From ff90edc2f6aa8831504b5b8d5ca24ccaf1e57232 Mon Sep 17 00:00:00 2001
From: Jan BELLON <jan@intra.e59.fr>
Date: Mon, 11 Mar 2024 22:35:14 +0000
Subject: [PATCH] Update 2 files

- /html/compte.php
- /html/register.php
---
 html/compte.php   |  1 +
 html/register.php | 27 +++++++++++++++++----------
 2 files changed, 18 insertions(+), 10 deletions(-)

diff --git a/html/compte.php b/html/compte.php
index 38b3d28f..65640c0b 100644
--- a/html/compte.php
+++ b/html/compte.php
@@ -135,6 +135,7 @@ if(isset($_POST['user_display_name']) && isset($_POST['user_name']) && isset($_P
                         <div class="user-header">
                             <div class="user-content">
                                 <div class="user-pp"><img src="<?=$user_pp?>" class="user-pp-image"></div>
+                                <div><a href="user.php?user=<?=$user_name?>">Voir le profil publique</a></div>
                                 <div><?=$status?></div>
                                 <div class="user-info">
                                     <div class="names">
diff --git a/html/register.php b/html/register.php
index c86291c9..b249fa64 100644
--- a/html/register.php
+++ b/html/register.php
@@ -15,17 +15,24 @@ if(isset($_POST['username']) && isset($_POST['password']) && isset($_POST['passw
             $email = isset($_POST['email']) ? $_POST['email'] : "";
 
             $bdd = connect($dbhost, $dbname, $dbuser, $dbpass);
-
-            $req = $bdd->prepare("INSERT INTO users (username, password, email, display_name, role,  accreditation) VALUES (:username, :password, :email, :display_name, 0, 0)");
-            $req->bindParam(':username', htmlspecialchars($_POST['username']));
-            $req->bindParam(':password', md5($_POST['password']));
-            $req->bindParam(':email', htmlspecialchars($_POST['email']));
-            $req->bindParam(':display_name', htmlspecialchars($_POST['display_name']));
-            if ($req->execute()) {
-                header("Location: login.php");
-                exit();
+            $req = $bdd->prepare("SELECT ID FROM users WHERE username = :username");
+            $req->bindParam(":username", htmlspecialchars($_POST['username']));
+            $req->execute();
+            $resultat = $req->fetchAll(PDO::FETCH_ASSOC);
+            if($resultat) {
+                $status = "Erreur, le nom d'utilisateur existe déjà.";
             } else {
-                $status = "Erreur SQL";
+                $req = $bdd->prepare("INSERT INTO users (username, password, email, display_name, role,  accreditation) VALUES (:username, :password, :email, :display_name, 0, 0)");
+                $req->bindParam(':username', htmlspecialchars($_POST['username']));
+                $req->bindParam(':password', md5($_POST['password']));
+                $req->bindParam(':email', htmlspecialchars($_POST['email']));
+                $req->bindParam(':display_name', htmlspecialchars($_POST['display_name']));
+                if ($req->execute()) {
+                    header("Location: login.php");
+                    exit();
+                } else {
+                    $status = "Erreur SQL";
+                }
             }
         } else {
             $status = "Les mots de passe ne correspondent pas.";