espace_perso.php

  
 <?php

require '../vendor/autoload.php';

include './utils/utils.php';
include './utils/content.php';
include './utils/requestUtils.php';

session_start();

//postgres
$dbName = getenv('DB_NAME');
$dbUser = getenv('DB_USER');
$dbPassword = getenv('DB_PASSWORD');
$connection = new PDO("pgsql:host=postgres user=$dbUser dbname=$dbName password=$dbPassword");

// sécurité pour rediriger automatiquement si l'utilisateur n'est pas connecté
if (!isset($_SESSION["id_user"])) {
  header('Location:index.php');
}

//repositories
$userRepository = new \User\UserRepository($connection);
$reviewRepository = new \Review\ReviewRepository($connection);
$coupdecoeurRepository = new \CoupDeCoeur\CoupDeCoeurRepository($connection);


$listeUser = $userRepository->fetchAll();
$listeReviewperso = $reviewRepository->fetchByIdUser($_SESSION["id_user"]);
$listeCDCperso = $coupdecoeurRepository->fetchByIdUser($_SESSION["id_user"]);


$users = $userRepository->fetchAll();

// valeur par defaut lorsque l'utilisateur arrive sur la page
$ok_mdp=-2;
foreach ($users as $user) {
	if ($user->getId() == $_SESSION["id_user"]) {
		if (isset($_POST['old_mdp'])&&isset($_POST['mdp']) && isset($_POST['cmdp'])&&isset($_POST['form_mdp']) ) {
			if (password_verify($_POST['old_mdp'], $user->getMdp())) {
					if($_POST['mdp'] == $_POST['cmdp']) {
						$userRepository->updateUser_editer_password($_SESSION["id_user"], $_POST['mdp']);
						$ok_mdp = 1;
						header("Location: espace_perso.php");
					}
					else {
						// Mdp et confirmation mdp sont différents
						$ok_mdp = 0;
					}
			}			
			else {
				// L'ancien mdp est faux
				$ok_mdp = -1;
			}    
		}	
	}
}

?>


<html>
<?php
  generateHeader('espace perso');
  generateUserBanner();