require ('cfg_sql.php');
echo "
$PageTitre\n";
?>
function corriger($phrase) {
if ($phrase!="") {
// anti balise html
$phrase = str_replace("<","<",$phrase);
$phrase = str_replace(">",">",$phrase);
$phrase = ereg_replace("(\n|\r)+"," ",$phrase);
// pas de guillemets
$phrase = str_replace("\"","'",$phrase);
//pas de double anti-slash
$phrase = str_replace("\\\\","\\",$phrase);
//pas de double espace
$phrase = str_replace(" "," ",$phrase);
}
return trim($phrase);
}
$action="listsujet";
if (isset($_POST["action"])) { $action = $_POST["action"];} else {if (isset($_GET["action"])) { $action = $_GET["action"];}}
$start=0;
if($action=='voir') {$stop=$IncrMessa;} else {$stop=$IncrSujet;}
if (isset($_POST["start"])) { $start = $_POST["start"];} else {if (isset($_GET["start"])) { $start = $_GET["start"];}}
if (isset($_POST["stop"])) { $stop = $_POST["stop"];} else {if (isset($_GET["stop"])) { $stop = $_GET["stop"];}}
$KelSujet="";
if (isset($_POST["KelSujet"])) { $KelSujet = $_POST["KelSujet"];} else {if (isset($_GET["KelSujet"])) { $KelSujet = $_GET["KelSujet"];}}
$Nom="";
$pass="";
$Email="";
$Titre="";
$Message="";
if (isset($_POST["Nom"])) { $Nom = $_POST["Nom"];} else {if (isset($_GET["Nom"])) { $Nom = $_GET["Nom"];}}
if (isset($_POST["pass"])) { $pass = $_POST["pass"];} else {if (isset($_GET["pass"])) { $pass = $_GET["pass"];}}
if (isset($_POST["Email"])) { $Email = $_POST["Email"];} else {if (isset($_GET["Email"])) { $Email = $_GET["Email"];}}
if (isset($_POST["Titre"])) { $Titre = $_POST["Titre"];} else {if (isset($_GET["Titre"])) { $Titre = $_GET["Titre"];}}
if (isset($_POST["Message"])) { $Message = $_POST["Message"];} else {if (isset($_GET["Message"])) { $Message = $_GET["Message"];}}
$Nom=corriger($Nom);
$Email=trim(strtolower(corriger($Email)));
$Titre=corriger($Titre);
$Message=corriger($Message);
if ($Message!="") {
// saut de ligne
$Message = str_replace("/n\\/n\\/n\\","/n\\/n\\",$Message);
$Message = str_replace("/n\\","
",$Message);
// souligné
$Message = str_replace("/1-\\/1-\\","/1-\\",$Message);
$Message = str_replace("/1-\\","",$Message);
$Message = str_replace("/-1\\/-1\\","/-1\\",$Message);
$Message = str_replace("/-1\\","",$Message);
// gras
$Message = str_replace("/2-\\/2-\\","/2-\\",$Message);
$Message = str_replace("/2-\\","",$Message);
$Message = str_replace("/-2\\/-2\\","/-2\\",$Message);
$Message = str_replace("/-2\\","",$Message);
// italique
$Message = str_replace("/3-\\/3-\\","/3-\\",$Message);
$Message = str_replace("/3-\\","",$Message);
$Message = str_replace("/-3\\/-3\\","/-3\\",$Message);
$Message = str_replace("/-3\\","",$Message);
// Smileys de base
$Message = str_replace("/1\\","
",$Message);
$Message = str_replace("/2\\","
",$Message);
$Message = str_replace("/3\\","
",$Message);
$Message = str_replace("/4\\","
",$Message);
$Message = str_replace("/5\\","
",$Message);
$Message = str_replace("/6\\","
",$Message);
$Message = str_replace("/7\\","
