From 3e3de792be6bcc3ec377851fbd2a1e34a434916f Mon Sep 17 00:00:00 2001 From: Cebabonet Date: Mon, 28 Mar 2016 02:04:58 +0200 Subject: [PATCH] =?UTF-8?q?Modifications=20de=20toutes=20les=20requ=C3=AAt?= =?UTF-8?q?es=20mysql=5Fquery=20et=20mysql=5Fconnect=20vers=20le=20mod?= =?UTF-8?q?=C3=A8le=20PDO.=20Correction=20du=20flux=20RSS,=20de=20l'accuei?= =?UTF-8?q?l=20ne=20pouvant=20pas=20afficher=20d'article=20quand=20fix?= =?UTF-8?q?=C3=A9=20sur=20page=20d'accueil...?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- administration/edition_article.php | 4 +-- administration/edition_page.php | 4 +-- administration/index.php | 2 +- files/article_suppression.php | 7 ++-- files/check_admin.php | 4 +-- files/check_status.php | 4 +-- files/page_suppression.php | 7 ++-- files/submit_blog_config.php | 2 +- files/submit_edit.php | 9 +++-- files/submit_edit_page.php | 18 +++------- files/up_check_admin.php | 14 ++++---- index.php | 42 +++++++++++----------- rss.php | 25 +++++++------ user/bottom.php | 4 +-- user/config.php | 15 ++++---- user/index.php | 14 +++++--- user/login.php | 10 ++++-- user/lost2.php | 14 ++++---- user/profile2.php | 10 +++--- user/style.css | 57 ++++++++++++++++++++++++++++++ user/top.php | 2 +- user/verification.php | 27 ++++++++++---- user/verifications.php | 8 ++--- 23 files changed, 186 insertions(+), 117 deletions(-) create mode 100644 user/style.css diff --git a/administration/edition_article.php b/administration/edition_article.php index 876c45d..eece5da 100644 --- a/administration/edition_article.php +++ b/administration/edition_article.php @@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php'); $article_id_edit_page=$_GET['id']; $sql="SELECT * FROM article WHERE id_article='$article_id_edit_page'"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$article_data = mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$article_data = $req->fetch(PDO::FETCH_ASSOC); include("".$MainDir."files/navheader.php"); diff --git a/administration/edition_page.php b/administration/edition_page.php index e2297ab..c45af54 100644 --- a/administration/edition_page.php +++ b/administration/edition_page.php @@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php'); $page_id_edit_page=$_GET['id']; $sql="SELECT * FROM page WHERE id_page='$page_id_edit_page'"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$page_data = mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$page_data = $req->fetch(PDO::FETCH_ASSOC); include("".$MainDir."files/navheader.php"); diff --git a/administration/index.php b/administration/index.php index 82db0c2..1ae3841 100644 --- a/administration/index.php +++ b/administration/index.php @@ -1 +1 @@ -'.$sql.'
'.mysql_error()); $user_ranking = mysql_fetch_assoc($req); $user_rank="$user_ranking[user_rank]"; $sql="SELECT * FROM blog_config"; $req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); $config_blog_page_admin = mysql_fetch_assoc($req); $description = $config_blog_page_admin['description']; $static_homepage_status = $config_blog_page_admin['static_homepage_status']; echo("
Etat utilisateur : Connecté
"); echo "
"; echo("Votre rang est : ".$user_ranking['user_rank'].". "); if($user_rank!=1){ echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site."); }else{ echo("

"); echo''; echo("

Modification des Paramètres du blog
Back


Ecrire un article !
Ecrire une page ! "); if($static_homepage_status=="1" && $static_homepage_id!=NULL){ $sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id.""; $req_page = mysql_query($sql_page) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); $data_page=mysql_fetch_assoc($req_page); echo "

Actuellement la page {$data_page['titre']} est définie comme page d'accueil !

"; }elseif($static_homepage_status=="1"){ echo"Vous n'avez pas encore défini de page d'accueil.

