LOGIN.PHP



<?php
require 'php/config.php';

if(!empty($_POST['submit'])){
	$errors = array();
	$email = htmlentities($_POST['email']);
	$password = $_POST['password'];

	if (!empty($email) && !empty($password)){
		$req = $pdo->prepare("SELECT * FROM users WHERE email = ? AND confirmed_at IS NOT NULL");
		$req->execute([$email]);
		$user = $req->fetch();
		if(password_verify($password, $user['password'])){
			$_SESSION['auth'] = $user;
			header('Location: #.php');
			exit();
		}else{
			$errors['invalid'] = "Identifiant ou mot de passe incorrectes";
		}
	}else{
		$errors['fill'] = "Veuillez remplire tous les champs";
	}
}

?>
<?php include 'views/login.view.php'; ?>





LOGIN.VIEW.PHP





<?php

if(isset($errors) && !empty($errors)){
	foreach($errors as $error){
		echo $error;
	}
}

?>
<form method="POST">
	<input type="text" name="email" placeholder="E-mail">
	<input type="password" name="password" placeholder="Password">
	<input type="submit" name="submit" value="Log In">
</form>




REGISTER.PHP



<?php
require 'php/config.php';

if(!empty($_POST['submit'])){
	$errors = array();
	$username = htmlentities($_POST['username']);
	$email = htmlentities($_POST['email']);
	$password = $_POST['password'];
	$passwordConfirm = $_POST['passwordConfirm'];

	if(empty($username) || !preg_match('/^[a-zA-Z0-9_]+$/', $username)){
		$errors['username'] = "Votre pseudonyme n'est pas valide";
	}else{
		$req = $pdo->prepare("SELECT id FROM users WHERE username = ?");
		$req->execute([$username]);
		$user = $req->fetch();
		if($user){
			$errors['username'] = "Ce pseudonyme est deja utilisé";
		}
	}

	if(empty($email) || !filter_var($email, FILTER_VALIDATE_EMAIL)){
		$errors['email'] = "Votre adresse e-mail n'est pas valide";
	}else{
		$req = $pdo->prepare("SELECT id FROM users WHERE email = ?");
		$req->execute([$email]);
		$user = $req->fetch();
		if($user){
			$errors['email'] = "Cet email est deja utilisé";
		}
	}

	if(empty($password) || $password != $passwordConfirm){
		$errors['password'] = "Vous devez renter un mot de passe";
	}

	if(empty($errors)){
		$req = $pdo->prepare("INSERT INTO users SET username = ?, email = ?, password = ?, avatar = 'default.png' ");
		$password = password_hash($_POST['passwordR'], PASSWORD_BCRYPT);
		$token = str_random(60);
		$req->execute([$username, $email, $password, $token]);
		$user_id = $pdo->lastInsertId();
		header('Location: login.php');
		exit();
	}
}

?>
<?php include 'views/register.view.php'; ?>




REGISTER.VIEW.PHP

<?php

if(isset($errors) && !empty($errors)){
	foreach($errors as $error){
		echo $error;
	}
}

?>
<form method="POST">
		<input type="text" name="username" class="form-control" placeholder="Pseudonyme">
		<input type="email" name="email" class="form-control" placeholder="Adresse E-mail">
		<input type="password" name="password" class="form-control" placeholder="Mot de passe" >
		<input type="password" name="passwordConfirm" class="form-control"  placeholder="Confirmation du mot de passe">
		<input type="submit" class="btn btn-outline-pink" value="S'inscrire" name="submitR">
</form>