blogartisanal/administration/index.php

<?php 
$AdminDir = str_replace("administration", "",dirname(__FILE__));

require_once(''.$AdminDir.'user/config.php');

if(!@$_SESSION['session'])
	{
session_start();
	}
	if(@$_SESSION['session']){
		require_once(''.$MainDir.'user/verifications.php');
		}
include("".$MainDir."files/navheader.php"); 

$page_name='Administration';
include_once(''.$MainDir.'user/top.php');
if(@$_SESSION['session'])
{

    $dbh = new PDO("mysql:host=$server;dbname=$base", $user, $passwd);

    $sql="SELECT user_rank FROM user WHERE id_user=$id_user";

    $stmt = $dbh->query($sql);

    $user_ranking = $stmt->fetch(PDO::FETCH_ASSOC);

$user_rank="$user_ranking[user_rank]";


    $sql_blog_config="SELECT * FROM blog_config";

    $blog_config = $dbh->query($sql_blog_config);

    $config_blog_page_admin = $blog_config->fetch(PDO::FETCH_ASSOC);


$description = $config_blog_page_admin['description'];
$static_homepage_status = $config_blog_page_admin['static_homepage_status'];


echo("<br>Etat utilisateur : Connecté <br>");
echo "<br>";
echo("Votre rang est : ".$user_ranking['user_rank'].". ");
if($user_rank!=1){
echo("Vous n'êtes pas administrateur ! Vous ne pouvez pas accéder à cette partie du site.");
}else{
	
	echo("
	<br>
		<br>
				
<form method='post' action='{$root_path}files/submit_blog_config.php' enctype='multipart/form-data'>	
	<table width='400' border='0' align='center'>
	<tr>
	<td colspan='2'><h2>Modification des Paramètres du blog</h2></td>
	</tr>
	<tr>
	<td><label for='titre'>Titre : </label></td>
	<td><input value='".htmlspecialchars($site_name)."' name='titre' type='text' id='titre' /></td>
	</tr>
	<tr>
	<td><label for='description'>Description : </label></td>
	<td><input value='".htmlspecialchars($description)."' name='description' type='text' id='description' /></td>
	</tr>
	<tr>
	<td><label for='bandeau'>Bandeau : </label></td>");
	echo'<td><input value="'.htmlspecialchars($bandeau).'" name="bandeau" type="text" id="bandeau" /></td>';
	echo("
	</tr>
	<tr>
	<td><label for='passwd2'>J-DANIEL: </label></td>
	<td><input name='passwd2' type='password' id='passwd2' /></td>
	</tr>
	<tr>
	<td><label for='static_homepage_status'>Static Home Page (Set to 1 to enable.) : </label></td>
	<td><input value='".htmlspecialchars($static_homepage_status)."' name='static_homepage_status' type='text' id='static_homepage_status' /></td>
	</tr>
	<tr>
	<td><div align='center'><input type='submit' value='GO!' /></div></td>
	</tr>
	</table>
	</form>
	</div>
	<center><a href=''.$root_path.'index.php'>Back</a></center>
	
	<br><br><a href='article_ecrire.php'>Ecrire un article !</a>
	<br><a href='page_ecrire.php'>Ecrire une page !</a>
	");
	if($static_homepage_status=="1" && $static_homepage_id!=NULL){
	$sql_page="SELECT * FROM page WHERE id_page=".$static_homepage_id."";
	$req_page = $dbh->query($sql_page) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
	$data_page=$req_page->fetch(PDO::FETCH_ASSOC);
	
	echo "<br><br>Actuellement la page {$data_page['titre']} est définie comme page d'accueil !<br><br>";
	}elseif($static_homepage_status=="1"){
		
		echo"Vous n'avez pas encore défini de page d'accueil.<br><br>";
		
	}
}
?>

 <?php 
}else{
echo"<br>Etat utilisateur : Déconnecté <br>
<br>Veuillez vous <a href='".$root_path."user/'>connecter</a> pour accéder à cette page.";
}
include_once(''.$MainDir.'user/bottom.php');
?>