"; } } ?> Etat utilisateur : Déconnecté

Veuillez vous connecter pour accéder à cette page."; } include_once(''.$MainDir.'user/bottom.php'); ?> \ No newline at end of file +query($sql); $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC); $user_rank="$user_ranking[user_rank]"; $sql_blog_config="SELECT * FROM blog_config"; $blog_config = $dbh->query($sql_blog_config); $config_blog_page_admin = $blog_config->fetch(PDO::FETCH_ASSOC); $description = $config_blog_page_admin['description']; $static_homepage_status = $config_blog_page_admin['static_homepage_status']; echo("
Etat utilisateur : Connecté
"); echo "
"; echo("Votre rang est : ".$user_ranking['user_rank'].". "); if($user_rank!=1){ echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site."); }else{ echo("

"); echo''; echo("

Modification des Paramètres du blog
Back


Ecrire un article !
Ecrire une page ! "); if($static_homepage_status=="1" && $static_homepage_id!=NULL){ $sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id.""; $req_page = $dbh->query($sql_page) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); $data_page=$req_page->fetch(PDO::FETCH_ASSOC); echo "

Actuellement la page {$data_page['titre']} est définie comme page d'accueil !

"; }elseif($static_homepage_status=="1"){ echo"Vous n'avez pas encore défini de page d'accueil.

"; } } ?> Etat utilisateur : Déconnecté

Veuillez vous connecter pour accéder à cette page."; } include_once(''.$MainDir.'user/bottom.php'); ?> \ No newline at end of file diff --git a/files/article_suppression.php b/files/article_suppression.php index 93a3bc6..4b66f6a 100644 --- a/files/article_suppression.php +++ b/files/article_suppression.php @@ -22,11 +22,10 @@ echo"

Vous ne pouvez pas effectuer cette op $this_article_id=$_GET['id']; -$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd"); $sql="SELECT * FROM article"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_articles=mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_articles=$req->fetch(PDO::FETCH_ASSOC); $confirmed="0"; @@ -40,7 +39,7 @@ if(isset($_POST['oui'])){ if(($_POST['oui']=="Oui")) { -mysql_query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error()); +$dbh->query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error()); echo "

Opération effectuée ! Retour"; diff --git a/files/check_admin.php b/files/check_admin.php index 68c30d0..d48d075 100644 --- a/files/check_admin.php +++ b/files/check_admin.php @@ -4,8 +4,8 @@ $sql="SELECT user_rank FROM user WHERE id_user=$id_user"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$user_ranking = mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$user_ranking = $req->fetch(PDO::FETCH_ASSOC); $user_rank="$user_ranking[user_rank]"; if($user_rank==1){ diff --git a/files/check_status.php b/files/check_status.php index 021647c..bbaca33 100644 --- a/files/check_status.php +++ b/files/check_status.php @@ -13,8 +13,8 @@ $connected="1"; $sql="SELECT user_rank FROM user WHERE id_user=$id_user"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$user_ranking = mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$user_ranking = $req->fetch(PDO::FETCH_ASSOC); $user_rank="$user_ranking[user_rank]"; if($user_rank==1){ diff --git a/files/page_suppression.php b/files/page_suppression.php index 2e96191..881672e 100644 --- a/files/page_suppression.php +++ b/files/page_suppression.php @@ -21,11 +21,10 @@ echo"

Vous ne pouvez pas effectuer cette opération si vous n' $this_page_id=$_GET['id']; -$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd"); $sql="SELECT * FROM page"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_pages=mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_pages=$req->fetch(PDO::FETCH_ASSOC); $confirmed="0"; @@ -39,7 +38,7 @@ if(isset($_POST['oui'])){ if(($_POST['oui']=="Oui")) { -mysql_query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error()); +$dbh->query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error()); echo "

