From 78a165d10353aacc4859dbd46ad897c2940f9385 Mon Sep 17 00:00:00 2001
From: Esenjin <esenjin@sangigi-fuchsia.fr>
Date: Fri, 14 Feb 2025 20:59:17 +0100
Subject: [PATCH] ajout d'une page de profil

permet de changer son ID ainsi que son MDP
---
 admin/index.php     |   1 +
 admin/login.php     |   2 +-
 admin/profile.php   | 131 ++++++++++++++++++++++++++++++++++++++++++++
 includes/auth.php   |  12 ++++
 includes/config.php |  13 +++++
 5 files changed, 158 insertions(+), 1 deletion(-)
 create mode 100644 admin/profile.php

diff --git a/admin/index.php b/admin/index.php
index 798b9cd..23aa3a4 100644
--- a/admin/index.php
+++ b/admin/index.php
@@ -23,6 +23,7 @@ $stories = Stories::getAll();
     <nav class="admin-nav">
         <div class="nav-brand">Administration</div>
         <div class="nav-menu">
+            <a href="profile.php" class="button">Profil</a>
             <a href="story-edit.php" class="button">Nouveau roman</a>
             <form method="POST" action="logout.php" class="logout-form">
                 <button type="submit">Déconnexion</button>
diff --git a/admin/login.php b/admin/login.php
index e4fbc5b..f6c237b 100644
--- a/admin/login.php
+++ b/admin/login.php
@@ -43,7 +43,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                 <input type="password" id="password" name="password" required>
             </div>
             
-            <button type="submit">Se connecter</button>
+            <button type="submit" class="button">Se connecter</button>
         </form>
     </div>
 </body>
diff --git a/admin/profile.php b/admin/profile.php
new file mode 100644
index 0000000..f9d4f55
--- /dev/null
+++ b/admin/profile.php
@@ -0,0 +1,131 @@
+<?php
+require_once '../includes/config.php';
+require_once '../includes/auth.php';
+
+if (!Auth::check()) {
+    header('Location: login.php');
+    exit;
+}
+
+$success = '';
+$error = '';
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $currentPassword = $_POST['current_password'] ?? '';
+    $newUsername = trim($_POST['new_username'] ?? '');
+    $newPassword = $_POST['new_password'] ?? '';
+    $confirmPassword = $_POST['confirm_password'] ?? '';
+    
+    try {
+        // Vérifier le mot de passe actuel
+        if (!Auth::verifyCurrentPassword($currentPassword)) {
+            throw new Exception('Le mot de passe actuel est incorrect');
+        }
+        
+        // Valider le nouvel identifiant
+        if ($newUsername) {
+            if (strlen($newUsername) < 3) {
+                throw new Exception('L\'identifiant doit faire au moins 3 caractères');
+            }
+        }
+        
+        // Valider le nouveau mot de passe
+        if ($newPassword) {
+            if (strlen($newPassword) < 8) {
+                throw new Exception('Le mot de passe doit faire au moins 8 caractères');
+            }
+            if ($newPassword !== $confirmPassword) {
+                throw new Exception('Les mots de passe ne correspondent pas');
+            }
+        }
+        
+        // Mettre à jour les informations
+        $config = Config::load();
+        $userId = $_SESSION['user_id'];
+        
+        foreach ($config['users'] as &$user) {
+            if ($user['id'] === $userId) {
+                // Mettre à jour l'identifiant si fourni
+                if ($newUsername) {
+                    // Stocker l'ancien ID pour la mise à jour de la session
+                    $oldId = $user['id'];
+                    $user['id'] = $newUsername;
+                    // Mettre à jour l'ID dans la session
+                    if ($oldId === $_SESSION['user_id']) {
+                        $_SESSION['user_id'] = $newUsername;
+                    }
+                }
+                
+                // Mettre à jour le mot de passe si fourni
+                if ($newPassword) {
+                    $user['password'] = password_hash($newPassword, PASSWORD_DEFAULT);
+                }
+                break;
+            }
+        }
+        
+        // Sauvegarder les modifications
+        Config::save($config);
+        $success = 'Profil mis à jour avec succès';
+        
+    } catch (Exception $e) {
+        $error = $e->getMessage();
+    }
+}
+?>
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Modifier le profil - Administration</title>
+    <link rel="stylesheet" href="../assets/css/main.css">
+</head>
+<body>
+    <nav class="admin-nav">
+        <div class="nav-brand">Administration</div>
+        <div class="nav-menu">
+            <a href="index.php" class="button">Retour</a>
+        </div>
+    </nav>
+
+    <main class="admin-main">
+        <h1>Modifier le profil</h1>
+        
+        <?php if ($success): ?>
+            <div class="success-message"><?= htmlspecialchars($success) ?></div>
+        <?php endif; ?>
+        
+        <?php if ($error): ?>
+            <div class="error-message"><?= htmlspecialchars($error) ?></div>
+        <?php endif; ?>
+        
+        <form method="POST" class="profile-form">
+            <div class="form-group">
+                <label for="current_password">Mot de passe actuel</label>
+                <input type="password" id="current_password" name="current_password" required>
+                <small>Requis pour toute modification</small>
+            </div>
+            
+            <div class="form-group">
+                <label for="new_username">Nouvel identifiant</label>
+                <input type="text" id="new_username" name="new_username" minlength="3">
+                <small>Laisser vide pour ne pas modifier</small>
+            </div>
+            
+            <div class="form-group">
+                <label for="new_password">Nouveau mot de passe</label>
+                <input type="password" id="new_password" name="new_password" minlength="8">
+                <small>Laisser vide pour ne pas modifier</small>
+            </div>
+            
+            <div class="form-group">
+                <label for="confirm_password">Confirmer le nouveau mot de passe</label>
+                <input type="password" id="confirm_password" name="confirm_password">
+            </div>
+            
+            <button type="submit" class="button">Enregistrer les modifications</button>
+        </form>
+    </main>
+</body>
+</html>
\ No newline at end of file
diff --git a/includes/auth.php b/includes/auth.php
index ed6d719..edb7a1a 100644
--- a/includes/auth.php
+++ b/includes/auth.php
@@ -23,4 +23,16 @@ class Auth {
         unset($_SESSION['user_id']);
         session_destroy();
     }
+
+    public static function verifyCurrentPassword($password) {
+        $config = Config::load();
+        $userId = $_SESSION['user_id'];
+        
+        foreach ($config['users'] as $user) {
+            if ($user['id'] === $userId) {
+                return password_verify($password, $user['password']);
+            }
+        }
+        return false;
+    }
 }
\ No newline at end of file
diff --git a/includes/config.php b/includes/config.php
index 15bcb73..e7757e3 100644
--- a/includes/config.php
+++ b/includes/config.php
@@ -19,4 +19,17 @@ class Config {
         $config = self::load();
         return $config[$key] ?? $default;
     }
+
+    public static function save($config) {
+        $configFile = __DIR__ . '/../config.json';
+        
+        $jsonContent = json_encode($config, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+        
+        if (file_put_contents($configFile, $jsonContent) === false) {
+            throw new Exception('Impossible de sauvegarder la configuration');
+        }
+        
+        self::$config = $config;
+        return true;
+    }
 }
\ No newline at end of file