Modifications de toutes les requêtes mysql_query et mysql_connect vers le modèle PDO. Correction du flux RSS, de l'accueil ne pouvant pas afficher d'article quand fixé sur page d'accueil...

administration/edition_article.php

@@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php');
 $article_id_edit_page=$_GET['id'];
 
 $sql="SELECT * FROM article WHERE id_article='$article_id_edit_page'";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$article_data = mysql_fetch_assoc($req);
+$article_data = $req->fetch(PDO::FETCH_ASSOC);
 
 include("".$MainDir."files/navheader.php"); 
 

administration/edition_page.php

@@ -8,8 +8,8 @@ require_once(''.$MainDir.'user/verifications.php');
 $page_id_edit_page=$_GET['id'];
 
 $sql="SELECT * FROM page WHERE id_page='$page_id_edit_page'";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$page_data = mysql_fetch_assoc($req);
+$page_data = $req->fetch(PDO::FETCH_ASSOC);
 
 include("".$MainDir."files/navheader.php"); 
 

administration/index.php

@@ -1 +1 @@
-<?php 
$AdminDir = str_replace("administration", "",dirname(__FILE__));

require_once(''.$AdminDir.'user/config.php');

if(!@$_SESSION['session'])
	{
session_start();
	}
	if(@$_SESSION['session']){
		require_once(''.$MainDir.'user/verifications.php');
		}
include("".$MainDir."files/navheader.php"); 

$page_name='Administration';
include_once(''.$MainDir.'user/top.php');
if(@$_SESSION['session'])
{

mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
mysql_select_db(DB_DB);
$sql="SELECT user_rank FROM user WHERE id_user=$id_user";
$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
$user_ranking = mysql_fetch_assoc($req);
$user_rank="$user_ranking[user_rank]";
$sql="SELECT * FROM blog_config";
$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
$config_blog_page_admin = mysql_fetch_assoc($req);
$description = $config_blog_page_admin['description'];
$static_homepage_status = $config_blog_page_admin['static_homepage_status'];


echo("<br>Etat utilisateur : Connecté <br>");
echo "<br>";
echo("Votre rang est : ".$user_ranking['user_rank'].". ");
if($user_rank!=1){
echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site.");
}else{
	
	echo("
	<br>
		<br>
				
<form method='post' action='{$root_path}files/submit_blog_config.php' enctype='multipart/form-data'>	
	<table width='400' border='0' align='center'>
	<tr>
	<td colspan='2'><h2>Modification des Paramètres du blog</h2></td>
	</tr>
	<tr>
	<td><label for='titre'>Titre : </label></td>
	<td><input value='".htmlspecialchars($site_name)."' name='titre' type='text' id='titre' /></td>
	</tr>
	<tr>
	<td><label for='description'>Description : </label></td>
	<td><input value='".htmlspecialchars($description)."' name='description' type='text' id='description' /></td>
	</tr>
	<tr>
	<td><label for='bandeau'>Bandeau : </label></td>");
	echo'<td><input value="'.htmlspecialchars($bandeau).'" name="bandeau" type="text" id="bandeau" /></td>';
	echo("
	</tr>
	<tr>
	<td><label for='passwd2'>J-DANIEL: </label></td>
	<td><input name='passwd2' type='password' id='passwd2' /></td>
	</tr>
	<tr>
	<td><label for='static_homepage_status'>Static Home Page (Set to 1 to enable.) : </label></td>
	<td><input value='".htmlspecialchars($static_homepage_status)."' name='static_homepage_status' type='text' id='static_homepage_status' /></td>
	</tr>
	<tr>
	<td><div align='center'><input type='submit' value='GO!' /></div></td>
	</tr>
	</table>
	</form>
	</div>
	<center><a href=''.$root_path.'index.php'>Back</a></center>
	
	<br><br><a href='article_ecrire.php'>Ecrire un article !</a>
	<br><a href='page_ecrire.php'>Ecrire une page !</a>
	");
	if($static_homepage_status=="1" && $static_homepage_id!=NULL){
	$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
	$req_page = mysql_query($sql_page) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
	$data_page=mysql_fetch_assoc($req_page);
	
	echo "<br><br>Actuellement la page {$data_page['titre']} est définie comme page d'accueil !<br><br>";
	}elseif($static_homepage_status=="1"){
		
		echo"Vous n'avez pas encore défini de page d'accueil.<br><br>";
		
