<?php 
require_once "../config.php";
require_once ABSPATH."/core/checklogin.php";
require_once ABSPATH."/core/functions.php";
require_once ABSPATH."/core/PasswordHash.php";
require_once ABSPATH."/core/resize-class.php";

$uid = filter_input(INPUT_GET, 'uid', FILTER_SANITIZE_STRING);

$SQL = $mysqli->query("SELECT * FROM users WHERE `username` ='$uid'");
$Row = mysqli_fetch_array($SQL); 
$role_id="2";
$active=$Row['active'];
$email_verified=$Row['email_verified'];

 if(isset($_POST['importsesao'])){
    // Allowed mime types
    $csvMimes = array('text/x-comma-separated-values', 'text/comma-separated-values', 'application/octet-stream', 'application/vnd.ms-excel', 'application/x-csv', 'text/x-csv', 'text/csv', 'application/csv', 'application/excel', 'application/vnd.msexcel', 'text/plain');
    
    // Validate whether selected file is a CSV file
    if(!empty($_FILES['file']['name']) && in_array($_FILES['file']['type'], $csvMimes)){
        
        // If the file is uploaded
        if(is_uploaded_file($_FILES['file']['tmp_name'])){
            
            // Open uploaded CSV file with read-only mode
            $csvFile = fopen($_FILES['file']['tmp_name'], 'r');
            
            // Skip the first line
            fgetcsv($csvFile);
            
            // Parse data from CSV file line by line
            while(($line = fgetcsv($csvFile)) !== FALSE){
                // Get row data
                $colum1  = $line[0];
                $colum2 = $line[1];
				$colum3 = $line[2];
				$colum4 = $line[3];
		$hasher = new PasswordHash(8, false);
		$password_db = $hasher->HashPassword($colum2);		
		$sqlnum= $mysqli->query("SELECT * FROM `users` WHERE username = '$colum1' ");
		$totalnum=mysqli_num_rows($sqlnum);
		if($totalnum > 0 ) { 
header("Location: ../account.php?page=sesao&op1=1&msg=error_import");		
		}else {
$query = "INSERT INTO ".DB_PREFIX."users (user_id, username, password, name, role_id, active, email_verified, groups) VALUES (NULL, ?, ?, ?, ?, ?, ?, ?)"; 
$stmt = $conn->prepare($query);
$stmt->bindParam(1, $colum1, PDO::PARAM_STR);
$stmt->bindParam(2, $password_db, PDO::PARAM_STR);
$stmt->bindParam(3, $colum3, PDO::PARAM_STR);
$stmt->bindParam(4, $role_id, PDO::PARAM_INT);
$stmt->bindParam(5, $active, PDO::PARAM_INT);
$stmt->bindParam(6, $email_verified, PDO::PARAM_INT);
$stmt->bindParam(7, $colum4, PDO::PARAM_STR);
$stmt->execute();
header("Location: ../account.php?page=sesao&op1=1&msg=add_ok");			
		}
			
            }
            
            // Close opened CSV file
            fclose($csvFile);
            
            $qstring = '?status=succ';
        }else{
            $qstring = '?status=err';
        }
    }else{
        $qstring = '?status=invalid_file';
    }
 }
	
exit;