<?php
if (isset($_POST['valider']))
{
// D'abord, on se connecte à MySQL
$id=mysql_connect("localhost", "root", "");
mysql_select_db("base");
// On utilise les fonctions PHP mysql_real_escape_string et htmlspecialchars pour la sécurité
$ppr = mysql_real_escape_string(htmlspecialchars($_POST['ppr']));
// Ensuite on enregistre le message
$query1=mysql_query("select * from etre_humain where cin=(select cin from fonctionnaire where ppr='$ppr')");
$query=mysql_query("select * from fonctionnaire where ppr='$ppr'");
$query3=mysql_query("SELECT * from entite_travail where ppr='$ppr'");
$SEL1=mysql_fetch_array($query1);
$SEL2=mysql_fetch_array($query);
$SEL3=mysql_fetch_array($query3);
$nb_resultats = mysql_num_rows($query1);
?>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<SCRIPT LANGUAGE="JavaScript">
function confirmation() {
var msg = "Êtes-vous sûr de vouloir effectuer cette modification?";
if (confirm(msg))
location.href("modifier.php");
}
</SCRIPT>
</head>
<body>
<?php if ($nb_resultats ==0){?>
<script type="text/javascript" language="javascript">
alert("Erreur! La liste est vide Ou aucun fonctionnaire correspondant!")
</script>
<?php }
else {
?>
<form action="conf_mod.php" method="post">
<?php echo "PPR : ";?><pre></pre> <td></td><input type="text" name="ppr" value='<?php echo $ppr; ?>' /> <br/><br/><br/>
<?php echo "CIN : ";?> <pre></pre> <td></td><input type="text" name="cin" value='<?php echo ''.$SEL1['CIN'].''; ?>' /> <br/><br/><br/>
<?php echo "Nom : ";?> <pre></pre> <input type="text" name="nom" value='<?php echo ' '.$SEL1['nom'].' '; ?>' /> <br/><br/><br/>
<?php echo "Prénom : ";?> <pre></pre> <input type="text" name="prenom" value='<?php echo ' '.$SEL1['prenom'].' '; ?>' /> <br/><br/><br/>
<?php echo "Sexe : ";?> <pre></pre> <input type="text" name="sexe" value='<?php echo ' '.$SEL1['sexe'].' '; ?>' /> <br/><br/><br/>
<?php echo "Date de naissance : ";?> <pre></pre> <input type="text" name="date" value='<?php echo ' '.$SEL1['date_de_naissance'].' '; ?>' />
<p><font color="#CC0000"><strong>(YYYY-MM-DD)</strong></font></p>
<br/><br/><br/>
<?php echo "E-mail : ";?> <pre></pre> <input type="text" name="email" value='<?php echo ' '.$SEL1['e_mail'].' '; ?>' /> <br/><br/><br/>
<?php echo "Fonction : ";?> <pre></pre> <input type="text" name="fonction" value='<?php echo ' '.$SEL2['fonction'].' '; ?>' /> <br/><br/><br/>
<?php echo "Grade : ";?> <pre></pre> <td></td><input type="text" name="grade" value='<?php echo ' '.$SEL2['grade'].' '; ?>' /> <br/><br/><br/>
<?php echo "Numéro de bureau : ";?> <pre></pre> <td></td><input type="text" name="num_bur" value='<?php echo ' '.$SEL2['num_bur'].' '; ?>' /> <br/><br/><br/>
<?php echo "Etage : ";?> <pre></pre> <input type="text" name="etage" value='<?php echo ' '.$SEL2['etage'].' '; ?>' /> <br/><br/><br/>
<?php echo "Batiment : ";?> <pre></pre> <input type="text" name="batiment" /> <br/><br/><br/>
<?php echo "Téléphone du poste : ";?> <pre></pre> <input type="text" name="tel_poste" value='<?php echo ' '.$SEL2['tel_post'].' '; ?>' /> <br/><br/><br/>
<?php echo "Id entité de travail : ";?> <pre></pre> <input type="text" name="id_en" value='<?php echo ' '.$SEL3['id_en'].' '; ?>'/> <br/><br/><br/>
<?php echo "Id enitité de travail père : ";?> <pre></pre> <input type="text" name="pid_en" value='<?php echo ' '.$SEL3['id_en_pere'].' '; ?>' /> <br/><br/><br/>
<?php echo "Type : ";?> <pre></pre> <input type="text" name="type" value='<?php echo ' '.$SEL3['type'].' ';?>' /> <br/><br/><br/>
<?php echo "Libellé : ";?> <pre></pre> <input type="text" name="libelle" value='<?php echo ' '.$SEL3['libelle'].' '; ?>' /> <br/><br/><br/>
<?php echo "Abréviation : ";?> <pre></pre> <input type="text" name="abreviation" value='<?php echo ' '.$SEL3['abreviation'].' ';?>' /> <br/><br/><br/>
<INPUT TYPE="submit" onClick='confirmation();' name="valider" VALUE='Modifier'>
<input name="annuler" type="reset" value="Annuler" />
<input type="hidden" name="ok" value="1"/>
</form>
<?php }
if ((isset($_POST['valider']))&&(isset($_POST['ok']))){
// On utilise les fonctions PHP mysql_real_escape_string et htmlspecialchars pour la sécurité
$ppr = mysql_real_escape_string(htmlspecialchars($_POST['ppr']));
$cin = mysql_real_escape_string(htmlspecialchars($_POST['cin']));
$nom= mysql_real_escape_string(htmlspecialchars($_POST['nom']));
$prenom= mysql_real_escape_string(htmlspecialchars($_POST['prenom']));
$sexe= mysql_real_escape_string(htmlspecialchars($_POST['sexe']));
$date= mysql_real_escape_string(htmlspecialchars($_POST['date']));
$email= mysql_real_escape_string(htmlspecialchars($_POST['email']));
$fonction= mysql_real_escape_string(htmlspecialchars($_POST['fonction']));
$grade= mysql_real_escape_string(htmlspecialchars($_POST['grade']));
$num_bur= mysql_real_escape_string(htmlspecialchars($_POST['num_bur']));
$etage= mysql_real_escape_string(htmlspecialchars($_POST['etage']));
$tel_post= mysql_real_escape_string(htmlspecialchars($_POST['tel_poste']));
$id_en= mysql_real_escape_string(htmlspecialchars($_POST['id_en']));
$pid_en= mysql_real_escape_string(htmlspecialchars($_POST['pid_en']));
$type= mysql_real_escape_string(htmlspecialchars($_POST['type']));
$libelle= mysql_real_escape_string(htmlspecialchars($_POST['libelle']));
$abreviation= mysql_real_escape_string(htmlspecialchars($_POST['abreviation']));
$mod1=mysql_query("UPDATE etre_humain SET cin='$cin' , nom='$nom', prenom='$prenom', sexe='$sexe', date_de_naissance='$date', e_mail='$email' WHERE cin=(select cin from fonctionnaire where ppr='$ppr')");
$mod2=mysql_query("UPDATE fonctionnaire SET ppr='$ppr', fonction='$fonction', grade='$grade', num_bur='$num_bur', etage='$etage', tel_post='$tel_post', cin='$cin' WHERE ppr='$ppr'");
$mod3=mysql_query("UPDATE entite_travail SET id_en='$id_en', id_en_pere'$pid_en', type='$type', libelle='$libelle', abreviation='$abreviation', ppr='$ppr' WHERE ppr='$ppr'");
?>
<script> alert('fonctionnaire modifié');
</script>
<?php }
?>
</body>
</html>
<?php // On se déconnecte de MySQL
mysql_close($id);
}
?>
Partager