonenumber table, set validated */
    $fields_values = array('validated' => 1);
    if($source === "snapporder") {
        $res = $conn->autoExecute("din_userphonenumber", $fields_values, DB_AUTOQUERY_UPDATE, "user_id=$user_id AND number='$phone'");

        if( DB::isError($res) ) {
            throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
        }
    }

    if( isset($data['membership_trial']) && $in_autumn) {
        log_userupdate($user_id, "Medlemskap registrert via $source. Gratis medlemskap (".$data['membership_trial'].").");
    } else {
        log_userupdate($user_id, "Medlemskap fornyet via $source.");
    }

    return;
}

function get_user_id_by_username($username) {
    global $conn;

    $sql = "SELECT id FROM din_user WHERE username='$username'";
    $res = $conn->query($sql);
    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
    if( $res->numRows() === 0 ) {
        return false;
    }
    $res->fetchInto($data);
    return $data['id'];
}
function safe_username_exists($username) {
    global $conn;

    $sql = "SELECT id FROM din_user WHERE username=".$conn->quoteSmart($username)." OR ldap_username=".$conn->quoteSmart($username);
    $res = $conn->query($sql);
    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
    return $res->numRows() !== 0;
}
/* Compare two hashes */
function hash_compare($a, $b) {
    if (!is_string($a) || !is_string($b)) {
        return false;
    }

    $len = strlen($a);
    if ($len !== strlen($b)) {
        return false;
    }

    $status = 0;
    for ($i = 0; $i < $len; $i++) {
        $status |= ord($a[$i]) ^ ord($b[$i]);
    }
    return $status === 0;
}
function create_token($user, $secret_key, $timestamp=NULL) {
    // Based on this: https://github.com/django/django/blob/master/django/contrib/auth/tokens.py#L50
    if($timestamp === NULL) {
        $timestamp = date_format(date_create(), "Y-m-d");
    }
    $message = $user['memberid'].$user['registration_status'].$timestamp;
    $user_hash = hash_hmac("sha256", $message, $secret_key);

    return $timestamp. "," .$user_hash;
}

function check_token($user, $token, $secret_key) {
    /* Check that a password reset token is correct for a given user. */

    // Parse the token
    list($ts, $hash) = explode(",", $token);

    // Check that the timestamp/uid has not been tampered with
    if( !hash_compare(create_token($user, $secret_key, $ts), $token) ) {
        return false;
    }

    // Check the timestamp is within limit
    $n_days_ago = date_modify(date_create(), "-".REGISTRATION_URL_TIMEOUT_DAYS." days");
    if( $n_days_ago > clean_date($ts) ) {
        return false;
    }

    return true;
}
function generate_registration_url($user, $secret_key) {
    $token = create_token($user, $secret_key);
    $server_name = isset($_SERVER['HTTP_X_FORWARDED_SERVER']) ? $_SERVER['HTTP_X_FORWARDED_SERVER'] : $_SERVER['SERVER_NAME'];
    $scheme ="http".((empty($_SERVER['HTTPS']) or $_SERVER['HTTPS'] == 'off')?'':'s');
    $url = "$scheme://".$server_name."/snapporder/activate.php?userid=".$user['memberid']."&token=$token";

    return $url;
}
function date_picker($id, $output=true) {
    $html = "";
    // day
    $html .= '<select id="' .$id. '_day" name="day">';
    $html .= '<option value="">Dag</option>';
    for($i=1; $i<=31; $i++) {
        $selected = (isset($_POST['day']) && $_POST['day'] == $i) ? " selected" : "";
        $html .= "<option value=\"$i\"$selected>$i</option>";
    }
    $html .= "</select>";

    // month
    $html .= '<select id="' .$id. '_month" name="month">';
    $html .= '<option value="">Måned</option>';
    $months = array("januar", "februar", "mars", "april", "mai", "juni", "juli", "august", "september",
        "oktober", "november", "desember");
    $i = 1;
    foreach($months as $month) {
        $selected = (isset($_POST['month']) && $_POST['month'] === "$i") ? " selected" : "";
        $html .= '<option value="' .$i. '"' .$selected. '>' .ucfirst($month). '</option>';
        $i++;
    }
    $html .= "</select>";