	}
}
?>

 <?php 
}else{
echo"<br>Etat utilisateur : Déconnecté <br>
<br>Veuillez vous <a href='".$root_path."user/'>connecter</a> pour accéder à cette page.";
}
include_once(''.$MainDir.'user/bottom.php');
?>
+<?php 
$AdminDir = str_replace("administration", "",dirname(__FILE__));

require_once(''.$AdminDir.'user/config.php');

if(!@$_SESSION['session'])
	{
session_start();
	}
	if(@$_SESSION['session']){
		require_once(''.$MainDir.'user/verifications.php');
		}
include("".$MainDir."files/navheader.php"); 

$page_name='Administration';
include_once(''.$MainDir.'user/top.php');
if(@$_SESSION['session'])
{

    $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);

mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);

mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
mysql_select_db(DB_DB);

mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
$sql="SELECT user_rank FROM user WHERE id_user=$id_user";

$user_rank="$user_ranking[user_rank]";


mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());

    $blog_config = $dbh->query($sql_blog_config);

    $config_blog_page_admin = $blog_config->fetch(PDO::FETCH_ASSOC);


$description = $config_blog_page_admin['description'];
$static_homepage_status = $config_blog_page_admin['static_homepage_status'];


echo("<br>Etat utilisateur : Connecté <br>");
echo "<br>";
echo("Votre rang est : ".$user_ranking['user_rank'].". ");
if($user_rank!=1){
echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site.");
}else{
	
	echo("
	<br>
		<br>
				
<form method='post' action='{$root_path}files/submit_blog_config.php' enctype='multipart/form-data'>	
	<table width='400' border='0' align='center'>
	<tr>
	<td colspan='2'><h2>Modification des Paramètres du blog</h2></td>
	</tr>
	<tr>
	<td><label for='titre'>Titre : </label></td>
	<td><input value='".htmlspecialchars($site_name)."' name='titre' type='text' id='titre' /></td>
	</tr>
	<tr>
	<td><label for='description'>Description : </label></td>
	<td><input value='".htmlspecialchars($description)."' name='description' type='text' id='description' /></td>
	</tr>
	<tr>
	<td><label for='bandeau'>Bandeau : </label></td>");
	echo'<td><input value="'.htmlspecialchars($bandeau).'" name="bandeau" type="text" id="bandeau" /></td>';
	echo("
	</tr>
	<tr>
	<td><label for='passwd2'>J-DANIEL: </label></td>
	<td><input name='passwd2' type='password' id='passwd2' /></td>
	</tr>
	<tr>
	<td><label for='static_homepage_status'>Static Home Page (Set to 1 to enable.) : </label></td>
	<td><input value='".htmlspecialchars($static_homepage_status)."' name='static_homepage_status' type='text' id='static_homepage_status' /></td>
	</tr>
	<tr>
	<td><div align='center'><input type='submit' value='GO!' /></div></td>
	</tr>
	</table>
	</form>
	</div>
	<center><a href=''.$root_path.'index.php'>Back</a></center>
	
	<br><br><a href='article_ecrire.php'>Ecrire un article !</a>
	<br><a href='page_ecrire.php'>Ecrire une page !</a>
	");
	if($static_homepage_status=="1" && $static_homepage_id!=NULL){
	$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
	$req_page = $dbh->query($sql_page) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
	$data_page=$req_page->fetch(PDO::FETCH_ASSOC);
	
	echo "<br><br>Actuellement la page {$data_page['titre']} est définie comme page d'accueil !<br><br>";
	}elseif($static_homepage_status=="1"){
		
		echo"Vous n'avez pas encore défini de page d'accueil.<br><br>";
		
	}
}
?>

 <?php 
}else{
echo"<br>Etat utilisateur : Déconnecté <br>
<br>Veuillez vous <a href='".$root_path."user/'>connecter</a> pour accéder à cette page.";
}
include_once(''.$MainDir.'user/bottom.php');
?>

files/article_suppression.php

@@ -22,11 +22,10 @@ echo"<br><br>Vous ne pouvez pas effectuer cette op
 
 $this_article_id=$_GET['id'];
 
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
 
 $sql="SELECT * FROM article";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_articles=mysql_fetch_assoc($req);
+$data_articles=$req->fetch(PDO::FETCH_ASSOC);
 
 $confirmed="0";
 
