Files

135 lines
3.0 KiB
PHP
Executable File

<?php
session_start();
$login=$HTTP_POST_VARS["login"];
$mdp=$HTTP_POST_VARS["mdp"];
$idfamille=$HTTP_POST_VARS["idfamille"];
$idcateg=$HTTP_POST_VARS["idcateg"];
$page=$HTTP_POST_VARS["page"];
/**Anticon**/
$login = str_replace("\"", "", $login);
$login = str_replace("'", "", $login);
$login = str_replace("<", "[", $login);
$login = str_replace(">", "]", $login);
$mdp = str_replace("\"", "", $mdp);
$mdp = str_replace("'", "", $mdp);
$mdp = str_replace("<", "[", $mdp);
$mdp = str_replace(">", "]", $mdp);
$mdp = str_replace("+", "", $mdp);
$login = htmlentities($login);
$mdp = htmlentities($mdp);
?>
<html>
<head>
<title>
</title>
<link href="../style.css" rel="stylesheet" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><style type="text/css">
<!--
a:link {
color: #FFFFFF;
text-decoration: none;
}
a:visited {
text-decoration: none;
color: #FFFFFF;
}
a:hover {
text-decoration: underline;
color: #FFFFFF;
}
a:active {
text-decoration: none;
color: #FFFFFF;
}
-->
</style></head>
<body class="bgcolor" text="white">
<div align="center">
<?php
require("../connexion.php");
$conn = mysql_connect($host, $user, $password);
mysql_select_db($bdd) or die("Impossible d'ouvrir la base de donnee $bdd");
$sql = "SELECT idcli,nomcli,prenomcli,logincli,mdpcli,etatcli FROM client WHERE logincli='$login' AND mdpcli='$mdp'";
$req = mysql_query($sql) or die("Erreur SQL ! :$requete<br>".mysql_error()."...");
while($dt = mysql_fetch_array($req))
{
if(($dt['mdpcli']=$mdp)&&($dt['logincli']=$login)) // OK!
{
$idcli=$dt['idcli'];
$nomcli=$dt['nomcli'];
$prenomcli=$dt['prenomcli'];
$etatcli=$dt['etatcli'];
$client="connect";
$_SESSION["client"]=$client;
$_SESSION["idcli"]=$idcli;
echo "client:".$_SESSION["client"]."<BR>";
}
}
if ($idcli)
{
?>
<br>
<br>
<table>
<tr>
<td>
<?php
if ($nomcli)
{
?>
Bonjour <?php print "$prenomcli $nomcli";?>
<?php
}
?>
</td>
</tr>
<tr align=center>
<td>
<br>
<a href="gestcompte.php">Gestion de votre compte</a>
</td>
</tr>
<tr align=center>
<td>
<br>
<a href="gestcmde.php?idcli=<?php print $idcli?>&loguer=ok">Voir vos commandes</a>
</td>
</tr>
<tr align=center>
<td>
<br>
<?php
if (isset($_SESSION['compt']))
{
?>
<a href="../produit/panier.php?idfamille=<?php print $idfamille?>&idcateg=<?php print $idcateg?>&page=<?php print $idpage?>&idcli=<?php print $idcli?>&loguer=ok">Validez votre commande</a>
<?php
}
?>
</td>
</tr>
</table>
<br> <br> <br>
<a href="../vierge.php">Retour</a>
<?php
//session_unregister("client");
} else {
?>
<br><br>Erreur de connexion
<br><br><a href="login.php">Retour</a>
<?php
}
?>
</div>
</body>
</html>