1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109
| <?php
mysql_connect('localhost', 'root', '');
mysql_select_db('boutique');
function verifier_date($date) {
return (preg_match('#^(\d{2})([/-])(\d{2})\2(\d{4})$#D', $date, $m) == 1 && checkdate($m[3], $m[1], $m[4]));
}
$erreurs = array();
if (isset($_POST['valider'])) {
if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
function stripslashes_array($array) {
return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
}
$_POST = stripslashes_array($_POST);
}
$req = mysql_query(
sprintf(
"SELECT COUNT(*) FROM utilisateur WHERE email = '%s'",
mysql_real_escape_string($_POST['email'])
)
) or die(mysql_error());
if (mysql_result($req, 0, 0) > 0) {
$erreurs[] = "Cette adresse email est déjà utilisée";
}
if (!preg_match('/[-a-z0-9!#$%&\'*+\/=?^_`{|}~]+(?:\.[-a-z0-9!#$%&\'*+\/=?^_`{|}~]+)*@(?:(?:[a-z0-9](?:[-a-z0-9]*[a-z0-9]+)?){1,63}\.)+(?:[a-z0-9](?:[-a-z0-9]*[a-z0-9]+)?){2,63}/', $_POST['email'])) {
$erreurs[] = "L'adresse email est incorrecte";
}
if (!verifier_date($_POST['date'])) {
$erreurs[] = "La date indiquée est invalide";
}
if (empty(trim($_POST['nom']))) {
$erreurs[] = "Le nom est vide";
}
/* ... */
if (count($erreurs) > 0) {
echo '<ul>';
foreach ($erreurs as $e) {
echo '<li>' . $e . '</li>';
}
echo '</ul>';
} else {
$req = mysql_query(
sprintf("INSERT INTO utilisateur VALUES('', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s','%s'",
mysql_real_escape_string($_POST['gender']),
mysql_real_escape_string($_POST['prenom']),
mysql_real_escape_string($_POST['nom']),
mysql_real_escape_string($_POST['date']),
mysql_real_escape_string($_POST['email']),
mysql_real_escape_string($_POST['adresse']),
mysql_real_escape_string($_POST['postal']),
mysql_real_escape_string($_POST['ville']),
mysql_real_escape_string($_POST['pays']),
mysql_real_escape_string($_POST['telephone']),
mysql_real_escape_string($_POST['fax']),
mysql_real_escape_string($_POST['passe']) // Il faudrait le hasher
)
) or die(mysql_error());
$host = $_SERVER['HTTP_HOST'];
$uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
$extra = 'index.php';
header("Location: http://$host$uri/$extra");
exit;
}
}
?>
<div id="rightcolumn">
<form name="formulaire" method="post">
<table >
<TR><TD><p>Genre:
<input type="radio" value="Homme" name="gender" >
Homme
<input type="radio" value="Femme" name="gender">
Femme </p>
<p>Prénom:
<input name="prenom" id="prenom">
</p>
<p>Nom:<input name="nom" id="nom"></p>
<p>Date de naissance:<input name="date" id="date"></p>
<p>Adresse email:<input name="email" id="email"></p></TR>
<TR><TD><p>Adresse:<input name="adresse" id="adresse"></p>
<p>Code postal:<input name="postal" id="postal"></p>
<p>Ville:<input name="ville" id="ville"> </p>
<p>Pays:<select name="pays" id="pays">
<option value="0">Choisissez</option>
<option value="Agerie" >Algerie</option>
<option value="Libie">Libie</option>
<option value="Maroc">Maroc</option>
<option value="Tunis">Tunis</option>
</select></p></TD></TR>
<TR><TD><p>Téléphone</TD>
<INPUT name="telephone"></p>
<p>Numéro de fax:<INPUT name="fax"></p>
<p>Mot de passe:<INPUT name="passe" type="password" id="passe" value="" maxLength="40"></p>
<p> confirmation:<INPUT type="password" maxLength="40" value="" name="confirmation"></p>
<p><input name="valider" type="submit" class="Style13" id="valider" value="Valider">
</p></TD>
</form> |
Partager