prepare("
SELECT id, username, password_hash, display_name
FROM pf_users
WHERE username = :username
");
$stmt->execute([':username' => $username]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
// Vérification du mot de passe
if ($user && password_verify($password, $user['password_hash'])) {
// Connexion OK : on stocke les infos utiles en session
$_SESSION['user'] = [
'id' => (int)$user['id'],
'username' => $user['username'],
'display_name' => $user['display_name'],
];
// Redirection : soit la page demandée, soit l'accueil
$redirectTo = $_GET['redirect'] ?? '/index.php';
header('Location: ' . $redirectTo);
exit;
} else {
$error = "Identifiants incorrects.";
}
}
}
require __DIR__ . '/header.php';
?>
Connexion