All pastes #832660 Raw Edit

lll

public php v1 · immutable
#832660 ·published 2007-12-26 13:33 UTC
rendered paste body
<?php if(!isset($_GET['edit_profil']) AND !isset($_GET['action'])){$query = "SELECT * FROM `membres` WHERE `pseudo` = '$pseudo' LIMIT 1";$resultat = @mysql_query($query,$link) or die(mysql_error()); $row = mysql_fetch_array($resultat);?><div align="left"><div align="center"><font color="#749ff6"><strong><a href="./?p=membre_details&id=<?=$row['id']?>">Voir   mon profil</a></strong></font></div><form action="?p=edit_profil&action=verif" name="save" method="post">  <table width="90%" border="0" align="center" widtd="100%">    <tr>       <td class="titre_tableau"><div align="center"><font color="#749ff6"><strong>Infos           persos</strong></font></div></td>    </tr>  </table>  <table width="90%" border="0" align="center" widtd="100%">    <tr>       <td widtd="20%"><div align="right"><font color="#749ff6">Pseudo : </font></div></td>      <td width="80%" widtd="80%"> <font color="#749ff6">         <? echo $row["pseudo"] ?>        </font></td>    </tr>    <? if ($_SESSION["admin"] == 1) { // 'Visiteurs' pour les non admins ?>    <tr>       <td><div align="right"><font color="#749ff6">Grade : </font></div></td>      <td width="80%"><font color="#FF0000"> <? echo $row["fonction"] ?> </font></td>    </tr>    <? } // End if ?>    <tr>    </tr>    <tr>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Pr&eacute;nom : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="prenom" type="text" id="prenom" value="<? echo $row["prenom"] ?>" maxlength="60">        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Nom : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="nom" type="text" id="nom" value="<? echo $row["nom"] ?>" maxlength="60">        </font></td>    </tr>	    <tr>       <td><div align="right"><font color="#749ff6">Sex : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="sex" class="input" type="radio" value="m" sex="sex"/>        Masculin         <input name="sex" class="input" type="radio" value="f" sex="sex"/>        Féminim        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Date de naissance : </font></div></td>      <td><input name="jour" type="text" id="txtTitre2" size="2"/>	  .	  <input name="mois" type="text" id="txtTitre2" size="2"/>	  .	  <input name="annee" type="text" id="txtTitre2" size="5"/>	  </td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Ville : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="ville" type="text" id="ville" value="<? echo $row["ville"] ?>" maxlength="60">        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Pays : </font></div></td>      <td width="80%"> <font color="#749ff6">         <select name="pays">         <option value="al">albania</option>         <option value="ar">argentina</option>       <option value="au">austria</option>     <option value="be">belgium</option>	<option value="bo">bosnia</option>    <option value="br">brazil</option>    <option value="ca">canada</option>    <option value="ch">chilie</option>	<option value="cr">croatia</option>    <option value="de">denmark</option>    <option value="es">estonia</option>    <option value="fi">finland</option>	<option value="fr">france</option>	<option value="ge">germany</option>    <option value="gr">greece</option>    <option value="hu">hungary</option>    <option value="ic">iceland</option>	<option value="ir">ireland</option>    <option value="is">israel</option>    <option value="it">italy</option>    <option value="ja">japan</option>	<option value="me">mexico</option>	<option value="ne">netherlandsl</option>    <option value="nz">new-Zealand</option>    <option value="no">norway</option>    <option value="pol">poland</option>    <option value="pr">portugal</option>    <option value="ro">roumania</option>    <option value="ru">russia</option>	<option value="si">singapore</option>	<option value="sl">slovenia</option>    <option value="sa">south-Africa</option>    <option value="sp">spain</option>    <option value="swe">sweden</option>	<option value="sw">switzerland</option>	<option value="tu">tunisia</option>	<option value="uk">united-kingdom</option>    <option value="us">united-states</option>    <option value="ve">venezuela</option>    <option value="yu">yugoslavia</option></select>        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Url : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="url" type="text" id="url" value="<? echo $row["url"] ?