Add files via upload

2021-04-13 17:20:46 +02:00
parent 081e7ed85e
commit 76627d27de
7 changed files with 481 additions and 0 deletions
--- a/login/includes/formLogin.php
+++ b/login/includes/formLogin.php
@ -0,0 +1,103 @@
+<?php
+
+include_once('user_dao.php');
+include_once($prefix.'assets/php/form.php');
+
+class FormLogin extends Form {
+    //Constants:
+    const HTML5_EMAIL_REGEXP = '^[a-zA-Z0-9.!#$%&\'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$'; 
+
+    //Atributes:
+    private $user;  // User who is going to log-in.
+    private $reply; // Validation response
+
+    //Constructor:
+    public function __construct() {
+        parent::__construct('formLogin');
+        $this->reply = array();
+    }
+
+    //Methods:
+
+    //Returns validation response:
+    public function getReply() {
+        
+        if(isset($_SESSION["login"])){
+            $name = strtoupper($_SESSION['nombre']);
+            $this->reply = "<h1>Bienvenido {$_SESSION['nombre']}</h1><hr />
+                        <p>{$name}, has iniciado sesión correctamente.</p>
+                        <p>Usa los botones para navegar</p>
+                        <a href='../'><button>Inicio</button></a>
+                        <a href='../../panel_{$_SESSION["rol"]}'><button>Mi Panel</button></a>\n";
+        }   
+        else if(!isset($_SESSION["login"])){
+            $this->reply = "<h1>ERROR</h1><hr />".
+                        "<p>El usuario o contraseña no son válidos.</p>
+                        <p>Vuelve a intetarlo o regístrate si no lo habías hecho previamente.</p>
+                        <a href='./'><button>Iniciar Sesión</button></a>
+                        <form method='post' action='./'><button name='register' id='register'>Registro</button></form>\n";
+        }
+
+        return $this->reply;
+    }
+
+    //Process form:
+    public function processesForm($name, $pass) {
+        $login = true;
+        $name = $this->test_input($name); 
+        $pass = $this->test_input($pass);
+
+        $username = isset($name) ? $name : null ;
+        if (!$username) {
+          $login = false;
+        }
+        
+        /*
+        $email = isset($mail) ? $mail : null ;
+        if (!$email || !mb_ereg_match(self::HTML5_EMAIL_REGEXP, $email)) {
+          $login = false;
+        }
+        */
+    
+        $password = isset($pass) ? $pass : null ;
+        if (!$password || mb_strlen($password) < 4) {
+          $login = false;
+        }
+        
+        if ($login) {
+            $bd = new UserDAO('complucine');
+            if($bd){
+                $selectUser = $bd->selectUser($username);
+                $selectUser->data_seek(0);
+                while ($fila = $selectUser->fetch_assoc()) {
+                    if($username === $fila['username'] && $bd->verifyPass($password, $fila['passwd'])){ 
+                        $this->user = $bd->loadUser($fila['id'], $fila['username'], $fila['email'], $fila['passwd'], $fila['rol']);
+                    }
+                }
+                
+                try{
+                    if ($this->user) {
+                        $_SESSION['user'] = $this->user;
+                        $_SESSION["nombre"] = $this->user->getName();
+                        $_SESSION["login"] = $login;
+                        $_SESSION["rol"] = $this->user->getRol();
+                    }
+                }
+                catch (Exception $e){
+                    $_SESSION["login"] = $login;
+                }
+
+                mysqli_free_result($selectUser);
+                //$selectUser->free();
+            }
+
+        }
+
+    }
+
+    protected function test_input($input){
+        return htmlspecialchars(trim(strip_tags($input)));
+    }
+
+}
+?>