@@ -40,7 +39,7 @@ if(isset($_POST['oui'])){
 	if(($_POST['oui']=="Oui"))
 	{
 
-mysql_query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error());
+$dbh->query("DELETE FROM article WHERE id_article='$this_article_id'") or die ('error : '.mysql_error());
 
 
 echo "<br><br>Opération effectuée ! <a href='".$root_path."'>Retour</a>";

files/check_admin.php

@@ -4,8 +4,8 @@
 
 
 $sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
 $user_rank="$user_ranking[user_rank]";
 
 if($user_rank==1){

files/check_status.php

@@ -13,8 +13,8 @@ $connected="1";
 
 
 $sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
 $user_rank="$user_ranking[user_rank]";
 if($user_rank==1){
 	

files/page_suppression.php

@@ -21,11 +21,10 @@ echo"<br><br>Vous ne pouvez pas effectuer cette opération si vous n'
 
 $this_page_id=$_GET['id'];
 
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
 
 $sql="SELECT * FROM page";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_pages=mysql_fetch_assoc($req);
+$data_pages=$req->fetch(PDO::FETCH_ASSOC);
 
 $confirmed="0";
 
@@ -39,7 +38,7 @@ if(isset($_POST['oui'])){
 	if(($_POST['oui']=="Oui"))
 	{
 
-mysql_query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error());
+$dbh->query("DELETE FROM page WHERE id_page='$this_page_id'") or die ('error : '.mysql_error());
 
 
 echo "<br><br>Opération effectuée ! <a href='".$root_path."'>Retour</a>";

files/submit_blog_config.php

@@ -1 +1 @@
-<?php
$FilesDir = str_replace("files", "",dirname(__FILE__));
	
require_once(''.$FilesDir.'user/config.php');
$page_name='Modifications Blog';
include_once(''.$MainDir.'user/top.php');
session_start();

if(!@$_SESSION['session'])
	{

echo"<br><br>Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e).";
	}
	if(@$_SESSION['session'])
		{
		require_once(''.$MainDir.'user/verifications.php');
		include("".$MainDir."files/check_admin.php");
		
		



$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");

$sql="SELECT * FROM page";
$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
$data_pages=mysql_fetch_assoc($req);



	if($admin_mode == "1"){

//////// TO SET

if(isset($_POST['static_homepage_status'])){

$site_name=htmlspecialchars(formulaires($_POST['titre']));
$description=htmlspecialchars(formulaires($_POST['description']));
$bandeau=htmlspecialchars(formulaires($_POST['bandeau']));
$static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status']));

////////

//$passwd=htmlspecialchars(formulaires($_POST['passwd']));
//$passwd2=htmlspecialchars(formulaires($_POST['passwd2']));

//////// TO SET

mysql_query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error());

$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");


mysql_query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error());

mysql_query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error());


////////

echo'Vous venez de modifier les paramètres de '.$website_name.'<br /><a href="'.$root_path.'">Retour à l\'accueil du site !</a>';
include_once('../user/bottom.php');
					}

if(isset($_GET['static_homepage_id'])){
	$get_static_homepage_id = $_GET['static_homepage_id'];
	
	mysql_query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error());
	echo'Vous venez de modifier les paramètres de '.$website_name.'<br /><a href="/../">Retour à l\'accueil du site !</a>';
					}

		}
				}
?>
+<?php
$FilesDir = str_replace("files", "",dirname(__FILE__));
	
require_once(''.$FilesDir.'user/config.php');
$page_name='Modifications Blog';
include_once(''.$MainDir.'user/top.php');
session_start();

if(!@$_SESSION['session'])
	{

echo"<br><br>Vous ne pouvez pas effectuer cette opération si vous n'êtes pas connecté(e).";
	}
	if(@$_SESSION['session'])
		{
		require_once(''.$MainDir.'user/verifications.php');
		include("".$MainDir."files/check_admin.php");
		
		




$sql="SELECT * FROM page";
$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
$data_pages=$req->fetch(PDO::FETCH_ASSOC);



	if($admin_mode == "1"){

//////// TO SET

if(isset($_POST['static_homepage_status'])){

$site_name=htmlspecialchars(formulaires($_POST['titre']));
$description=htmlspecialchars(formulaires($_POST['description']));
$bandeau=htmlspecialchars(formulaires($_POST['bandeau']));
$static_homepage_status=htmlspecialchars(formulaires($_POST['static_homepage_status']));

////////

//$passwd=htmlspecialchars(formulaires($_POST['passwd']));
//$passwd2=htmlspecialchars(formulaires($_POST['passwd2']));

//////// TO SET

$dbh->query("UPDATE blog_config SET site_name='$site_name'") or die ('error : '.mysql_error());

$sql="SELECT * FROM page";
$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");