Opération effectuée ! Retour"; diff --git a/files/submit_blog_config.php b/files/submit_blog_config.php index db178c3..0e991df 100644 --- a/files/submit_blog_config.php +++ b/files/submit_blog_config.php @@ -1 +1 @@ -
Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e)."; } if(@$_SESSION['session']) { require_once(''.$MainDir.'user/verifications.php'); include("".$MainDir."files/check_admin.php"); $bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd"); $sql="SELECT * FROM page"; $req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); $data_pages=mysql_fetch_assoc($req); if($admin_mode == "1"){ //////// TO SET if(isset($_POST['static_homepage_status'])){ $site_name=htmlspecialchars(formulaires($_POST['titre'])); $description=htmlspecialchars(formulaires($_POST['description'])); $bandeau=htmlspecialchars(formulaires($_POST['bandeau'])); $static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status'])); //////// //$passwd=htmlspecialchars(formulaires($_POST['passwd'])); //$passwd2=htmlspecialchars(formulaires($_POST['passwd2'])); //////// TO SET mysql_query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error()); mysql_query("UPDATE blog_config SET description='$description'") or die ('error : '.mysql_error()); mysql_query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error()); mysql_query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error()); //////// echo'Vous venez de modifier les paramètres de '.$website_name.'
Retour à l\'accueil du site !'; include_once('../user/bottom.php'); } if(isset($_GET['static_homepage_id'])){ $get_static_homepage_id = $_GET['static_homepage_id']; mysql_query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error()); echo'Vous venez de modifier les paramètres de '.$website_name.'
Retour à l\'accueil du site !'; } } } ?> \ No newline at end of file +
Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e)."; } if(@$_SESSION['session']) { require_once(''.$MainDir.'user/verifications.php'); include("".$MainDir."files/check_admin.php"); $sql="SELECT * FROM page"; $req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); $data_pages=$req->fetch(PDO::FETCH_ASSOC); if($admin_mode == "1"){ //////// TO SET if(isset($_POST['static_homepage_status'])){ $site_name=htmlspecialchars(formulaires($_POST['titre'])); $description=htmlspecialchars(formulaires($_POST['description'])); $bandeau=htmlspecialchars(formulaires($_POST['bandeau'])); $static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status'])); //////// //$passwd=htmlspecialchars(formulaires($_POST['passwd'])); //$passwd2=htmlspecialchars(formulaires($_POST['passwd2'])); //////// TO SET $dbh->query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error()); $dbh->query("UPDATE blog_config SET description='$description'") or die ('error : '.mysql_error()); $dbh->query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error()); $dbh->query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error()); //////// echo'Vous venez de modifier les paramètres de '.$website_name.'
Retour à l\'accueil du site !'; include_once('../user/bottom.php'); } if(isset($_GET['static_homepage_id'])){ $get_static_homepage_id = $_GET['static_homepage_id']; $dbh->query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error()); echo'Vous venez de modifier les paramètres de '.$website_name.'
Retour à l\'accueil du site !'; } } } ?> \ No newline at end of file diff --git a/files/submit_edit.php b/files/submit_edit.php index 8569150..39c6e9e 100644 --- a/files/submit_edit.php +++ b/files/submit_edit.php @@ -11,16 +11,15 @@ $this_article_id=$_GET['id']; $date = "42"; $titre = $_POST['titre']; $article = $_POST['article']; -$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd"); $sql="SELECT * FROM article"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_articles=mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_articles=$req->fetch(PDO::FETCH_ASSOC); -mysql_query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error()); +$dbh->query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error()); -mysql_query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error()); +$dbh->query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error()); diff --git a/files/submit_edit_page.php b/files/submit_edit_page.php index e80f73b..ab87c45 100644 --- a/files/submit_edit_page.php +++ b/files/submit_edit_page.php @@ -13,26 +13,16 @@ $page = addslashes($_POST['page']); $bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd"); $sql="SELECT * FROM page"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_pages=mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_pages=$req->fetch(PDO::FETCH_ASSOC); -mysql_query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error()); +$dbh->query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error()); -mysql_query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error()); +$dbh->query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error()); - - -//$req = $bdd->prepare('INSERT INTO page(user,titre,page) VALUES (:user, :titre, :page)'); -//$req->execute(array( -// "user" => $username, -// "titre" => $titre, -// "page" => $page, - -//)); echo "Votre page a bien été enregistrée ! Retour"; -//echo date_default_timezone_set('l jS \of F Y h:i:s A'); } else { diff --git a/files/up_check_admin.php b/files/up_check_admin.php index cc034fd..cbe4005 100644 --- a/files/up_check_admin.php +++ b/files/up_check_admin.php @@ -3,11 +3,13 @@ '.$sql.'
'.mysql_error()); -$user_ranking = mysql_fetch_assoc($req); +$dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd); + + $sql="SELECT user_rank FROM user WHERE id_user=id_user"; + + $stmt = $dbh->query($sql); + + $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC); $user_rank="$user_ranking[user_rank]"; @@ -31,4 +33,4 @@ echo("Vous n' } -?> \ No newline at end of file +?> diff --git a/index.php b/index.php index 2636519..9a1f170 100644 --- a/index.php +++ b/index.php @@ -38,10 +38,8 @@ if(isset($_GET['error'])) if(isset($root_path)) { -mysql_connect(DB_HOST,DB_LOGIN,DB_PASS); -mysql_select_db(DB_DB); -$nombre_utilisateur=mysql_query("SELECT * FROM user") or die ('error : '.mysql_error()); -$count_user=mysql_num_rows($nombre_utilisateur); +$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error()); +$count_user=$nombre_utilisateur->rowCount(); } if(isset($count_user) && $count_user == 0){ @@ -138,8 +136,10 @@ text-decoration:underline; $sql_page_menu="SELECT * FROM page ORDER BY priority"; -$req = mysql_query($sql_page_menu) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -while($data_page_menu=mysql_fetch_assoc($req)) +$req = $dbh->query($sql_page_menu) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); + + +while($data_page_menu=$req->fetch(PDO::FETCH_ASSOC)) { @@ -173,8 +173,8 @@ $connected="1"; $sql="SELECT user_rank FROM user WHERE id_user=$id_user"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$user_ranking = mysql_fetch_assoc($req); +$req = $dbh->query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$user_ranking = $req->fetch(PDO::FETCH_ASSOC); $user_rank="$user_ranking[user_rank]"; if($user_rank==1){ @@ -192,7 +192,7 @@ if($user_rank==1){ ////Start check content -if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL){ +if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL && !isset($_GET['id'])){ if(isset($_GET['id_page'])){ @@ -203,8 +203,8 @@ if(isset($_GET['id_page'])){ $sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id.""; } -$req_page = mysql_query($sql_page) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_page=mysql_fetch_assoc($req_page); +$req_page = $dbh->query($sql_page) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_page=$req_page->fetch(PDO::FETCH_ASSOC); if($data_page["id_page"]== null && $static_homepage_status!="1"){ @@ -251,8 +251,8 @@ if($static_homepage_status=="1" && $static_homepage_id != $data_page["id_page"] }elseif(isset($_GET['id'])){ $sql_article="SELECT * FROM article WHERE id_article=".$_GET['id'].""; -$req_article = mysql_query($sql_article) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$data_article=mysql_fetch_assoc($req_article); +$req_article = $dbh->query($sql_article) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +$data_article=$req_article->fetch(PDO::FETCH_ASSOC); if($data_article["id_article"]== null){ @@ -260,12 +260,12 @@ if($data_article["id_article"]== null){ }else{ - +$article_stripslashtitle = stripslashes($data_article['titre']); $page_name= $data_article["titre"];?> <?php echo $website_name.' : '.$page_name; ?> {$data_article["titre"]}"; +echo"