",$Message);
$Message = str_replace("/8\\","
",$Message);
$Message = str_replace("/9\\","
",$Message);
$Message = str_replace("/10\\","
",$Message);
// Balise
$Message = str_replace("/0-\\/0-\\","/0-\\",$Message);
$Message = str_replace("/0-\\","",$Message);
$Message = str_replace("/00\\/00\\","/00\\",$Message);
$Message = str_replace("/00\\","",$Message);
}
$Sujet="";
if (isset($_POST["Sujet"])) { $Sujet = $_POST["Sujet"];} else {if (isset($_GET["Sujet"])) { $Sujet = $_GET["Sujet"];}}
$NewSubj="";
if (isset($_POST["NewSubj"])) { $NewSubj = $_POST["NewSubj"];} else {if (isset($_GET["NewSubj"])) { $NewSubj = $_GET["NewSubj"];}}
$NewSubj=corriger($NewSubj);
if($action=='listsujet')
{
$db = mysql_connect("$host","$base","$passe") or die(mysql_error());
mysql_select_db("$base",$db);
// if(empty($start))
// {
// $start=0;
// }
// if(empty($stop))
// {
// $stop=30;
// }
$Subj = mysql_query("SELECT * FROM `sujets`");
$RessTot = mysql_num_rows($Subj);
//$Subj = mysql_query("SELECT * FROM `sujets` ORDER By DateHeure Desc LIMIT $start,$stop");
$Subj = mysql_query("SELECT * FROM `sujets` ORDER By NomSujet LIMIT $start,$stop");
$Ress = mysql_num_rows($Subj);
if($Ress!='0')
{
?>
echo "Il y a ".$RessTot." sujet";
if ($RessTot>1) { echo "s";} ?>
de discussion |
echo "  "; ?>
|
|
Nb réponse(s)
par sujet
Date de réception
|
$i=0;
WHILE($Ress!=$i)
{
flush();
$Sujet = mysql_result($Subj,$i,"NomSujet");
$AffSubj = mysql_query("SELECT * FROM `$Sujet`");
$ResSubj = mysql_num_rows($AffSubj);
$NbrMsg = $ResSubj;
if($NbrMsg>0) { $NbrMsg--;}
$DSubj="";
$HSubj="";
if ($ResSubj!='0') {
$DSubj = mysql_result($AffSubj,$NbrMsg,"Date");
$DateCour = date("m-Y");
$DateSubj = substr($DSubj,3,7);
if ($DateCour==$DateSubj) {
$DSubj = str_replace("-$DateCour", "-$DateCour", $DSubj);
}
$HSubj = mysql_result($AffSubj,$NbrMsg,"Heure");
}
?>
echo "".substr($Sujet,0,1)."".substr($Sujet,1,strlen($Sujet)-1);
?>
|
echo $NbrMsg; ?>
|
echo "Le ".$DSubj." à ".$HSubj ;?> |
$i++;
}
?>
$i=0;
$Page=0;
echo "";
echo "Navigation : ";
WHILE($RessTot > $i)
{
$i2=$i+$IncrSujet;
$Page=$Page+1;
if ($i==$start) {
echo "$Page ";
} else {
echo "$Page ";
}
$i=$i+$IncrSujet;
}
echo "
";
echo "[ Nouveau Sujet | Inscription ]";
echo "\n";
}
else
{
echo "[ Nouveau Sujet | Inscription ]";
}
$txtfile = "infos.txt";
if (file_exists($txtfile)) {
echo "
I N F O S
";
$file = file($txtfile);
$z=count($file);
for ($i=0;$i<$z;$i++) {
echo trim($file[$i])."\n";
}
echo "
$FootNom - Mon Site
\n";
}
mysql_close();
}
if($action=='voir')
{
$db = mysql_connect("$host","$base","$passe") or die(mysql_error());
mysql_select_db("$base",$db);
// if(empty($start))
// {
// $start=0;
// }
// if(empty($stop))
// {
// $stop=15;
// }
$Aff = mysql_query("SELECT * FROM `$KelSujet`");
$ResTot = mysql_num_rows($Aff);
$Aff = mysql_query("SELECT * FROM `$KelSujet` LIMIT $start,$stop");
$Res = mysql_num_rows($Aff);
$i=0;
WHILE($Res!=$i)
{
$Nom = mysql_result($Aff,$i,"Nom");
