[Summary view] [Print] [Text view]

   1  <?php
   2  session_start();
   3  $session_sent= "Il était une fois";
   4  function at_participe($id_adh) {
   5    $tab=array();
   6    $requete="SELECT id_atelier FROM participe WHERE id_adh=".$id_adh;
   7    $recherche=mysql_query($requete);
   8    if (mysql_num_rows($recherche)) {
   9      while ($atelier=mysql_fetch_row($recherche)) {
  10        $ind="a".$atelier[0];
  11        $tab[$ind]="";
  12      }
  13    }
  14    return $tab;
  15  }
  16  if (isset($_POST['ident'])) {
  17      include_once  '../inclus/connect_bd.inc.php';
  18      
  19      $repAct= $_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF']);
  20      $header_erreur= "Location: http://$repAct/../Pages/index.php";
  21      $_SESSION["nom"]=$_SESSION["prenom"]= "";
  22      $an_adh = date("n")<9 ? date("Y")-1 : date("Y");
  23      $date_deb = $an_adh."-09-01";
  24  
  25      if (get_magic_quotes_gpc() == 0)
  26      foreach ($_POST as $i=>$n)
  27        if (is_string($n))$_POST[$i]= addslashes($n);
  28      $requete="select id_perso from utilisateur where login='".$_POST['ident']."'";
  29      $recherche=mysql_query($requete);
  30      if (($utilisateur=mysql_fetch_assoc($recherche)) === false)
  31        header($header_erreur);
  32      $requete="select fonction, id_perso from utilisateur
  33          where id_perso='".$utilisateur['id_perso']."' and mdp=SHA1('".$_POST['mdp']."')";
  34      $recherche=mysql_query($requete);
  35      if ($utilisateur=mysql_fetch_assoc($recherche)) {
  36         $_SESSION["fonction"]= $utilisateur['fonction'];
  37         if ($utilisateur['id_perso']) {
  38             $id_perso=$_SESSION["id_perso"]= $utilisateur['id_perso'];
  39             $requete="select id, nom, prenom, role from personne
  40              where id='".$utilisateur['id_perso']."'";
  41              $recherche=mysql_query($requete);
  42              if ($personne=mysql_fetch_assoc($recherche)) {
  43                  if (!isset ($_SESSION["adherent"]) || $_SESSION["adherent"] != $session_sent)
  44                    exit("Les cookies de sessions doivent être autorisés");
  45                  unset($_SESSION["adherent"]);
  46                  $_SESSION["nom"]=$personne["nom"];
  47                  $_SESSION["prenom"]=$personne["prenom"];
  48                  $_SESSION["role"]=$personne["role"];
  49                 // adhesion 
  50                  $requete="select id from adhesion where id_perso='".$personne['id']."' AND date_adhesion>'$date_deb'";
  51                  $recherche=mysql_query($requete);
  52                  if ($adherent=mysql_fetch_assoc($recherche))
  53                      $_SESSION["adherent"]=$adherent["id"];
  54                  // participants
  55                  $tab=at_participe($adherent["id"]);
  56                  if (count($tab)>0) $_SESSION["ateliers"]=$tab;
  57                  // parents
  58                  $tabat=array();
  59                  $requete="SELECT adhesion.id as id_adh FROM personne, adhesion 
  60                      WHERE (id_pere='$id_perso' OR id_mere='$id_perso') AND (adhesion.id_perso=personne.id AND date_adhesion>'$date_deb')";
  61                  $recherche=mysql_query($requete);
  62                  while ($enfant=mysql_fetch_assoc($recherche)) {
  63                    $tab=at_participe($enfant["id_adh"]);
  64                    $tabat=  array_merge($tabat, $tab);
  65                  }
  66                  if (count($tabat)>0) $_SESSION["at_enfant"]=$tabat;
  67                  // animateur
  68                  $requete="select id from animateur
  69                  where id_perso='".$personne['id']."'";
  70                  $recherche=mysql_query($requete);
  71                  if ($animateur=mysql_fetch_assoc($recherche))
  72                      $_SESSION["animateur"]=$animateur["id"];
  73                  // parent adhérent
  74                  $requete="SELECT id FROM personne WHERE id_pere='".$personne['id']."' OR id_mere='".$personne['id']."'";
  75                  $recherche=mysql_query($requete);
  76                  while (($enfant=  mysql_fetch_assoc($recherche))) {
  77                    $reqenf="SElECT id FROM adhesion WHERE id_perso='".$enfant['id']."' AND date_adhesion>'$date_deb'";
  78                    $rechenf=mysql_query($reqenf);
  79                    if (mysql_fetch_row($rechenf)) {
  80                        $_SESSION["parent_adherent"]= $enfant['id'];
  81                        break;
  82                    }
  83                    mysql_free_result($rechenf);
  84                  }
  85                  // relais parent
  86                  $requete="select id from relais_parent
  87                  where id_perso='".$personne['id']."'";
  88                  $recherche=mysql_query($requete);
  89                  if ($relais_parent=mysql_fetch_assoc($recherche))
  90                      $_SESSION["relais_parent"]=$relais_parent["id"];
  91               }
  92           }
  93        header("Location: http://$repAct/OK.php");
  94      }
  95      else {
  96          header($header_erreur);
  97      }
  98      exit();
  99  }
 100  /////// FORMULAIRE
 101  foreach($_SESSION as $k=>$v)
 102          unset($_SESSION[$k]);
 103  $_SESSION["adherent"]= $session_sent;
 104  ?>
 105  <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 106  "http://www.w3.org/TR/html4/loose.dtd">
 107  <html>
 108    <head>
 109      <meta name="generator" content="HTML Tidy for Windows (vers 12 April 2005), see www.w3.org">
 110      <meta content="text/html; charset=ISO-8859-1" http-equiv="content-type">
 111      <title>
 112        Connexion
 113      </title>
 114    </head>
 115    <body>
 116      <form style="visibility:hidden" method="post" action="connexion.php" name="acces" id="acces">
 117        Identifiant : <input name="ident"><br>
 118        Mot de passe : <input name="mdp" type="password"><br>
 119        <br>
 120        <input  name="valide" id="valide" type="submit" value="Envoyer">
 121      </form>
 122      <p style="visibility:visible; color:red; font-size: 20pt" id="noscript">Pour utiliser ces fonctions le Javascript doit être activé</p>
 123      <script language="JavaScript" type="text/JavaScript">
 124        <!--
 125        document.getElementById("noscript").style.visibility= "hidden";
 126        document.getElementById("acces").style.visibility= "visible";
 127        //-->
 128      </script>
 129    </body>
 130  </html>