diff --git a/administration/edition_article.php b/administration/edition_article.php
index 876c45d..eece5da 100644
--- a/administration/edition_article.php
+++ b/administration/edition_article.php
@@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php');
$article_id_edit_page=$_GET['id'];
$sql="SELECT * FROM article WHERE id_article='$article_id_edit_page'";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$article_data = mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$article_data = $req->fetch(PDO::FETCH_ASSOC);
include("".$MainDir."files/navheader.php");
diff --git a/administration/edition_page.php b/administration/edition_page.php
index e2297ab..c45af54 100644
--- a/administration/edition_page.php
+++ b/administration/edition_page.php
@@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php');
$page_id_edit_page=$_GET['id'];
$sql="SELECT * FROM page WHERE id_page='$page_id_edit_page'";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$page_data = mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$page_data = $req->fetch(PDO::FETCH_ASSOC);
include("".$MainDir."files/navheader.php");
diff --git a/administration/index.php b/administration/index.php
index 82db0c2..1ae3841 100644
--- a/administration/index.php
+++ b/administration/index.php
@@ -1 +1 @@
-'.$sql.' '.mysql_error());
$user_ranking = mysql_fetch_assoc($req);
$user_rank="$user_ranking[user_rank]";
$sql="SELECT * FROM blog_config";
$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
$config_blog_page_admin = mysql_fetch_assoc($req);
$description = $config_blog_page_admin['description'];
$static_homepage_status = $config_blog_page_admin['static_homepage_status'];
echo(" Etat utilisateur : Connecté ");
echo " ";
echo("Votre rang est : ".$user_ranking['user_rank'].". ");
if($user_rank!=1){
echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site.");
}else{
echo("
Back
Ecrire un article !
Ecrire une page !
");
if($static_homepage_status=="1" && $static_homepage_id!=NULL){
$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
$req_page = mysql_query($sql_page) or die('Erreur SQL ! '.$sql.' '.mysql_error());
$data_page=mysql_fetch_assoc($req_page);
echo " Actuellement la page {$data_page['titre']} est définie comme page d'accueil ! ";
}elseif($static_homepage_status=="1"){
echo"Vous n'avez pas encore défini de page d'accueil. ";
}
}
?>
Etat utilisateur : Déconnecté
Veuillez vous connecter pour accéder à cette page.";
}
include_once(''.$MainDir.'user/bottom.php');
?>
\ No newline at end of file
+query($sql);
$user_ranking = $stmt->fetch(PDO::FETCH_ASSOC);
$user_rank="$user_ranking[user_rank]";
$sql_blog_config="SELECT * FROM blog_config";
$blog_config = $dbh->query($sql_blog_config);
$config_blog_page_admin = $blog_config->fetch(PDO::FETCH_ASSOC);
$description = $config_blog_page_admin['description'];
$static_homepage_status = $config_blog_page_admin['static_homepage_status'];
echo(" Etat utilisateur : Connecté ");
echo " ";
echo("Votre rang est : ".$user_ranking['user_rank'].". ");
if($user_rank!=1){
echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site.");
}else{
echo("
Back
Ecrire un article !
Ecrire une page !