$Mail = mysql_result($Aff,$i,"Email");
$Titre = mysql_result($Aff,$i,"Titre");
$D = mysql_result($Aff,$i,"Date");
$H = mysql_result($Aff,$i,"Heure");
$Message = mysql_result($Aff,$i,"Message");
$tabBord="#5263de";
$tabSaut="";
if (($i==0) && ($start==0)) {
$tabBord="#EA5E00";
$tabSaut="
";
}
?>
>
Auteur
|
Sujet
: echo $Titre; ?> |
$MailInvalide=false;
require ('MailInvalid.php');
if ($MailInvalide){
?>
echo $Nom; ?>
} else {
?>
echo $Nom; ?>
}
?>
|
Envoyé le echo $D." ".$H ;?>
echo $Message; ?>
|
echo $tabSaut;
$i++;
}
$i=0;
$Page=0;
echo "Navigation : ";
WHILE($ResTot > $i)
{
$i2=$i+$IncrMessa;
$Page=$Page+1;
if ($i==$start) {
echo "$Page ";
} else {
echo "$Page ";
}
$i=$i+$IncrMessa;
}
echo "
";
echo "[ Répondre - Ajouter | Retour à la liste des sujets ]\n";
mysql_close();
}
//if($action=='formajoutrep') { include("ajoutrep.php");}
//if($action=='formajoutsubj') { include("ajoutsubj.php");}
$MailIndesirable=false;
if (($action=='ajoutrep') || ($action=='ajoutsubj')) {
require("MailIndesirable.php");
}
if ($action=='ajoutrep')
{
echo "";
if (!$MailIndesirable) {
$db = mysql_connect("$host","$base","$passe") or die(mysql_error());
mysql_select_db("$base",$db);
$user = $Nom;
$Usr = mysql_query("SELECT * FROM `Usr` WHERE `utilisateur` LIKE '$user' LIMIT 0,1");
$Res = mysql_num_rows($Usr);
// if($Res=='0')
// {
// echo "Utilisateur inconnu!";
// echo "
[ Retour ]";
// mysql_close();
// }
$i=0;
$enreg='false';
while($Res!=$i)
{
$Utilisateur = mysql_result($Usr,$i,"utilisateur");
$MDP = mysql_result($Usr,$i,"mdp");
$Adr_IP = mysql_result($Usr,$i,"Adr_IP");
$Adr_IP_Con = mysql_result($Usr,$i,"Adr_IP_Con");
if($Utilisateur==$user)
{
$enreg='true';
if($MDP==$pass)
{
$Date = date("d-m-Y");
$Heure = date("H:i");
if ($Adr_IP=="0.0.0.0") { $Adr_IP=$REMOTE_ADDR;}
$Req_1 = mysql_query("UPDATE `Usr` SET `Der_Date`='".$Date." - ".$Heure."',`Adr_IP`='".$Adr_IP."',`Adr_IP_Con`='".$REMOTE_ADDR."' WHERE `utilisateur`='".$user."'");
$Req = mysql_query("INSERT INTO `$Sujet` (`Nom`, `Email`, `Titre`, `Message`, `Date`, `Heure`) VALUES ('$Nom', '$Email', '$Titre', '$Message', '$Date', '$Heure')");
if($Req=='true')
{
//echo "\n";
//echo "Message ajouté...
\n";
//echo "\n";
$RecupNbrMsg = mysql_query("SELECT * FROM `$Sujet`");
$NbrMsg = mysql_num_rows($RecupNbrMsg)-1;
$start=0;
while ($NbrMsg>($start+15)) { $start+=15; }
$stop=$start+15;
echo "";
} else {
echo "$Nom - $Email
";
echo "$Titre - $Date - $Heure
";
echo "Message : $Message
";
echo "Erreur à la création de la réponse !
Liste des sujets de discussion";
echo "";
}
} else {
echo "Mot de passe incorrect !";
echo "
[ Retour ]";
$i=$Res-1;
}
}
$i=$i+1;
}
if($enreg=='false')
{
echo "Utilisateur inconnu ! Respectez la différence MAJUSCULES/minuscules !";
echo "
[ Retour ]";
}
mysql_close();
} else {
echo "$Nom - $Email
";
echo "$Titre - $Date - $Heure
";
echo "Message : $Message
";
echo "Erreur à la création de la réponse !