$dbh->query("UPDATE blog_config SET bandeau='$bandeau'") or die ('error : '.mysql_error());

$dbh->query("UPDATE blog_config SET static_homepage_status='$static_homepage_status'") or die ('error : '.mysql_error());


////////

echo'Vous venez de modifier les paramètres de '.$website_name.'<br /><a href="'.$root_path.'">Retour à l\'accueil du site !</a>';
include_once('../user/bottom.php');
					}

if(isset($_GET['static_homepage_id'])){
	$get_static_homepage_id = $_GET['static_homepage_id'];
	
	$dbh->query("UPDATE blog_config SET static_homepage_id='$get_static_homepage_id'") or die ('error : '.mysql_error());
	echo'Vous venez de modifier les paramètres de '.$website_name.'<br /><a href="/../">Retour à l\'accueil du site !</a>';
					}

		}
				}
?>

files/submit_edit.php

@@ -11,16 +11,15 @@ $this_article_id=$_GET['id'];
 $date = "42";
 $titre = $_POST['titre'];
 $article = $_POST['article'];
-$bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
 
 $sql="SELECT * FROM article";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_articles=mysql_fetch_assoc($req);
+$data_articles=$req->fetch(PDO::FETCH_ASSOC);
 
 
-mysql_query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE article SET titre=("'.$titre.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
 
-mysql_query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE article SET article=("'.$article.'") WHERE id_article="'.$this_article_id.'"') or die ('error : '.mysql_error());
 
 
 

files/submit_edit_page.php

@@ -13,26 +13,16 @@ $page = addslashes($_POST['page']);
 $bdd = new PDO("mysql:dbname=$base;host=$server", "$user", "$passwd");
 
 $sql="SELECT * FROM page";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_pages=mysql_fetch_assoc($req);
+$data_pages=$req->fetch(PDO::FETCH_ASSOC);
 
 
-mysql_query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE page SET titre="'.$titre.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
 
-mysql_query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
+$dbh->query('UPDATE page SET page="'.$page.'" WHERE id_page="'.$this_page_id.'"') or die ('error : '.mysql_error());
 
 
-
-
-//$req = $bdd->prepare('INSERT INTO page(user,titre,page) VALUES (:user, :titre, :page)');
-//$req->execute(array(
-//		"user" => $username,
-//		"titre" => $titre,
-//		"page" => $page,
-
-//));
 echo "Votre page a bien été enregistrée ! <a href='".$root_path."'>Retour</a>";
-//echo date_default_timezone_set('l jS \of F Y h:i:s A');
 }
 else
 {

files/up_check_admin.php

@@ -3,11 +3,13 @@
 <?php 
 
 require '/../user/config.php';
-mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
+$dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);
-mysql_select_db(DB_DB);
+
-$sql="SELECT user_rank FROM user WHERE id_user=id_user";
+    $sql="SELECT user_rank FROM user WHERE id_user=id_user";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+
-$user_ranking = mysql_fetch_assoc($req);
+    $stmt = $dbh->query($sql);
+
+    $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC);
 
 
 $user_rank="$user_ranking[user_rank]";

index.php

@@ -38,10 +38,8 @@ if(isset($_GET['error']))
 if(isset($root_path))
 	{
 
-mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
+$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error());	
-mysql_select_db(DB_DB);
+$count_user=$nombre_utilisateur->rowCount();
-$nombre_utilisateur=mysql_query("SELECT * FROM user") or die ('error : '.mysql_error());	
-$count_user=mysql_num_rows($nombre_utilisateur);
 	}
 if(isset($count_user) && $count_user == 0){
 
@@ -138,8 +136,10 @@ text-decoration:underline;
 
 
 $sql_page_menu="SELECT * FROM page ORDER BY priority";
-$req = mysql_query($sql_page_menu) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql_page_menu) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-while($data_page_menu=mysql_fetch_assoc($req))
+
+
+while($data_page_menu=$req->fetch(PDO::FETCH_ASSOC))
 {
 
 
@@ -173,8 +173,8 @@ $connected="1";
 
 
 $sql="SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req = $dbh->query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$user_ranking = mysql_fetch_assoc($req);
+$user_ranking = $req->fetch(PDO::FETCH_ASSOC);
 $user_rank="$user_ranking[user_rank]";
 if($user_rank==1){
 	
@@ -192,7 +192,7 @@ if($user_rank==1){
 
 ////Start check content
 
-if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL){
+if(isset($_GET['id_page']) || $static_homepage_status=="1" && $static_homepage_id!=NULL && !isset($_GET['id'])){
 
 if(isset($_GET['id_page'])){
 	
@@ -203,8 +203,8 @@ if(isset($_GET['id_page'])){
 	$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
 
