PROJET-WEB_STRI1A/WEB/profil.php

<?php

require_once ('connexionBD.php');

session_start();

if (!isset($_SESSION['mail'])){
    header('Location: index.php');
    exit();
}

$mail = $_SESSION['mail'];

if (isset($_POST['login_field']) || isset($_FILES['avatar'])){
    if (isset($_FILES['avatar']) and $_FILES['avatar']['name'] != ""){
        $fic = $_FILES['avatar'];
        supprimerAvatar($mail);
        uploadAvatar($mail, $fic);
    }
    if (isset($_POST['login_field']) && isset($_POST['password']) && isset($_POST['confirmation']) && isset($_POST['prenom']) && isset($_POST['nom']) && isset($_POST['phone'])){
        $login = htmlentities(pg_escape_string ($_POST['login_field']));
        $password = htmlentities(pg_escape_string ($_POST['password']));
        $confirmation = htmlentities(pg_escape_string ($_POST['confirmation']));
        $prenom = htmlentities(pg_escape_string ($_POST['prenom']));
        $nom = htmlentities(pg_escape_string ($_POST['nom']));
        $phone = htmlentities(pg_escape_string ($_POST['phone']));

        if (!isLoginUniqueModifier($db, $mail, $login)){
            header('Location: profil.php?error=1');
            exit();
        }

        if (strcmp($password, $confirmation) != 0){
            header('Location: profil.php?error=2');
            exit();
        }

        if (!modifierUtilisateur($db, $prenom, $nom, $login, $phone)){
            header('Location: profil.php?error=6');
            exit();
        }
    }
    header('Location: profil.php');
    exit();
}


$user = getUser($db, $_SESSION['mail']);
if (!$user){
    header('Location: profil.php?error=3');
    exit();
}

function getPathImgProfil($mail){
    $protocol = "https";
    if (!isset($_SERVER['HTTPS_HOST'])){
        $protocol = "http";
    }
    $list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
    foreach ($list as $entry){
        if (strpos($entry, $mail) !== false){
            return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/$entry";
        }
    }
    return "$protocol://".$_SERVER['HTTP_HOST']."/imageProfil/default.svg";
}

function supprimerAvatar($mail){
    $list = scandir($_SERVER['DOCUMENT_ROOT']."/imageProfil");
    foreach ($list as $entry){
        if (strpos($entry, $mail) !== false){
            unlink($_SERVER['DOCUMENT_ROOT']."/imageProfil/$entry");
        }
    }
}

function uploadAvatar($mail, $fic){
    $tmp = explode('.', $fic['name']);
    $extension = end($tmp);
    $target_file = "imageProfil/$mail.$extension";
    $file_tmp = $fic['tmp_name'];
    $check = getimagesize($file_tmp);
    if($check === false or !in_array($extension, array('png', 'jpg', 'jpeg', 'pjpeg', 'jfif', 'pjp'))) {
        header('Location: inscription.php?error=4');
        exit();
    }
    else if ($fic['size'] > 2 * 1024 * 1024){
        header('Location: inscription.php?error=5');
        exit();
    }
    else{
        move_uploaded_file($file_tmp, $target_file);
    }
}

function modifierUtilisateur($db, $prenom, $nom, $login, $phone){
    $result = pg_query_params($db, "UPDATE Utilisateur SET prenom = $1, nom = $2, login = $3, telephone = $4;", array($prenom, $nom, $login, $phone));
    return $result;
}

function getUser($db, $mail){
    $result = pg_query_params($db,"SELECT * FROM Utilisateur WHERE mail = $1;", array($mail));
    return pg_fetch_array($result);
}

function printError(){
    if(isset($_GET['error'])){
        $erreur = getErrorProfil($_GET['error']);
        echo "<p class = 'error'>$erreur</p>";
    }
}

function isLoginUniqueModifier($db, $mail, $login){
    $result = pg_query_params($db, "SELECT * FROM Utilisateur WHERE login = $1 AND mail != $2;", array($login, $mail));
    if($result){
        $row = pg_fetch_array($result);
        return (strcmp($row['login'], $login) != 0);
    }
    return false;
}

function getErrorProfil($code){
    switch ($code){
        case 1:
            return "Ce login est déjà associé à un compte.";
        case 2:
            return "Les mots de passe ne correspondent pas.";
        case 3:
            return "Erreur lors de la récupération des informations de profil.";
        case 4:
            return "Le fichier envoyé doit être une image au format PNG ou JPEG.";
        case 5:
            return "La taille de l'image ne doit pas dépasser 2 MB.";
        case 6:
            return "Erreur lors de la modification du compte.";

    }
}

?>

<!DOCTYPE html>
<html lang="fr">
<head>
    <meta charset="UTF-8">
    <link rel="stylesheet" href="profil.css">
    <link rel="stylesheet" href="index_inscription.css">
    <script src="inscription.js"></script>
    <title>Profil</title>
</head>
<body>
<div id="formulaire">
    <h1>Profil</h1>
    <div id="divImgProfil">
        <img id="imgProfil" src="<?php echo getPathImgProfil($mail); ?>">
    </div>
    <form method="post" enctype="multipart/form-data" action="profil.php">
        <div class="line">
            <label for="mail_field">Adresse mail : </label>
            <input id="mail_field" class="form" type="email" maxlength="100" readonly value="<?php echo $user['mail']; ?>">
        </div>
        <div class="line">
            <label for="login_field">Login : </label>
            <input id="login_field" class="form" name="login_field" type="text" maxlength="50" value="<?php echo $user['login'];?>" required>
        </div>
        <div class="line">
            <label for="password">Mot de passe : </label>
            <input class="form" id="password" name="password" type="password" maxlength="50" value="<?php echo $user['passwd'];?>" required>
        </div>
        <div class="line">
            <label for="confirmation">Confirmation : </label>
            <input class="form" id="confirmation" name="confirmation" type="password" maxlength="16" value="<?php echo $user['passwd'];?>" required>
        </div>
        <div class="line">
            <label for="prenom_field">Prénom : </label>
            <input id="prenom_field" class="form" name="prenom" type="text" maxlength="50" value="<?php echo $user['prenom'];?>" required>
        </div>
        <div class="line">
            <label for="nom_field">Nom : </label>
            <input id="nom_field" class="form" name="nom" type="text" maxlength="50" value="<?php echo $user['nom'];?>" required>
        </div>
        <div class="line">
            <label for="dateN_field">Date de naissance : </label>
            <input id="dateN_field" class="form" readonly="readonly" type="date" value="<?php echo $user['datenaissance'];?>" required>
        </div>
        <div class="line">
            <label for="phone_field">Numéro de téléphone : </label>
            <input id="phone_field" class="form" name="phone" type="tel" pattern="[0-9]{10}" maxlength="10" value="<?php echo $user['telephone'];?>" required>
        </div>
        <div class="line">
            <label for="avatar">Image du Profil :</label>
            <input type="file" id="avatar" class="form" name="avatar" accept="image/png, image/jpeg">
        </div>
        <?php
            printError();
        ?>
        <input id="submit" class="button" type="submit" value="Modifier">
    </form>
</div>
</body>
</html>