/**
  * Fonction permettant la récuperation des avatars d'un utilisateur (dernier dans la liste = avatar courant)
  * @param identifiant de utilisateur
  */
 public static function getAvatarsByUserId($id_user = '')
 {
     $list_avatars = null;
     if (User::isUserExist($id_user)) {
         $list_avatars = array();
         $sql = 'SELECT * FROM ' . Avatar::$table . ' WHERE id_user = ? ORDER BY date_avatar DESC';
         $CI =& get_instance();
         $query = $CI->db->query($sql, array($id_user));
         foreach ($query->result() as $row) {
             $avatar = new Avatar();
             $avatar->id = $row->id_avatar;
             $avatar->id_user = $id_user;
             $avatar->url = $row->url_avatar;
             $avatar->date = $row->date_avatar;
             $list_avatars[] = $avatar;
         }
         $query->free_result();
     }
     return $list_avatars;
 }
 /**
  * Fonction permettant la recherche d'un utilisateur (verification d'existance incluse)
  * @param identifiant de utilisateur
  */
 public static function getUserById($id = '')
 {
     $user = null;
     if (User::isUserExist($id)) {
         $user = new User();
         $sql = 'SELECT * FROM ' . User::$table . ' WHERE id_user = ?';
         $CI =& get_instance();
         $query = $CI->db->query($sql, array($id));
         $row = $query->row();
         $user->id = $id;
         $user->name = $row->name_user;
         $user->vorname = $row->vorname_user;
         $user->email = $row->email_user;
         $user->sex = $row->sex_user;
         $user->date = $row->date_user;
         $user->password = $row->password_user;
         $query->free_result();
     }
     return $user;
 }
<?php

include_once "function/common_function.php";
$error_msg = '';
$error_set = '';
if (isset($_POST['firstname'])) {
    include_once 'function/user_class.php';
    $fname = mysql_real_escape_string($_POST['firstname']);
    $lname = mysql_real_escape_string($_POST['lastname']);
    $phone_no = mysql_real_escape_string($_POST['phone']);
    $email = mysql_real_escape_string($_POST['email']);
    $password = mysql_real_escape_string($_POST['password']);
    $business_id = mysql_real_escape_string($_POST['business_id']);
    $acc_status = 2;
    $obj_user = new User();
    $check_user = $obj_user->isUserExist($email);
    if ($check_user) {
        $add_user = $obj_user->add_portal_user($fname, $lname, $email, $password, $acc_status, $phone_no);
        $user_id = mysql_insert_id();
        $_SESSION['user_id'] = $user_id;
        $_SESSION['email'] = $email;
        $_SESSION['f_name'] = $fname;
        $_SESSION['l_name'] = $lname;
        $_SESSION['tmp_business_id'] = $business_id;
        $error_set = 2;
        $error_msg = "Your account cerated successfully.Please check your email for account activation.";
        header("location:welcome_customer.php?id={$business_id}");
        exit;
    } else {
        $error_set = 1;
        $error_msg = "User already in list";
 public static function login()
 {
     $login = Core::validate(self::getVar('login'));
     $pass = Core::validate(self::getVar('pass'));
     $usr = new User();
     $userExistResult = $usr->isUserExist($login, Core::calculateHash($pass));
     if (!$userExistResult) {
         header("Location: /");
         return false;
     }
     $session = new Session();
     if ($session->isSessionExistByUserId($usr->getId())) {
         $session->delete();
     }
     $session->create($usr->getId(), Core::getClientIP());
     header('Location: /usr/mypage/');
 }