includes/classes/Auth.php - master - TwixoffStudio/PulseChat

includes/classes/Auth.php

103 строки4 KB

TwixoffStudio

Create: bootstrap.php, Auth.php, ChatService.php, Database.php, ProfileService.php, functions.php, index.php, .htaccess, .gitkeep, .gitkeep, .gitkeep, .htaccess, index.php, LICENSE, login.php, logout.php, README.md, register.php, index.php, messages.php, profile.php, theme.php, app.css, app.js, .gitkeep, .htaccess

31 июл 2026, 19:23

Верифицирован

31 июл 2026, 19:234aa7c46

<?php
declare(strict_types=1);

class Auth
{
    public static function attempt(string $login, string $password): bool
    {
        $db = Database::getInstance();
        $stmt = $db->prepare(
            'SELECT * FROM users WHERE (username = :login OR email = :login2) AND is_blocked = 0 LIMIT 1'
        );
        $stmt->execute(['login' => $login, 'login2' => $login]);
        $user = $stmt->fetch();
        if (!$user || !password_verify($password, $user['password'])) {
            return false;
        }
        self::loginUser($user);
        return true;
    }

    public static function register(string $username, string $name, string $password, ?string $email = null): array
    {
        $db = Database::getInstance();
        $username = trim(mb_strtolower($username));
        if (!preg_match('/^[a-z0-9_]{3,32}$/', $username)) {
            return ['ok' => false, 'error' => 'Username: 3–32 символа (a-z, 0-9, _)'];
        }
        if (mb_strlen($password) < 4) {
            return ['ok' => false, 'error' => 'Пароль минимум 4 символа'];
        }
        $check = $db->prepare('SELECT id FROM users WHERE username = ?');
        $check->execute([$username]);
        if ($check->fetch()) {
            return ['ok' => false, 'error' => 'Username уже занят'];
        }
        $hash = password_hash($password, PASSWORD_DEFAULT);
        $stmt = $db->prepare(
            'INSERT INTO users (username, name, email, password, role, created_at) VALUES (?, ?, ?, ?, ?, ?)'
        );
        $stmt->execute([
            $username,
            $name ?: $username,
            $email,
            $hash,
            'user',
            date('Y-m-d H:i:s'),
        ]);
        $id = (int)$db->lastInsertId();
        $user = self::findById($id);
        if ($user) {
            self::loginUser($user);
        }
        return ['ok' => true, 'user' => $user];
    }

    public static function loginUser(array $user): void
    {
        $_SESSION['user_id'] = (int)$user['id'];
        $_SESSION['username'] = $user['username'];
        $_SESSION['name'] = $user['name'];
        $_SESSION['role'] = $user['role'];
        $_SESSION['avatar'] = $user['avatar'] ?? null;

        $db = Database::getInstance();
        $db->prepare('UPDATE users SET last_seen = ?, is_online = 1 WHERE id = ?')
            ->execute([date('Y-m-d H:i:s'), $user['id']]);
    }

    public static function logout(): void
    {
        if (!empty($_SESSION['user_id'])) {
            $db = Database::getInstance();
            $db->prepare('UPDATE users SET is_online = 0, last_seen = ? WHERE id = ?')
                ->execute([date('Y-m-d H:i:s'), $_SESSION['user_id']]);
        }
        $_SESSION = [];
        if (ini_get('session.use_cookies')) {
            $p = session_get_cookie_params();
            setcookie(session_name(), '', time() - 42000, $p['path'], $p['domain'], $p['secure'], $p['httponly']);
        }
        session_destroy();
    }

    public static function user(): ?array
    {
        if (!isLoggedIn()) return null;
        return self::findById((int)$_SESSION['user_id']);
    }

    public static function findById(int $id): ?array
    {
        $db = Database::getInstance();
        $stmt = $db->prepare('SELECT id, username, name, email, bio, avatar, role, is_online, last_seen, created_at FROM users WHERE id = ?');
        $stmt->execute([$id]);
        $row = $stmt->fetch();
        return $row ?: null;
    }

    public static function isAdmin(): bool
    {
        return ($_SESSION['role'] ?? '') === 'admin';
    }
}