function.php

<?php

session_start();

function checkAccount(...$info): bool
{
    if (count($info) === 3) {
        [$conn, $email, $password] = $info;
        $sql = "SELECT freelance_email, freelance_password FROM freelance_info 
                WHERE freelance_email = '$email' AND freelance_password = '$password'";
    } elseif (count($info) === 2) {
        [$conn, $email] = $info;
        $sql = "SELECT freelance_email FROM freelance_info 
                WHERE freelance_email = '$email'";
    } else {
        echo "Please Fix.";
    }

    $result = $conn->query($sql) or trigger_error($conn->error);
    return $result->num_rows;
}

function checkSession()
{
    if (!isset($_SESSION['user_id'], $_SESSION['user_username'], $_SESSION['user_email'])) {
        session_destroy();
        header("location: login.php");
    }
}

function checkSessionGoToGig()
{
    if (isset($_SESSION['user_id'], $_SESSION['user_username'], $_SESSION['user_email'])) {
        header("location: gigs.php");
    }
}

function infoEncrypt($simple_string)
{
    $ciphering = "AES-128-CTR";
    $iv_length = openssl_cipher_iv_length($ciphering);
    $options = 0;
    $encryption_iv = '1234567891011121';
    $encryption_key = "GeeksforGeeks";
    $encryption = openssl_encrypt($simple_string, $ciphering, $encryption_key, $options, $encryption_iv);
    return $encryption;
}

function infoDecrypt($encryption)
{
    $ciphering = "AES-128-CTR";
    $options = 0;

    $decryption_iv = '1234567891011121';
    $decryption_key = "GeeksforGeeks";
    $decryption = openssl_decrypt($encryption, $ciphering, $decryption_key, $options, $decryption_iv);
    return $decryption;
}

function getSessionValues()
{
    global $userId, $userFName, $userLName, $userName, $userEmail;
    $userId = $_SESSION['user_id'];
    $userFName = $_SESSION['user_firstname'];
    $userLName = $_SESSION['user_lastname'];
    $userName = $_SESSION['user_username'];
    $userEmail = $_SESSION['user_email'];
}

function get_timeago($ptime)
{
    $estimate_time = time() - $ptime;

    if ($estimate_time < 1) {
        return 'less than 1 second ago';
    }

    $condition = array(
        12 * 30 * 24 * 60 * 60 => 'year',
        30 * 24 * 60 * 60 => 'month',
        24 * 60 * 60 => 'day',
        60 * 60 => 'hour',
        60 => 'minute',
        1 => 'second'
    );

    foreach ($condition as $secs => $str) {
        $d = $estimate_time / $secs;

        if ($d >= 1) {
            $r = round($d);
            return 'about ' . $r . ' ' . $str . ($r > 1 ? 's' : '') . ' ago';
        }
    }
}

function add_image($conn, $submitBtn, $chooseImg, $database = "freelance_info"): string
{
    if (isset($conn, $submitBtn) && $conn) {
        $target_dir = "./assets/img/";
        $filename = htmlspecialchars(basename($chooseImg['name']));
        $target_file = $target_dir . $filename;
        $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
        $phpFile = $database === "freelance_info" ? "settings" : "mygigs";
        $user_id = $_SESSION['user_id'];
        $status = 1;

        if (file_exists($target_file)) {
            if ($database === "freelance_info") {
                $sql = "SELECT freelance_path FROM freelance_info WHERE freelance_id = ? AND freelance_path = ?";
            } else {
                $sql = "SELECT gigs_banner FROM freelance_gig WHERE user_id = ? AND gigs_banner = ?";
            }

            $stmt = $conn->prepare($sql);
            $stmt->bind_param("is", $user_id, $target_file);
            $stmt_result = $stmt->store_result();

            // Check if file is in database path
            if ($stmt_result->num_rows === 0) {
                if ($database === "freelance_info") {
                    $sql = "UPDATE freelance_info SET freelance_path = ? WHERE freelance_id = ?";
                } else {
                    $sql = "UPDATE freelance_gig SET gigs_banner = ? WHERE user_id = ?";
                }

                $stmt = $conn->prepare($sql);
                $stmt->bind_param("si", $target_file, $user_id);

                if ($stmt->execute()) {
                    echo "<script>alert('{$filename} uploaded successfully.')
                    window.location.href='{$phpFile}.php?upload_status=success';
                    </script>";
                } else {
                    echo "<script>alert('{$filename} upload failed. User Id don\'t matched')
                    window.location.href='{$phpFile}.php?upload_status=failed';
                    </script>";
                }
            } else {
                echo "<script>alert('Sorry, this is your current profile picture.');
                window.location.href='{$phpFile}.php?upload_status=already-profile';
                </script>";
            }
        } else if ($imageFileType !== "jpg" && $imageFileType !== "png" && $imageFileType !== "jpeg" && $imageFileType !== "gif") {
            $status = 0;
            echo "<script>alert('Sorry, only JPG, JPEG, PNG & GIF files are allowed.');
            window.location.href='{$phpFile}.php?upload_status=invalid-file';
            </script>";
        }

