ComplaintBox.cpp

#include "ComplaintBox.h"
#include <iostream>
#include <fstream>
#include <sstream>
#include <bits/stdc++.h> 
#include <openssl/sha.h>
#include <conio.h>
#include "globals.h"


std::string logged_in_username = "random";

using namespace std;

string getHiddenPassword() {
    string pass;
    char ch;
    while ((ch = _getch()) != '\r') { // Enter key
        if (ch == '\b') { // Backspace
            if (!pass.empty()) {
                cout << "\b \b";
                pass.pop_back();
            }
        } else {
            pass += ch;
            cout << '*';
        }
    }
    cout << endl;
    return pass;
}

string hashPassword(const string& password) {
    unsigned char hash[SHA256_DIGEST_LENGTH];
    SHA256((const unsigned char*)password.c_str(), password.size(), hash);

    stringstream ss;
    for (int i = 0; i < SHA256_DIGEST_LENGTH; ++i)
        ss << hex << setw(2) << setfill('0') << (int)hash[i];

    return ss.str();
}


ComplaintBox::ComplaintBox() {
    sqlite3_open("complaints.db", &db);
    createTables();
}

ComplaintBox::~ComplaintBox() {
    sqlite3_close(db);
}

void ComplaintBox::createTables() {
    string sqlUsers = "CREATE TABLE IF NOT EXISTS users (username TEXT PRIMARY KEY, password TEXT);";
    string sqlAdmins = "CREATE TABLE IF NOT EXISTS adminusers (username TEXT PRIMARY KEY, password TEXT);";
    string sqlComplaints = "CREATE TABLE IF NOT EXISTS complaints ("
    "complaint_id INTEGER PRIMARY KEY AUTOINCREMENT, "
    "category TEXT, "
    "subCategory TEXT, "
    "message TEXT, "
    "status TEXT DEFAULT 'Pending', "
    "timestamp DATETIME DEFAULT CURRENT_TIMESTAMP, "
    "notified INTEGER DEFAULT 0);";

    sqlite3_exec(db, sqlUsers.c_str(), 0, 0, &errMsg);
    sqlite3_exec(db, sqlAdmins.c_str(), 0, 0, &errMsg);
    sqlite3_exec(db, sqlComplaints.c_str(), 0, 0, &errMsg);
}

void ComplaintBox::registerUser(bool isAdmin) {
    string uname;
    cout << PURPLE << "Enter username: " << RESET;
    cin >> uname;

    string checkSql = "SELECT * FROM users WHERE username='" + uname + "';";
    bool exists = false;

    sqlite3_exec(db, checkSql.c_str(), [](void *data, int, char **, char **) -> int {
        *(bool *)data = true;
        return 0;
    }, &exists, &errMsg);

    if (exists) {
        cout << BOLDRED << "Username already exists. Please choose a different Username.\n" << RESET;
        return;
    }

    cout << PURPLE << "Enter password: " << RESET;
    string pass1 = getHiddenPassword();

    cout << PURPLE << "Confirm password: " << RESET;
    string pass2 = getHiddenPassword();

    if (pass1 != pass2) {
        cout << RED << "Passwords do not match. Registration failed.\n" << RESET;
        return;
    }

    string table = isAdmin ? "adminusers" : "users";
    string hashedPass = hashPassword(pass1);
    string insertSql = "INSERT INTO " + table + " (username, password) VALUES ('" + uname + "', '" + hashedPass + "');";

    if (sqlite3_exec(db, insertSql.c_str(), 0, 0, &errMsg) != SQLITE_OK) {
        cout << RED << "Error: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    } else {
        cout << BOLDGREEN << "Registration successful!\n" << RESET;
    }
}


bool ComplaintBox::loginUser(bool isAdmin) {
    string uname, pass;
    cout << CYAN << "Enter username: " << RESET;
    cin >> uname;
    cout << CYAN << "Enter password: " << RESET;
    pass = getHiddenPassword();    

    string table = isAdmin ? "adminusers" : "users";
    string hashedPass = hashPassword(pass);
    string sql = "SELECT * FROM " + table + " WHERE username = '" + uname + "' AND password = '" + hashedPass + "';";
    
    bool success = false;

    sqlite3_exec(db, sql.c_str(), [](void *successPtr, int, char **, char **) -> int {
        *(bool*)successPtr = true;
        return 0;
    }, &success, &errMsg);

    if (success) {
        cout << GREEN << "Login successful!\n" << RESET;
        admin_logged_in = isAdmin;
        logged_in_username = uname;

        if (isAdmin) {
            const char* countSQL = "SELECT COUNT(*) FROM complaints WHERE notified = 0;";
            int newComplaints = 0;
            sqlite3_exec(db, countSQL, [](void* data, int argc, char** argv, char**) -> int {
                *(int*)data = atoi(argv[0]);
                return 0;
            }, &newComplaints, &errMsg);

