From eda70327ac8c0aa949d2fa422957daf7acea0b89 Mon Sep 17 00:00:00 2001
From: "remi.biette" <remi.biette98@outlook.fr>
Date: Sat, 11 May 2019 12:44:29 +0200
Subject: [PATCH] Page profil v1

---
 WEB/connectionBD.php |  19 ------
 WEB/profil.css       |   8 +++
 WEB/profil.php       | 157 ++++++++++++++++++++++++++++++++++++++-----
 3 files changed, 148 insertions(+), 36 deletions(-)
 delete mode 100644 WEB/connectionBD.php

diff --git a/WEB/connectionBD.php b/WEB/connectionBD.php
deleted file mode 100644
index 8ee39c4..0000000
--- a/WEB/connectionBD.php
+++ /dev/null
@@ -1,19 +0,0 @@
-<?php
-/**
- * Created by PhpStorm.
- * User: REMI
- * Date: 16/04/2019
- * Time: 14:46
- */
-
-
-function connexionBD(){
-    $host = "localhost";
-    $dbname = "projet";
-    $user = "utilisateur";
-    $pass = "-stri-";
-    $db = pg_connect("host=$host port=5432 dbname=$dbname user=$user password=$pass") or die("Erreur lors de la connexion à la base de données.");
-    return $db;
-}
-?>
-
diff --git a/WEB/profil.css b/WEB/profil.css
index d73e97f..b977ff1 100644
--- a/WEB/profil.css
+++ b/WEB/profil.css
@@ -11,6 +11,10 @@
     justify-content: center;
 }
 
+#mail_field, #dateN_field{
+    background-color: lightgray;
+}
+
 #imgProfil{
     background-color: white;
     margin-top: 2.5em;
@@ -19,4 +23,8 @@
     max-width: 210px;
     max-height: 210px;
     border-radius: 10px;
+}
+
+#changePass{
+    margin-bottom: 0.7em;
 }
\ No newline at end of file
diff --git a/WEB/profil.php b/WEB/profil.php
index 362991b..f1c21ae 100644
--- a/WEB/profil.php
+++ b/WEB/profil.php
@@ -1,41 +1,160 @@
 <?php
 
-require ('connectionBD.php');
-include ('tableauBord.php');
+require_once ('connexionBD.php');
+
+session_start();
 
-if (!$_SESSION){
-    session_start();
-}
 if (!isset($_SESSION['mail'])){
     header('Location: index.php');
     exit();
 }
-$user = getUser($_SESSION['mail']);
-if (!$user){
-    header('Location: profil.php?error=7');
+
+$mail = $_SESSION['mail'];
+
+if (isset($_POST['login_field']) || isset($_FILES['avatar'])){
+    if (isset($_FILES['avatar']) and $_FILES['avatar']['name'] != ""){
+        $fic = $_FILES['avatar'];
+        supprimerAvatar($mail);
+        uploadAvatar($mail, $fic);
+    }
+    if (isset($_POST['login_field']) && isset($_POST['password']) && isset($_POST['confirmation']) && isset($_POST['prenom']) && isset($_POST['nom']) && isset($_POST['phone'])){
+        $login = htmlentities(pg_escape_string ($_POST['login_field']));
+        $password = htmlentities(pg_escape_string ($_POST['password']));
+        $confirmation = htmlentities(pg_escape_string ($_POST['confirmation']));
+        $prenom = htmlentities(pg_escape_string ($_POST['prenom']));
+        $nom = htmlentities(pg_escape_string ($_POST['nom']));
+        $phone = htmlentities(pg_escape_string ($_POST['phone']));
+
+        if (!isLoginUniqueModifier($db, $mail, $login)){
+            header('Location: profil.php?error=1');
+            exit();
+        }
+
+        if (strcmp($password, $confirmation) != 0){
+            header('Location: profil.php?error=2');
+            exit();
+        }
+
+        if (!modifierUtilisateur($db, $prenom, $nom, $login, $phone)){
+            header('Location: profil.php?error=6');
+            exit();
+        }
+    }
+    header('Location: profil.php');
     exit();
 }
 
