<?php
 include_once("../../cfg/db.php");
 include_once('../../app/employee/class_login.php');
include_once("../../api/controllers/utility.php");

 
 if ($_SERVER["REQUEST_METHOD"] != "GET") { 
    $return_arr["message"]=" You are not allowed to do this action.";   
    echo $return_arr["message"];
    return;
}
 

$utility = new Utility(); 

if(isset($_REQUEST['token']) ){
    $token = $_REQUEST['token']; 
			
        $token = $_REQUEST['token']; 
         if(isNotEmpty($token)){ 
             $asa_id = '';
             $employee_id = '';
            $login_ids = $db -> sql_query("SELECT e.asa_id,e.employee_id FROM `employee` e 
            INNER JOIN employee_account ea 
            ON e.employee_id = ea.employee_id
            WHERE ea.token = '$token' LIMIT 1");
            foreach($login_ids as $data){
                $asa_id = $data['asa_id'];
                $employee_id = $data['employee_id'];
            }
 
            $login = new Login(); 
            if(isNotEmpty($employee_id) && isNotEmpty($asa_id) && intval($asa_id) !==0 ){
                $login -> save(1," AND e.asa_id='$asa_id' ",true,$utility,$db);
                $db -> sql_query("UPDATE employee_account SET token = ''  WHERE employee_id = '$employee_id' ");
                header('location: ../../home.php');
                return;
            }
        
            header('location: ../../signin.php');
            return;

         }else{ 
            header('location: ../../signin.php');
            // $return_arr["message"]=" You are not allowed to do this action.";   
            // echo $return_arr["message"];
            // return;
        }


}else{ 
    $return_arr["message"]=" You are not allowed to do this action.";   
    echo $return_arr["message"];
    return;
}


function isNotEmpty($data){
	return preg_match('/\S/', $data);
}

 
?>