flavien
/
PROJET-WEB_STRI1A
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Page profil v1

Browse Source
admin
remi.biette 5 years ago
parent a682ee2890
commit eda70327ac
3 changed files with 147 additions and 35 deletions
Show Stats Download Patch File Download Diff File

19
WEB/connectionBD.php
Unescape Escape View File

@ -1,19 +0,0 @@
<?php
/**
* Created by PhpStorm.
* User: REMI
* Date: 16/04/2019
* Time: 14:46
*/
function connexionBD(){
$host = "localhost";
$dbname = "projet";
$user = "utilisateur";
$pass = "-stri-";
$db = pg_connect("host=$host port=5432 dbname=$dbname user=$user password=$pass") or die("Erreur lors de la connexion à la base de données.");
return $db;
}
?>

8
WEB/profil.css
Unescape Escape View File

@ -11,6 +11,10 @@
justify-content: center;
}
#mail_field, #dateN_field{
background-color: lightgray;
}
#imgProfil{
background-color: white;
margin-top: 2.5em;
@ -19,4 +23,8 @@
max-width: 210px;
max-height: 210px;
border-radius: 10px;
}
#changePass{
margin-bottom: 0.7em;
}

155
WEB/profil.php
Unescape Escape View File

@ -1,41 +1,160 @@
<?php
require ('connectionBD.php');
include ('tableauBord.php');
require_once ('connexionBD.php');
session_start();
if (!$_SESSION){
session_start();
}
if (!isset($_SESSION['mail'])){
header('Location: index.php');
exit();
}
$user = getUser($_SESSION['mail']);
$mail = $_SESSION['mail'];
if (isset($_POST['login_field']) || isset($_FILES['avatar'])){
if (isset($_FILES['avatar']) and $_FILES['avatar']['name'] != ""){
$fic = $_FILES['avatar'];
supprimerAvatar($mail);
uploadAvatar($mail, $fic);
}
if (isset($_POST['login_field']) && isset($_POST['password']) && isset($_POST['confirmation']) && isset($_POST['prenom']) && isset($_POST['nom']) && isset($_POST['phone'])){
$login = htmlentities(pg_escape_string ($_POST['login_field']));
$password = htmlentities(pg_escape_string ($_POST['password']));
$confirmation = htmlentities(pg_escape_string ($_POST['confirmation']));
$prenom = htmlentities(pg_escape_string ($_POST['prenom']));
$nom = htmlentities(pg_escape_string ($_POST['nom']));
$phone = htmlentities(pg_escape_string ($_POST['phone']));
if (!isLoginUniqueModifier($db, $mail, $login)){
header('Location: profil.php?error=1');
exit();
}
if (strcmp($password, $confirmation) != 0){
header('Location: profil.php?error=2');
exit();
}
if (!modifierUtilisateur($db, $prenom, $nom, $login, $phone)){
header('Location: profil.php?error=6');
exit();
}
}
header('Location: profil.php');
exit();
}
$user = getUser($db, $_SESSION['mail']);
if (!$user){
header('Location: profil.php?error=7');
header('Location: profil.php?error=3');
exit();
}
function getUser($mail){
global $db;
function getPathImgProfil($mail){
$protocol = "https";
if (!isset($_SERVER['HTTPS_HOST'])){
$protocol = "http";
}
$list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
foreach ($list as $entry){
if (strpos($entry, $mail) !== false){
return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/$entry";
}
}
return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/default.svg";
}
function supprimerAvatar($mail){
$list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
foreach ($list as $entry){
if (strpos($entry, $mail) !== false){
unlink($_SERVER['DOCUMENT_ROOT']."/imageProfil/$entry");
}
}
}
function uploadAvatar($mail, $fic){
$tmp = explode('.', $fic['name']);
$extension = end($tmp);
$target_file = "imageProfil/$mail.$extension";
$file_tmp = $fic['tmp_name'];
$check = getimagesize($file_tmp);
if($check === false or !in_array($extension, array('png', 'jpg', 'jpeg', 'pjpeg', 'jfif', 'pjp'))) {
