<?php
try {
  error_reporting(E_ALL); ini_set('display_errors', 1);
  require_once "./pineapple.php";
  require_once "./mysql/helper.php";
  pineapple_html_begin("Pineapple PNP", "Referrals");

  $db = db_connect("pontech_pineapplepnp");

  //print("<pre>\n");
  //print_r($_POST);
  //print_r($_SESSION);  // Warning, printing session vars could lead to security issues
  //print("</pre>\n");
	
	if(!isset($_SESSION['email']))
  {
		echo "<br>You must sign in to edit your referrals<br>";
    goto exit_page;
  }
  
  $email = $_SESSION['email'];
  
  // Account must be validated prior to making referrals
  $sql = "SELECT * FROM user WHERE email = '$email' AND phone_num_verified=1";
  $result = $db->query($sql);
  $num_rows = $result->rowCount();
  if ($num_rows == 0) {
    ?>
		<p>Please verify your account prior to making any referrals. Please click <a href="pineapple_verify_phone.php">here</a> to begin the verification process.</p>
		<?php
    goto exit_page;
  }
  
  ?>
  <h2>Current Referrals</h2>
  <?php
  // All referrals and thier status
  $statement = "SELECT pontech_pineapplepnp.referral.referral_email, If(fullname Is Null,'','Yes') AS signed_up, If(phone_num_verified Is Null,''," . 
               "If(phone_num_verified=1,'Yes','')) AS verified_account FROM pontech_pineapplepnp.referral LEFT JOIN pontech_pineapplepnp.user ON " . 
               "referral.referral_email = user.email WHERE (((referral.email)='$email'))";
  db_table($db, $statement, "t01", NULL);
  ?>
  
  <h2>Add Referral</h2>
  <form method="post" action="pineapple_referral_action.php">
    E-Mail Address: <input type="text" name="referral_email"/><br />
    <input type="submit" value="Submit""/>
  </form>
  <?php
  $db = NULL;
  
exit_page:

	pineapple_script_end();
	pineapple_html_end();
}
catch (PDOException $e)
{
  print ("<br />$e");
}
?>