Besoin daide

<?php echo isset($_SESSION['PROFILE']) ? '<img src="images/'.$_SESSION['avatar'].'"' : "" ; ?>

Bienvenue sur notre site.<br /> 

                 <?php 
  

  $bdd = new PDO('mysql:host=127.0.0.1;dbname=projet', 'root', '');

 if(isset($_POST['submit'])){
   
  $pseudoconnect = htmlspecialchars($_POST['psdoconnect']);
  $mdpconnect = sha1($_POST['passconnect']);

      if(!empty($pseudoconnect) AND !empty($mdpconnect))
      {

        // On va chercher si ces données existes dans la bd

                $requser = $bdd->prepare("SELECT * FROM espace_membres WHERE pseudo = '".$pseudoconnect."' AND mot_de_passe = '".$mdpconnect."'");
                $requser->execute(array($pseudoconnect, $mdpconnect));
               $userexist = $requser->rowCount();

        if($userexist == 1){

          $userinfo = $requser->fetch();
  
          session_start();
   $_SESSION['PROFILE'] = $requser;
   $_SESSION['pseudo'] = $userinfo['pseudo'];
   $_SESSION['avatar'] = $userinfo['avatar'];

   ?>
   bienvenue "<?php echo htmlentities($userinfo['pseudo']); ?>" :
   <table style="width:500px;">
      <tr>
          <td><?php
               if($userinfo['avatar']!=''){
      echo '<img src="'.htmlentities($userinfo['avatar'], ENT_QUOTES, 'UTF-8').'" alt="Image Perso" style="max-width:100px;max-height:100px;" />';
   }
   else
   {
      echo 'Cet utilisateur n\'a pas d\'image perso.';
   }
   ?></td>
          <td class="right"><h1><?php echo htmlentities($userinfo['pseudo'], ENT_QUOTES, 'UTF-8'); ?></h1>
           
       </tr>
   </table>
   <?php
      }
      else
      {
         echo 'Cet utilisateur n\'existe pas.';
      }
   }

   header("Location: INDEX.php");
 }
   else
  {
 $erreur = "Mauvais pseudo ou mot de passe !";
  }
 
 ?>         
                
                

<form action="connexion.php" method="post">

<h2 style="color:#fff;">Se connecter</h2>

<input type="text" name="psdoconnect" placeholder="pseudo" required><br><br>

<input type="password" name="passconnect" placeholder="Password" required /><br /><br />

<a href=""><input type="submit" value="se connecter" name="submit" /></a><br /><br />

header("Location

<form action="inscription.php" method="post" enctype="multipart/form-data">

    <center><h2 style="color: green;">S'inscrire</h2></center>

    <input type="text" name="pseudo" placeholder="pseudo" required><br>

    <input type="email" name="email" placeholder="email" required><br>

    <input type="password" name="mdp" placeholder="Password" required><br>

    <input type="password" name="cmdp" placeholder="repeatPassword" required><br>

    <input type="contact"  name="numero" placeholder="contact"><br>

 <input type="submit" value="s'inscrire" name="register" class="btn btn-block btn-primary"><br><br>

<?php
    require_once 'connect_bd.php';

    if (isset($_POST['register'])){
      
         if(!empty($_POST['pseudo']) AND !empty($_POST['mail']) AND !empty($_POST['mdp']) AND !empty($_POST['cmdp']) AND !empty($_POST['numero']))
       {
         $errors=array();
               
            //test sur le pseudo

              if(empty($_POST['pseudo']) || !preg_match('/^[a-zA-Z0-9]+$/',$_POST['pseudo']))
                   {
                     $errors['pseudo']="votre pseudo n'est pas valide(alphanumerique)";
                    }
                    else {
                      $req = $pdo->prepare('SELECT id FROM espace_membres WHERE pseudo = ?');
                      $req->execute([$_POST['pseudo']]);
                      $user = $req->fetch();
                       if ($user)
                        {
                        $errors['pseudo'] = 'ce pseudo est deja pris';
                       } 
                    }


              // test sur email

              if(empty($_POST['email']) || !filter_var($_POST['email'], FILTER_VALIDATE_EMAIL))
                   {
                     $errors['email'] = "email invalide";
                    }
                    else
                    {
                      $req = $pdo->prepare('SELECT id FROM espace_membres WHERE email = ?');
                      $req->execute([$_POST['email']]);
                      $user = $req->fetch();
                       if ($user)
                        {
                        $errors['email'] = 'cet email existe deja pour un autre compte';
                       } 
                    }
                                //test sur le mot de passe:
                                if(empty($_POST['mdp']) || $_POST['mdp'] != $_POST['cmdp'])
                                {
                                  $errors['mdp']="entrer un mot de passe valide";
                                 }
                          
                    if (empty($errors)) {
                      $requete = $pdo->prepare("INSERT INTO espace_membres SET pseudo = ?, email = ?, mot_de_passe = ?, contact = ?"); 
              