");
if($static_homepage_status=="1" && $static_homepage_id!=NULL){
$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
$req_page = $dbh->query($sql_page) or die('Erreur SQL ! '.$sql.' '.mysql_error());
$data_page=$req_page->fetch(PDO::FETCH_ASSOC);
echo " Actuellement la page {$data_page['titre']} est définie comme page d'accueil ! ";
}elseif($static_homepage_status=="1"){
echo"Vous n'avez pas encore défini de page d'accueil. ";
}
}
?>
Etat utilisateur : Déconnecté
Veuillez vous connecter pour accéder à cette page.";
}
include_once(''.$MainDir.'user/bottom.php');
?>
\ No newline at end of file
diff --git a/files/article_suppression.php b/files/article_suppression.php
index 93a3bc6..4b66f6a 100644
--- a/files/article_suppression.php
+++ b/files/article_suppression.php
@@ -22,11 +22,10 @@ echo" Vous ne pouvez pas effectuer cette op
$this_article_id=$_GET['id'];
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
$sql="SELECT * FROM article";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_articles=mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_articles=$req->fetch(PDO::FETCH_ASSOC);
$confirmed="0";
@@ -40,7 +39,7 @@ if(isset($_POST['oui'])){
if(($_POST['oui']=="Oui"))
{
-mysql_query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error());
+$dbh->query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error());
echo " Opération effectuée ! Retour ";
diff --git a/files/check_admin.php b/files/check_admin.php
index 68c30d0..d48d075 100644
--- a/files/check_admin.php
+++ b/files/check_admin.php
@@ -4,8 +4,8 @@
$sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
$user_rank="$user_ranking[user_rank]";
if($user_rank==1){
diff --git a/files/check_status.php b/files/check_status.php
index 021647c..bbaca33 100644
--- a/files/check_status.php
+++ b/files/check_status.php
@@ -13,8 +13,8 @@ $connected="1";
$sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
$user_rank="$user_ranking[user_rank]";
if($user_rank==1){
diff --git a/files/page_suppression.php b/files/page_suppression.php
index 2e96191..881672e 100644
--- a/files/page_suppression.php
+++ b/files/page_suppression.php
@@ -21,11 +21,10 @@ echo" Vous ne pouvez pas effectuer cette opération si vous n'
$this_page_id=$_GET['id'];
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
$sql="SELECT * FROM page";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_pages=mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_pages=$req->fetch(PDO::FETCH_ASSOC);
$confirmed="0";
@@ -39,7 +38,7 @@ if(isset($_POST['oui'])){
if(($_POST['oui']=="Oui"))
{
-mysql_query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error());
+$dbh->query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error());
echo " Opération effectuée ! Retour ";
diff --git a/files/submit_blog_config.php b/files/submit_blog_config.php
index db178c3..0e991df 100644
--- a/files/submit_blog_config.php
+++ b/files/submit_blog_config.php
@@ -1 +1 @@
- Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e).";
}
if(@$_SESSION['session'])
{
require_once(''.$MainDir.'user/verifications.php');
include("".$MainDir."files/check_admin.php");
$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
$sql="SELECT * FROM page";
$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
$data_pages=mysql_fetch_assoc($req);
if($admin_mode == "1"){
//////// TO SET
if(isset($_POST['static_homepage_status'])){
$site_name=htmlspecialchars(formulaires($_POST['titre']));
$description=htmlspecialchars(formulaires($_POST['description']));
$bandeau=htmlspecialchars(formulaires($_POST['bandeau']));
$static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status']));
////////
//$passwd=htmlspecialchars(formulaires($_POST['passwd']));
//$passwd2=htmlspecialchars(formulaires($_POST['passwd2']));
//////// TO SET
mysql_query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error());
mysql_query("UPDATE blog_config SET description='$description'") or die ('error : '.mysql_error());
mysql_query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error());
mysql_query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error());
////////
echo'Vous venez de modifier les paramètres de '.$website_name.'Retour à l\'accueil du site ! ';
include_once('../user/bottom.php');
}
if(isset($_GET['static_homepage_id'])){
$get_static_homepage_id = $_GET['static_homepage_id'];
mysql_query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error());
echo'Vous venez de modifier les paramètres de '.$website_name.'Retour à l\'accueil du site ! ';
