<?php
require_once __DIR__ . '/.credentials.php';
require_once '/home/banners/public_html/bway/db/mysql_bootstrap.php';

if (!defined('DB_TLS_ENABLED')) {
    // StageMag TLS default is ON; set DB_TLS_ENABLED=0 to override temporarily.
    define('DB_TLS_ENABLED', getenv('DB_TLS_ENABLED') !== '0');
}
if (!defined('DB_TLS_CA_PATH')) {
    define('DB_TLS_CA_PATH', getenv('DB_TLS_CA_PATH') ?: '/etc/pki/tls/certs/rds-global-bundle.pem');
}
if (!defined('DB_TLS_VERIFY_SERVER_CERT')) {
    define('DB_TLS_VERIFY_SERVER_CERT', getenv('DB_TLS_VERIFY_SERVER_CERT') !== '0');
}

function db_write(): PDO {
    static $pdo = null;
    if ($pdo === null) {
        $pdo = new PDO(
            'mysql:host=' . DB_WRITE_HOST . ';charset=utf8mb4',
            DB_USER,
            DB_PASS,
            mysqlPdoOptions(
                [],
                DB_TLS_ENABLED,
                DB_TLS_CA_PATH,
                DB_TLS_VERIFY_SERVER_CERT
            )
        );
        $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        $pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
    }
    return $pdo;
}

function db_read(): PDO {
    static $pdo = null;
    if ($pdo === null) {
        $pdo = new PDO(
            'mysql:host=' . DB_READ_HOST . ';charset=utf8mb4',
            DB_USER,
            DB_PASS,
            mysqlPdoOptions(
                [],
                DB_TLS_ENABLED,
                DB_TLS_CA_PATH,
                DB_TLS_VERIFY_SERVER_CERT
            )
        );
        $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        $pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
    }
    return $pdo;
}