From 414116daa9a07a8e7d0fac72373f2335acdd08ee Mon Sep 17 00:00:00 2001
From: rubisalpha <rubisalpha@noreply.localhost>
Date: Fri, 22 May 2026 11:46:27 +0000
Subject: [PATCH] Actualiser include/session_check.php

---
 include/session_check.php | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/include/session_check.php b/include/session_check.php
index 63d9268..b756851 100644
--- a/include/session_check.php
+++ b/include/session_check.php
@@ -1,11 +1,28 @@
 <?php
-$timeout = 900; // 15 minutes en secondes
+$timeout = 900; // 15 minutes
 
+$usersFile = __DIR__ . '/../users.json';
+$users = file_exists($usersFile) ? json_decode(file_get_contents($usersFile), true) : [];
+
+// Vérifier si connecté
 if (!isset($_SESSION['user'])) {
     header("Location: login.php");
     exit();
 }
 
+// Vérifier si l'utilisateur existe toujours dans users.json
+if (!isset($users[$_SESSION['user']])) {
+    session_destroy();
+    header("Location: login.php?timeout=1");
+    exit();
+}
+
+// Vérifier si le rôle en session correspond toujours au rôle dans users.json
+if ($_SESSION['role'] !== $users[$_SESSION['user']]['role']) {
+    $_SESSION['role'] = $users[$_SESSION['user']]['role'];
+}
+
+// Vérifier l'inactivité
 if (isset($_SESSION['last_activity'])) {
     $inactif = time() - $_SESSION['last_activity'];
     if ($inactif > $timeout) {