Liste des sujets de discussion";
echo "";
}
}
if ($action=='ajoutsubj')
{
echo "
";
$db = mysql_connect("$host","$base","$passe") or die(mysql_error());
mysql_select_db("$base",$db);
$NewSubj = strtolower($NewSubj);
$CarRech = array("à","â","ä","é","è","ë","ê","î","ï","ô","ö","ù","û","ü","ç");
$CarRemp = array("a","a","a","e","e","e","e","i","i","o","o","u","u","u","c");
$NewSubj = str_replace($CarRech,$CarRemp,$NewSubj);
$alphanum = array("(",")","a","b","c","d","e","f","g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v","w","x","y","z","0","1","2","3","4","5","6","7","8","9");
$Nbcarac = count($alphanum);
$NewPhrase = "";
for ($i=0;$i0) {
$i=0;
$NewSubj=ucfirst(strtolower($NewSubj));
WHILE(($Ress!=$i) && ($Existe_Sujet=='false')) {
$Sujet = mysql_result($Subj,$i,"NomSujet");
$Sujet = ucfirst(strtolower($Sujet));
if (!strcmp($NewSubj,$Sujet)) {
$Existe_Sujet='true';
}
$i=$i+1;
}
}
$user = $Nom;
$Usr = mysql_query("SELECT * FROM `Usr` WHERE `utilisateur` LIKE '$user' LIMIT 0,1");
$Res = mysql_num_rows($Usr);
// if($Res=='0')
// {
// echo "Utilisateur inconnu !";
// echo "
[ Retour ]";
// mysql_close();
// }
$i=0;
$enreg='false';
while($Res!=$i)
{
$Utilisateur = mysql_result($Usr,$i,"utilisateur");
$MDP = mysql_result($Usr,$i,"mdp");
$Adr_IP = mysql_result($Usr,$i,"Adr_IP");
$Adr_IP_Con = mysql_result($Usr,$i,"Adr_IP_Con");
if($Utilisateur==$user)
{
$enreg='true';
if($MDP==$pass)
{
$Date = date("d-m-Y");
$Heure = date("H:i");
$DateHeure = $Date." - ".$Heure;
if ($Adr_IP=="0.0.0.0") { $Adr_IP=$REMOTE_ADDR;}
$Req_1 = mysql_query("UPDATE `Usr` SET `Der_Date`='".$DateHeure."',`Adr_IP`='".$Adr_IP."',`Adr_IP_Con`='".$REMOTE_ADDR."' WHERE `utilisateur`='".$user."'");
$AddTable='false';
if ($Existe_Sujet=='false') {
$AddSubj = mysql_query("INSERT INTO `sujets` (`NomSujet`, `DateHeure`) VALUES ('$NewSubj', '$DateHeure')");
$AddTable = mysql_query("CREATE TABLE `$NewSubj` (`Nom` varchar(20) NOT NULL,`Email` varchar(40) NOT NULL,`Titre` varchar(40) NOT NULL,`Message` longtext NOT NULL,`Date` varchar(10) NOT NULL default '',`Heure` varchar(8) NOT NULL default '') TYPE=MyISAM;");
} else { $AddTable='true'; }
if($AddTable=='true')
{
$Date = date("d-m-Y");
$Heure = date("H:i");
$FinalAdd = mysql_query("INSERT INTO `$NewSubj` (`Nom`, `Email`, `Titre`, `Message`, `Date`, `Heure`) VALUES ('$Nom', '$Email', '$Titre', '$Message', '$Date', '$Heure')");
if($FinalAdd=='true')
{
//echo "";
//echo "Ajout effectué!
";
$RecupNbrMsg = mysql_query("SELECT * FROM `$NewSubj`");
$NbrMsg = mysql_num_rows($RecupNbrMsg)-1;
$start=0;
while ($NbrMsg>($start+15)) { $start+=15;}
$stop=$start+15;
echo "";
} else {
echo "Erreur à la création du sujet !
Liste des sujets de discussion";
echo "";
}
} else {
echo "Erreur à la création du sujet !
Liste des sujets de discussion";
echo "";
}
} else {
echo "Mot de passe incorrect !";
echo "
[ Retour ]";
$i=$Res-1;
}
}
$i=$i+1;
}
if($enreg=='false') {
echo "Utilisateur inconnu ! Respectez la différence MAJUSCULES/minuscules !";
echo "
[ Retour ]";
}
} else {
echo "Erreur à la création du sujet !
Liste des sujets de discussion";
echo "";
}
mysql_close();
}
//if(empty($action))
if($action=="")
{
echo "";
echo "\n";
echo "Problème, pas d'action spécifiée!
\n";
echo "
[ Retour ]";
echo "\n";
}
?>