        if ($status === 0) {
            echo "<script>alert('{$filename} has NOT BEEN uploaded due to not complying.')
            window.location.href='{$phpFile}.php?upload_status=not-comply';
            </script>";
        } else if (!move_uploaded_file($chooseImg["tmp_name"], $target_file)) {
            echo "<script>alert('{$filename} has NOT BEEN moved to DIR')
            window.location.href='{$phpFile}.php?upload_status=not-moved';
            </script>";
        } else {
            if ($database === "freelance_info") {
                $sql = "UPDATE freelance_info SET freelance_path = ? WHERE freelance_id = ?;";
            } else {
                $sql = "UPDATE freelance_gig SET gigs_banner = ? WHERE user_id = ?;";
            }
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("si", $target_file, $user_id);

            if ($stmt->execute()) {
                echo "<script>alert('{$filename} has been uploaded');
                window.location.href='{$phpFile}.php?upload_status=success';
                </script>";
                return $target_file;
            }

            echo "<script>alert('{$filename} has NOT BEEN uploaded')
            window.location.href='{$phpFile}.php?upload_status=not-uploaded';
            </script>";
        }
    } else {
        trigger_error("Connection Failed: " . $conn->connect_error);
    }
}

function add_image_gigs($conn, $submitBtn, $chooseImg, $database = "freelance_info", $lastId): string
{
    if (isset($conn, $submitBtn) && $conn) {
        $target_dir = "./assets/img/";
        $filename = htmlspecialchars(basename($chooseImg['name']));
        $target_file = $target_dir . $filename;
        $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
        $phpFile = $database === "freelance_info" ? "settings" : "mygigs";
        $user_id = $_SESSION['user_id'];
        $status = 1;

        if (file_exists($target_file)) {
            if ($database === "freelance_info") {
                $sql = "SELECT freelance_path FROM freelance_info WHERE freelance_id = ? AND freelance_path = ?";
            } else {
                $sql = "SELECT gigs_banner FROM freelance_gig WHERE user_id = ? AND gigs_banner = ?";
            }

            $stmt = $conn->prepare($sql);
            $stmt->bind_param("is", $user_id, $target_file);
            $stmt_result = $stmt->store_result();

            // Check if file is in database path
            if ($stmt_result->num_rows === 0) {
                if ($database === "freelance_info") {
                    $sql = "UPDATE freelance_info SET freelance_path = ? WHERE freelance_id = ?";
                } else {
                    $sql = "UPDATE freelance_gig SET gigs_banner = ? WHERE gigs_id = ?";
                }

                $stmt = $conn->prepare($sql);
                $stmt->bind_param("si", $target_file, $lastId);

                if ($stmt->execute()) {
                    echo "<script>alert('{$filename} uploaded successfully.')
                    window.location.href='{$phpFile}.php?upload_status=success';
                    </script>";
                } else {
                    echo "<script>alert('{$filename} upload failed. User Id don\'t matched')
                    window.location.href='{$phpFile}.php?upload_status=failed';
                    </script>";
                }
            } else {
                echo "<script>alert('Sorry, this is your current profile picture.');
                window.location.href='{$phpFile}.php?upload_status=already-profile';
                </script>";
            }
        } else if ($imageFileType !== "jpg" && $imageFileType !== "png" && $imageFileType !== "jpeg" && $imageFileType !== "gif") {
            $status = 0;
            echo "<script>alert('Sorry, only JPG, JPEG, PNG & GIF files are allowed.');
            window.location.href='{$phpFile}.php?upload_status=invalid-file';
            </script>";
        }

        if ($status === 0) {
            echo "<script>alert('{$filename} has NOT BEEN uploaded due to not complying.')
            window.location.href='{$phpFile}.php?upload_status=not-comply';
            </script>";
        } else if (!move_uploaded_file($chooseImg["tmp_name"], $target_file)) {
            echo "<script>alert('{$filename} has NOT BEEN moved to DIR')
            window.location.href='{$phpFile}.php?upload_status=not-moved';
            </script>";
        } else {
            if ($database === "freelance_info") {
                $sql = "UPDATE freelance_info SET freelance_path = ? WHERE freelance_id = ?;";
            } else {
                $sql = "UPDATE freelance_gig SET gigs_banner = ? WHERE gigs_id = ?;";
            }
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("si", $target_file, $lastId);

            if ($stmt->execute()) {
                echo "<script>alert('{$filename} has been uploaded');
                window.location.href='{$phpFile}.php?upload_status=success';
                </script>";
                return $target_file;
            }

            echo "<script>alert('{$filename} has NOT BEEN uploaded')
            window.location.href='{$phpFile}.php?upload_status=not-uploaded';
            </script>";
        }
    } else {
        trigger_error("Connection Failed: " . $conn->connect_error);
    }
}

function getDatabase_info($conn, $userId, $database = "freelance_info", $get_password = FALSE)
{
    if ($database === "freelance_info") {
        if ($get_password) {
            $sql = "SELECT * FROM freelance_info WHERE freelance_id = ?";
        } else {
            $sql = "SELECT freelance_id, freelance_fName, freelance_lName, freelance_username, 
                           freelance_email, freelance_about, freelance_path FROM freelance_info 
                    WHERE freelance_id = ?";
        }
    } else {
        $sql = "SELECT * FROM freelance_gig WHERE gigs_id = ?";
    }
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("i", $userId);
    if ($stmt->execute()) {
        $result = $stmt->get_result();
        return $result->fetch_assoc();
    }

    trigger_error("Statement did not execute: " . $stmt->error());
}

function getDirWoLast(): string
{
    $dir = $_SERVER['PHP_SELF'];
    $expDir = explode("/", $dir);
    $dirLastPop = array_slice($expDir, 0, -1);
    $phpDir = implode("/", $dirLastPop);
    return $phpDir;
}