}
}
}
?>
\ No newline at end of file
+ Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e).";
}
if(@$_SESSION['session'])
{
require_once(''.$MainDir.'user/verifications.php');
include("".$MainDir."files/check_admin.php");
$sql="SELECT * FROM page";
$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
$data_pages=$req->fetch(PDO::FETCH_ASSOC);
if($admin_mode == "1"){
//////// TO SET
if(isset($_POST['static_homepage_status'])){
$site_name=htmlspecialchars(formulaires($_POST['titre']));
$description=htmlspecialchars(formulaires($_POST['description']));
$bandeau=htmlspecialchars(formulaires($_POST['bandeau']));
$static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status']));
////////
//$passwd=htmlspecialchars(formulaires($_POST['passwd']));
//$passwd2=htmlspecialchars(formulaires($_POST['passwd2']));
//////// TO SET
$dbh->query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error());
$dbh->query("UPDATE blog_config SET description='$description'") or die ('error : '.mysql_error());
$dbh->query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error());
$dbh->query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error());
////////
echo'Vous venez de modifier les paramètres de '.$website_name.'Retour à l\'accueil du site ! ';
include_once('../user/bottom.php');
}
if(isset($_GET['static_homepage_id'])){
$get_static_homepage_id = $_GET['static_homepage_id'];
$dbh->query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error());
echo'Vous venez de modifier les paramètres de '.$website_name.'Retour à l\'accueil du site ! ';
}
}
}
?>
\ No newline at end of file
diff --git a/files/submit_edit.php b/files/submit_edit.php
index 8569150..39c6e9e 100644
--- a/files/submit_edit.php
+++ b/files/submit_edit.php
@@ -11,16 +11,15 @@ $this_article_id=$_GET['id'];
$date = "42";
$titre = $_POST['titre'];
$article = $_POST['article'];
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
$sql="SELECT * FROM article";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_articles=mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_articles=$req->fetch(PDO::FETCH_ASSOC);
-mysql_query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
-mysql_query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
diff --git a/files/submit_edit_page.php b/files/submit_edit_page.php
index e80f73b..ab87c45 100644
--- a/files/submit_edit_page.php
+++ b/files/submit_edit_page.php
@@ -13,26 +13,16 @@ $page = addslashes($_POST['page']);
$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
$sql="SELECT * FROM page";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_pages=mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_pages=$req->fetch(PDO::FETCH_ASSOC);
-mysql_query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
-mysql_query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
-
-
-//$req = $bdd->prepare('INSERT INTO page(user,titre,page) VALUES (:user, :titre, :page)');
-//$req->execute(array(
-// "user" => $username,
-// "titre" => $titre,
-// "page" => $page,
-
-//));
echo "Votre page a bien été enregistrée ! Retour ";
-//echo date_default_timezone_set('l jS \of F Y h:i:s A');
}
else
{
diff --git a/files/up_check_admin.php b/files/up_check_admin.php
index cc034fd..cbe4005 100644
--- a/files/up_check_admin.php
+++ b/files/up_check_admin.php
@@ -3,11 +3,13 @@
'.$sql.' '.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);
+
+ $sql="SELECT user_rank FROM user WHERE id_user=id_user";
+
+ $stmt = $dbh->query($sql);
+
+ $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC);
$user_rank="$user_ranking[user_rank]";
@@ -31,4 +33,4 @@ echo("Vous n'
}
-?>
\ No newline at end of file
+?>
diff --git a/index.php b/index.php
index 2636519..9a1f170 100644
--- a/index.php
+++ b/index.php
@@ -38,10 +38,8 @@ if(isset($_GET['error']))
if(isset($root_path))
{
-mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
-mysql_select_db(DB_DB);
-$nombre_utilisateur=mysql_query("SELECT * FROM user") or die ('error : '.mysql_error());
-$count_user=mysql_num_rows($nombre_utilisateur);
+$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error());
+$count_user=$nombre_utilisateur->rowCount();
}
if(isset($count_user) && $count_user == 0){
@@ -138,8 +136,10 @@ text-decoration:underline;
$sql_page_menu="SELECT * FROM page ORDER BY priority";
-$req = mysql_query($sql_page_menu) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-while($data_page_menu=mysql_fetch_assoc($req))
+$req = $dbh->query($sql_page_menu) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+
