<?php

//  require ("../lib/session.php");
//  include("../lib/functions.php");
require_once '../inc/main.php';
identification1("salaries", $login, $pass, FALSE);
securce($id_user, $id_type);
//  include("functions.php");
//  include("functions.js");
if ($archiver == 'archiver') {
    /* Recuperation du numéro d'article et si c coche ou non */
    $req = "select * from archivece where numserce='{$numser}'";
    $result = DatabaseOperation::query($req);
    $num = mysql_num_rows($result);
    if ($num != 0) {
        $i = 0;
        while ($i < $num) {
            $numart = mysql_result($result, $i, numartce);
            $toto = "numart";
            $text = ${$toto};
            $numartce = ${$text};
            if ($numart == $numartce) {
                /* Recopie de l'enregistrement dans ARTICLECE */
                $imgce = mysql_result($result, $i, imgce);
                $titrece = mysql_result($result, $i, titrece);
                $txtce = mysql_result($result, $i, txtce);
                $placeinfoce = mysql_result($result, $i, placeinfoce);
                $datecrea = mysql_result($result, $i, datecrea);
                $id_userce = mysql_result($result, $i, id_userce);
                $req2 = "insert into articlece (numartce, imgce, titrece, txtce,\n          placeinfoce, datecrea, id_userce, numserce)\n          values ('{$numart}', '{$imgce}', '{$titrece}', '{$txtce}', '{$placeinfoce}',\n          '{$datecrea}', '{$id_userce}', '{$numser}')";
                $result2 = DatabaseOperation::query($req2);
Exemple #2
0
  . '(pass = PASSWORD('$pass')) AND '
  . '(blocage='non') AND '
  . '(actif='oui') '
  . ')'
  ;
  $q1 = DatabaseOperation::query($req_authentification);
  $nb1 = mysql_numrows($q1);
 */
 $remplacements = array("OR" => "", "SELECT" => "", "'" => "", '"' => "");
 $login = strtr($login, $remplacements);
 if (!$pass) {
     $titre = "Accès aux modules de l'Intranet";
     $message = "Veuillez saisir votre mot de passe.<br><br>";
     Lib::showMessage($titre, $message, $redirection);
 }
 if (!identification1($mysql_table_authentification, $login, $pass, TRUE)) {
     if ($identite == $login) {
         $tentative++;
         if ($tentative >= 3) {
             /**
              * On verifie si l'identifiant utiliser existe dans la base de données
              */
             $uniqueCheck = DatabaseOperation::convertSqlStatementWithoutKeyToArray('SELECT id_user FROM salaries WHERE login=\'' . $login . '\'');
             $reponseCheck = count($uniqueCheck);
             if ($reponseCheck == 1) {
                 //                    $unique = DatabaseOperation::convertSqlStatementWithoutKeyToArray(
                 //                                    'SELECT id_user FROM salaries WHERE login=\'' . $identite . '\' AND blocage=\'oui\''
                 //                    );
                 //                    $reponse = count($unique);
                 $reponse = 0;
                 if ($reponse != 1) {
//  include('../lib/functions.php');
require_once '../inc/main.php';
$html_table = 'table ' . 'border=1 ' . 'width=100% ' . 'class=loginFFFFFFdroit ';
/*
 Fin de préparation Agis
*/
$globalConfig = new GlobalConfig();
$login = $globalConfig->getAuthenticatedUser()->getKeyValue();
$pass = $globalConfig->getAuthenticatedUser()->getDataField(UserModel::FIELDNAME_PASSWORD)->getFieldValue();
$id_type = $globalConfig->getAuthenticatedUser()->getDataField(UserModel::FIELDNAME_ID_TYPE)->getFieldValue();
$paramIdUser = Lib::getParameterFromRequest('sal_user');
$paramRech = Lib::getParameterFromRequest('rech');
$userModel = new UserModel($paramIdUser);
$userView = new UserView($userModel);
