133 lines
4.2 KiB
PHP
Executable File
133 lines
4.2 KiB
PHP
Executable File
<?php
|
|
session_start();
|
|
$login=$HTTP_POST_VARS["login"];
|
|
$mdp=$HTTP_POST_VARS["mdp"];
|
|
$loguer=$HTTP_GET_VARS["loguer"];
|
|
$passage=$HTTP_SESSION_VARS["passage"];
|
|
|
|
/**Anticon**/
|
|
$login = str_replace("\"", "", $login);
|
|
$login = str_replace("'", "", $login);
|
|
$login = str_replace("<", "[", $login);
|
|
$login = str_replace(">", "]", $login);
|
|
$mdp = str_replace("\"", "", $mdp);
|
|
$mdp = str_replace("'", "", $mdp);
|
|
$mdp = str_replace("<", "[", $mdp);
|
|
$mdp = str_replace(">", "]", $mdp);
|
|
$mdp = str_replace("+", "", $mdp);
|
|
$login = htmlentities($login);
|
|
$mdp = htmlentities($mdp);
|
|
|
|
?>
|
|
|
|
<html>
|
|
<head>
|
|
<title>
|
|
Partie Administrateur
|
|
</title>
|
|
</head>
|
|
|
|
<body>
|
|
<div align="center">
|
|
<table align=center>
|
|
<tr align="center">
|
|
<td>
|
|
<a href="gestcli.php?loguer=oui&<?php print session_name() ?>=<?php print session_id() ?>">Gestion des clients</a>
|
|
</td>
|
|
<td>
|
|
<a href="produit.php?loguer=oui&<?php print session_name() ?>=<?php print session_id() ?>">Gestion des produits</a>
|
|
</td>
|
|
<td>
|
|
<a href="commande.php?loguer=oui&<?php print session_name() ?>=<?php print session_id() ?>">Gestion des commandes</a>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<?php
|
|
require("../connexion.php");
|
|
$conn = mysql_connect($host, $user, $password);
|
|
mysql_select_db($bdd) or die("Impossible d'ouvrir la base de donnee $bdd");
|
|
$requete = sprintf("select 1 from administrateur where loginadm='%s' and mdpadm='%s';",addslashes($login),md5($mdp));
|
|
$result=mysql_query($requete) or die ("Erreur SQL :$requete<br>".mysql_error()."...");
|
|
$requete8 = "select count(*) from commande where etatcmde='debut'";
|
|
$result8=mysql_query($requete8) or die ("Erreur SQL :$requete2<br>".mysql_error()."...");
|
|
|
|
while ($ligne8=mysql_fetch_row($result8))
|
|
{
|
|
$nombre=$ligne8[0];
|
|
}
|
|
|
|
$sql = "SELECT mdpadm,loginadm FROM administrateur WHERE loginadm='$login' AND mdpadm='$mdp';";
|
|
$req = mysql_query($sql) or die("Erreur SQL ! :$requete<br>".mysql_error()."...");
|
|
|
|
while($dt = mysql_fetch_array($req))
|
|
{
|
|
if(($dt['mdpadm']=$mdp)&&($dt['loginadm']=$login)) // OK!
|
|
{
|
|
$idadm="ok";
|
|
$_SESSION["idadm"]="$idadm";
|
|
}
|
|
}
|
|
|
|
|
|
if (isset($_SESSION['idadm']))
|
|
{
|
|
?>
|
|
<table>
|
|
<div align="left">
|
|
<h4>Nouvelles commandes a valider : <?php print $nombre?></h4>
|
|
</div>
|
|
<?php
|
|
$requete2 = "select idcmde,datecmde,montantcmde,etatcmde,modepaiement,message,idcli from commande where etatcmde='debut' ";
|
|
$result2=mysql_query($requete2) or die ("Erreur SQL :$requete2<br>".mysql_error()."...");
|
|
|
|
while ($ligne2=mysql_fetch_row($result2))
|
|
{
|
|
$idcmde=$ligne2[0];
|
|
$datecmde=$ligne2[1];
|
|
$montantcmde=$ligne2[2];
|
|
$etatcmde=$ligne2[3];
|
|
$modepaiement=$ligne2[4];
|
|
$message=$ligne2[5];
|
|
$idcli=$ligne2[6];
|
|
?>
|
|
<tr>
|
|
<td align="left">
|
|
<form name="fc" action="modifcom.php" method="post">
|
|
<a href="detcmd.php?idcmde=<?php print $idcmde?>&idcli=<?php print $idcli?>">Commande N° <?php print $idcmde ?></a><br>
|
|
<table>
|
|
<tr>
|
|
<td>
|
|
montant : <?php print $montantcmde ?>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>
|
|
Mode paiement : <?php print $modepaiement ?>
|
|
</td>
|
|
</tr>
|
|
|
|
<input type="hidden" name="<?php print session_name();?>" value="<?php print session_id();?>"/>
|
|
<input type="hidden" name="loguer" value="<?php print $loguer;?>"/>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
<?php
|
|
}
|
|
?>
|
|
</table>
|
|
<a href="../index.php?loguer=oui&<?php print session_name();?>=<?php print session_id();?>">Retour</a>
|
|
<?php
|
|
} else {
|
|
print "Erreur de connexion<br>$mdp,$login";
|
|
?>
|
|
<a href="../index.php?<?php print session_name();?>=<?php print session_id();?>">Retour</a>
|
|
<?php
|
|
}
|
|
?>
|
|
</div>
|
|
</body>
|
|
</html>
|