OOP concept

concept/user.py

@@ -2,12 +2,13 @@ import sqlite3
 import os
 
 class User:
-    def __init__(self, user_id, name, email):
+    def __init__(self, user_id, name, email, password):
         self._user_id = user_id
         self._name = name
         self._email = email
-        self._db_path = os.path.join("..", "db", "user.db")
-        self._init_db()
+        self._password = password
+        self._db_path = os.path.join("db", "user.db")
+        #self._init_db()
 
     # Getter
     def get_id(self):
@@ -19,6 +20,9 @@ class User:
     def get_email(self):
         return self._email
 
+    def get_password(self):
+        return self._password
+
     # Setter
     def set_name(self, name):
         self._name = name
@@ -28,6 +32,10 @@ class User:
         self._email = email
         self._update_db()
 
+    def set_password(self, password):
+        self._password = password
+        self._update_db()
+
     def _init_db(self):
         """Create the database and table if it doesn't exist"""
         with sqlite3.connect(self._db_path) as conn:
@@ -36,11 +44,12 @@ class User:
                 CREATE TABLE IF NOT EXISTS users (
                     id INTEGER PRIMARY KEY,
                     name TEXT NOT NULL,
-                    email TEXT NOT NULL
+                    email TEXT NOT NULL,
+                    password TEXT NOT NULL
                 )
             ''')
             conn.commit()
-            self._save_to_db()
+            #self._save_to_db()
 
     def _save_to_db(self):
         """Insert or update the user in the DB"""
@@ -49,18 +58,48 @@ class User:
             c.execute("SELECT id FROM users WHERE id = ?", (self._user_id,))
             if c.fetchone():
                 # update
-                c.execute('UPDATE users SET name = ?, email = ? WHERE id = ?',
-                          (self._name, self._email, self._user_id))
+                c.execute('UPDATE users SET name = ?, email = ?, password = ? WHERE id = ?',
+                          (self._name, self._email, self._password, self._user_id))
             else:
                 # insert
-                c.execute('INSERT INTO users (id, name, email) VALUES (?, ?, ?)',
-                          (self._user_id, self._name, self._email))
+                c.execute('INSERT INTO users (id, name, email, password) VALUES (?, ?, ?, ?)',
+                          (self._user_id, self._name, self._email, self._password))
             conn.commit()
 
     def _update_db(self):
         """Update the user's data in the DB"""
         with sqlite3.connect(self._db_path) as conn:
             c = conn.cursor()
-            c.execute('UPDATE users SET name = ?, email = ? WHERE id = ?',
-                      (self._name, self._email, self._user_id))
-            conn.commit()
+            c.execute('UPDATE users SET name = ?, email = ?, password = ? WHERE id = ?',
+                      (self._name, self._email, self._password, self._user_id))
+            conn.commit()
+
+    def save_to_db(self):
+        """Speichert den aktuellen Benutzer in die Datenbank (Insert oder Update)"""
+        with sqlite3.connect(self._db_path) as conn:
+            c = conn.cursor()
+            c.execute("SELECT id FROM users WHERE id = ?", (self._user_id,))
+            if c.fetchone():
+                # Benutzer existiert bereits → aktualisieren
+                c.execute('UPDATE users SET name = ?, email = ?, password = ? WHERE id = ?',
+                        (self._name, self._email, self._password, self._user_id))
+            else:
+                # Neuer Benutzer → einfügen
+                c.execute('INSERT INTO users (id, name, email, password) VALUES (?, ?, ?, ?)',
+                        (self._user_id, self._name, self._email, self._password))
+            conn.commit()
+
+
+    @staticmethod
+    def authenticate_user(email, password):
+        """Prüft, ob ein Benutzer mit E-Mail + Passwort existiert"""
+        db_path = os.path.join("db", "user.db")
+        with sqlite3.connect(db_path) as conn:
+            c = conn.cursor()
+            c.execute("SELECT id, name, email FROM users WHERE email = ? AND password = ?", (email, password))
+            result = c.fetchone()
+            if result:
+                user_id, name, email = result
+                return User(user_id, name, email, password)
+            return None
+