            if (newComplaints > 0) {
                cout << YELLOW << "You have " << newComplaints << " new complaint(s)!\n" << RESET;

                const char* updateSQL = "UPDATE complaints SET notified = 1 WHERE notified = 0;";
                sqlite3_exec(db, updateSQL, 0, 0, &errMsg);
            } else {
                cout << GREEN << "No new complaints since your last login.\n" << RESET;
            }
            showDashboardSummary();
        }

        return true;
    } else {
        cout << RED << "Invalid credentials!\n" << RESET;
        return false;
    }
}


void ComplaintBox::fileComplaint() {
    string category, subCategory, message;
    cout << YELLOW << "Enter category: " << RESET;
    cin.ignore();
    getline(cin, category);
    cout << YELLOW << "Enter sub-category: " << RESET;
    getline(cin, subCategory);
    cout << YELLOW << "Enter complaint message: " << RESET;
    getline(cin, message);

    string filedBy = logged_in_username.empty() ? "random" : logged_in_username;

    string sql = "INSERT INTO complaints (category, subCategory, message, status, filed_by) VALUES ('" 
                 + category + "', '" + subCategory + "', '" + message + "', 'Pending', '" + filedBy + "');";

    if (sqlite3_exec(db, sql.c_str(), 0, 0, &errMsg) != SQLITE_OK) {
        cout << RED << "Error: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    } else {
        cout << BOLDGREEN << "Complaint filed successfully by '" << filedBy << "' with status 'Pending'!\n" << RESET;
    }
}



void ComplaintBox::exportComplaintsToCSV() {
    if (!admin_logged_in) {
        cout << RED << "Only admins are allowed to export complaints.\n" << RESET;
        return;
    }

    ofstream file("complaints_export.csv");
    if (!file.is_open()) {
        cout << RED << "Failed to create CSV file.\n" << RESET;
        return;
    }

    file << "complaint_id,filed_by,category,subCategory,message,status,timestamp\n";

    string sql = "SELECT complaint_id, filed_by, category, subCategory, message, status, timestamp FROM complaints;";

    auto callback = [](void *data, int argc, char **argv, char **colName) -> int {
        ofstream *f = static_cast<ofstream *>(data);
        for (int i = 0; i < argc; i++) {
            *f << (argv[i] ? argv[i] : "") << (i < argc - 1 ? "," : "\n");
        }
        return 0;
    };

    if (sqlite3_exec(db, sql.c_str(), callback, &file, &errMsg) != SQLITE_OK) {
        cout << RED << "Export failed: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    } else {
        cout << BOLDGREEN << "Complaints exported to 'complaints_export.csv'\n" << RESET;
    }

    file.close();
}



void ComplaintBox::searchComplaints() {
    string keyword;
    cout << YELLOW << "Enter keyword to search for: " << RESET;
    cin.ignore();
    getline(cin, keyword);

    string sql = "SELECT complaint_id, category, subCategory, message, status FROM complaints "
                 "WHERE category LIKE '%" + keyword + "%' OR "
                 "subCategory LIKE '%" + keyword + "%' OR "
                 "message LIKE '%" + keyword + "%' OR "
                 "status LIKE '%" + keyword + "%';";  
    
    cout << CYAN << "\nSearch Results:\n" << RESET;
    auto callback = [](void *data, int argc, char **argv, char **colName) -> int {
        for (int i = 0; i < argc; i++) {
            cout << (colName[i] ? colName[i] : "") << ": " << (argv[i] ? argv[i] : "NULL") << "  ";
        }
        cout << "\n";
        return 0;
    };

    if (sqlite3_exec(db, sql.c_str(), callback, 0, &errMsg) != SQLITE_OK) {
        cout << RED << "Search failed: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    }
}


void ComplaintBox::updateComplaintStatus(int complaint_id, const std::string& new_status) {
    if (!admin_logged_in) {
        cout << RED << "Only admins can update complaint status.\n" << RESET;
        return;
    }

    sqlite3_stmt* stmt;
    string sql = "UPDATE complaints SET status = ? WHERE complaint_id = ?";

    if (sqlite3_prepare_v2(db, sql.c_str(), -1, &stmt, nullptr) == SQLITE_OK) {
        sqlite3_bind_text(stmt, 1, new_status.c_str(), -1, SQLITE_STATIC);
        sqlite3_bind_int(stmt, 2, complaint_id);

        if (sqlite3_step(stmt) == SQLITE_DONE) {
            cout << GREEN << "Status updated successfully.\n" << RESET;
        } else {
            cerr << RED << "Failed to update status.\n" << RESET;
        }
    } else {
        cerr << RED << "SQL Prepare Failed: " << sqlite3_errmsg(db) << "\n" << RESET;
    }

