<?php

/**
 * @file classes/session/SessionDAO.inc.php
 *
 * Copyright (c) 2014-2021 Simon Fraser University
 * Copyright (c) 2000-2021 John Willinsky
 * Distributed under the GNU GPL v3. For full terms see the file docs/COPYING.
 *
 * @class SessionDAO
 * @ingroup session
 * @see Session
 *
 * @brief Operations for retrieving and modifying Session objects.
 */


import('lib.pkp.classes.session.Session');

class SessionDAO extends DAO {

	/**
	 * Instantiate and return a new data object.
	 */
	function newDataObject() {
		return new Session();
	}

	/**
	 * Retrieve a session by ID.
	 * @param $sessionId string
	 * @return Session
	 */
	function getSession($sessionId) {
		$result = $this->retrieve('SELECT * FROM sessions WHERE session_id = ?', [$sessionId]);

		if ($row = (array) $result->current()) {
			$session = $this->newDataObject();
			$session->setId($row['session_id']);
			$session->setUserId($row['user_id']);
			$session->setIpAddress($row['ip_address']);
			$session->setUserAgent($row['user_agent']);
			$session->setSecondsCreated($row['created']);
			$session->setSecondsLastUsed($row['last_used']);
			$session->setRemember($row['remember']);
			$session->setSessionData($row['data']);
			$session->setDomain($row['domain']);
			return $session;
		}

		return null;
	}

	/**
	 * Insert a new session.
	 * @param $session Session
	 */
	function insertObject($session) {
		$this->update(
			'INSERT INTO sessions
				(session_id, ip_address, user_agent, created, last_used, remember, data, domain)
				VALUES
				(?, ?, ?, ?, ?, ?, ?, ?)',
			[
				$session->getId(),
				$session->getIpAddress(),
				substr($session->getUserAgent(), 0, 255),
				(int) $session->getSecondsCreated(),
				(int) $session->getSecondsLastUsed(),
				$session->getRemember() ? 1 : 0,
				$session->getSessionData(),
				$session->getDomain()
			]
		);
	}

	/**
	 * Update an existing session.
	 * @param $session Session
	 * @return int Number of affected rows
	 */
	function updateObject($session) {
		return $this->update(
			'UPDATE sessions
				SET
					user_id = ?,
					ip_address = ?,
					user_agent = ?,
					created = ?,
					last_used = ?,
					remember = ?,
					data = ?,
					domain = ?
				WHERE session_id = ?',
			[
				$session->getUserId()==''?null:(int) $session->getUserId(),
				$session->getIpAddress(),
				substr($session->getUserAgent(), 0, 255),
				(int) $session->getSecondsCreated(),
				(int) $session->getSecondsLastUsed(),
				$session->getRemember() ? 1 : 0,
				$session->getSessionData(),
				$session->getDomain(),
				$session->getId()
			]
		);
	}

	/**
	 * Delete a session.
	 * @param $session Session
	 */
	function deleteObject($session) {
		$this->deleteById($session->getId());
	}

	/**
	 * Delete a session by ID.
	 * @param $sessionId string
	 */
	function deleteById($sessionId) {
		$this->update('DELETE FROM sessions WHERE session_id = ?', [$sessionId]);
	}

	/**
	 * Delete sessions by user ID.
	 * @param $userId string
	 */
	function deleteByUserId($userId) {
		$this->update(
			'DELETE FROM sessions WHERE user_id = ?',
			[(int) $userId]
		);
	}

	/**
	 * Delete all sessions older than the specified time.
	 * @param $lastUsed int cut-off time in seconds for not-remembered sessions
	 * @param $lastUsedRemember int optional, cut-off time in seconds for remembered sessions
	 */
	function deleteByLastUsed($lastUsed, $lastUsedRemember = 0) {
		if ($lastUsedRemember == 0) {
			$this->update(
				'DELETE FROM sessions WHERE (last_used < ? AND remember = 0)',
				[(int) $lastUsed]
			);
		} else {
			$this->update(
				'DELETE FROM sessions WHERE (last_used < ? AND remember = 0) OR (last_used < ? AND remember = 1)',
				[(int) $lastUsed, (int) $lastUsedRemember]
			);
		}
	}

	/**
	 * Delete all sessions.
	 */
	function deleteAllSessions() {
		$this->update('DELETE FROM sessions');
	}

	/**
	 * Check if a session exists with the specified ID.
	 * @param $sessionId string
	 * @return boolean
	 */
	function sessionExistsById($sessionId) {
		$result = $this->retrieve('SELECT COUNT(*) AS row_count FROM sessions WHERE session_id = ?', [$sessionId]);
		$row = $result->current();
		return $row ? (boolean) $row->row_count : false;
	}
}