<?php
require __DIR__ . '/../incl/util.php';
setJsonHeader();
checkClientDatabaseVersion();
$conn = newConnection();

$post = getPostData();
$username = $post['username'];
$password = $post['password'];
$currentHighScore = $post['currentHighScore'] ?? 0;
$loginType = $post['loginType'] ?? '0';

$stmt = $conn->prepare("SELECT * FROM users WHERE username = ?");
$stmt->bind_param("s", $username);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows === 0) {
    exitWithMessage(json_encode(["success" => false, "message" => "Invalid username or password"]));
}

$user = $result->fetch_assoc();

if (!password_verify($password, $user["password"])) {
    exitWithMessage(json_encode(["success" => false, "message" => "Invalid username or password"]));
}

$uid = $user['uid'];
$token = $user['game_session_token'];
if (!$token || strlen(trim($token)) !== 512) $token = bin2hex(random_bytes(256));

$ip = getIPAddress();

$stmt = $conn->prepare("UPDATE users SET latest_ip = ?, game_session_token = ? WHERE uid = ?");
$stmt->bind_param("ssi", $ip, $token, $uid);
$stmt->execute();

if ($currentHighScore > $user['highScore']) {
    $stmt = $conn->prepare("UPDATE users SET highScore = ? WHERE uid = ?");
    $stmt->bind_param("ii", $currentHighScore, $uid);
    $stmt->execute();
    $user['highScore'] = $currentHighScore;
}

$data = ["session" => $token];

if ($loginType === "0") {
    $data += [
        "username" => $user['username'],
        "userid" => $uid,
        "highscore" => (string)$user['highScore'],
        "icon" => (int)$user['icon'],
        "overlay" => (int)$user['overlay'],
        "totalNormalBerries" => (string)$user['totalNormalBerries'],
        "totalPoisonBerries" => (string)$user['totalPoisonBerries'],
        "totalSlowBerries" => (string)$user['totalSlowBerries'],
        "totalUltraBerries" => (string)$user['totalUltraBerries'],
        "totalSpeedyBerries" => (string)$user['totalSpeedyBerries'],
        "totalAttempts" => (string)$user['totalAttempts'],
        "birdColor" => [(int)$user['birdR'], (int)$user['birdG'], (int)$user['birdB']],
        "overlayColor" => [(int)$user['overlayR'], (int)$user['overlayG'], (int)$user['overlayB']]
    ];
} elseif ($loginType === "1") {
    $data += [
        "username" => $user['username'],
        "userid" => $uid
    ];
}

echo encrypt(json_encode(["success" => true, "data" => $data]));

$stmt->close();
$conn->close();