Ajout du cryptage

codeigniter/application/controllers/ConnexionController.php

@@ -16,30 +16,29 @@ class ConnexionController extends CI_Controller {
     }
 
     public function authentifier() {
-    
         if ($_SERVER["REQUEST_METHOD"] == "POST") {
             $email = $_POST['email'];
             $password = $_POST['password'];
-            if($email != "" && $password != ""){
+            if (!empty($email) && !empty($password)) {
                 $this->load->database();
-                $query = $this->db->query("SELECT * FROM users WHERE email = '$email' AND mdp = '$password'");
+                // Utilisation d'une requête préparée pour éviter les injections SQL
+                $query = $this->db->query("SELECT * FROM users WHERE email = ?", array($email));
                 $result = $query->row(); // Récupérer la première ligne de résultat
-    
                 if ($result) { // Vérifier si l'utilisateur existe
+                    if (password_verify($password, $result->mdp)) { // Vérifier si le mot de passe est correct
                         $this->session->set_userdata('user_id', $result->id);
                         $this->session->set_userdata('pseudo', $result->pseudo);
                         redirect('../index.php');
                     } else {
                         $data['error_msg'] = "Email ou mot de passe incorrect.";
                     }
+                } else {
+                    $data['error_msg'] = "Email ou mot de passe incorrect.";
+                }
             }
     
-            echo "<pre>";
-            print_r($this->session->userdata());
-            echo "</pre>";
-
             $this->load->view('layout/header');
-            $this->load->view('connexion', $data);
+            $this->load->view('connexion', isset($data) ? $data : []);
             $this->load->view('layout/footer');
         }
     }
@@ -55,22 +54,18 @@ class ConnexionController extends CI_Controller {
             $nom = strtoupper($this->input->post('nom'));
             $pseudo = $this->input->post('pseudo');
             $mdp = $this->input->post('pass');
+            $mdpcrypte = password_hash($mdp, PASSWORD_DEFAULT);
             $email = $this->input->post('email');
-    
             $data = array(
                 'pseudo' => $pseudo,
                 'nom' => $nom,
                 'prenom' => $prenom,
-                'mdp' => $mdp,
+                'mdp' => $mdpcrypte,
                 'email' => $email
             );
     
             $this->db->insert('users', $data);
-
+            $data['confirmation_message'] = "Inscription réussie ! Vous êtes maintenant inscrit.";
-            $this->session->set_userdata('pseudo', $pseudo);
-            redirect('../index.php');
-    
-
             $this->load->view('layout/header');
             $this->load->view('connexion', $data);
             $this->load->view('layout/footer');

codeigniter/application/controllers/InscriptionController.php

@@ -23,13 +23,14 @@ class InscriptionController extends CI_Controller {
             $nom = strtoupper($this->input->post('nom'));
             $pseudo = $this->input->post('pseudo');
             $mdp = $this->input->post('pass');
+            $mdpcrypte = password_hash($mdp, PASSWORD_DEFAULT);
             $email = $this->input->post('email');
     
             $data = array(
                 'pseudo' => $pseudo,
                 'nom' => $nom,
                 'prenom' => $prenom,
-                'mdp' => $mdp,
+                'mdp' => $mdpcrypte,
                 'email' => $email
             );
     

codeigniter/application/controllers/Playlist.php

@@ -12,6 +12,11 @@ class Playlist extends CI_Controller {
     }
 
     public function index(){
+
+        if (!$this->session->userdata('user_id')) {
+            // Redirigez vers la page de connexion
+            redirect('connexion');
+        }
         $userId = $this->session->userdata('user_id');
         $playlists = $this->model_music->getPlaylistsByUser($userId);
         $this->load->view('layout/header');
@@ -48,6 +53,11 @@ class Playlist extends CI_Controller {
     }
 
     public function view($id) {
+
+        if (!$this->session->userdata('user_id')) {
+            // Redirigez vers la page de connexion
+            redirect('connexion');
+        }
         $songs = $this->model_music->getSongsByPlaylist($id);
         $playlist = $this->model_music->getPlaylistById($id);
         if ($playlist) {
@@ -88,6 +98,10 @@ class Playlist extends CI_Controller {
     }
 
     public function choose_playlist($songId) {
+        if (!$this->session->userdata('user_id')) {
+            // Redirigez vers la page de connexion
+            redirect('connexion');
+        }
     $playlists = $this->model_music->getPlaylistsByUser($this->session->userdata('user_id'));
     $this->load->view('layout/header');
     $this->load->view('choose_playlist', ['playlists' => $playlists, 'songId' => $songId]);
@@ -96,6 +110,10 @@ class Playlist extends CI_Controller {
 
 
 public function choix_playlist($albumId) {
+    if (!$this->session->userdata('user_id')) {
+        // Redirigez vers la page de connexion
+        redirect('connexion');
+    }
     $playlists = $this->model_music->getPlaylistsByUser($this->session->userdata('user_id'));
     $this->load->view('layout/header');
     $this->load->view('choix_playlist', ['playlists' => $playlists, 'albumId' => $albumId]);
@@ -124,6 +142,10 @@ public function choix_playlist($albumId) {
     }
 
     public function generate(){
+        if (!$this->session->userdata('user_id')) {
+            // Redirigez vers la page de connexion
+            redirect('connexion');
+        }
         $this->load->view('layout/header');
         $this->load->view('playlist_generate');
         $this->load->view('layout/footer');