resatennis_tyroltenn/www/tyroltenn/modif_message.php

<?php
session_start();
header('P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"');
if(isset($_SESSION['type']) and isset($_SESSION['id'])) {
$type=$_SESSION['type'];
$id=$_SESSION['id'];
?>
<html>

<head>
<meta http-equiv="Content-Language" content="fr">
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">

<title>LE SERVEUR VOCAL DE RESERVATION DES SALLES DE TENNIS</title>
<link rel="stylesheet" href="style.css" type="text/css">
</head>

<body>
<div id="tout">
<?php
	include("enTete.php");
	include("menu.php");
	include("conf.php");
	
	echo "<div id='contenu'>";
	/* Informations joueur */
	if($type=='joueur') {
		$requete="SELECT id_joueur, nom, prenom, e_mail, annee, sexe, classement FROM joueur WHERE id_joueur='$id'";
		$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");
		$joueur=mysqli_fetch_object($reponse);
		$adm=0;
	}
	else {
		$requete="SELECT id_joueur, id_club FROM admin_resa WHERE id_admin='$id'";
		$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");
		$admin=mysqli_fetch_object($reponse);
		$requete="SELECT id_joueur, nom, prenom, e_mail, annee, sexe, classement FROM joueur WHERE id_joueur='$admin->id_joueur'";
		$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");
		$joueur=mysqli_fetch_object($reponse);
		$adm=1;
	}
	
	if($_GET['info']=="modif" or $_POST['info']=="modif") {
		echo "<h1><center>Modifier un message</center></h1>";
		$type='modif';
	}
	else if($_GET['info']=="suppr") {
		echo "<h1><center>Supprimer un message</center></h1>";
		$type='suppr';
	}
	
	/* Modification du message */
	if($type=='modif') {
		/* Affichage du formulaire */
		if(count($_POST)==0) {
			echo "<p><center>";
			echo "Modifiez les informations souhait&eacute;es puis valider.";
			echo "</center></p>";
			$id_message=$_GET['id_message'];
			$requete="SELECT message, date_match, heure_match FROM message_part WHERE id_message='$id_message'";
			$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");
			$message=mysqli_fetch_object($reponse);
			if(isset($_GET['message'])) {
				$mess=$_GET['message'];
			}
			else {
				$mess=$message->message;
			}
			echo "<form action='modif_message.php' method='post'>";
			echo "<center><table>";
			echo "<tr><td><b>Message : </td><td><textarea name='message' rows='5' cols='50'>$mess</textarea></td></tr>";
			$date="";
			if($message->date_match != "") {
				list($annee, $mois, $jour)=explode("-", $message->date_match);
				$date="$jour/$mois/$annee";
			}
			$heure="";
			if($message->heure_match != "") {
				list($heure, $min, $sec)=explode(":", $message->heure_match);
				$heure="$heure:$min";
			}
			echo "<tr><td><b>Date du match</b> (facultatif) : </td><td><input type='text' name='date_match' value='$date'></td></tr>";
			echo "<tr><td><b>Heure du match</b> (facultatif) : </td><td><input type='text' name='heure_match' value='$heure'></td></tr>";
			echo "<input type='hidden' name='id_message' value='$id_message'>";
			echo "<tr><td colspan='2'><center><input type='submit' namre='valider' value='Valider'></center></td></tr>";
			echo "</table></center>";
			echo "</form>";
		}
		/* Modification du message en BDD */
		else {
			$id_message=$_POST['id_message'];
			$message=$_POST['message'];
			$date_match=$_POST['date_match'];
			$heure_match=$_POST['heure_match'];

			if(($date_match=="" and $heure_match!="") or ($date_match!="" and $heure_match=="")) {
				echo "Vous n'avez pas saisi tous les &eacute;l&eacute;ments pour votre match.<br />";
				echo "Veuillez recommencer en cliquant <a href='modif_message.php?info=modif&id_message=$id_message&message=$message'>ici.</a>";
			}
			else {
				$id_joueur=$joueur->id_joueur;
				$date_mess=date("Y-m-d", time());
				$heure_mess=date("H:i:00", time());
				if($date_match!="" and $heure_match!="") {
					if(strlen($date_match)==10 and strlen($heure_match)==5) {
						list($jour, $mois, $annee)=explode("/", $date_match);
						$date_m="$annee-$mois-$jour";
						$heure_m="$heure_match:00";
						$requete="UPDATE message_part SET date_mess='$date_mess', heure_mess='$heure_mess', message='$message', date_match='$date_m', heure_match='$heure_m' WHERE id_message='$id_message'";
					}
					else {
						echo "La date ou l'heure de match n'a pas le bon format.<br />";
						echo "Veuillez recommencer en cliquant <a href='modif_message.php?info=modif&id_message=$id_message&message=$message'>ici.</a>";
					}
				}
				else {
					$requete="UPDATE message_part SET date_mess='$date_mess', heure_mess='$heure_mess', message='$message', date_match=NULL, heure_match=NULL WHERE id_message='$id_message'";
				}
				$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");

				echo "Le message a bien &eacute;t&eacute; enregistr&eacute;.<br />";
			}
		}
	}
	/* Suppression du message */
	else if($type=='suppr') {
		$id_message=$_GET['id_message'];

		$requete="DELETE FROM message_part WHERE id_message='$id_message'";
		$reponse=mysqli_query($db_connection, $requete) or die ("Erreur no".mysqli_errno($db_connection)()." : ".mysqli_error($db_connection)()."<br>");

		echo "Le message a &eacute;t&eacute; supprim&eacute;.";
	}

	echo "<br /><br />";
	echo "<center><a href='liste_messages.php'>Retour &agrave; la liste des messages</a></center>";

	echo "<br /><br />";
	include("deco_resa.php");
	include("piedDePage.php");
}
else {
	echo("Non autorisé - Redirection vers la page d'identification dans 2 secondes");
	sleep(2);
	include("login_resa.php");
}

?>