<?php

class actionAdminUsersEdit extends cmsAction {

    public function run($id = false) {

        if (!$id) {
            return cmsCore::error404();
        }

        $user = $this->model_users->getUser($id);

        if (!$user) {
            return cmsCore::error404();
        }

        $old_email = $user['email'];

        $form = $this->getForm('user', ['edit']);

        if ($this->request->has('submit')) {

            cmsCore::loadControllerLanguage('auth');

            $user = $form->parse($this->request, true);

            if (!$user['is_locked']) {
                $user['lock_until']  = null;
                $user['lock_reason'] = null;
            }

            $errors = $form->validate($this, $user);

            if (!$errors) {

                if ($user['email'] && $old_email != $user['email']) {

                    cmsUser::setUPS('users.change_email_' . md5($user['email']), [
                        'accepted'  => 1,
                        'email'     => $old_email,
                        'timestamp' => time(),
                        'hash'      => string_random()
                    ]);

                    cmsUser::setUPS('users.change_email_' . md5($old_email), [
                        'accepted'  => 1,
                        'email'     => $user['email'],
                        'timestamp' => time(),
                        'hash'      => string_random()
                    ]);
                }

                $result = $this->model_users->updateUser($id, $user);

                if ($result['success']) {

                    cmsUser::addSessionMessage(LANG_CP_SAVE_SUCCESS, 'success');

                    $back_url = $this->getRequestBackUrl();

                    list($back_url, $id, $user) = cmsEventsManager::hook('users_after_edit_admin', [$back_url, $id, $user], null, $this->request);

                    if ($back_url) {
                        return $this->redirect($back_url);
                    } else {
                        return $this->redirectToAction('users');
                    }

                } else {
                    $errors = $result['errors'];
                }
            }

            if ($errors) {
                cmsUser::addSessionMessage(LANG_FORM_ERRORS, 'error');
            }
        }

        return $this->cms_template->render('user', [
            'do'     => 'edit',
            'user'   => $user,
            'form'   => $form,
            'errors' => $errors ?? false
        ]);
    }

}