// Vulnerability label: RENT_TimeO
pragma solidity ^0.4.21;

/*
*   Basic PHX-Ethereum Exchange
*
*   This contract keeps a list of buy/sell orders for PHX coins
*   and acts as a market-maker matching sellers to buyers.
*   
* //*** Developed By:
*   _____       _         _         _ ___ _         
*  |_   _|__ __| |_  _ _ (_)__ __ _| | _ (_)___ ___ 
*    | |/ -_) _| ' \| ' \| / _/ _` | |   / (_-</ -_)
*    |_|\___\__|_||_|_||_|_\__\__,_|_|_|_\_/__/\___|
*   
*   © 2018 TechnicalRise.  Written in March 2018.  
*   All rights reserved.  Do not copy, adapt, or otherwise use without permission.
*   https://www.reddit.com/user/TechnicalRise/
*  
*   Thanks to Ogu, TocSick, and Norsefire.
*/

contract ERC20Token {
    function transfer(address to, uint tokens) public returns (bool success);
    function transferFrom(address from, address to, uint256 tokens) public returns (bool success);
}

contract SimplePHXExchange {
    
    // ScaleFactor
    // It needs to be possible to make PHX cost less than 1 Wei / Rise
    // And vice-versa, make ETH cost less than 1 Rise / Wei
    uint public ScaleFactor = 10 ** 18;  
    
    // ****  Maps for the Token-Seller Side of the Contract
    // Array of offerors
    address[] public tknOfferors;
	mapping(address => uint256) public tknAddrNdx;

	// Array between each address and their tokens offered and buy prices.
	mapping(address => uint256) public tknTokensOffered;
	mapping(address => uint256) public tknPricePerToken; // In qWeiPerRise (need to multiply by 10 ** 36 to get it to ETH / PHX)

    // ****  Maps for the Token-Buyer Side of the Contract
    // Array of offerors
    address[] public ethOfferors;
	mapping(address => uint256) public ethAddrNdx;

	// Array between each address and their tokens offered and buy prices.
	mapping(address => uint256) public ethEtherOffered;
	mapping(address => uint256) public ethPricePerToken; // In qRisePerWei (need to multiply by 10 ** 36 to get it to PHX / ETH)
    // ****

    ERC20Token public phxCoin;

    function SimplePHXExchange() public {
        phxCoin = ERC20Token(0x14b759A158879B133710f4059d32565b4a66140C); // Initiates a PHX Coin !important -- Make sure this is the PHX contract!
        tknOfferors.push(0x0); // This is because all IDs in tknAddrNdx will initialize to zero
        ethOfferors.push(0x0); // This is because all IDs in ethAddrNdx will initialize to zero
    }

    function offerTkn(uint _tokensOffered, uint _tokenPrice) public {
        require(_humanSender(msg.sender));
        require(tknAddrNdx[msg.sender] == 0); // Make sure that this offeror has cancelled all previous offers
        require(0 < _tokensOffered); // Make sure some number of tokens are offered
        require(phxCoin.transferFrom(msg.sender, this, _tokensOffered)); // Require that transfer can be and is made
        tknTokensOffered[msg.sender] = _tokensOffered;
        tknPricePerToken[msg.sender] = _tokenPrice; // in qWeiPerRise
        tknOfferors.push(msg.sender);
        tknAddrNdx[msg.sender] = tknOfferors.length - 1;
    }
    
    function offerEth(uint _tokenPrice) public payable {
        require(_humanSender(msg.sender));
        require(ethAddrNdx[msg.sender] == 0); // Make sure that this offeror has cancelled all previous offers
        require(0 < msg.value); // Make sure some amount of eth is offered
        ethEtherOffered[msg.sender]  = msg.value;
        ethPricePerToken[msg.sender] = _tokenPrice; // in qRisesPerWei
        ethOfferors.push(msg.sender);
        ethAddrNdx[msg.sender] = ethOfferors.length - 1;
    }

    function cancelTknOffer() public {
        if(tknAddrNdx[msg.sender] == 0) return; // No need to cancel non-existent offer
        phxCoin.transfer(msg.sender, tknTokensOffered[msg.sender]); // Return the Tokens
        _cancelTknOffer(msg.sender);
    }

    function _cancelTknOffer(address _offeror) internal {
        delete tknTokensOffered[_offeror];
        delete tknPricePerToken[_offeror];

        uint ndx = tknAddrNdx[_offeror];