    sqlite3_finalize(stmt);
}

void ComplaintBox::viewMyComplaints() {
    if (logged_in_username.empty()) {
        cout << RED << "Please log in to view your complaints.\n" << RESET;
        return;
    }

    string sql = "SELECT complaint_id, category, subCategory, message, status, timestamp FROM complaints WHERE filed_by = '" + logged_in_username + "';";

    cout << BOLDGREEN << "Your Complaints:\n" << RESET;

    auto callback = [](void* unused, int argc, char** argv, char** colName) -> int {
        cout << "\nComplaint ID: " << argv[0]
             << "\nCategory: " << argv[1]
             << "\nSub-category: " << argv[2]
             << "\nMessage: " << argv[3]
             << "\nStatus: " << argv[4]
             << "\nTimestamp: " << argv[5] << "\n";
        return 0;
    };

    if (sqlite3_exec(db, sql.c_str(), callback, 0, &errMsg) != SQLITE_OK) {
        cout << RED << "Failed to fetch complaints: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    }
}

void ComplaintBox::editComplaint() {
    int id;
    cout << CYAN << "Enter Complaint ID to edit: " << RESET;
    cin >> id;
    cin.ignore();

    string sql = "SELECT status FROM complaints WHERE complaint_id = " + to_string(id) + " AND filed_by = '" + logged_in_username + "';";
    string status;
    bool found = false;

    sqlite3_exec(db, sql.c_str(), [](void* s, int argc, char** argv, char**) -> int {
        if (argc > 0 && argv[0]) {
            *(string*)s = argv[0];
        }
        return 0;
    }, &status, &errMsg);

    if (status != "Pending") {
        cout << RED << "You can only edit complaints in 'Pending' status.\n" << RESET;
        return;
    }

    string newMsg;
    cout << YELLOW << "Enter new complaint message: " << RESET;
    getline(cin, newMsg);

    sql = "UPDATE complaints SET message = '" + newMsg + "' WHERE complaint_id = " + to_string(id) + " AND filed_by = '" + logged_in_username + "';";

    if (sqlite3_exec(db, sql.c_str(), 0, 0, &errMsg) == SQLITE_OK) {
        cout << GREEN << "Complaint updated successfully.\n" << RESET;
    } else {
        cout << RED << "Update failed: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    }
}

void ComplaintBox::deleteComplaint() {
    int id;
    cout << CYAN << "Enter Complaint ID to delete: " << RESET;
    cin >> id;

    string sql = "SELECT status FROM complaints WHERE complaint_id = " + to_string(id) + " AND filed_by = '" + logged_in_username + "';";
    string status;

    sqlite3_exec(db, sql.c_str(), [](void* s, int argc, char** argv, char**) -> int {
        if (argc > 0 && argv[0]) {
            *(string*)s = argv[0];
        }
        return 0;
    }, &status, &errMsg);

    if (status != "Pending") {
        cout << RED << "Only 'Pending' complaints can be deleted.\n" << RESET;
        return;
    }

    sql = "DELETE FROM complaints WHERE complaint_id = " + to_string(id) + " AND filed_by = '" + logged_in_username + "';";
    
    if (sqlite3_exec(db, sql.c_str(), 0, 0, &errMsg) == SQLITE_OK) {
        cout << GREEN << "Complaint deleted successfully.\n" << RESET;
    } else {
        cout << RED << "Delete failed: " << errMsg << RESET << endl;
        sqlite3_free(errMsg);
    }
}

void ComplaintBox::showDashboardSummary() {
    if (!admin_logged_in) {
        cout << RED << "Only admins can view dashboard summary.\n" << RESET;
        return;
    }

    struct StatusCount {
        int total = 0;
        int pending = 0;
        int inProgress = 0;
        int resolved = 0;
    } counts;

    string sql = "SELECT status, COUNT(*) FROM complaints GROUP BY status;";
    sqlite3_exec(db, sql.c_str(), [](void* data, int argc, char** argv, char**) -> int {
        StatusCount* c = static_cast<StatusCount*>(data);
        string status = argv[0] ? argv[0] : "";
        int count = argv[1] ? atoi(argv[1]) : 0;

        c->total += count;
        if (status == "Pending") c->pending = count;
        else if (status == "In Progress") c->inProgress = count;
        else if (status == "Resolved") c->resolved = count;

        return 0;
    }, &counts, &errMsg);

    cout << BOLDVIOLET << "\nComplaint Summary Dashboard\n" << RESET;
    cout << WHITE << "Total Complaints: " << BOLDGREEN << counts.total << RESET << endl;
    cout << WHITE << "Pending: " << YELLOW << counts.pending << RESET << endl;
    cout << WHITE << "In Progress: " << PURPLE << counts.inProgress << RESET << endl;
    cout << WHITE << "Resolved: " << GREEN << counts.resolved << RESET << endl;
}