Anonyme

 <?php  include("lib_php/funciones_bd.php");if ($_REQUEST["act"]=='I'){                            global $db;						 $contactos_objetos=$_REQUEST["contactos_objeto"];						   $contactos_objeto= str_replace("\'", "&prime;",$contactos_objetos);						   $contact_pseudos=$_REQUEST["pseudo"];						   $contact_pseudo= str_replace("\'", "&prime;",$contact_pseudos);						   $contact_noms=$_REQUEST["contact_nom"];						   $contact_nom= str_replace("\'", "&prime;",$contact_noms);						   $contact_prenoms=$_REQUEST["contact_prenom"];						   $contact_prenom= str_replace("\'", "&prime;",$contact_prenoms);						   $contact_adresses=$_REQUEST["contact_adresse"];						   $contact_adresse= str_replace("\'", "&prime;",$contact_adresses);						   $contact_cps=$_REQUEST["contact_cp"];						   $contact_cp= str_replace("\'", "&prime;",$contact_cps);						   $contact_villes=$_REQUEST["contact_ville"];						   $contact_ville= str_replace("\'", "&prime;",$contact_villes);						   $contact_telephones=$_REQUEST["contact_telephone"];						   $contact_telephone= str_replace("\'", "&prime;",$contact_telephones);   						   $contact_portables=$_REQUEST["contact_portable"];						   $contact_portable= str_replace("\'", "&prime;",$contact_portables); 						   $contact_emails=$_REQUEST["contact_email"];						   $contact_email= str_replace("\'", "&prime;",$contact_emails);						   $contact_voitures=$_REQUEST["contact_voiture"];						   $contact_voiture= str_replace("\'", "&prime;",$contact_voitures);						   $contact_ecrans=$_REQUEST["contact_ecran"];						   $contact_ecran= str_replace("\'", "&prime;",$contact_ecrans);						   						   if ($contact_email==''){                                                   echo "<script>alert('Vous n’avez pas entré d’adresse électronique ; ');history.back();</script>";						   exit;                                                   }                                                    if ($contact_nom=='' || $contact_prenom=='' || $contact_email=='' || $contact_pseudo==''){						    echo "<script>alert('Merci de remplir tous les champs');history.back();</script>";						   exit;						   }						   else{//validamos la direccion de correo  $email=$contact_emails;    $mail_correcto = 0;     if ((strlen($email) >= 6) && (substr_count($email,"@") == 1) && (substr($email,0,1) != "@") && (substr($email,strlen($email)-1,1) != "@")){        if ((!strstr($email,"'")) && (!strstr($email,"\"")) && (!strstr($email,"\\")) && (!strstr($email,"\$")) && (!strstr($email," "))) {           //miro si tiene caracter .           if (substr_count($email,".")>= 1){              //obtengo la terminacion del dominio              $term_dom = substr(strrchr ($email, '.'),1);              //compruebo que la terminación del dominio sea correcta              if (strlen($term_dom)>1 && strlen($term_dom)<5 && (!strstr($term_dom,"@")) ){                 //compruebo que lo de antes del dominio sea correcto                 $antes_dom = substr($email,0,strlen($email) - strlen($term_dom) - 1);                 $caracter_ult = substr($antes_dom,strlen($antes_dom)-1,1);                 if ($caracter_ult != "@" && $caracter_ult != "."){                    $mail_correcto = 1;                 }               }            }          }        }          if ($mail_correcto) {      					       $fecha=date("d-m-Y");						       $query="insert into LAN (pseudo,nom,prenom,adresse,code-postal,ville,email,num-tel,num-tel-portable,voiture,ecran,comment) values ('$contact_pseudo','$contact_nom','$contact_prenom','$contact_adresse','$contact_cp','$contact_ville','$contact_email','$contact_telephone','$contact_portable','$contact_voiture','$contact_ecran','$contactos_objeto')";						       $result = $db["ejecutar"]($query);					 //  echo "query insert es: ".$query;					echo "Le dernier ID inséré dans est le id %d\n", mysql_insert_id();et apres l'envoi de mail ...