        // If this isn't the only offer, reshuffle the array
        // Moving the last entry to the middle of the list
        tknOfferors[ndx] = tknOfferors[tknOfferors.length - 1];
        tknAddrNdx[tknOfferors[tknOfferors.length - 1]] = ndx;
        delete tknOfferors[tknOfferors.length - 1];
        delete tknAddrNdx[_offeror]; // !important
    }

    function cancelEthOffer() public {
        if(ethAddrNdx[msg.sender] == 0) return; // No need to cancel non-existent offer
        msg.sender.transfer(ethEtherOffered[msg.sender]); // Return the Tokens
        _cancelEthOffer(msg.sender);
    }

    function _cancelEthOffer(address _offeror) internal {
        delete ethEtherOffered[_offeror];
        delete ethPricePerToken[_offeror];
        
        uint ndx = ethAddrNdx[_offeror];

        // If this isn't the only offer, reshuffle the array
        // Moving the last entry to the middle of the list
        ethOfferors[ndx] = ethOfferors[ethOfferors.length - 1];
        ethAddrNdx[ethOfferors[ethOfferors.length - 1]] = ndx;
        delete ethOfferors[ethOfferors.length - 1];
        delete ethAddrNdx[_offeror]; // !important
    }
    
    function buyTkn(uint _ndx) payable public {
        require(_humanSender(msg.sender));
        address _offeror = tknOfferors[_ndx];
        uint _purchasePrice = tknTokensOffered[_offeror] * tknPricePerToken[_offeror] / ScaleFactor; // i.e. # of Wei Required = Rises * (qWei/Rise) / 10**18
        require(msg.value >= _purchasePrice);
        require(phxCoin.transfer(msg.sender, tknTokensOffered[_offeror])); // Successful transfer of tokens to purchaser
        _offeror.transfer(_purchasePrice);
        _cancelTknOffer(_offeror);
    }
    
    function buyEth(uint _ndx) public {
        require(_humanSender(msg.sender));
        address _offeror = ethOfferors[_ndx];
        uint _purchasePrice = ethEtherOffered[_offeror] * ethPricePerToken[_offeror] / ScaleFactor;  // i.e. # of Rises Required = Wei * (qTRs/Wei) / 10**18
        require(phxCoin.transferFrom(msg.sender, _offeror, _purchasePrice)); // Successful transfer of tokens to offeror
        msg.sender.transfer(ethEtherOffered[_offeror]);
        _cancelEthOffer(_offeror);
    }
    
    function updateTknPrice(uint _newPrice) public {
        // Make sure that this offeror has an offer out there
        require(tknTokensOffered[msg.sender] != 0); 
        tknPricePerToken[msg.sender] = _newPrice;
    }
    
    function updateEthPrice(uint _newPrice) public {
        // Make sure that this offeror has an offer out there
        require(ethEtherOffered[msg.sender] != 0); 
        ethPricePerToken[msg.sender] = _newPrice;
    }
    
    // Getter Functions
    
    function getNumTknOfferors() public constant returns (uint _numOfferors) {
        return tknOfferors.length; // !important:  This is always 1 more than the number of actual offers
    }
    
    function getTknOfferor(uint _ndx) public constant returns (address _offeror) {
        return tknOfferors[_ndx];
    }
    
    function getTknOfferPrice(uint _ndx) public constant returns (uint _tokenPrice) {
        return tknPricePerToken[tknOfferors[_ndx]];
    }
    
    function getTknOfferAmount(uint _ndx) public constant returns (uint _tokensOffered) {
        return tknTokensOffered[tknOfferors[_ndx]];
    }
    
    function getNumEthOfferors() public constant returns (uint _numOfferors) {
        return ethOfferors.length; // !important:  This is always 1 more than the number of actual offers
    }
    
    function getEthOfferor(uint _ndx) public constant returns (address _offeror) {
        return ethOfferors[_ndx];
    }
    
    function getEthOfferPrice(uint _ndx) public constant returns (uint _etherPrice) {
        return ethPricePerToken[ethOfferors[_ndx]];
    }
    
    function getEthOfferAmount(uint _ndx) public constant returns (uint _etherOffered) {
        return ethEtherOffered[ethOfferors[_ndx]];
    }
    
    // **
    
    // A Security Precaution -- Don't interact with contracts unless you
    // Have a need to / desire to.
    // Determine if the "_from" address is a contract
    function _humanSender(address _from) private view returns (bool) {
      uint codeLength;
      assembly {
          codeLength := extcodesize(_from)
      }
      return (codeLength == 0); // If this is "true" sender is most likely a Wallet
    }
}