+
+while($data_page_menu=$req->fetch(PDO::FETCH_ASSOC))
{
@@ -173,8 +173,8 @@ $connected="1";
$sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$req = $dbh->query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
$user_rank="$user_ranking[user_rank]";
if($user_rank==1){
@@ -192,7 +192,7 @@ if($user_rank==1){
////Start check content
-if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL){
+if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL && !isset($_GET['id'])){
if(isset($_GET['id_page'])){
@@ -203,8 +203,8 @@ if(isset($_GET['id_page'])){
$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
}
-$req_page = mysql_query($sql_page) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_page=mysql_fetch_assoc($req_page);
+$req_page = $dbh->query($sql_page) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_page=$req_page->fetch(PDO::FETCH_ASSOC);
if($data_page["id_page"]== null && $static_homepage_status!="1"){
@@ -251,8 +251,8 @@ if($static_homepage_status=="1" && $static_homepage_id != $data_page["id_page"]
}elseif(isset($_GET['id'])){
$sql_article="SELECT * FROM article WHERE id_article=".$_GET['id']."";
-$req_article = mysql_query($sql_article) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-$data_article=mysql_fetch_assoc($req_article);
+$req_article = $dbh->query($sql_article) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+$data_article=$req_article->fetch(PDO::FETCH_ASSOC);
if($data_article["id_article"]== null){
@@ -260,12 +260,12 @@ if($data_article["id_article"]== null){
}else{
-
+$article_stripslashtitle = stripslashes($data_article['titre']);
$page_name= $data_article["titre"];?>
{$data_article["titre"]}";
+echo"{$article_stripslashtitle} ";
echo"".$article_date_display." : {$data_article["date"]} par : {$data_article['user']} ";
echo"".$article_article_display." : {$article_stripslash} ";
@@ -302,9 +302,9 @@ $page=$debut.', 7';
-$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page."";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-while($data=mysql_fetch_assoc($req))
+$sql_article="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page."";
+$req_article = $dbh->query($sql_article) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+while($data=$req_article->fetch(PDO::FETCH_ASSOC))
{
$article_stripslash = stripslashes($data['article']);
@@ -341,8 +341,8 @@ if($connected==1){
$sqlm='SELECT COUNT(*) AS nb_id FROM article';
-$reqm = mysql_query($sqlm) or die('Erreur SQL ! '.$sqlm.' '.mysql_error());
-$donnee = mysql_fetch_array($reqm);
+$reqm = $dbh->query($sqlm) or die('Erreur SQL ! '.$sqlm.' '.mysql_error());
+$donnee = $reqm->fetch(PDO::FETCH_BOTH);
$nb_pg=((int)($donnee['nb_id']/7))+1;
$nb_pg_r=0;
while($nb_pg_r!=$nb_pg AND $nb_pg_r<10){
@@ -365,7 +365,7 @@ $nb_pg_r=$nb_pg_r+1;
diff --git a/rss.php b/rss.php
index 51f1375..bbef1f9 100644
--- a/rss.php
+++ b/rss.php
@@ -6,8 +6,8 @@ $page_name=$meta_description;
session_start();
$sql1="SELECT * FROM blog_config";
-$bloginfo_rss_req = mysql_query($sql1) or die('Erreur SQL ! '.$sql1.' '.mysql_error());
-$bloginfo_rss = mysql_fetch_assoc($bloginfo_rss_req);
+$bloginfo_rss_req = $dbh->query($sql1) or die('Erreur SQL ! '.$sql1.' '.mysql_error());
+$bloginfo_rss = $bloginfo_rss_req->fetch(PDO::FETCH_ASSOC);
echo "
@@ -15,25 +15,28 @@ echo "
".$site_name."
http://www.monsite.com
{$bloginfo_rss["description"]} ";
-$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT 20";
-$req = mysql_query($sql) or die('Erreur SQL ! '.$sql.' '.mysql_error());
-while($data=mysql_fetch_assoc($req))
-
+$sql_rss="SELECT * FROM article ORDER BY id_article DESC LIMIT 20";
+$req_rss = $dbh->query($sql_rss) or die('Erreur SQL ! '.$sql.' '.mysql_error());
+while($data_rss=$req_rss->fetch(PDO::FETCH_ASSOC))
{
-$article_desc = strip_tags($data['article']);
+$titre_article_rss=stripslashes($data_rss["titre"]);
+$article_desc=strip_tags($data_rss['article']);
+$description_rss=stripslashes($article_desc);
+
+//$article_desc = strip_tags($data_rss['article']);
//
//echo"{$data["titre"]}//a> ";
//echo"".$article_date_display." : {$data["date"]} ";
echo"
-
-
{$data["titre"]}
- http://www.blogartisanal.tk/?id={$data["id_article"]}
+ {$titre_article_rss}
+ {$root_path}?id={$data_rss["id_article"]}
6
- {$article_desc}
+ {$description_rss}
0000-00-00 00:00:00 GMT
- ";
+ ";
}
echo"
diff --git a/user/bottom.php b/user/bottom.php
index e540fd3..4884da0 100644
--- a/user/bottom.php
+++ b/user/bottom.php
@@ -1,5 +1,5 @@