-function getUser($mail){
-    global $db;
+
+$user = getUser($db, $_SESSION['mail']);
+if (!$user){
+    header('Location: profil.php?error=3');
+    exit();
+}
+
+function getPathImgProfil($mail){
+    $protocol = "https";
+    if (!isset($_SERVER['HTTPS_HOST'])){
+        $protocol = "http";
+    }
+    $list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
+    foreach ($list as $entry){
+        if (strpos($entry, $mail) !== false){
+            return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/$entry";
+        }
+    }
+    return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/default.svg";
+}
+
+function supprimerAvatar($mail){
+    $list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
+    foreach ($list as $entry){
+        if (strpos($entry, $mail) !== false){
+            unlink($_SERVER['DOCUMENT_ROOT']."/imageProfil/$entry");
+        }
+    }
+}
+
+function uploadAvatar($mail, $fic){
+    $tmp = explode('.', $fic['name']);
+    $extension = end($tmp);
+    $target_file = "imageProfil/$mail.$extension";
+    $file_tmp = $fic['tmp_name'];
+    $check = getimagesize($file_tmp);
+    if($check === false or !in_array($extension, array('png', 'jpg', 'jpeg', 'pjpeg', 'jfif', 'pjp'))) {
+        header('Location: inscription.php?error=4');
+        exit();
+    }
+    else if ($fic['size'] > 2 * 1024 * 1024){
+        header('Location: inscription.php?error=5');
+        exit();
+    }
+    else{
+        move_uploaded_file($file_tmp, $target_file);
+    }
+}
+
+function modifierUtilisateur($db, $prenom, $nom, $login, $phone){
+    $result = pg_query_params($db, "UPDATE Utilisateur SET prenom = $1, nom = $2, login = $3, telephone = $4;", array($prenom, $nom, $login, $phone));
+    return $result;
+}
+
+function getUser($db, $mail){
     $result = pg_query_params($db,"SELECT * FROM Utilisateur WHERE mail = $1;", array($mail));
     return pg_fetch_array($result);
 }
 
+function printError(){
+    if(isset($_GET['error'])){
+        $erreur = getErrorProfil($_GET['error']);
+        echo "<p class = 'error'>$erreur</p>";
+    }
+}
+
+function isLoginUniqueModifier($db, $mail, $login){
+    $result = pg_query_params($db, "SELECT * FROM Utilisateur WHERE login = $1 AND mail != $2;", array($login, $mail));
+    if($result){
+        $row = pg_fetch_array($result);
+        return (strcmp($row['login'], $login) != 0);
+    }
+    return false;
+}
+
+function getErrorProfil($code){
+    switch ($code){
+        case 1:
+            return "Ce login est déjà associé à un compte.";
+        case 2:
+            return "Les mots de passe ne correspondent pas.";
+        case 3:
+            return "Erreur lors de la récupération des informations de profil.";
+        case 4:
+            return "Le fichier envoyé doit être une image au format PNG ou JPEG.";
+        case 5:
+            return "La taille de l'image ne doit pas dépasser 2 MB.";
+        case 6:
+            return "Erreur lors de la modification du compte.";
+
+    }
+}
+
 ?>
 
 <!DOCTYPE html>
 <html lang="fr">
 <head>
     <meta charset="UTF-8">
-    <link rel="stylesheet" href="style.css">
-    <title>Profil</title>
+    <link rel="stylesheet" href="profil.css">
+    <link rel="stylesheet" href="index_inscription.css">
     <script src="inscription.js"></script>
+    <title>Profil</title>
 </head>
 <body>
 <div id="formulaire">
     <h1>Profil</h1>
-    <form method="post" enctype="multipart/form-data" action="inscription.php">
+    <div id="divImgProfil">
+        <img id="imgProfil" src="<?php echo getPathImgProfil($mail); ?>">
+    </div>
+    <form method="post" enctype="multipart/form-data" action="profil.php">
         <div class="line">
             <label for="mail_field">Adresse mail : </label>
             <input id="mail_field" class="form" type="email" maxlength="100" readonly value="<?php echo $user['mail']; ?>">
@@ -45,7 +164,12 @@ function getUser($mail){
             <input id="login_field" class="form" name="login_field" type="text" maxlength="50" value="<?php echo $user['login'];?>" required>
         </div>
         <div class="line">
-            <a href="changePass.php" title="Changer de mot de passe">Changer de mot de passe.</a>
+            <label for="password">Mot de passe : </label>
+            <input class="form" id="password" name="password" type="password" maxlength="50" value="<?php echo $user['passwd'];?>" required>
+        </div>
+        <div class="line">
+            <label for="confirmation">Confirmation : </label>
+            <input class="form" id="confirmation" name="confirmation" type="password" maxlength="16" value="<?php echo $user['passwd'];?>" required>
         </div>
         <div class="line">
             <label for="prenom_field">Prénom : </label>
@@ -65,14 +189,13 @@ function getUser($mail){
         </div>
         <div class="line">
             <label for="avatar">Image du Profil :</label>
-            <input type="file" id="avatar" class="form" name="avatar" accept="image/png">
+            <input type="file" id="avatar" class="form" name="avatar" accept="image/png, image/jpeg">
         </div>
         <?php
             printError();
         ?>
-        <input id="submit" class="button" type="submit" value="S'inscrire">
+        <input id="submit" class="button" type="submit" value="Modifier">
     </form>
-    <p id="enregistrer">Si vous avez déjà un compte <a href="index.php" title="S'identifier">cliquez ici</a>.</p>
 </div>
 </body>
 </html>