                      //cryptage du mot de passe
                      $mdp = password_hash($_POST['mdp'], PASSWORD_BCRYPT);

                      //execution de la requete
                      $requete->execute([$_POST['pseudo'], $_POST['email'], $mdp, $_POST['numero']]);
                      die('felicitation votre compte a bien été créer');
                    }           
                  }  
      }      
   ?>

<?php 

   error_reporting(E_ALL);
ini_set('display_errors', TRUE);
ini_set('display_startup_errors', TRUE);

    // If form submitted, insert values into the database.
    try{
      $bdd = new PDO('mysql:host=127.0.0.1;dbname=projet', 'root', '');

      // Activation des erreurs PDO
       $bdd->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
       
      // mode de fetch par défaut : FETCH_ASSOC / FETCH_OBJ / FETCH_BOTH
       $bdd->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_OBJ);
      } 
       catch(PDOException $e) {
          echo 'connection failed: ' or die('Erreur : ' . $e->getMessage());
      }
      ?>

class user {

  private $bdd = null;
  

  function __construct($bdd) {
    $this->bdd = $bdd;
  }

  public function dbExec($sql, $datas = NULL) {
    //Execution de la requete
    try {
      $requete = $this->bdd->prepare($sql);
      $requete->execute($datas);
    } catch (Exception $e) {
      // en cas d'erreur :
      echo " Erreur ! " . $e->getMessage();
      echo " Les datas : ";
      print_r($datas);
    }
    return $requete;
  }

  public function getUserByPseudo($pseudo) {
     $sql = 'SELECT id FROM espace_membres WHERE pseudo = ?';
     $datas = array($pseudo);
     $res = $this->dbExec($sql,$datas);
     return $res->fetchAll();
  }
  
  public function getUserByMail($Mail) {
     $sql = 'SELECT id FROM espace_membres WHERE email = ?';
     $datas = array($Mail);
     $res = $this->dbExec($sql,$datas);
     return $res->fetchAll();
  }
  
  public function addUser($pseudo,$email,$mdp,$contact) {
     //cryptage du mot de passe
     $mdp = password_hash($mdp, PASSWORD_BCRYPT);
     
     //insertion en BDD
     $sql = "INSERT INTO espace_membres (pseudo, email, mot_de_passe , contact)
              values (?,?,?,?) ";
     $datas = array($pseudo,$email,$mdp,$contact);
     $res = $this->dbExec($sql,$datas);
     return $res;
  }
  
  /**
   * Fonction permettant de vérifier si l'utilisateur existe en fonction de son login et password
   */
  public function authentification($pseudo,$mdp){
    $user = $this->getUserByPseudo($pseudo);
    //verifie qu'il n'y a bien qu'un seul user avec ce pseudo..
    if(!empty($user) && count($user)==1){
      $mdpBdd = $user[0]['mot_de_passe'];
      if (password_verify($mdp, $mdpBdd)){
        return $user;
      }else{
        return false;
      }
    }
  }
}

<?php

//connexion à la bdd
// penser à activer l'affichage des erreurs PDO : https://www.commentcamarche.net/faq/46512-pdo-gerer-les-erreurs
require_once 'connect_bd.php';

// on inclu la class user
require_once "user.class.php"; // on inclu la class user

//initialisation des variables 
$errors = array();

// recuperation PROPRE des variables AVANT de les utiliser
$pseudo = !empty($_POST['pseudo']) ? $_POST['pseudo'] : NULL;
$mdp = !empty($_POST['mdp']) ? $_POST['mdp'] : NULL;
$cmdp = !empty($_POST['cmdp']) ? $_POST['cmdp'] : NULL;
$numero = !empty($_POST['numero']) ? $_POST['numero'] : NULL;
$email = !empty($_POST['email']) ? $_POST['email'] : NULL;


//on instancie la class user
$oUser = new user($bdd);

if (isset($_POST['register'])) {

  //test sur le pseudo

  if (!$pseudo || !preg_match('/^[a-zA-Z0-9]+$/', $pseudo)) {
    $errors['pseudo'] = "votre pseudo n'est pas valide(alphanumerique)";
  } else {   
    $user = $oUser->getUserByPseudo($pseudo);
    if (!empty($user)) {
      $errors['pseudo'] = 'ce pseudo est déjà pris';
    }
  }

  // test sur email

  if (!$email || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
    $errors['email'] = "email invalide";
  } else {
    $user = $oUser->getUserByMail($mail);
    if ($user) {
      $errors['email'] = 'cet email existe deja pour un autre compte';
    }
  }
  //test sur le mot de passe:
  if (!$mdp || $mdp != $cmdp) {
    $errors['mdp'] = "entrer un mot de passe valide";
  }

  if (empty($errors)) {
    
    if($oUser->addUser($pseudo,$email,$mdp,$contact)){
      die('felicitation votre compte a bien été créer');
    }
  }else{
    print_r($errors);
  }
}
?>

$oUser = new user($pdo);