Actualiser login.php
This commit is contained in:
23
login.php
23
login.php
@@ -42,14 +42,19 @@ if (!$bloque && $_SERVER['REQUEST_METHOD'] === 'POST') {
|
|||||||
$password = trim($_POST['password']);
|
$password = trim($_POST['password']);
|
||||||
|
|
||||||
if (isset($users[$username]) && password_verify($password, $users[$username]['password'])) {
|
if (isset($users[$username]) && password_verify($password, $users[$username]['password'])) {
|
||||||
$_SESSION['login_attempts'] = 0;
|
// Vérifier si le compte est en attente
|
||||||
$_SESSION['login_time'] = null;
|
if (isset($users[$username]['statut']) && $users[$username]['statut'] === 'en_attente') {
|
||||||
$_SESSION['user'] = $username;
|
$message = "Votre compte est en attente de validation par l'administrateur.";
|
||||||
$_SESSION['role'] = $users[$username]['role'];
|
} else {
|
||||||
$_SESSION['last_activity'] = time();
|
$_SESSION['login_attempts'] = 0;
|
||||||
session_regenerate_id(true);
|
$_SESSION['login_time'] = null;
|
||||||
header("Location: dashboard.php");
|
$_SESSION['user'] = $username;
|
||||||
exit();
|
$_SESSION['role'] = $users[$username]['role'];
|
||||||
|
$_SESSION['last_activity'] = time();
|
||||||
|
session_regenerate_id(true);
|
||||||
|
header("Location: dashboard.php");
|
||||||
|
exit();
|
||||||
|
}
|
||||||
} else {
|
} else {
|
||||||
$_SESSION['login_attempts']++;
|
$_SESSION['login_attempts']++;
|
||||||
$_SESSION['login_time'] = time();
|
$_SESSION['login_time'] = time();
|
||||||
@@ -95,7 +100,7 @@ include 'include/header.php';
|
|||||||
function togglePassword() {
|
function togglePassword() {
|
||||||
const input = document.getElementById('password');
|
const input = document.getElementById('password');
|
||||||
input.type = input.type === 'password' ? 'text' : 'password';
|
input.type = input.type === 'password' ? 'text' : 'password';
|
||||||
}
|
}
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
<?php include 'include/footer.php'; ?>
|
<?php include 'include/footer.php'; ?>
|
||||||
Reference in New Issue
Block a user