 }
-$req_page = mysql_query($sql_page) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req_page = $dbh->query($sql_page) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_page=mysql_fetch_assoc($req_page);
+$data_page=$req_page->fetch(PDO::FETCH_ASSOC);
 
 if($data_page["id_page"]== null && $static_homepage_status!="1"){
 	
@@ -251,8 +251,8 @@ if($static_homepage_status=="1" && $static_homepage_id != $data_page["id_page"]
 }elseif(isset($_GET['id'])){
 	
 $sql_article="SELECT * FROM article WHERE id_article=".$_GET['id']."";
-$req_article = mysql_query($sql_article) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req_article = $dbh->query($sql_article) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$data_article=mysql_fetch_assoc($req_article);
+$data_article=$req_article->fetch(PDO::FETCH_ASSOC);
 
 if($data_article["id_article"]== null){
 	
@@ -260,12 +260,12 @@ if($data_article["id_article"]== null){
 	
 	
 }else{
-
+$article_stripslashtitle = stripslashes($data_article['titre']);
 $page_name= $data_article["titre"];?>
 <title><?php echo $website_name.' : '.$page_name; ?></title>
 <?php
 $article_stripslash = stripslashes($data_article['article']);
-echo"<h2>{$data_article["titre"]}</h2>";
+echo"<h2>{$article_stripslashtitle}</h2>";
 echo"<b>".$article_date_display." :</b> {$data_article["date"]} par : {$data_article['user']}<br />";
 echo"<b>".$article_article_display." :</b><br />{$article_stripslash}<br><br>";
 
@@ -302,9 +302,9 @@ $page=$debut.', 7';
 
 
 
-$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page."";
+$sql_article="SELECT * FROM article ORDER BY id_article DESC LIMIT ".$page."";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req_article = $dbh->query($sql_article) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-while($data=mysql_fetch_assoc($req))
+while($data=$req_article->fetch(PDO::FETCH_ASSOC))
 {
 
 $article_stripslash = stripslashes($data['article']);
@@ -341,8 +341,8 @@ if($connected==1){
 
 
 $sqlm='SELECT COUNT(*) AS nb_id FROM article';
-$reqm = mysql_query($sqlm) or die('Erreur SQL !<br />'.$sqlm.'<br />'.mysql_error());
+$reqm = $dbh->query($sqlm) or die('Erreur SQL !<br />'.$sqlm.'<br />'.mysql_error());
-$donnee = mysql_fetch_array($reqm);
+$donnee = $reqm->fetch(PDO::FETCH_BOTH);
 $nb_pg=((int)($donnee['nb_id']/7))+1;
 $nb_pg_r=0;
 while($nb_pg_r!=$nb_pg AND $nb_pg_r<10){
@@ -365,7 +365,7 @@ $nb_pg_r=$nb_pg_r+1;
 <?php
 }
 
-mysql_close();
+$dbh= null;
 ?>
 <br>
 <br>

rss.php

@@ -6,8 +6,8 @@ $page_name=$meta_description;
 session_start();
 
 $sql1="SELECT * FROM blog_config";
-$bloginfo_rss_req = mysql_query($sql1) or die('Erreur SQL !<br />'.$sql1.'<br />'.mysql_error());
+$bloginfo_rss_req = $dbh->query($sql1) or die('Erreur SQL !<br />'.$sql1.'<br />'.mysql_error());
-$bloginfo_rss = mysql_fetch_assoc($bloginfo_rss_req);
+$bloginfo_rss = $bloginfo_rss_req->fetch(PDO::FETCH_ASSOC);
 
 echo "<?xml version='1.0' encoding='ISO-8859-1'?>
 <rss version='2.0'>
@@ -15,25 +15,28 @@ echo "<?xml version='1.0' encoding='ISO-8859-1'?>
         <title>".$site_name."</title>
         <link>http://www.monsite.com</link>
         <description>{$bloginfo_rss["description"]}</description>";
-$sql="SELECT * FROM article ORDER BY id_article DESC LIMIT 20";
+$sql_rss="SELECT * FROM article ORDER BY id_article DESC LIMIT 20";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+$req_rss = $dbh->query($sql_rss) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-while($data=mysql_fetch_assoc($req))
+while($data_rss=$req_rss->fetch(PDO::FETCH_ASSOC))
-
 