    // year
    $html .= '<select id="' .$id. '_year" name="year">';
    $html .= '<option value="">År</option>';
    for($i=date("Y"); $i >= date("Y")-100; $i--) {
        $selected = (isset($_POST['year']) && $_POST['year'] == $i) ? " selected" : "";
        $html .= "<option value=\"$i\"$selected>$i</option>";
    }
    $html .= "</select>";

    if($output) {
        echo $html;
    }
    return $html;
}
function institutions($output=true) {
    global $conn;

    $sql = "SELECT * FROM studiesteder";
    $res = $conn->getAll($sql);
    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
    $institutions = $res;

    /* Format */
    $html = "";
    $html .= '<select id="id_place_of_study" name="place_of_study">';
    foreach($institutions as $place) {
        // selection
        $selected = "";
        if( isset($_POST['place_of_study']) && $_POST['place_of_study'] == $place['id'] ) {
            $selected = " selected";
        } else if( $place['id'] == 22 && !isset($_POST['place_of_study']) ) {
            $selected =" selected" ;
        }

        $name = iconv("ISO-8859-1", "UTF-8", $place['navn']); // DB is latin1
        $html .= '<option value="' .$place['id']. '"' .$selected. '>' .$name. '</option>';
    }
    $html .= "</select>";

    if($output) {
        echo $html;
    }

    return $html;
}
function mailchimp_subscribe($data, $list_id, $api_key) {
    // Ref: http://apidocs.mailchimp.com/api/2.0/lists/subscribe.php
    if(strlen($api_key) == 0) {
        return false;
    }

    list($not_used, $dc) = explode("-", $api_key);
    $submit_url = "https://$dc.api.mailchimp.com/2.0/lists/subscribe.json";

    $data = array(
        'apikey' => $api_key,
        'id' => $list_id,
        'email' => array('email' => $data['email']),
        'merge_vars' => array('fname' => $data['firstname'], 'lname' => $data['lastname']),
        'double_optin' => false,
        'update_existing' => true, // if email exists, dont throw an error
        'send_welcome' => false
    );
    $payload = json_encode($data);

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $submit_url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);

    $result = curl_exec($ch);
    $data = (array) json_decode($result);
    if( isset($data['status']) && $data['status'] === "error") {
        $message = "Request: '" .var_export(curl_getinfo($ch), true). "' \nPayload: '" .var_export($payload, true). "' \nResponse: '$result'";
        @mail("kak-edb@studentersamfundet.no", "[Inside] Could not add a user to a mailchimp list.", $message);
        curl_close ($ch);
        return false;
    } 

    curl_close ($ch);
    return true;
}

function update_user($data) {
    global $conn;

    $birthdate_sql = "";
    if( strlen($data['birthdate']) > 0) {
        $birthdate_sql = "birthdate=" .$conn->quoteSmart($data['birthdate']).",";
    }

    // user: update existing user, activation_status="full", form data
    $sql = "UPDATE din_user SET ";
    $sql .= "username=" .$conn->quoteSmart($data['username']).",";
    $sql .= "ldap_username=" .$conn->quoteSmart($data['username']).",";
    $sql .= "password=PASSWORD(" .$conn->quoteSmart($data['password'])."),";
    $sql .= "ldap_password=" .$conn->quoteSmart(hash_ldap_password($data['password'])).",";
    $sql .= $birthdate_sql;
    $sql .= "placeOfStudy=" .$conn->quoteSmart($data['place_of_study']).",";
    $sql .= "registration_status='full'";
    $sql .= " WHERE id = " . $conn->quoteSmart($data['userid']);
    $res = $conn->query($sql);
    
    if (DB::isError($res)) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
    return true;
}
function update_user_groups($data) {
    global $conn;

    // add to dns-alle (1)
    $group = array(
        'user_id' => $data['userid'],
        'group_id' => 1
    );
    $res = $conn->autoExecute('din_usergrouprelationship', $group, DB_AUTOQUERY_INSERT);

    if (DB::isError($res)) {
        // allready exists is fine
    }
    return true;
}
function update_user_address($data) {
    global $conn;

