prepare("SELECT COUNT(*) FROM login_attempts WHERE ok=0 AND created_at>NOW()-INTERVAL 15 MINUTE AND (ip=? OR email=?)"); $s->execute([ip(),$email]); if($s->fetchColumn()>=5){ $err='Trop de tentatives. Réessayez dans 15 minutes.'; } else { $s=$db->prepare('SELECT * FROM users WHERE email=?'); $s->execute([$email]); $u=$s->fetch(); $ok=$u && password_verify($pass,$u['pass_hash']); if(!$u) password_verify($pass,'$2y$10$abcdefghijklmnopqrstuuYb7q9m6y3m0g1Q1m2cY6Zl8y4mR1b2S'); // temps constant $db->prepare('INSERT INTO login_attempts(email,ip,ok) VALUES(?,?,?)')->execute([$email,ip(),(int)$ok]); if($ok){ if(password_needs_rehash($u['pass_hash'],PASSWORD_DEFAULT)) $db->prepare('UPDATE users SET pass_hash=? WHERE id=?')->execute([password_hash($pass,PASSWORD_DEFAULT),$u['id']]); login_user((int)$u['id']); header('Location: '.($u['role']==='admin'?'/admin/':'/client/')); exit; } $err='Identifiants incorrects.'; } } ob_start(); ?>

Connexion



Pas encore client ? Commander des cartes