From 5de200cb63004fce46325f82df9100116701221f Mon Sep 17 00:00:00 2001 From: Alix JEUDI--LEMOINE Date: Tue, 7 Nov 2023 19:29:11 +0100 Subject: [PATCH] Modification temporaire du password_verify en md5 pour tester --- project/src/model/gateways/UserGateway.php | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/project/src/model/gateways/UserGateway.php b/project/src/model/gateways/UserGateway.php index 7db3876..5010d76 100644 --- a/project/src/model/gateways/UserGateway.php +++ b/project/src/model/gateways/UserGateway.php @@ -6,20 +6,21 @@ class UserGateway { private \PDO $con; private \PDOStatement $stmt; - public function __construct(\PDO $con, \PDOStatement $stmt) + public function __construct(Connection $con) { $this->con=$con; - $this->stmt=$stmt; } public function login(string $username, string $password): bool { $sql = "SELECT * FROM user WHERE username=:username"; - $stmt = $this->con->prepare($sql); - $stmt->bindValue(':username', $username); - $stmt->execute(); - $result = $stmt->fetch(); - if ($result && password_verify($password, $result['password'])) { + $this->con->executeQuery($sql, array( + ':username' => array($username, \PDO::PARAM_STR) + )); + + $result = $this->con->getOneResult(); + + if (!empty($result) && md5($password) == $result['password']) { return true; } return false; @@ -29,7 +30,7 @@ class UserGateway $sql = "INSERT INTO user (username, password) VALUES (:username, :password)"; $stmt = $this->con->prepare($sql); $stmt->bindValue(':username', $username); - $stmt->bindValue(':password', $password); + $stmt->bindValue(':password', password_hash($password, 'md5')); $stmt->execute(); } public function deleteUser(int $id): void