[#] hm X_Shell Backd00r [#]

<?php
	require_once 'conexion.class.php';
	class Busqueda{

		public $string;
		public $idinvitacion;
		public $iduser;
		
		public $interes;

		public function __construct(){
			$this->conex = Conexion::singleton_conexion();
		}

		public function busqueda(){
			try{
				
				$sql = "SELECT * FROM asistencia_buen_fin WHERE email = :value || codigo = :value";
				$query = $this->conex->prepare($sql);
				$query->bindParam(':value',$this->string);
				$query->execute();
				$result = $query->fetch(PDO::FETCH_ASSOC);
				
				if($query->rowCount() > 0)
				  	return $result;
				else
					return false;

			}catch(PDOExeption $e){
				"Error !".$e->getMessage();
			}
		}

		public function busquedaStatus($relacionId){
			try{
				
				$sql = "SELECT *
					    FROM invitacion_buen_fin
					    INNER JOIN asistencia_buen_fin on asistencia_buen_fin.id_invitacion=invitacion_buen_fin.id 
					    WHERE invitacion_buen_fin.id = $relacionId";
				$query = $this->conex->prepare($sql);
				$query->execute();
				$result = $query->fetchAll(PDO::FETCH_ASSOC);
				
				if($query->rowCount() > 0)
				  	return $result;
				else
					return false;

			}catch(PDOExeption $e){
				"Error !".$e->getMessage();
			}
		}		

		public function busquedaCodigos($interes,$id){
			try{
				
				$sql = "SELECT * 
						FROM invitacion_buen_fin
						INNER JOIN asistencia_buen_fin ON asistencia_buen_fin.id_invitacion = invitacion_buen_fin.id
						WHERE invitacion_buen_fin.interes =  '$interes'
						AND invitacion_buen_fin.id = $id";
				$query = $this->conex->prepare($sql);
				$query->execute();
				$result = $query->fetchAll(PDO::FETCH_ASSOC);
				
				if($query->rowCount() > 0)
				  	return $result;
				else
					return false;
					//echo $interes.' / '.$id;

			}catch(PDOExeption $e){
				"Error !".$e->getMessage();
			}
		}


		public function allInteres($interes){
			try{
					$sql = "SELECT *
							FROM `asistencia_buen_fin`
							INNER JOIN `invitacion_buen_fin` ON `asistencia_buen_fin`.id_invitacion = `invitacion_buen_fin`.id
							WHERE interes = '$interes'";
					//$query->bindParam(':interes', $this->interes);
					$query = $this->conex->prepare($sql);
					$query->execute();
					$result = $query->fetchAll(PDO::FETCH_ASSOC);
					if($query->rowCount() > 0)
					  	return $result;
					else
						return false;

				}catch(PDOExeption $e){
					'Error !'.$e->getMessage();	
				}
		}
		
		public function addPago(){
			try{
				$sql = "UPDATE invitacion_buen_fin SET status_pago = 1 WHERE id = :id";
				$query = $this->conex->prepare($sql);
				$query->bindParam(':id',$this->idinvitacion);
				$query->execute();
				if($query->rowCount() > 0)
				  	return true;
				else
					return false;
			}catch(PDOExeption $e){
				'Error !'.$e->getMessage();
			}
		}
		
		public function addAsistencia(){
			try{
				$sql = "UPDATE asistencia_buen_fin SET asistencia = 1 WHERE id_asistencia  = :id";
				$query = $this->conex->prepare($sql);
				$query->bindParam(':id',$this->iduser);
				$query->execute();
				if($query->rowCount() > 0)
				  	return true;
				else
					return false;
			}catch(PDOExeption $e){
				'Error !'.$e->getMessage();
			}
		}	
		
		public function Login($usuario,$pass){
			try{
				$usuario=addslashes(strip_tags($usuario)); 
				$sql = "SELECT * FROM usuario WHERE nombre_usu = :user_name COLLATE utf8_bin";
				$query = $this->conex->prepare($sql);
				$query->bindParam(':user_name',$usuario);
				$query->execute();
				$result = $query->fetch(PDO::FETCH_ASSOC);
				
				if($query->rowCount() > 0)
				{
					$contrasena=addslashes(strip_tags($pass));
					$sql2 = "SELECT * 
						FROM usuario						
						WHERE nombre_usu = :user_name
						AND password = :pass COLLATE utf8_bin";
					$query2 = $this->conex->prepare($sql2);
					$query2->bindParam(':user_name',$usuario);
					$query2->bindParam(':pass',$contrasena);
					$query2->execute();
					$result2 = $query2->fetchAll(PDO::FETCH_ASSOC);				
					if($query2->rowCount() > 0)
					{
						$correcto=1;
						session_start();
						$_SESSION['usuario_login_auto'] = $usuario;
						$_SESSION['tipo_usauto'] = $result2[0]['tipo'];							
						return $correcto;
					}
					else{
						$correcto=2;						
						return $correcto;
					}
						
				}				  	
				else{
					$correcto=3;						
					return $correcto;
				}
				
			}catch(PDOExeption $e){
				"Error !".$e->getMessage();
			}
		}	
	}
?>