 {
-$article_desc = strip_tags($data['article']);
+$titre_article_rss=stripslashes($data_rss["titre"]);
+$article_desc=strip_tags($data_rss['article']);
+$description_rss=stripslashes($article_desc);
+
+//$article_desc = strip_tags($data_rss['article']);
 
 //
 //echo"{$data["titre"]}<///a><br />";
 //echo"<b>".$article_date_display." :</b> {$data["date"]}<br />";
 echo"        
 	<item>
-            <title>{$data["titre"]}</title>
+            <title>{$titre_article_rss}</title>
-            <link>http://www.blogartisanal.tk/?id={$data["id_article"]}</link>
+            <link>{$root_path}?id={$data_rss["id_article"]}</link>
             <guid isPermaLink='false'>6</guid>
-	    <description>{$article_desc}</description>
+            <description>{$description_rss}</description>
             <pubDate>0000-00-00 00:00:00 GMT</pubDate>
-        </item>";
+    </item>";
 }
  echo"
    </channel>

user/bottom.php

@@ -1,5 +1,5 @@
 <?php
-mysql_close();
+$dbh = null;
 ?>
 </body>
 </html>

user/config.php

@@ -39,7 +39,6 @@ $base='Your_db_name';
 
 
 
-
    	define("DB_HOST",$server);
 	
 	define("DB_LOGIN",$user);
@@ -51,16 +50,16 @@ $base='Your_db_name';
 
 
 
-@$connect=mysql_connect($server, $user, $passwd) or die ('Error : '.mysql_error().' <br><br>Please check if your database settings are correctly set in the config.php file!');
-@mysql_select_db($base) or die ('Error : '.mysql_error());
 require_once('fonctions.php');
 
-mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
-mysql_select_db(DB_DB);
-$sql="SELECT * FROM blog_config";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
-$blog_info_config_page = mysql_fetch_assoc($req);
 
+    $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);
+
+    $sql = "SELECT * FROM blog_config";
+
+    $stmt = $dbh->query($sql);
+
+    $blog_info_config_page = $stmt->fetch(PDO::FETCH_ASSOC);
 
 
 $meta_description=$blog_info_config_page['description'];

user/index.php

@@ -97,11 +97,15 @@ else
 <?php 
 
 
-mysql_connect(DB_HOST,DB_LOGIN,DB_PASS);
+    $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);
-mysql_select_db(DB_DB);
+
-$sql="SELECT user_rank FROM user WHERE id_user=$id_user";
+    $sql = "SELECT user_rank FROM user WHERE id_user=$id_user";
-$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
+
-$user_ranking = mysql_fetch_assoc($req);
+    $stmt = $dbh->query($sql);
+
+    $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC);
+
+
 echo "<br>";
 echo("Votre rang est : ".$user_ranking['user_rank'].". ");
 

user/login.php

@@ -7,6 +7,7 @@ $username = formulaires($_POST['username']);
 $passwd = formulaires($_POST['passwd']);
 
 
+
 $passwd=md5($passwd);
 
 if(!$username)
@@ -17,8 +18,11 @@ if(!$passwd)
 	{
 	header('Location:'.$root_path.'index.php?error=pass');
 	}
-$reponse_cores=mysql_query("SELECT * FROM user WHERE pass='$passwd' AND username='$username'") or die ('error : '.mysql_error());
+//$sqlcount= "SELECT * FROM user WHERE pass='$passwd' AND username='$username'";
-$count_cores=mysql_num_rows($reponse_cores);
+$reponse_cores=$dbh->query("SELECT * FROM user WHERE pass='$passwd' AND username='$username'") or die ('error : '.mysql_error());
+$count_cores = $reponse_cores->rowCount();
+
+//$count_cores=mysql_num_rows($reponse_cores);
 if($count_cores == 0 )
 	{
 	header('Location:'.$root_path.'index.php?error=connection');
@@ -31,7 +35,7 @@ else
 		@$session.=substr('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN',(rand()%(strlen('0123456789AZERTYUIOPMLKJHGFDSQWXCVBN'))),1);
 		}
 	
