<?php

require_once __DIR__ . '/../database/Database.php';
require_once __DIR__ . '/../services/ClientsService.php';

class OrdersService {
  private $db;
  private $clientsService;

  public function __construct() {
    $database = new Database();
    $this->db = $database->getConnection();
    $this->clientsService = new ClientsService();
  }

  private function validateOrderData($data) {
    $missingFields = [];
    
    foreach ([
      'creditAmount',
      'creditPeriod', 
      'depositType', 
      // 'carNumber', 
      // 'region', 
      'firstName', 
      'secondName',
      'phone',
      // 'pinfl',
      // 'creditHistory',
      'passportNumber',
      'passportSeries',
      // 'clientAddress',
    ] 
    as $requiredField) {
      if (!isset($data[$requiredField])) {
        $missingFields[] = $requiredField;
      }
    }

    if (!empty($missingFields)) {
      http_response_code(500);
      return json_encode(['error' => "Missing required fields: " . implode(', ', $missingFields)]);
    }

    return true;
  }

  private function sanitizeOrderData($data) {
        $data['creditAmount'] = $this->sanitizeFloat($data['creditAmount']);
        $data['creditPeriod'] = $this->sanitizeInteger($data['creditPeriod']);
        $data['depositType'] = $this->sanitizeString($data['depositType']);
        // $data['carNumber'] = $this->sanitizeString($data['carNumber']);
        // $data['region'] = $this->sanitizeString($data['region']);
        $data['firstName'] = $this->sanitizeString($data['firstName']);
        $data['secondName'] = $this->sanitizeString($data['secondName']);
        $data['phone'] = $this->sanitizePhone($data['phone']);
        // $data['pinfl'] = $this->sanitizeInteger($data['pinfl']);
        // $data['creditHistory'] = $this->sanitizeString($data['creditHistory']);
        $data['passportNumber'] = $this->sanitizeInteger($data['passportNumber']);
        $data['passportSeries'] = $this->sanitizeString($data['passportSeries']);
        // $data['clientAddress'] = $this->sanitizeString($data['clientAddress']);
    
        return $data;
  }

  private function sanitizeFloat($value) {
    $numericValue = preg_replace('/[^0-9.]/', '', $value);
    $numericValue = preg_replace('/\.(?=.*\.)/', '', $numericValue);

    return (float)$numericValue;
  }

  private function sanitizeInteger($value) {
    $numericValue = preg_replace('/\D/', '', $value);
    
    return (int)$numericValue; (int)$value;
  }

  private function sanitizeCollateralType($value) {
    $validTypes = ['автомобиль', 'квартира', 'золото', 'default'];
    if (in_array($value, $validTypes)) {
      return $value;
    } else {
      return 'default';
    }
  }

  private function sanitizePhone($value) {
    if (substr($value, 0, 1) === '+') {
      $value = substr($value, 1);
    }

    $value = preg_replace('/\D/', '', $value);

    if (strlen($value) < 9) {
      $value = '';
    }

    return $value;
  }

  private function sanitizeString($value) {
    if ($value !== null) {
      $value = trim($value);
      $value = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
    }
    return $value;
  }

  private function generateUniqueInteger($start, $end) {
    $timestamp = time();
    $random_value = mt_rand($start, $end);

    $unique_integer = $timestamp . $random_value;

    return $unique_integer;
  }

  public function createOrder($data) {

    $result = [];

    $validationResult = $this->validateOrderData($data);
    if($validationResult !== true) {
      return json_encode(['error' => $validationResult]);
    }

    $data = $this->sanitizeOrderData($data);

    $data['client_id'] = $this->clientsService->createClient($data);

    if ($data['client_id'] === null) {
      return json_encode(['error' => 'Failed to create client']);
    }

    $sql = "INSERT INTO orders (client_id, submission_datetime, loan_amount, loan_duration_months, collateral_type, phone_number, additional_feature_1, additional_feature_2)
            VALUES (:client_id, NOW(), :loan_amount, :loan_duration_months, :collateral_type, :phone_number, :additional_feature_1, :additional_feature_2)";

    $stmt = $this->db->prepare($sql);
    $stmt->bindValue(':client_id', $data['client_id']);
    $stmt->bindValue(':loan_amount', $data['creditAmount']);
    $stmt->bindValue(':loan_duration_months', $data['creditPeriod']);
    $stmt->bindValue(':collateral_type', $data['depositType']);
    // $stmt->bindValue(':car_registration_number', $data['carNumber']);
    // $stmt->bindValue(':region', $data['region']);
    $stmt->bindValue(':phone_number', $data['phone']);
    $stmt->bindValue(':additional_feature_1', $data['additionalFeature1'] ?? null);
    $stmt->bindValue(':additional_feature_2', $data['additionalFeature2'] ?? null);

    if ($stmt->execute()) {
      $order_id = $this->db->lastInsertId();
      $result['order_id'] = $order_id;
    } else {
      $errorInfo = $stmt->errorInfo();
      $errorMessage = $errorInfo[2];
      return json_encode(['error' => $errorMessage]);
    }

    $payment_sql = "INSERT INTO payment_requests (click_trans_id, order_id) VALUES (NULL, :order_id)";
      $payment_stmt = $this->db->prepare($payment_sql);
      $payment_stmt->bindParam(':order_id', $result['order_id']);

    if ($payment_stmt->execute()) {
      $payment_id = $this->db->lastInsertId();
      $result['payment_id'] = $payment_id;
    } else {
      $errorInfo = $stmt->errorInfo();
      $errorMessage = $errorInfo[2];
      return json_encode(['error' => $errorMessage]);
    }

    return json_encode($result);
  }
}