{$article_stripslashtitle}

"; echo"".$article_date_display." : {$data_article["date"]} par : {$data_article['user']}
"; echo"".$article_article_display." :
{$article_stripslash}

"; @@ -302,9 +302,9 @@ $page=$debut.', 7'; -$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page.""; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -while($data=mysql_fetch_assoc($req)) +$sql_article="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page.""; +$req_article = $dbh->query($sql_article) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +while($data=$req_article->fetch(PDO::FETCH_ASSOC)) { $article_stripslash = stripslashes($data['article']); @@ -341,8 +341,8 @@ if($connected==1){ $sqlm='SELECT COUNT(*) AS nb_id FROM article'; -$reqm = mysql_query($sqlm) or die('Erreur SQL !
'.$sqlm.'
'.mysql_error()); -$donnee = mysql_fetch_array($reqm); +$reqm = $dbh->query($sqlm) or die('Erreur SQL !
'.$sqlm.'
'.mysql_error()); +$donnee = $reqm->fetch(PDO::FETCH_BOTH); $nb_pg=((int)($donnee['nb_id']/7))+1; $nb_pg_r=0; while($nb_pg_r!=$nb_pg AND $nb_pg_r<10){ @@ -365,7 +365,7 @@ $nb_pg_r=$nb_pg_r+1;

