Initial habit tracker project

2026-07-10 16:18:31 +02:00
commit 23416ee382
20 changed files with 1157 additions and 0 deletions
@@ -0,0 +1,75 @@
+<?php
+
+class AuthController
+{
+    public function showLogin(): void
+    {
+        View::render('auth/login');
+    }
+
+    public function login(): void
+    {
+        verify_csrf_token();
+
+        $email = trim($_POST['email'] ?? '');
+        $password = $_POST['password'] ?? '';
+
+        if (!filter_var($email, FILTER_VALIDATE_EMAIL) || $password === '') {
+            flash('error', 'Bitte gib eine gueltige E-Mail und dein Passwort ein.');
+            redirect('login');
+        }
+
+        $user = User::findByEmail($email);
+
+        if (!$user || !password_verify($password, $user['password_hash'])) {
+            flash('error', 'E-Mail oder Passwort ist nicht korrekt.');
+            redirect('login');
+        }
+
+        session_regenerate_id(true);
+        $_SESSION['user_id'] = (int) $user['id'];
+        $_SESSION['user_name'] = $user['name'];
+        redirect('dashboard');
+    }
+
+    public function showRegister(): void
+    {
+        View::render('auth/register');
+    }
+
+    public function register(): void
+    {
+        verify_csrf_token();
+
+        $name = trim($_POST['name'] ?? '');
+        $email = trim($_POST['email'] ?? '');
+        $password = $_POST['password'] ?? '';
+
+        if ($name === '' || !filter_var($email, FILTER_VALIDATE_EMAIL) || strlen($password) < 8) {
+            flash('error', 'Bitte Name, gueltige E-Mail und ein Passwort mit mindestens 8 Zeichen eingeben.');
+            redirect('register');
+        }
+
+        if (User::findByEmail($email)) {
+            flash('error', 'Diese E-Mail ist bereits registriert.');
+            redirect('register');
+        }
+
+        User::create($name, $email, $password);
+        flash('success', 'Registrierung erfolgreich. Du kannst dich jetzt anmelden.');
+        redirect('login');
+    }
+
+    public function logout(): void
+    {
+        verify_csrf_token();
+
+        $_SESSION = [];
+        if (ini_get('session.use_cookies')) {
+            $params = session_get_cookie_params();
+            setcookie(session_name(), '', time() - 42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
+        }
+        session_destroy();
+        redirect('login');
+    }
+}