>" size="50" maxlength="255">        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">E-mail : </font></div></td>      <td width="80%"> <font color="#749ff6">         <input name="email" type="text" id="email" value="<? echo $row["email"] ?>" maxlength="60">        </font></td>    </tr>    <tr>       <td><div align="right"><font color="#749ff6">Msn : </font></div></td>      <td> <font color="#749ff6">         <input name="msn" type="text" id="msn" value="<? echo $row["msn"] ?>" maxlength="60">        </font></td>    </tr>    <tr>     <td align="right"><div align="right"><font color="#749ff6">Avatar : </font></div></td>    <td><label for="avatar">Fichier (Tous formats | max. 1Mo):</label><br />     <input type="hidden" name="MAX_FILE_SIZE" value="1048576" />     <input type="file" name="avatar" id="avatar" /><br />    </td></tr>  </table>  <div align="center"><font color="#749ff6"><br>        <input name="id" type="hidden" id="id" value="<? echo $row["id"] ?>" maxlength="60">    <input name="save" type="submit" value="Envoyer le message" />    </font></div></form><p align="center"><a href="javascript:history.back();"><font onMouseOver="this.style.color='#FFFFFF'" onMouseOut="this.style.color='#96A4B3'"><br>  [ Retour ]</font></a></p><?php}elseif(isset($_GET['action']) AND $_GET['action'] == 'verif'){$extensions_valides = array( 'jpg' , 'jpeg' , 'gif' , 'png' );$extension_upload = substr(  strrchr($_FILES['avatar']['name'], '.')  ,1);if ( in_array($extension_upload,$extensions_valides) ) echo "Extension correcte";$avatar = time();$nomavatar = str_replace(' ','',$avatar).".".$extension_upload;$avatar = "./images/avatars/".str_replace(' ','',$pseudo).".".$extension_upload;move_uploaded_file($_FILES['avatar']['tmp_name'],$avatar);// toute cette partie ci dessous pour créer la miniature$pseudo_session = $_SESSION['pseudo']; // Permet d'afficher la page dans le site pour les visiteurs$id = $_REQUEST["id"];$email = $_REQUEST['email']; $msn = $_REQUEST['msn'];$ville = $_REQUEST['ville'];$pays = $_REQUEST['pays'];$url = $_REQUEST['url'];$nom = $_REQUEST['nom'];$prenom = $_REQUEST['prenom'];$description = $_REQUEST['description'];$description = strip_tags($description);$description = nl2br($description); $jour_naissance = $_REQUEST['jour'];$mois_naissance = $_REQUEST['mois'];$annee_naissance = $_REQUEST['annee'];$date_naissance = $annee_naissance."-".$mois_naissance."-".$jour_naissance;$query = "SELECT * FROM `membres` WHERE `id` = '$id' LIMIT 1";$resultat = @mysql_query($query,$link) or die(mysql_error()); $row = mysql_fetch_array($resultat);	// Modifier le membre$query = "SELECT * FROM `membres` WHERE `pseudo` = '$pseudo_session' LIMIT 1"; // Le pseudo est unique$resultat = @mysql_query($query,$link) or die(mysql_error()); $row = mysql_fetch_array($resultat);$fonction = $row['fonction'];// Eviter que l'url bug :if (strlen($url) >= 7 && substr($url, 0, 7) != 'http://') $url = 'http://'.$url;	$query = "UPDATE `membres` SET `pseudo` = '$pseudo',	`avatar` = '$avatar',	`email` = '$email',	`msn` = '$msn',	`date_naissance` = '$date_naissance',	`ville` = '$ville',	`pays` = '$pays',	`url` = '$url',	`nom` = '$nom',	`description` = '$description',	`fonction` = '$fonction',	`prenom` = '$prenom'	WHERE `pseudo` = '$pseudo_session' LIMIT 1;";		$resultat = @mysql_query($query,$link); // or die(mysql_error());  	if (!$resultat) {		if (mysql_errno() == 1062) {			//echo $query;			die("<br>Désolé, cet email sont déjà utilisés !");		}		else die("Une erreur est survenue pendant l'inscription : <br>".mysql_error());	}	else echo "Votre profil a bien été mis à jour.";		$_SESSION["pseudo"] = $pseudo;	}?>