Le code pour la partie connexion :
Database.php :
<?php
class Database {
private string $_dbName = DB_NAME;
private string $_dbUser = DB_USER;
private string $_dbPwd = DB_PWD;
protected function connectDB(){
try{
$db = new PDO('mysql:host=localhost;dbname='.$this->_dbName.';charset=utf8', $this->_dbUser, $this->_dbPwd);
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
return $db;
}catch(PDOException $e){
die("Erreur PDO : ". $e->getMessage());
}
}
}
?>
config.php :
<?php
/* INFORMATIONS DE CONNEXION A LA BDD */
define('DB_NAME', 'exophp');
define('DB_USER', 'root');
define('DB_PWD', '');
?>
Users.php :
<?php
class Users extends Database{
public function getAllUsers()
{
$db = $this->connectDB();
$query = "SELECT * FROM users";
$statment = $db->prepare($query);
$statment->execute();
return $statment->fetchAll();
}
public function getID($mail){
$db = $this->connectDB();
$requete = "SELECT id FROM users WHERE mail = :mail";
$statment = $db->prepare($requete);
$statment->bindValue(":mail", $mail, PDO::PARAM_STR);
$statment->execute();
//fetch() retourne un tableau de tous les id
$id = $statment->fetch();
if ($id == false){
return false;
}
return $id;
//return $id === false ? false : intval($id['id']);
}
public function getUser($id){
$db = $this->connectDB();
$requete = "SELECT * FROM users WHERE id = :id";
$statment = $db->prepare($requete);
$statment->bindValue(":id", $id, PDO::PARAM_INT);
$statment->execute();
$result = $statment->fetch();
return $result; //ou return $statment->fetch(); et delete l.56
}
public function changeInfos($id, $name, $lastname, $age, $telephone){
$db = $this->connectDB();
$requete = "UPDATE users SET prenom = :name, nom = :lastname, age = :age,
telephone = :telephone WHERE id = :id";
$statment = $db->prepare($requete);
$statment->bindValue(":name", $name, PDO::PARAM_STR);
$statment->bindValue(":lastname", $lastname, PDO::PARAM_STR);
$statment->bindValue(":age", $age, PDO::PARAM_INT);
$statment->bindValue(":telephone", $telephone, PDO::PARAM_STR);
$statment->bindValue(":id", $id, PDO::PARAM_STR);
$statment->execute();
}
public function changePassword($id, $password){
$db = $this->connectDB();
$requete = "UPDATE users SET password = :password WHERE id = :id";
$statment = $db->prepare($requete);
$statment->bindValue(":password", $password, PDO::PARAM_STR);
$statment->bindValue(":id", $id, PDO::PARAM_INT);
$statment->execute();
}
}
?>
index.php :
<?php
require_once './config.php';
require_once './models/Database.php';
require_once './models/Users.php';
session_start();
if (isset($_SESSION['user'])){
header('Location: account.php');
exit();
}
$Users = new Users();
$error = false;
$idUser = false;
//verifie si le formulaire a ete soumis avec la methode POST
if($_SERVER['REQUEST_METHOD'] === 'POST'){
$idUser = $Users->getID($_POST['email']);
if($idUser === false){
$error = true;
}
else {
$user = $Users->getUser($idUser);
if(password_verify($_POST['password'], $user['password'])){
unset($user['password']);
$_SESSION['user'] = $user;
header('Location: account.php');
exit();
} else {
$error = true;
}
}
}
?>
<!DOCTYPE html>
<html lang="fr">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="assets/css/style.css">
<link rel="stylesheet" href="assets/css/header.css">
<title>Connexion</title>
</head>
<body>
<header>
<nav>
<ul>
<li class="gauche"><a href="#home">Forum</a></li>
<li class="gauche"><a href="#about">Accueil</a></li>
<li class="droite"><a href="#services">Créer un compte</a></li>
<li class="droite"><a href="#contact">Login</a></li>
</ul>
</nav>
</header>
<div class="form">
<form action="index.php" method="POST">
<div>
<p>Connexion</p>
<label for="email">Adresse e-mail</label>
<input type="email" id="email" name="email" placeholder="nom@monemail.com">
</div>
<div>
<label for="password">Mot de passe</label>
<input type="password" id="password" name="password" placeholder="************">
</div>
<div>
<input class="login" type="submit" value="Login">
<?php if($error) : ?>
<p class="erreur">
Utilisateur ou mot de passe incorrect
</p>
<?php endif; ?>
</div>
</form>
</div>
</body>
</html>