    $address = array(
        'user_id' => $data['userid'],
        'street' => utf8_decode($data['street']), // FIXME: why latin1?
        'zipcode' => $data['zipcode']
    );

    $res = $conn->autoExecute('din_useraddressno', $address, DB_AUTOQUERY_INSERT);

    if (DB::isError($res)) {
        // allready exists is fine
    }
    return true;
}

function valid_date($date) {
    // try parsing
    if(!clean_date($date)) {
        return false;
    }
    return $date;
}
function validate_birthdate($data, $optional=true) {
    $keys = array('year', 'month','day');
    $values = array();

    foreach( $keys as $key) {
        // If started filling out date of birth
        if(strlen($data[$key]) !== 0) {
            $optional = false;
        }
        // year
        $values[] = $data[$key];
    }

    if($optional) {
        return ""; // skip
    }

    // try parsing
    $date = implode('-', $values);
    if(!clean_date($date)) {
        return false;
    }
    return $date;
}

function validate_activation_form($data) {

    // username: length, ascii, exists
    $data['username'] = strtolower(trim($data['username']));
    if( !validate_username_length($data['username']) ) {
        throw new ValidationException("Brukernavet må være mellom 3 og 12 tegn");
    }
    if( !validate_username_chars($data['username']) ) {
        throw new ValidationException("Brukernavnet kan kun inneholde små bokstaver og tall (tall kan ikke være første tegn).");
    }
    if( safe_username_exists($data['username']) ) {
        throw new ValidationException("Brukernavnet er allerede i bruk.");
    }

    // password: entropy, quotes
    $data['password'] = trim($data['password']);
    if( !validate_password_length($data['password']) ) {
        throw new ValidationException("Passordet må være på minst 8 tegn.");
    }
    if( !validate_password_chars($data['password']) ) {
        throw new ValidationException("Passordet kan ikke inneholde enkel- eller dobbelfnutt eller bakslask.");
    }

    // birthdate (optional)
    $valid_date = validate_birthdate($data);
    if( $valid_date === false ) {
        throw new ValidationException("Ugyldig fødselsdato");
    }
    $data['birthdate'] = $valid_date; // Note: could be: ""

    // place of study (optional)
    if( !is_numeric($data['place_of_study']) ) {
        throw new ValidationException("Ugyldig studiested");
    }
    // address
    if( strlen($data['street']) == 0) {
        $data['street'] = '-';
    }
    // zip code (optional)
    if( strlen($data['zipcode']) > 0 && !is_numeric($data['zipcode']) ) {
        throw new ValidationException("Ugyldig postnummer, må være et tall");
    }

    return $data;
}

function validate_sms_form($data) {
	// phonenumber and user
	$phone = clean_phonenumber($data['phone']);
	if( !valid_phonenumber($phone) ) {
        throw new ValidationException("Ugyldig telefonnummer: ".$data['phone']);
	}
    $logged_in_user_id = isset($data['user_id']) && $data['user_id'] !== "" && is_numeric($data['user_id']);
    if( $logged_in_user_id && get_user($data['user_id']) === false ) {
        throw new ValidationException("Ugyldig bruker angitt: ".$data['user_id']);
    }
    $user_id_by_phone = getUseridFromPhone($phone);
	if( $user_id_by_phone !== false && $logged_in_user_id && $data['user_id'] !== $user_id_by_phone ) {
        $login_msg = "Hvis nummeret tilhører deg, <a href=\"https://inside.studentersamfundet.no\">logg inn her</a> først, før du returnerer til og fullfører skjemaet.";
        throw new ValidationException("Telefonnummeret ".$data['phone']." er allerede registrert i bruk. $login_msg");
	}
    if( $user_id_by_phone !== false && !$logged_in_user_id ) {
        $login_msg = "Hvis nummeret tilhører deg, <a href=\"https://inside.studentersamfundet.no\">logg inn her</a> først, før du returnerer til og fullfører skjemaet.";
        throw new ValidationException("Telefonnummeret ".$data['phone']." er allerede registrert i bruk. $login_msg");
    }
    /* TODO: dont allow card activation twice and user id with existing membership and card */

    $data['phone'] = $phone;

