<?php
class UsersController extends AppController
{

    function index()
    {
    
    }

    function search()
    {
        // The site's primary search function

        // By default a search will not be performed without sufficent params
        $search = false;

        // Params will be assigned from HTTP GET into an array
        $searchParams = array();

        // Check if required params were submitted
        if (!empty($_GET['name']))
        {
            $searchParams['name'] = $_GET['name'];
            $search = true;
        }
        else
        {
            $search = false;
        }

        // Redirect back to homepage if a search cannot be performed
        if (!$search)
        {
            // Remember the $error var in the view? Let's set that to true:
            $this->set('error', true);
            $this->redirect('/');
        }

        // Assign conditions
        $conditions = array("User.family_name" => "LIKE %{$searchParams['name']}%");

        // Perform search in database with user table
        $results = $this->User->findAll($conditions);

        // Assign results to global
        $this->set('results', $results);
    }

    function login()
    {
        //Don't show the error message if no data has been submitted.
        $this->set('error', false); 

        // If a user has submitted form data:
        if (!empty($this->data))
        {
            // First, let's see if there are any users in the database
            // with the username supplied by the user using the form:

            $someone = $this->User->findByUsername($this->data['User']['username']);

            // At this point, $someone is full of user data, or its empty.
            // Let's compare the form-submitted password with the one in 
            // the database.

            if(!empty($someone['User']['password']) && $someone['User']['password'] == $this->data['User']['password'])
            {
                // Note: hopefully your password in the DB is hashed, 
                // so your comparison might look more like:
                // md5($this->data['User']['password']) == ...

                // This means they were the same. We can now build some basic
                // session information to remember this user as 'logged-in'.

                $this->Session->write('User', $someone['User']);

                // Now that we have them stored in a session, forward them on
                // to a landing page for the application. 

                $this->redirect('/');
            }
            // Else, they supplied incorrect data:
            else
            {
                // Remember the $error var in the view? Let's set that to true:
                $this->set('error', true);
            }
        }
    }

    function logout()
    {
        // Redirect users to this action if they click on a Logout button.
        // All we need to do here is trash the session information:

        $this->Session->delete('User');

        // And we should probably forward them somewhere, too...
     
        $this->redirect('/');
    }

    function info()
    {
        $this->checkSession();
    }

    function create()
    {
        if (empty($this->data))
        {
            $this->render();
        }
        else
        {
            if ($this->User->validates())
            {
             //ok cool, the stuff is valid
                $this->redirect('/fook');
            }
            else
            {
                //Danger, Will Robinson. Validation errors.
                $this->set('errorMessage', 'Please correct errors below.');
                $this->render();
            }
        }
    }
}

?>