1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68
| <?php
include ("../config/bdd-sql.php");
function getIPVisiteur()
{
if($_SERVER)
{
if (isset($_SERVER['HTTP_X_FORWARDED_FOR']))
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
elseif (isset($_SERVER['HTTP_CLIENT_IP']))
$ip=$_SERVER['HTTP_CLIENT_IP'];
else
$ip=$_SERVER['REMOTE_ADDR'];
}
else
{
if (getenv('HTTP_X_FORWARDED_FOR'))
$ip=getenv('HTTP_X_FORWARDED_FOR');
elseif (getenv('HTTP_CLIENT_IP'))
$ip=getenv('HTTP_CLIENT_IP');
else
$ip=getenv('REMOTE_ADDR');
}
return $ip;
}
// CLIENT INFORMATION
$pseudo = htmlspecialchars(trim($_POST['pseudo']));
$passe = htmlspecialchars(trim($_POST['passe']));
$email = htmlspecialchars(trim($_POST['email']));
$jour = htmlspecialchars(trim($_POST['jour']));
$mois = htmlspecialchars(trim($_POST['mois']));
$annee = htmlspecialchars(trim($_POST['annee']));
$parrain = htmlspecialchars(trim($_POST['parrain']));
$nom = htmlspecialchars(trim($_POST['nom']));
$prenom = htmlspecialchars(trim($_POST['prenom']));
$adresse = htmlspecialchars(trim($_POST['adresse']));
$cp = htmlspecialchars(trim($_POST['cp']));
$ville = htmlspecialchars(trim($_POST['ville']));
$pays = htmlspecialchars(trim($_POST['pays']));
define("PREFIXE", "%£^ç~&-`=*+-$*ù!:;,?²azertyuiopqsdfghjklmwxcvbn");
define("SUFFIXE", "nbvcxwmlkjhgfdsqPOIUYTREZA²?,;:!ù*$-+*=`-&~^%£");
$pass_fin = md5(sha1(sha1(PREFIXE).$passe.sha1(SUFFIXE)));
$datefr = date("Y-m-d");
$heurefr = date("H:i:s");
$ip = getIPVisiteur();
$infosm = mysql_query("SELECT * FROM membres WHERE addr_ip = '".$ip."'") or die(mysql_error());
$donneesm = mysql_fetch_array($infosm);
if($donneesm['addr_ip'] == $ip){
}else{
$addClient = "INSERT INTO membres (pseudo,passe,email,datenaiss,parrain,nom,prenom,adresse,cp,ville,pays, addr_ip, date_enreg) VALUES ('$pseudo','$pass_fin','$email', '$jour-$mois-$annee', '$parrain', '$nom', '$prenom', '$adresse', '$cp', '$ville', '$pays', '".getIPVisiteur()."', '$datefr $heurefr')";
mysql_query($addClient) or die(mysql_error());
} |