76 lines
2.1 KiB
PHP
76 lines
2.1 KiB
PHP
<?php
|
|
|
|
class AuthController
|
|
{
|
|
public function showLogin(): void
|
|
{
|
|
View::render('auth/login');
|
|
}
|
|
|
|
public function login(): void
|
|
{
|
|
verify_csrf_token();
|
|
|
|
$email = trim($_POST['email'] ?? '');
|
|
$password = $_POST['password'] ?? '';
|
|
|
|
if (!filter_var($email, FILTER_VALIDATE_EMAIL) || $password === '') {
|
|
flash('error', 'Bitte gib eine gueltige E-Mail und dein Passwort ein.');
|
|
redirect('login');
|
|
}
|
|
|
|
$user = User::findByEmail($email);
|
|
|
|
if (!$user || !password_verify($password, $user['password_hash'])) {
|
|
flash('error', 'E-Mail oder Passwort ist nicht korrekt.');
|
|
redirect('login');
|
|
}
|
|
|
|
session_regenerate_id(true);
|
|
$_SESSION['user_id'] = (int) $user['id'];
|
|
$_SESSION['user_name'] = $user['name'];
|
|
redirect('dashboard');
|
|
}
|
|
|
|
public function showRegister(): void
|
|
{
|
|
View::render('auth/register');
|
|
}
|
|
|
|
public function register(): void
|
|
{
|
|
verify_csrf_token();
|
|
|
|
$name = trim($_POST['name'] ?? '');
|
|
$email = trim($_POST['email'] ?? '');
|
|
$password = $_POST['password'] ?? '';
|
|
|
|
if ($name === '' || !filter_var($email, FILTER_VALIDATE_EMAIL) || strlen($password) < 8) {
|
|
flash('error', 'Bitte Name, gueltige E-Mail und ein Passwort mit mindestens 8 Zeichen eingeben.');
|
|
redirect('register');
|
|
}
|
|
|
|
if (User::findByEmail($email)) {
|
|
flash('error', 'Diese E-Mail ist bereits registriert.');
|
|
redirect('register');
|
|
}
|
|
|
|
User::create($name, $email, $password);
|
|
flash('success', 'Registrierung erfolgreich. Du kannst dich jetzt anmelden.');
|
|
redirect('login');
|
|
}
|
|
|
|
public function logout(): void
|
|
{
|
|
verify_csrf_token();
|
|
|
|
$_SESSION = [];
|
|
if (ini_get('session.use_cookies')) {
|
|
$params = session_get_cookie_params();
|
|
setcookie(session_name(), '', time() - 42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
|
|
}
|
|
session_destroy();
|
|
redirect('login');
|
|
}
|
|
}
|