", "]", $login);
$mdp = str_replace("\"", "", $mdp);
$mdp = str_replace("'", "", $mdp);
$mdp = str_replace("<", "[", $mdp);
$mdp = str_replace(">", "]", $mdp);
$mdp = str_replace("+", "", $mdp);
$login = htmlentities($login);
$mdp = htmlentities($mdp);
?>
Partie Administrateur
".mysql_error()."...");
$requete8 = "select count(*) from commande where etatcmde='debut'";
$result8=mysql_query($requete8) or die ("Erreur SQL :$requete2
".mysql_error()."...");
while ($ligne8=mysql_fetch_row($result8))
{
$nombre=$ligne8[0];
}
$sql = "SELECT mdpadm,loginadm FROM administrateur WHERE loginadm='$login' AND mdpadm='$mdp';";
$req = mysql_query($sql) or die("Erreur SQL ! :$requete
".mysql_error()."...");
while($dt = mysql_fetch_array($req))
{
if(($dt['mdpadm']=$mdp)&&($dt['loginadm']=$login)) // OK!
{
$idadm="ok";
$_SESSION["idadm"]="$idadm";
}
}
if (isset($_SESSION['idadm']))
{
?>
Nouvelles commandes a valider :
".mysql_error()."...");
while ($ligne2=mysql_fetch_row($result2))
{
$idcmde=$ligne2[0];
$datecmde=$ligne2[1];
$montantcmde=$ligne2[2];
$etatcmde=$ligne2[3];
$modepaiement=$ligne2[4];
$message=$ligne2[5];
$idcli=$ligne2[6];
?>
|
|
Retour
$mdp,$login";
?>
Retour