diff --git a/login.php b/login.php index 6b6565e..998e816 100644 --- a/login.php +++ b/login.php @@ -1,46 +1,27 @@ ['password' => '1234', 'role' => 'Admin'], - 'user' => ['password' => 'abcd', 'role' => 'Utilisateur'] -]; - -$error = ''; +$usersFile = 'users.json'; +$users = file_exists($usersFile) ? json_decode(file_get_contents($usersFile), true) : []; +$message = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { - $username = isset($_POST['username']) ? $_POST['username'] : ''; - $password = isset($_POST['password']) ? $_POST['password'] : ''; + $username = trim($_POST['username']); + $password = trim($_POST['password']); - if (isset($users[$username]) && $users[$username]['password'] === $password) { + if (isset($users[$username]) && password_verify($password, $users[$username]['password'])) { $_SESSION['user'] = $username; $_SESSION['role'] = $users[$username]['role']; header("Location: dashboard.php"); exit(); } else { - $error = "Nom d'utilisateur ou mot de passe incorrect."; + $message = "Nom d'utilisateur ou mot de passe incorrect."; } } include 'include/header.php'; -?> -
= $error ?>
- - - -