diff --git a/rss.php b/rss.php index 51f1375..bbef1f9 100644 --- a/rss.php +++ b/rss.php @@ -6,8 +6,8 @@ $page_name=$meta_description; session_start(); $sql1="SELECT * FROM blog_config"; -$bloginfo_rss_req = mysql_query($sql1) or die('Erreur SQL !
'.$sql1.'
'.mysql_error()); -$bloginfo_rss = mysql_fetch_assoc($bloginfo_rss_req); +$bloginfo_rss_req = $dbh->query($sql1) or die('Erreur SQL !
'.$sql1.'
'.mysql_error()); +$bloginfo_rss = $bloginfo_rss_req->fetch(PDO::FETCH_ASSOC); echo " @@ -15,25 +15,28 @@ echo " ".$site_name." http://www.monsite.com {$bloginfo_rss["description"]}"; -$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT 20"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -while($data=mysql_fetch_assoc($req)) - +$sql_rss="SELECT * FROM article ORDER BY id_article DESC LIMIT 20"; +$req_rss = $dbh->query($sql_rss) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); +while($data_rss=$req_rss->fetch(PDO::FETCH_ASSOC)) { -$article_desc = strip_tags($data['article']); +$titre_article_rss=stripslashes($data_rss["titre"]); +$article_desc=strip_tags($data_rss['article']); +$description_rss=stripslashes($article_desc); + +//$article_desc = strip_tags($data_rss['article']); // //echo"{$data["titre"]}
"; //echo"".$article_date_display." : {$data["date"]}
"; echo" - {$data["titre"]} - http://www.blogartisanal.tk/?id={$data["id_article"]} + {$titre_article_rss} + {$root_path}?id={$data_rss["id_article"]} 6 - {$article_desc} + {$description_rss} 0000-00-00 00:00:00 GMT - "; + "; } echo" diff --git a/user/bottom.php b/user/bottom.php index e540fd3..4884da0 100644 --- a/user/bottom.php +++ b/user/bottom.php @@ -1,5 +1,5 @@ - \ No newline at end of file + diff --git a/user/config.php b/user/config.php index 18c51e0..4fb064b 100644 --- a/user/config.php +++ b/user/config.php @@ -39,7 +39,6 @@ $base='Your_db_name'; - define("DB_HOST",$server); define("DB_LOGIN",$user); @@ -51,16 +50,16 @@ $base='Your_db_name'; -@$connect=mysql_connect($server, $user, $passwd) or die ('Error : '.mysql_error().'

