<?php

/****************************************************************
* Dimitri Dessus (https://www.youtube.com/user/theiphoneretro)
* Développons un peu | Episode 27
* Version 1.2
* Dernière mise à jour : 28/05/2016
*****************************************************************/

header('Content-type: application/json');

/************************/
//		Variables		//
/************************/

$DB_HOST = "localhost";
$DB_NAME = "appli";
$DB_USER = "appli";
$DB_PASS = "Rhutvev4";

if(!isset($_POST['pseudo']) || !isset($_POST['password']))
{
	die('{"status_code":0,"error_description":"variable(s) non déclarée(s)"}');
}

/************************/
//		   MYSQL		//
/************************/

try
{
    $connexion = new PDO("mysql:host=$DB_HOST;dbname=$DB_NAME", $DB_USER, $DB_PASS);
}
catch(PDOException $e)
{
	die('{"status_code":0,"status_describe":"connexion db impossible"}');
}

$pseudo 	= $connexion->quote($_POST['pseudo']);

/************************/
//		 TRAITEMENT		//
/************************/

$selectStatement = $connexion->prepare("SELECT pseudo FROM UTILISATEURS WHERE UTILISATEURS.pseudo = ". $pseudo ." AND UTILISATEURS.password='". password_hash($_POST['password'], PASSWORD_BCRYPT) ."' LIMIT 1");

if($selectStatement->execute())
{
	$nbr_ligne = $selectStatement->rowCount();

	if($nbr_ligne > 0)
	{
		die('{"status_code":1,"status_describe":"login reussi !"}');
	}
	else
	{
		die('{"status_code":0,"status_describe":"nom d\'utilisateur et/ou mot de passe incorrect"}');
	}
}
else
{
	print_r($selectStatement->errorInfo());
	die('{"status_code":0,"status_describe":"erreur lors de l\execution de la requete SQL"}');
}

?>