header('Location: inscription.php?error=4');
exit();
}
else if ($fic['size'] > 2 * 1024 * 1024){
header('Location: inscription.php?error=5');
exit();
}
else{
move_uploaded_file($file_tmp, $target_file);
}
}
function modifierUtilisateur($db, $prenom, $nom, $login, $phone){
$result = pg_query_params($db, "UPDATE Utilisateur SET prenom = $1, nom = $2, login = $3, telephone = $4;", array($prenom, $nom, $login, $phone));
return $result;
}
function getUser($db, $mail){
$result = pg_query_params($db,"SELECT * FROM Utilisateur WHERE mail = $1;", array($mail));
return pg_fetch_array($result);
}
function printError(){
if(isset($_GET['error'])){
$erreur = getErrorProfil($_GET['error']);
echo "<p class = 'error'>$erreur</p>";
}
}
function isLoginUniqueModifier($db, $mail, $login){
$result = pg_query_params($db, "SELECT * FROM Utilisateur WHERE login = $1 AND mail != $2;", array($login, $mail));
if($result){
$row = pg_fetch_array($result);
return (strcmp($row['login'], $login) != 0);
}
return false;
}
function getErrorProfil($code){
switch ($code){
case 1:
return "Ce login est déjà associé à un compte.";
case 2:
return "Les mots de passe ne correspondent pas.";
case 3:
return "Erreur lors de la récupération des informations de profil.";
case 4:
return "Le fichier envoyé doit être une image au format PNG ou JPEG.";
case 5:
return "La taille de l'image ne doit pas dépasser 2 MB.";
case 6:
return "Erreur lors de la modification du compte.";
}
}
?>
<!DOCTYPE html>
<html lang="fr">
<head>
<meta charset="UTF-8">
<link rel="stylesheet" href="style.css">
<title>Profil</title>
<link rel="stylesheet" href="profil.css">
<link rel="stylesheet" href="index_inscription.css">
<script src="inscription.js"></script>
<title>Profil</title>
</head>
<body>
<div id="formulaire">
<h1>Profil</h1>
<form method="post" enctype="multipart/form-data" action="inscription.php">
<div id="divImgProfil">
<img id="imgProfil" src="<?php echo getPathImgProfil($mail); ?>">
</div>
<form method="post" enctype="multipart/form-data" action="profil.php">
<div class="line">
<label for="mail_field">Adresse mail : </label>
<input id="mail_field" class="form" type="email" maxlength="100" readonly value="<?php echo $user['mail']; ?>">
@ -45,7 +164,12 @@ function getUser($mail){
<input id="login_field" class="form" name="login_field" type="text" maxlength="50" value="<?php echo $user['login'];?>" required>
</div>
<div class="line">
<a href="changePass.php" title="Changer de mot de passe">Changer de mot de passe.</a>
<label for="password">Mot de passe : </label>
<input class="form" id="password" name="password" type="password" maxlength="50" value="<?php echo $user['passwd'];?>" required>
</div>
<div class="line">
<label for="confirmation">Confirmation : </label>
<input class="form" id="confirmation" name="confirmation" type="password" maxlength="16" value="<?php echo $user['passwd'];?>" required>
</div>
<div class="line">
<label for="prenom_field">Prénom : </label>
@ -65,14 +189,13 @@ function getUser($mail){
</div>
<div class="line">
<label for="avatar">Image du Profil :</label>
<input type="file" id="avatar" class="form" name="avatar" accept="image/png">
<input type="file" id="avatar" class="form" name="avatar" accept="image/png, image/jpeg">
</div>
<?php
printError();
?>
<input id="submit" class="button" type="submit" value="S'inscrire">
<input id="submit" class="button" type="submit" value="Modifier">
</form>
<p id="enregistrer">Si vous avez déjà un compte <a href="index.php" title="S'identifier">cliquez ici</a>.</p>
</div>
</body>
</html>

Write Preview
Loading…
Cancel
Save