class.user.php

<?php
class USER
{
    private $db;
 
    function __construct($DB_con)
    {
      $this->db = $DB_con;
    }
 
    public function register($uname,$umail,$upass,$fname,$lname,$birthday,$city,$credit_card,$ccv)
    {
       try
       {
           $new_password = md5($upass);
   
           $stmt = $this->db->prepare("INSERT INTO users(user_name,user_email,user_pass,first_name,last_name,birthday,city,credit_card,ccv) 
                                                       VALUES(:uname, :umail, :upass, :fname, :lname, :birthday, :city, :creditcard, :ccv)");
           
           $stmt->bindparam(":uname", $uname);
           $stmt->bindparam(":umail", $umail);
           $stmt->bindparam(":upass", $new_password);
           $stmt->bindparam(":fname", $fname);
           $stmt->bindparam(":lname", $lname);
           $stmt->bindparam(":birthday", $birthday); 
           $stmt->bindparam(":city", $city); 
           $stmt->bindparam(":creditcard", $credit_card); 
           $stmt->bindparam(":ccv", $ccv); 
           
           $stmt->execute(); 
   
           return $stmt; 
       }
       catch(PDOException $e)
       {
           echo $e->getMessage();
       }    
    }
 
    public function login($uname,$umail,$upass)
    {
       try
       {
          $stmt = $this->db->prepare("SELECT * FROM users WHERE user_name=:uname OR user_email=:umail LIMIT 1");
          $stmt->execute(array(':uname'=>$uname, ':umail'=>$umail));
          $userRow=$stmt->fetch(PDO::FETCH_ASSOC);
          if($stmt->rowCount() > 0)
          {
              
              $mdpass = md5($upass);
              if($mdpass==$userRow['user_pass'])
             {
               
                $_SESSION['user_session'] = $userRow['user_id'];
                
                return true;
             }
             else
             {
                 
                return false;
             }
          }
       }
       catch(PDOException $e)
       {
           echo $e->getMessage();
       }
   }
 
   public function is_loggedin()
   {
      if(isset($_SESSION['user_session']))
      {
         return true;
      }
   }
 
   public function redirect($url)
   {
       header("Location: $url");
   }
 
   public function logout()
   {
        session_destroy();
        unset($_SESSION['user_session']);
        return true;
   }
}
?>