	// lookup code and phonenumber tuple to validate code and get purchase date
    list($purchased, $source) = get_purchase_date_and_source($data['phone'], $data['activation_code']);
    if( $purchased === false ) {
        throw new ValidationException("Ugyldig kortnummer/kode ".$data['activation_code']." eller kombinasjon med telefonnummer ".$data['phone'].".");
    }
    $data['purchased'] = clean_timestamp($purchased);
    $data['source'] = $source;

    if($logged_in_user_id) {
        /* Existing user */
        return $data;
    }

    /* firstname and lastname */
    if( strlen($data['firstname']) < 2 ) {
        throw new ValidationException("Fornavn må være 2 tegn eller lengre: ".$data['firstname']);
    }
    if( strlen($data['lastname']) < 2 ) {
        throw new ValidationException("Etternavn må være 2 tegn eller lengre: ".$data['lastname']);
    }
    // email
    if( !valid_email($data['email']) ) {
        throw new ValidationException("Ugyldig epost: ".$data['email']);
    }
    if( getUseridFromEmail($data['email']) !== false ) {
        throw new ValidationException("Epostadressen ".$data['email']." er allerede registrert i bruk");
    }

    // remove field for later db insertion
    unset($data['submit']);

    return $data;
}
function save_sms_form($data) {
    $user_id = add_user($data, $data['source']);

    log_userupdate($user_id, "Membership added to user.");
    return $user_id;
}
function save_activation_form($data) {
    update_user($data);
    update_user_groups($data);
    update_user_address($data);

    log_userupdate($data['userid'], "Membership activated.");
    
    // weekly newsletter (mailchimp)
    if(isset($data['newsletter']) && $data['newsletter'] === "1" && MAILCHIMP_API_KEY !== "") {
        if( mailchimp_subscribe($data, MAILCHIMP_LIST_ID, MAILCHIMP_API_KEY) ) {
            log_userupdate($data['userid'], "Lagt til nyhetsbrevet.");
        }
    }

    return true;
}

function get_purchase_date_legacy($phone, $activation_code) {
    global $conn;

    $gsm = substr($phone, 3); // strip off country code

    $sql = "SELECT date FROM din_sms_sent WHERE activation_code=".$conn->quoteSmart($activation_code)." AND receiver=".$conn->quoteSmart($gsm);
    $res = $conn->getOne($sql);

    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }

    return $res !== null ? $res : false;
}

function get_purchase_date_card($phone, $activation_code) {
    global $conn;

    $phone = $conn->quoteSmart($phone);
    $activation_code = $conn->quoteSmart($activation_code);

    $sql = "SELECT registered FROM din_card WHERE card_number=$activation_code AND owner_phone_number=$phone AND is_active=1";
    $res = $conn->getOne($sql);

    if( DB::isError($res) ) {
        throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }

    return $res !== null ? $res : false;
}

function get_purchase_date_tekstmelding($phone, $activation_code) {
    $url = "https://tekstmelding.neuf.no/inside-code-purchase-date";

    $params = array(
        'api_key' => TEKSTMELDING_API_KEY,
        'number' => str_replace('+', '', $phone),
        'activation_code' => $activation_code,
    );
    $url .= '?' . http_build_query($params);

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    $result = curl_exec($ch);
    $status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    if($status_code !== 200) {
        return false;
    }

    return $result;
}

function get_purchase_date_and_source($phone, $activation_code) {
    /* Try card number lookup */
    $source = 'card';
    $timestamp = get_purchase_date_card($phone, $activation_code);

    /* Try SMS */
    if ($timestamp === false) {
        $timestamp = get_purchase_date_tekstmelding($phone, $activation_code);
        $source = 'sms';
    }

    /* Try legacy SMS-table */
    // FIXME: Remove if date later than 2016-02-01
    if ($timestamp === false) {
        $timestamp = get_purchase_date_legacy($phone, $activation_code);
        $source = 'sms';
    }

    if($timestamp === false) {
        $source = NULL;
    }

    return array($timestamp, $source);
}
function update_membership_expiry($user_id, $purchased=NULL) {
    global $conn;
    assert($user_id !== NULL);


