Initial commit - Last War messaging system

includes/auth.php

@@ -0,0 +1,87 @@
+<?php
+
+require_once __DIR__ . '/activity_logger.php';
+
+function loginUser(string $username, string $password): ?array
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?");
+    $stmt->execute([$username]);
+    $user = $stmt->fetch();
+
+    if (!$user || !password_verify($password, $user['password'])) {
+        return null;
+    }
+
+    $_SESSION['user_id'] = $user['id'];
+    $_SESSION['username'] = $user['username'];
+    $_SESSION['role'] = $user['role'];
+
+    logActivity($user['id'], 'login', 'Usuario inició sesión');
+
+    return $user;
+}
+
+function registerUser(string $username, string $password, string $role = 'user'): ?int
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->prepare("SELECT id FROM users WHERE username = ?");
+    $stmt->execute([$username]);
+    
+    if ($stmt->fetch()) {
+        return null;
+    }
+
+    $hashedPassword = password_hash($password, PASSWORD_DEFAULT);
+    
+    $stmt = $pdo->prepare("INSERT INTO users (username, password, role) VALUES (?, ?, ?)");
+    $stmt->execute([$username, $hashedPassword, $role]);
+
+    return (int) $pdo->lastInsertId();
+}
+
+function updateUserPassword(int $userId, string $newPassword): bool
+{
+    $pdo = getDbConnection();
+    
+    $hashedPassword = password_hash($newPassword, PASSWORD_DEFAULT);
+    
+    $stmt = $pdo->prepare("UPDATE users SET password = ? WHERE id = ?");
+    return $stmt->execute([$hashedPassword, $userId]);
+}
+
+function getUserById(int $userId): ?array
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->prepare("SELECT id, username, role, telegram_chat_id, created_at FROM users WHERE id = ?");
+    $stmt->execute([$userId]);
+    
+    return $stmt->fetch() ?: null;
+}
+
+function getAllUsers(): array
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->query("SELECT id, username, role, telegram_chat_id, created_at FROM users ORDER BY username");
+    return $stmt->fetchAll();
+}
+
+function updateUserTelegramChatId(int $userId, string $telegramChatId): bool
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->prepare("UPDATE users SET telegram_chat_id = ? WHERE id = ?");
+    return $stmt->execute([$telegramChatId, $userId]);
+}
+
+function deleteUser(int $userId): bool
+{
+    $pdo = getDbConnection();
+    
+    $stmt = $pdo->prepare("DELETE FROM users WHERE id = ?");
+    return $stmt->execute([$userId]);
+}