-	mysql_query("UPDATE user SET session='$session' WHERE username='$username'") or die ('error : '.mysql_error());
+	$dbh->query("UPDATE user SET session='$session' WHERE username='$username'") or die ('error : '.mysql_error());
 	$_SESSION['session'] = "$session";		//création de la session
 	header('Location:'.$root_path.'user/index.php');			//redirection vers l'index
 	}

user/lost2.php

@@ -21,8 +21,8 @@ if(!$username)
 	return FALSE;
 	}
 
-$reponse_username=mysql_query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error());	
+$reponse_username=$dbh->query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error());	
-$count_username=mysql_num_rows($reponse_username);
+$count_username=$reponse_username->rowCount();
 if($count_username == 0)
 	{
 	echo"Invalid username.<br /><a href='#' onClick='history.back()'>Back</a>";
@@ -30,8 +30,8 @@ if($count_username == 0)
 	return FALSE;
 	}
 
-$reponse_email=mysql_query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error());	
+$reponse_email=$dbh->query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error());	
-$count_email=mysql_num_rows($reponse_email);
+$count_email=$reponse_email->rowCount();
 if($count_email == 0)
 	{
 	echo" Invalid E-mail.<br /><a href='#' onClick='history.back()'>Back</a>";
@@ -39,8 +39,8 @@ if($count_email == 0)
 	return FALSE;
 	}
 
-$existe=mysql_query("SELECT email FROM user WHERE email='$email' AND username='$username'") or die ('error : '.mysql_error());	
+$existe=$dbh->query("SELECT email FROM user WHERE email='$email' AND username='$username'") or die ('error : '.mysql_error());	
-$test=mysql_num_rows($existe);
+$test=$existe->rowCount();
 if($test == 0)
 	{
 	echo"E-mail and Username don't match.<br /><a href='#' onClick='history.back()'>Back</a>";
@@ -55,6 +55,6 @@ for ($ligne=0;$ligne<10;$ligne++)		//Cr
 	
 mail("$email", "".$website_name." - Forgotten password" , "Hello, this is your new password : ".$passwd."", "From: ".$blog_email."");
 $passwd=md5($passwd);
-mysql_query("UPDATE user SET pass='$passwd' WHERE email='$email'") or die ('error : '.mysql_error());	
+$dbh->query("UPDATE user SET pass='$passwd' WHERE email='$email'") or die ('error : '.mysql_error());	
 echo 'An E-mail has been sent to your mailbox with your new password';
 ?>

user/profile2.php

@@ -76,8 +76,8 @@ if($new_pass!=$new_pass2)
 	return FALSE;
 	}
 	$pass_enc=md5($pass_enc);
-$reponse_pass=mysql_query("SELECT pass FROM user WHERE pass='$pass_enc' AND session='$session'") or die ('error : '.mysql_error());	//verification si mot de passe valide
+$reponse_pass=$dbh->query("SELECT pass FROM user WHERE pass='$pass_enc' AND session='$session'") or die ('error : '.mysql_error());	//verification si mot de passe valide
-$count_pass=mysql_num_rows($reponse_pass);
+$count_pass=$reponse_pass->rowCount();
 if($count_pass == 0)
 	{
 	?>
@@ -98,9 +98,9 @@ The old password is not correct.<br /><a href="profile.php" onClick="history.bac
 	return FALSE;
 	}
 	$new_pass=md5($new_pass);
-	mysql_query("UPDATE user SET pass='$new_pass' WHERE session='$session'") or die ('error : '.mysql_error());
+	$dbh->query("UPDATE user SET pass='$new_pass' WHERE session='$session'") or die ('error : '.mysql_error());
 	}
-mysql_query("UPDATE user SET email='$email' WHERE session='$session'") or die ('error : '.mysql_error());
+$dbh->query("UPDATE user SET email='$email' WHERE session='$session'") or die ('error : '.mysql_error());
 echo"<div align=center>Your profile settings have been saved.<br /><a href='profile.php' onClick='history.back()'>Back</a></div>";
 include_once('bottom.php');
 ?>

user/style.css

@@ -0,0 +1,57 @@
+<style type="text/css">
+html
+{
+height:100%;
+width:100%;
+}
+#header
+{
+width:100%;
+height:20%;
+font-size:50px;
+text-align:center;
+border-style:solid;
+border-color:black;
+border-size:1px;
+}
+.corps
+{
+width:80%;
+height:5%;
+border-bottom-style:solid;
+border-bottom-color:black;
+border-bottom-size:1px;
+//float:left;
+z-index:2;
+}
+#widget
+{
+margin-left:80%;
+width:15%;
+z-index:1;
+position:absolute;
+border-left-style:solid;
+border-left-color:black;
+border-left-size:2px;
+}
+a
+{
+color:black;
+text-decoration:none;
+}
+a:hover
+{
+color:black;
+text-decoration:underline;
+}
+#contact
+{
+color:white;
+text-decoration:none;
+}
+#contact:hover
+{
+color:white;
+text-decoration:underline;
+}
+</style>

