Profildaten bearbeiten

php/controller/profile-controller.php

@@ -9,8 +9,52 @@ if (!isset($_SESSION["user"])) {
     exit();
 }
 
+$dao = new LocalUserDAO();
+$error = null;
+
 try {
-    $dao = new LocalUserDAO();
+    $user = $dao->findUser($_SESSION["user_email"] ?? "");
+
+    if (!$user) {
+        $_SESSION = [];
+        session_destroy();
+
+        header("Location: index.php?pfad=login");
+        exit();
+    }
+
+    if ($_SERVER["REQUEST_METHOD"] === "POST" && isset($_POST["saveProfile"])) {
+        $oldEmail = $_SESSION["user_email"];
+        $newEmail = $_POST["email"] ?? "";
+        $vorname = $_POST["vorname"] ?? "";
+        $nachname = $_POST["nachname"] ?? "";
+        $password = $_POST["password"] ?? "";
+
+        $existingUser = $dao->findUser($newEmail);
+
+        if ($existingUser && $newEmail !== $oldEmail) {
+            $error = "Diese E-Mail-Adresse wird bereits verwendet.";
+        } else {
+            $updated = $dao->updateUser(
+                $oldEmail,
+                $newEmail,
+                $vorname,
+                $nachname,
+                $password
+            );
+
+            if ($updated) {
+                $_SESSION["user"] = $vorname . " " . $nachname;
+                $_SESSION["user_email"] = $newEmail;
+
+                header("Location: index.php?pfad=profile");
+                exit();
+            } else {
+                $error = "Die Daten konnten nicht gespeichert werden.";
+            }
+        }
+    }
+
     $user = $dao->findUser($_SESSION["user_email"] ?? "");
 
     $articleManager = ArticleManager::getInstance();
@@ -23,12 +67,4 @@ try {
 } catch (Exception $e) {
     $_SESSION["message"] = "internal_error";
     exit();
-}
-
-if (!$user) {
-    $_SESSION = [];
-    session_destroy();
-
-    header("Location: index.php?pfad=login");
-    exit();
 }

php/model/LocalUserDAO.php

@@ -56,6 +56,29 @@ class LocalUserDAO implements UserDAOInterface {
         $this->saveUsers($users);
     }
 
+    public function updateUser($oldEmail, $newEmail, $vorname, $nachname, $password = null) {
+        $users = $this->loadUsers();
+
+        foreach ($users as $i => $user) {
+            if ($user["email"] === $oldEmail) {
+                $users[$i]["email"] = $newEmail;
+                $users[$i]["vorname"] = $vorname;
+                $users[$i]["nachname"] = $nachname;
+
+                unset($users[$i]["username"]);
+
+                if (!empty($password)) {
+                    $users[$i]["password"] = password_hash($password, PASSWORD_DEFAULT);
+                }
+
+                $this->saveUsers($users);
+                return true;
+            }
+        }
+
+        return false;
+    }
+
     public function deleteUser($email) {
         $users = $this->loadUsers();
 

php/model/UserDAOInterface.php

@@ -27,6 +27,18 @@ interface UserDAOInterface {
      */
     public function addUser($email, $vorname, $nachname, $password);
 
+    /**
+     * Aktualisiert einen bestehenden Benutzer.
+     *
+     * @param string $oldEmail Alte E-Mail-Adresse
+     * @param string $newEmail Neue E-Mail-Adresse
+     * @param string $vorname Neuer Vorname
+     * @param string $nachname Neuer Nachname
+     * @param string|null $password Neues Passwort oder null
+     * @return bool true, wenn der Benutzer aktualisiert wurde, sonst false
+     */
+    public function updateUser($oldEmail, $newEmail, $vorname, $nachname, $password = null);
+
     /**
      * Löscht einen Benutzer anhand seiner E-Mail-Adresse.
      *