    /* Membership expiry */
    /* One year from today (default) */
    if( $purchased == NULL ) {
        $purchased = date_create();
    }
    /* ...or one year from specified date */
    $expires = date_format(date_modify($purchased, "+1 year"), "Y-m-d");

    $res = $conn->autoExecute("din_user", array('expires' => $expires), DB_AUTOQUERY_UPDATE, "id=$user_id");

    if( DB::isError($res) ) {
        new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
    }
}

/* The purpose of this email is:
 * - to store the registration_url in the users inbox
 * - give some sort of positive confirmation :-)
 */
function send_activation_email($data, $user) {
    $from_email = "medlemskap@studentersamfundet.no";
	$sendto = $user['email'];
	$subject = "Aktiver medlemskapet ditt - Det Norske Studentersamfund";

    $headers = "From: $from_email\r\n";
    $headers .= "Reply-To: $from_email\r\n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-Type: text/html; charset=UTF-8\r\n";

    $message = '<html><body>';
    $message .= '<h3>Hei '.$user['firstname'].', og velkommen til Det Norske Studentersamfund!</h3>';
    $message .= '<p>For at medlemskapet ditt skal v&aelig;re komplett trenger vi noen flere opplysninger fra deg.</p>';
    $message .= '<p style="margin-bottom: 20px;">Trykk p&aring; lenken under for &aring; fortsette.</p>';
    $message .= '<p style="margin-bottom: 20px;"><a href="'.$user['registration_url'].'" style="font-family: Arial,sans-serif; color: white; font-weight: bold; font-size: 20px; padding: 0.8em 1.2em; border: none; text-decoration: none; background-color: #58AA58; display: inline-block; text-align: center; margin: 0;">Aktiver medlemskapet</a></p>';
    $message .= "<p>Med vennlig hilsen<br>Det Norske Studentersamfund</p>";
    $message .= "</body></html>";

	@mail($sendto, $subject, $message, $headers);
}

/* The purpose of this email is:
 * - to store the users username in the users inbox
 * - give some sort of positive confirmation that everything is as it should be!
 */
function send_confirmation_email($data, $user) {
    $from_email = "medlemskap@studentersamfundet.no";
	$sendto = $user['email'];
	$subject = "Medlemskap aktivert - Det Norske Studentersamfund";

    $headers = "From: $from_email\r\n";
    $headers .= "Reply-To: $from_email\r\n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-Type: text/html; charset=UTF-8\r\n";

    $inside_url = "https://inside.studentersamfundet.no/";
    $password_reset_url = "https://brukerinfo.neuf.no/accounts/password/reset";

    $message = '<html><body>';
    $message .= '<h3>Gratulerer med ditt nye medlemskap i Det Norske Studentersamfund!</h3>';
    $message .= '<p>Brukernavnet ditt er: '.$data['username'].'</p>';
    $message .= '<p>Om du i fremtiden skulle glemme passordet ditt, s&aring; kan du <a href="'.$password_reset_url.'">f&aring; nytt her</a>.</p>';
    $message .= '<p style="margin-bottom: 20px;">Trykk p&aring; lenken under for &aring; logge inn og se medlemskapet ditt.</p>';
    $message .= '<p style="margin-bottom: 20px;"><a href="'.$inside_url.'" style="font-family: Arial,sans-serif; color: white; font-weight: bold; font-size: 20px; padding: 0.8em 1.2em; border: none; text-decoration: none; background-color: #58AA58; display: inline-block; text-align: center; margin: 0;">Logg inn</a></p>';
    $message .= '<p>Medlemskortet ditt, om du ikke har fått det enda, får du i baren på Chateau Neuf.</p>';
    $message .= '<p>Medlemskapsbevis finner du også i appen <a href="http://snappo.com/app">SnappOrder</a> (i <a href="https://itunes.apple.com/no/app/snapporder/id657308079">App Store</a> eller <a href="https://play.google.com/store/apps/details?id=com.snapporder">Google Play</a>) under valget "Chateau Neuf".</p>';
    $message .= "<p>Med vennlig hilsen<br>Det Norske Studentersamfund</p>";
    $message .= "</body></html>";

	@mail($sendto, $subject, $message, $headers);
}