Please check if your database settings are correctly set in the config.php file!'); -@mysql_select_db($base) or die ('Error : '.mysql_error()); require_once('fonctions.php'); -mysql_connect(DB_HOST,DB_LOGIN,DB_PASS); -mysql_select_db(DB_DB); -$sql="SELECT * FROM blog_config"; -$req = mysql_query($sql) or die('Erreur SQL !
'.$sql.'
'.mysql_error()); -$blog_info_config_page = mysql_fetch_assoc($req); + $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd); + + $sql = "SELECT * FROM blog_config"; + + $stmt = $dbh->query($sql); + + $blog_info_config_page = $stmt->fetch(PDO::FETCH_ASSOC); $meta_description=$blog_info_config_page['description']; diff --git a/user/index.php b/user/index.php index 6a1fd8c..87af2b5 100644 --- a/user/index.php +++ b/user/index.php @@ -97,11 +97,15 @@ else '.$sql.'
'.mysql_error()); -$user_ranking = mysql_fetch_assoc($req); + $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd); + + $sql = "SELECT user_rank FROM user WHERE id_user=$id_user"; + + $stmt = $dbh->query($sql); + + $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC); + + echo "
"; echo("Votre rang est : ".$user_ranking['user_rank'].". "); diff --git a/user/login.php b/user/login.php index 3c4d9d5..bf3cb98 100644 --- a/user/login.php +++ b/user/login.php @@ -7,6 +7,7 @@ $username = formulaires($_POST['username']); $passwd = formulaires($_POST['passwd']); + $passwd=md5($passwd); if(!$username) @@ -17,8 +18,11 @@ if(!$passwd) { header('Location:'.$root_path.'index.php?error=pass'); } -$reponse_cores=mysql_query("SELECT * FROM user WHERE pass='$passwd' AND username='$username'") or die ('error : '.mysql_error()); -$count_cores=mysql_num_rows($reponse_cores); +//$sqlcount= "SELECT * FROM user WHERE pass='$passwd' AND username='$username'"; +$reponse_cores=$dbh->query("SELECT * FROM user WHERE pass='$passwd' AND username='$username'") or die ('error : '.mysql_error()); +$count_cores = $reponse_cores->rowCount(); + +//$count_cores=mysql_num_rows($reponse_cores); if($count_cores == 0 ) { header('Location:'.$root_path.'index.php?error=connection'); @@ -31,7 +35,7 @@ else @$session.=substr('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN',(rand()%(strlen('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN'))),1); } - mysql_query("UPDATE user SET session='$session' WHERE username='$username'") or die ('error : '.mysql_error()); + $dbh->query("UPDATE user SET session='$session' WHERE username='$username'") or die ('error : '.mysql_error()); $_SESSION['session'] = "$session"; //création de la session header('Location:'.$root_path.'user/index.php'); //redirection vers l'index } diff --git a/user/lost2.php b/user/lost2.php index cc7de70..c40e541 100644 --- a/user/lost2.php +++ b/user/lost2.php @@ -21,8 +21,8 @@ if(!$username) return FALSE; } -$reponse_username=mysql_query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error()); -$count_username=mysql_num_rows($reponse_username); +$reponse_username=$dbh->query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error()); +$count_username=$reponse_username->rowCount(); if($count_username == 0) { echo"Invalid username.
Back"; @@ -30,8 +30,8 @@ if($count_username == 0) return FALSE; } -$reponse_email=mysql_query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error()); -$count_email=mysql_num_rows($reponse_email); +$reponse_email=$dbh->query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error()); +$count_email=$reponse_email->rowCount(); if($count_email == 0) { echo" Invalid E-mail.
Back"; @@ -39,8 +39,8 @@ if($count_email == 0) return FALSE; } -$existe=mysql_query("SELECT email FROM user WHERE email='$email' AND username='$username'") or die ('error : '.mysql_error()); -$test=mysql_num_rows($existe); +$existe=$dbh->query("SELECT email FROM user WHERE email='$email' AND username='$username'") or die ('error : '.mysql_error()); +$test=$existe->rowCount(); if($test == 0) { echo"E-mail and Username don't match.
Back"; @@ -55,6 +55,6 @@ for ($ligne=0;$ligne<10;$ligne++) //Cr mail("$email", "".$website_name." - Forgotten password" , "Hello, this is your new password : ".$passwd."", "From: ".$blog_email.""); $passwd=md5($passwd); -mysql_query("UPDATE user SET pass='$passwd' WHERE email='$email'") or die ('error : '.mysql_error()); +$dbh->query("UPDATE user SET pass='$passwd' WHERE email='$email'") or die ('error : '.mysql_error()); echo 'An E-mail has been sent to your mailbox with your new password'; ?> diff --git a/user/profile2.php b/user/profile2.php index 72fb77d..b150aa7 100644 --- a/user/profile2.php +++ b/user/profile2.php @@ -76,8 +76,8 @@ if($new_pass!=$new_pass2) return FALSE; } $pass_enc=md5($pass_enc); -$reponse_pass=mysql_query("SELECT pass FROM user WHERE pass='$pass_enc' AND session='$session'") or die ('error : '.mysql_error()); //verification si mot de passe valide -$count_pass=mysql_num_rows($reponse_pass); +$reponse_pass=$dbh->query("SELECT pass FROM user WHERE pass='$pass_enc' AND session='$session'") or die ('error : '.mysql_error()); //verification si mot de passe valide +$count_pass=$reponse_pass->rowCount(); if($count_pass == 0) { ?> @@ -98,9 +98,9 @@ The old password is not correct.