$userView->setIsEditable(TRUE);
identification1('salaries', $login, $pass, FALSE);
if ($paramRech == '1') {
    /* Recherche des infos sur le salarie */
    $arrayUserDetail = DatabaseOperation::convertSqlStatementWithoutKeyToArray('SELECT ' . UserModel::FIELDNAME_NOM . ',' . UserModel::FIELDNAME_PRENOM . ',' . UserModel::FIELDNAME_ID_CATSOPRO . ',' . UserModel::FIELDNAME_LIEU_GEO . ',' . UserModel::FIELDNAME_LOGIN . ',' . UserModel::FIELDNAME_PASSWORD . ',' . UserModel::FIELDNAME_MAIL . ',' . UserModel::FIELDNAME_DATE_CREATION_SALARIES . ' FROM ' . UserModel::TABLENAME . ' WHERE ' . UserModel::KEYNAME . '=' . $paramIdUser);
    if (!$arrayUserDetail) {
        $titre = "Utilisateur inexistant";
        $message = "La requete de recherche de l'ID salarie a echoue";
        Lib::showMessage($titre, $message);
    } else {
        foreach ($arrayUserDetail as $rowsUserDetail) {
            $userNom = $rowsUserDetail[UserModel::FIELDNAME_NOM];
            $userPrenom = $rowsUserDetail[UserModel::FIELDNAME_PRENOM];
            $userCatsopro = $rowsUserDetail[UserModel::FIELDNAME_ID_CATSOPRO];
            $userLieuGeo = $rowsUserDetail[UserModel::FIELDNAME_LIEU_GEO];
            $userLogin = $rowsUserDetail[UserModel::FIELDNAME_LOGIN];
            $userPass = $rowsUserDetail[UserModel::FIELDNAME_PASSWORD];
<?php

require "../lib/session.php";
include "../lib/functions.php";
identification1("salaries", $login, $pass);
include "functions.php";
include "functions.js";
// Validation des changements de la page
// Voir pour suppression d'un article
// Voir pour mettre bon pour archive (archive=oui)
if ($valider == 'valider') {
    // Pour chaque article de l'auteur, traitement
    $req = "select num_article from articles where auteur='{$id_user}'";
    $result = DatabaseOperation::query($req);
    $num = mysql_num_rows($result);
    if ($num != 0) {
        $i = 0;
        while ($i < $num) {
            $num_article = mysql_result($result, $i, num_article);
            // Recuperation du numéro d'article et si c coche ou non
            $toto = "num_article";
            $text = ${$toto};
            $toto = $text . "supp";
            $tata = $text . "arch";
            $supp = ${$toto};
            $arch = ${$tata};
            if ($supp == 'supp') {
                // suppression de l'article
                $req2 = "delete from articles where num_article='{$num_article}'";
                $result2 = DatabaseOperation::query($req2);
            }
//  include ('../lib/session.php');
//  include('../lib/functions.php');
require_once '../inc/main.php';
$html_table = 'table ' . 'border=1 ' . 'width=100% ' . 'class=loginFFFFFFdroit ';
/*
 Fin de préparation Agis
*/
$globalConfig = new GlobalConfig();
$idUser = $globalConfig->getAuthenticatedUser()->getKeyValue();
$pass = $globalConfig->getAuthenticatedUser()->getDataField(UserModel::FIELDNAME_PASSWORD)->getFieldValue();
$id_type = $globalConfig->getAuthenticatedUser()->getDataField(UserModel::FIELDNAME_ID_TYPE)->getFieldValue();
$modifier = Lib::getParameterFromRequest('modifier');
$userModel = new UserModel($idUser);
$userView = new UserView($userModel);
$userView->setIsEditable(TRUE);
identification1('salaries', $idUser, $pass, FALSE);
//  include('functions.php');
//  include('functions.js');
//if ($erreur == 'oui') {
//    echo ('<script language=\'JavaScript\'>\n');
//    echo ('alert(\'Ce salarié existe déjà\')');
//    echo ('</script>\n');
//}
//if ($erreur == 'pass') {
//    echo ('<script language=\'JavaScript\'>\n');
//    echo ('alert(\'Erreur de mot de passe\')');
//    echo ('</script>\n');
//}
/*
 *  Gestion des updates dans la table MODES
 */