<?php
include 'common.php';

function BlockListQuery($user_id){
	
	// Input validation
	if (empty($user_id))
	{
		$response = array('result'=>'BLOCK_LIST_FAIL','players'=>"", 'error'=>'user_id is required');
		
		$isXmlHttpRequest = (isset($_SERVER['HTTP_X_REQUESTED_WITH'])) ?
		(strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') ? true : false: false;
		($isXmlHttpRequest) ? header('Content-type: application/json') : header('Content-type: text/plain');
		
		echo json_encode($response);
		return;
	}
	
	//Connect DB
	$dbhandle = DB_Connect();
	$db_selected = mysqli_select_db($dbhandle, DB_NAME)
	or die("Could not select db");
	
	
	mysqli_query($dbhandle,"set session character_set_connection=utf8;");
	mysqli_query($dbhandle,"set session character_set_results=utf8;");
	mysqli_query($dbhandle,"set session character_set_client=utf8;");


	$stmt = $dbhandle->prepare("select * from chat_block_list where user_id=?");	
	$stmt->bind_param("s", $user_id);
	
	if (!$stmt->execute())
	{
		$return = "BLOCK_LIST_FAIL";
		$error = mysqli_error($dbhandle);
		$response = array('result'=>$return,'players'=>"", 'error'=>$error);
		
		$isXmlHttpRequest = (isset($_SERVER['HTTP_X_REQUESTED_WITH'])) ?
		(strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') ? true : false: false;
		($isXmlHttpRequest) ? header('Content-type: application/json') : header('Content-type: text/plain');
		
		echo json_encode($response);
		$stmt->close();
		mysqli_close($dbhandle);
		return;
	}
	
	$result = $stmt->get_result();	
	$row = $result->fetch_assoc();
	mysqli_stmt_free_result($stmt);
	
	if($row)
	{
		$data = $row["block_players"];
		$user = $row["user_id"];

		if(empty($user))
		{
			$stmt2 = $dbhandle->prepare("INSERT INTO chat_block_list (user_id) VALUES (?)");	
			$stmt2->bind_param("s", $user_id);
			$result2 = $stmt2->execute();
			
			if($result2)
			{
				$return = "BLOCK_LIST_INSERT_OK";
				$error = "";
				$response = array('result'=>$return,'players'=>"", 'error'=>$error);
			}
			else
			{
				$return = "BLOCK_LIST_INSERT_FAIL";
				$error = mysqli_error($dbhandle);
				$response = array('result'=>$return,'players'=>"", 'error'=>$error);
			}
			
			$stmt2->close();
		}
		
		else
		{
			$return = "BLOCK_LIST_OK";
			$error = "";
			if(empty($data))
				$response = array('result'=>$return,'players'=>"", 'error'=>$error);
			else
				$response = array('result'=>$return,'players'=>$data, 'error'=>$error);
		}
	}
	
	else
	{
		$return = "BLOCK_LIST_FAIL";
		$error = "User block list not found";
		$response = array('result'=>$return,'players'=>"", 'error'=>$error);
	}
	
	$stmt->close();
	
	$isXmlHttpRequest = (isset($_SERVER['HTTP_X_REQUESTED_WITH'])) ?
	(strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') ? true : false: false;
	($isXmlHttpRequest) ? header('Content-type: application/json') : header('Content-type: text/plain');
	 
	echo json_encode($response);

	mysqli_close($dbhandle);

}


//$json = json_decode(file_get_contents('php://input'));
//$id = $json->id;

// Safely get user_id from GET parameters
if (isset($_GET['user_id']))
{
	BlockListQuery($_GET['user_id']);
}
else
{
	$isXmlHttpRequest = (isset($_SERVER['HTTP_X_REQUESTED_WITH'])) ?
	(strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') ? true : false: false;
	($isXmlHttpRequest) ? header('Content-type: application/json') : header('Content-type: text/plain');
	
	echo json_encode(array('result'=>'BLOCK_LIST_FAIL','players'=>"", 'error'=>'user_id parameter is required'));
}

?>