user/top.php

@@ -11,7 +11,7 @@ if (!isset($index_check)){
 <meta name="description" content="<?php echo $meta_description; ?>" />
 <meta name="keywords" content="<?php echo $meta_key_words; ?>" />
 <meta name="robots" content="all" />
-<link href="style.css" rel="stylesheet" type="text/css" />
+<link href="<?php echo $root_path; ?>"style.css" rel="stylesheet" type="text/css" />
 <link rel="alternate" type="application/rss+xml"
     href="<?php echo $root_path; ?>rss.php" title="Blog Artisanal" />
 </head>

user/verification.php

@@ -38,16 +38,16 @@ return FALSE;
    	}
 	
 //// VERIFICATIONS DES EXISTANCES ////
-$reponse_mail=mysql_query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error());	//verification si e-mail existe déjà
+$reponse_mail=$dbh->query("SELECT email FROM user WHERE email='$email'") or die ('error : '.mysql_error());	//verification si e-mail existe déjà
-$count_mail=mysql_num_rows($reponse_mail);
+$count_mail=$reponse_mail->rowCount();
 if($count_mail == 1)
 	{
 	echo'This e-mail is already taken.<br /><a href="register.php" onClick="history.Back()">Back</a>';
 	include_once('bottom.php');
 return FALSE;
 	}
-$reponse_username=mysql_query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error());	//verification si username existe déjà
+$reponse_username=$dbh->query("SELECT username FROM user WHERE username='$username'") or die ('error : '.mysql_error());	//verification si username existe déjà
-$count_username=mysql_num_rows($reponse_username);
+$count_username=$reponse_username->rowCount();
 if($count_username == 1)
 	{
 	echo 'This username is already taken.<br /><a href="register.php" onClick="history.Back()">Back</a>';
@@ -63,8 +63,8 @@ return FALSE;
 		$passwd=md5($passwd);		//Codage du password
 		
 //// DEFINIR LE PREMIER UTILISATEUR COMME ADMINISTRATEUR ////		
-$nombre_utilisateur=mysql_query("SELECT * FROM user") or die ('error : '.mysql_error());	
+$nombre_utilisateur=$dbh->query("SELECT * FROM user") or die ('error : '.mysql_error());	
-$count_user=mysql_num_rows($nombre_utilisateur);
+$count_user=$nombre_utilisateur->rowCount();
 if($count_user == 0){
 $user_rank = '1';
 }else{
@@ -77,7 +77,20 @@ $website_name = "Blog Artisanal";
 }
 
 //// INSCRIPTION DANS LA BDD ////
-mysql_query("INSERT INTO user VALUES ('', '$session', '$username', '$passwd', '$email','','$user_rank')") or die ('error : '.mysql_error());	//insertion dans la bdd
+$sql_register = "INSERT INTO user ( id_user, session, username, pass, email, date, user_rank)
+                    VALUES (:id_user, :session, :username, :pass, :email, :date, :user_rank)";
+
+$query = $dbh->prepare($sql_register) or die ('error : '.mysql_error());      //insertion dans la bdd
+$results = $query->execute(array(
+    "id_user" => '',
+    "session" => $session,
+    "username" => $username,
+    "pass" => $passwd,
+    "email" => $email,
+    "date" => '',
+    "user_rank" => $user_rank
+));
+
 echo'Thank you for registering to '.$website_name.'<br /><a href="index.php">Login !</a>';
 include_once('bottom.php');
 ?>

user/verifications.php

@@ -9,8 +9,8 @@ if(!@$_SESSION['session'])
 	return false;
 	}
 	
-$verif=mysql_query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error());	//on vérifie si il existe une entrée avec cet identifiant
+$verif=$dbh->query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error());	//on vérifie si il existe une entrée avec cet identifiant
-$verif=mysql_num_rows($verif);
+$verif=$verif->rowCount();
 if($verif == 0)
 	{
 	header('Location:index.php?error=connection');
@@ -19,8 +19,8 @@ if($verif == 0)
 	return false;
 	}
 
-$sql=mysql_query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error());
+$sql=$dbh->query("SELECT * FROM user WHERE session='$session'") or die ('error : '.mysql_error());
-while ($resultat = mysql_fetch_array($sql) )
+while ($resultat = $sql->fetch(PDO::FETCH_BOTH) )
 	{
 	$email = $resultat['email'];
 	$username = $resultat['username'];