query("UPDATE user SET pass='$new_pass' WHERE session='$session'") or die ('error : '.mysql_error()); } -mysql_query("UPDATE user SET email='$email' WHERE session='$session'") or die ('error : '.mysql_error()); +$dbh->query("UPDATE user SET email='$email' WHERE session='$session'") or die ('error : '.mysql_error()); echo"
Your profile settings have been saved.
Back
"; include_once('bottom.php'); ?> @@ -112,4 +112,4 @@ include_once('bottom.php'); - \ No newline at end of file + diff --git a/user/style.css b/user/style.css new file mode 100644 index 0000000..0160f25 --- /dev/null +++ b/user/style.css @@ -0,0 +1,57 @@ + diff --git a/user/top.php b/user/top.php index 25008e8..56ca9df 100644 --- a/user/top.php +++ b/user/top.php @@ -11,7 +11,7 @@ if (!isset($index_check)){ - + diff --git a/user/verification.php b/user/verification.php index d79e380..74a6c95 100644 --- a/user/verification.php +++ b/user/verification.php @@ -38,16 +38,16 @@ return FALSE; } //// VERIFICATIONS DES EXISTANCES //// -$reponse_mail=mysql_query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error()); //verification si e-mail existe déjà -$count_mail=mysql_num_rows($reponse_mail); +$reponse_mail=$dbh->query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error()); //verification si e-mail existe déjà +$count_mail=$reponse_mail->rowCount(); if($count_mail == 1) { echo'This e-mail is already taken.
Back'; include_once('bottom.php'); return FALSE; } -$reponse_username=mysql_query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error()); //verification si username existe déjà -$count_username=mysql_num_rows($reponse_username); +$reponse_username=$dbh->query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error()); //verification si username existe déjà +$count_username=$reponse_username->rowCount(); if($count_username == 1) { echo 'This username is already taken.
Back'; @@ -63,8 +63,8 @@ return FALSE; $passwd=md5($passwd); //Codage du password //// DEFINIR LE PREMIER UTILISATEUR COMME ADMINISTRATEUR //// -$nombre_utilisateur=mysql_query("SELECT * FROM user") or die ('error : '.mysql_error()); -$count_user=mysql_num_rows($nombre_utilisateur); +$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error()); +$count_user=$nombre_utilisateur->rowCount(); if($count_user == 0){ $user_rank = '1'; }else{ @@ -77,7 +77,20 @@ $website_name = "Blog Artisanal"; } //// INSCRIPTION DANS LA BDD //// -mysql_query("INSERT INTO user VALUES ('', '$session', '$username', '$passwd', '$email','','$user_rank')") or die ('error : '.mysql_error()); //insertion dans la bdd +$sql_register = "INSERT INTO user ( id_user, session, username, pass, email, date, user_rank) + VALUES (:id_user, :session, :username, :pass, :email, :date, :user_rank)"; + +$query = $dbh->prepare($sql_register) or die ('error : '.mysql_error()); //insertion dans la bdd +$results = $query->execute(array( + "id_user" => '', + "session" => $session, + "username" => $username, + "pass" => $passwd, + "email" => $email, + "date" => '', + "user_rank" => $user_rank +)); + echo'Thank you for registering to '.$website_name.'
Login !'; include_once('bottom.php'); ?> diff --git a/user/verifications.php b/user/verifications.php index 5637525..cea19f2 100644 --- a/user/verifications.php +++ b/user/verifications.php @@ -9,8 +9,8 @@ if(!@$_SESSION['session']) return false; } -$verif=mysql_query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error()); //on vérifie si il existe une entrée avec cet identifiant -$verif=mysql_num_rows($verif); +$verif=$dbh->query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error()); //on vérifie si il existe une entrée avec cet identifiant +$verif=$verif->rowCount(); if($verif == 0) { header('Location:index.php?error=connection'); @@ -19,8 +19,8 @@ if($verif == 0) return false; } -$sql=mysql_query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error()); -while ($resultat = mysql_fetch_array($sql) ) +$sql=$dbh->query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error()); +while ($resultat = $sql->fetch(PDO::FETCH_BOTH) ) { $email = $resultat['email']; $username = $resultat['username'];