1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
| <?php
//Page du haut
include("sources/haut.php");
//Fichier necessaire
include("sources/config.php");
// Verifie si on peut se connecter a la base sql
$connect=mysql_connect($host,$user,$pass) or die ("Impossible de se connecter");
mysql_select_db($base, $connect) or die ("Impossible de selectionner la base de donnees");
//Configure les dates et les heures
$datevalid= date("Y-m-d",time());
$heure= date("H:i:s",time());
$quipass= date("Y-m-d",time());
$heurepass= date("H:i:s",time());
//Verifie si on s'est connecte a l'espace membre
$connom=$HTTP_COOKIE_VARS["espace_login"];
$conpass=$HTTP_COOKIE_VARS["espace_pass"];
$result=mysql_query ("SELECT * FROM comptes WHERE nom='$connom' and pass='$conpass'") or die ("Requete impossible");
$autoconnect = mysql_num_rows($result);
if ($autoconnect==0) {
echo("<script language=\"javascript\">location=\"erreur.php\";</script>");}
//Recupere les paramètres
$result=mysql_query ("SELECT * FROM comptes WHERE nom='$connom' and pass='$conpass'") or die ("Requete impossible");
$row = mysql_fetch_array($result);
$nom = $row["nom"];
$idmembre = $row["id"];
$emailmembre = $row["email"];
$avatarmembre = $row["avatar"];
$d = $row["avatar"];
?><?php
include("sources/config.php");
include("sources/haut.php");
if($action == "valid")
{
$nom = $HTTP_POST_VARS["nom"];
$id = $HTTP_POST_VARS["id"];
$reponse = $HTTP_POST_VARS["reponse"];
$articleid = $HTTP_POST_VARS["articleid"];
$nom = strip_tags($nom);
$id = strip_tags($idl);
$articleid = strip_tags($articleid);
$reponse = strip_tags($reponse);
$reponse = mysql_real_escape_string($reponse);
if (empty($reponse))
{
echo "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL = ?msg=Votre+propositions+doit+comporter+d'un+titre+et+d'un+texte!\">";
exit;
}
$db = mysql_connect($host,$user,$pass);
mysql_select_db($base,$db);
$requete = mysql_db_query($base,"SELECT * FROM articat WHERE titre='$titre'",$db) or die(mysql_error());
$num = mysql_num_rows($requete);
$requetem = mysql_db_query($base,"SELECT * FROM articat WHERE article='$article'",$db) or die(mysql_error());
$numm = mysql_num_rows($requetem);
$requetem = mysql_db_query($base,"SELECT * FROM comptes WHERE email='$email'",$db) or die(mysql_error());
$numm = mysql_num_rows($requetem);
$date = date("d/m/Y");
$sql = "insert into reponse (id, nom, idmembre, articleid, reponse, datevalid, heure) values('$id', '$connom', '$idmembre', '$articleid', '$reponse', '$datevalid', '$heure' )";
mysql_query ($sql);
echo "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL = ?msg=Reponse+envoyée+!\">";
}
?><form action="?action=valid&articleid=<?php echo ("$articleid"); ?>" method="post" name="inscription" >
<table width="400" border="0" align="center" bgcolor="<? echo $colp;?>">
<tr>
<td>
<table width="100%" border="0">
<tr bgcolor="<? echo $cols;?>">
<td>
<div align="center"><b><font size="<? echo $size; ?>" face="<? echo $font; ?>" color="#FFFFFF">Proposition d'un Article</font></b></div>
</td>
</tr>
</table>
<table width="100%" border="0">
<td rowspan="3" align="center" valign="top" class="left"><?php echo ("<img src='$avatarmembre' width='87' height='88' style='float: right;' border='0'>"); ?></td></tr><td width="51%"><font face="<? echo $font; ?>" size="<? echo $size; ?>"><b>Nom
:</b></font>
<?php echo ("<font face=\"<? echo $font; ?>\" size=\"$size\">$nom</font>"); ?>-<?php echo ("<font face=\"<? echo $font; ?>\" size=\"$size\">$idmembre</font>"); ?>
<br>
<tr>
<td width="55%"><b><font size="<? echo $size; ?>" face="<? echo $font; ?>">Id de l'article
:</font></b>
<?php echo ("<font face=\"<? echo $font; ?>\" size=\"$size\">$articleid</font>"); ?>
</td>
</tr>
<td width="51%"> <font face="<? echo $font; ?>" size="<? echo $size; ?>"><b>Texte
</b> (facultatif) <b>:</b><br/>
</font></td>
<td width="49%">
<textarea name="reponse" cols="44" rows="7" class="txt_box" ><?php echo "".stripslashes($reponse)."" ?></textarea>
</td>
</tr>
</table>
<table width="100%" border="0">
<tr>
<td>
<center><input type="submit" name="Submit" value="Valider"></center>
</td>
</tr>
</table>
</td>
</tr>
</table>
</form><b><?php
if($msg)
{
echo '<div align="center"><span class="Style5">'.stripslashes($msg).'</span></div>';
}
?></b><p> |
