Revize b748cb5f

Feature #8522 Login a bezpečnost webové aplikace
Feature #8523 Tvorba uživatele

application/model/DB.php

@@ -65 +65 @@
         }
     }
 
+    function getUser($username) {
+        $this->stmt = $this->pdo->prepare('SELECT id, username, password, role FROM users WHERE username = :username');
+        $this->stmt->bindParam(':username', $username);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function createUser($userDetails) {
+        $this->stmt = $this->pdo->prepare('INSERT INTO users (username, password, role) VALUES (:username, :password, :role)');
+        $password = password_hash($userDetails['username'], PASSWORD_DEFAULT);
+        $this->stmt->bindParam(':username', $userDetails['username']);
+        $this->stmt->bindParam(':password',$password);
+        $this->stmt->bindParam(':role',$userDetails['role']);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function updateUserRole($userId, $role) {
+        $this->stmt = $this->pdo->prepare("UPDATE users SET role = :role WHERE id = :userId");
+        $this->stmt->bindParam(':role', $role);
+        $this->stmt->bindParam(':userId',$userId);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function deleteUser($userId) {
+        $this->stmt = $this->pdo->prepare("DELETE from users WHERE id = :userId");
+        $this->stmt->bindParam(':userId',$userId);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+
+
 function update(){
     $query = "SELECT id FROM dd_lemma
               WHERE lemma = :lemma;";