Actualiser login.php

This commit is contained in:
2026-04-09 13:33:45 +00:00
parent e4f350f2ce
commit a4cedc59ec

View File

@@ -14,16 +14,20 @@ if (!isset($_SESSION['login_time'])) {
$_SESSION['login_time'] = null;
}
// Message session expirée
if (isset($_GET['timeout'])) {
$message = "Session expirée. Veuillez vous reconnecter.";
}
// Vérifier si bloqué
$bloque = false;
if ($_SESSION['login_attempts'] >= 3 && $_SESSION['login_time'] !== null) {
$temps_ecoule = time() - $_SESSION['login_time'];
if ($temps_ecoule < 300) { // 5 minutes
if ($temps_ecoule < 300) {
$bloque = true;
$reste = 300 - $temps_ecoule;
$message = "Trop de tentatives. Réessayez dans " . ceil($reste / 60) . " minute(s).";
} else {
// Débloquer après 5 minutes
$_SESSION['login_attempts'] = 0;
$_SESSION['login_time'] = null;
}
@@ -38,7 +42,6 @@ if (!$bloque && $_SERVER['REQUEST_METHOD'] === 'POST') {
$password = trim($_POST['password']);
if (isset($users[$username]) && password_verify($password, $users[$username]['password'])) {
// Connexion réussie — reset tentatives
$_SESSION['login_attempts'] = 0;
$_SESSION['login_time'] = null;
$_SESSION['user'] = $username;