0byt3m1n1
Path:
/
home
/
k
/
a
/
s
/
kassiope
/
www
/
[
Home
]
File: membre.php
<? $menu=5; include("configuration.inc.php"); $marqueur_erreur = ''; /* Le formulaire a été soumis, vérification des paramètres de connexion */ if (sizeof($_POST) > 0 && isset($_POST['connexion'])) { $message_erreur1 = ""; if (empty($_POST['email'])) { $message_erreur1 .= stripslashes(ERR_EMAIL_VIDE); } elseif (!@preg_match("/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,10})$/",$_POST['email'])) {//si y'a un email on teste l'email $message_erreur1 .= stripslashes(ERR_EMAIL_BAD); } $utilisateur = verifier_authentification(trim(addslashes(strtolower($_POST['email']))), $_POST['mot_passe']); if ($utilisateur) { $_SESSION['utilisateur'] = $utilisateur; $sqlProfil = "SELECT id FROM gaia_profil WHERE priv = '".$_SESSION['utilisateur']['priv']."'"; $resProfil = mysql_query_override($sqlProfil) or DIE('Une erreur de connexion à la base s est produite ' . __LINE__ . '.<p>' . MYSQL_ERROR()); $Profil = mysql_fetch_object_override($resProfil); $profilId = $Profil->id; $lngTab = array(); $sqlLng = "SELECT lang FROM gaia_langues WHERE etat = '1' GROUP BY lang ORDER BY position"; $resLng = mysql_query_override($sqlLng); if (mysql_num_rows_override($resLng) > 0) { while ( $lng = mysql_fetch_array_override($resLng)) { array_push($lngTab, $lng['lang']); } } $_SESSION['utilisateur']['paiement'] = array(); $getpaiement = mysql_query_override("select * from gaia_utilisateurs_paiements where id_utilisateur = '".$_SESSION['utilisateur']['id_utilisateur']."'"); if(mysql_num_rows_override($getpaiement)>0) { while($d = mysql_fetch_array_override($getpaiement)) { $_SESSION['utilisateur']['paiement'][] = $d['id_paiement']; } } //Récupération de la remise groupe if($_SESSION['utilisateur']['remise_percent'] == 0 && $_SESSION['utilisateur']['groupe'] > 0) { $getremise = mysql_query_override("select * from gaia_groupes where id = '" . $_SESSION['utilisateur']['groupe'] . "'"); if (mysql_num_rows_override($getremise) > 0) { $d = mysql_fetch_array_override($getremise); $_SESSION['utilisateur']['remise_percent'] = $d['remise']; } } $_SESSION['lng'] = $lngTab; $_SESSION['ip'] = $_SERVER['REMOTE_ADDR']; $_SESSION['url'] = $_SERVER['HTTP_HOST']; $_SESSION['caddie']->nettoie(); $_SESSION['caddie']->recalc_total(); if (empty($_SESSION['wantsurl'])) { if ($_SESSION['caddie']->compte_elements() > 0) { $goto = "/achat/caddie_affichage.php"; } else { $goto = "mon-compte.html"; } } else { $goto = "/index.php"; } header("Location: ".$wwwroot.$goto); die; } else { $frm['email'] = $_POST['email']; $message_erreur1 = TRY_AGAIN; } } if (sizeof($_POST) > 0 && isset($_POST['inscription'])) { $frm = $_POST; $message_erreur = valide_form($frm, $erreurs); if (empty($message_erreur)) { insere_utilisateur($frm); if ($_SESSION['caddie']->compte_elements() > 0) { /* if (empty($_SESSION['caddie']->zone) || empty($_SESSION['caddie']->type)) { header("Location:$wwwroot/achat/caddie_affichage.php"); } else { header("Location:$wwwroot/achat/achat_maintenant.php"); } */ header("Location:$wwwroot/achat/caddie_affichage.php"); } else { include($repertoire_modele."/haut.php"); echo '<h1>'.(REGISTER).'</h1>'; afficher_enregistrement_succes(); include($repertoire_modele."/bas.php"); } die; } } include("$repertoire_modele/haut.php"); ?> <?=header_page(COMPTE); ?> <?php $st = get_static(5); if(!empty($st['description_'.$lg.''])) echo '<div class="row"><div class="col-12">'.$st['description_'.$lg.''].'</div></div>'; ?> <div class="row"> <div class="col-md-6 col-xs-12"> <br /> <br /> <b><?echo STILL_CUSTOMER ?> ?</b><br /> <? echo nl2br(MSG_STILL_CUSTOMER) ?> <br /> <br /> <b><?echo NEW_CUSTOMER ?> ?</b><br /> <? echo nl2br(MSG_NEW_CUSTOMER) ?> <br /> <!-- <br /> <b><?echo NEW_CUSTOMER_PRO ?> ?</b><br /> <? echo nl2br(MSG_NEW_CUSTOMER_PRO) ?> --> </div> <div class="col-md-6 col-xs-12"> <? if (! empty($message_erreur1)) { echo '<div class="alert alert-danger">'.$message_erreur1.'</div>'; } ?> <div class="customer-login my-account"> <form method="post" class="login"> <div class="form-fields form-group mb-0"> <p class="form-row form-row-wide mb-3"> <label for="mail"><?echo EMAIL?> <span class="required">*</span></label> <input type="text" class="form-control" name="email" id="mail" value=""> </p> <p class="form-row form-row-wide"> <label for="mot_passe"><?echo PASSWORD?> <span class="required">*</span></label> <input class="form-control" type="password" name="mot_passe" id="mot_passe"> </p> </div> <div class="form-action"> <p class="lost_password"> <a href="<?=$wwwroot?>oubli-mot-passe.html"><?=OUBLIPASS?></a></p> <div class="text-end actions-log"> <input type="submit" class="button" name="connexion" value="<?=LOGIN?>"> </div> </div> </form> </div> </div> </div> <?=footer_page(); ?> <? include("$repertoire_modele/bas.php"); /****************************************************************************** * FONCTIONS *****************************************************************************/ function valide_form(&$frm, &$erreurs) { /* Valide le formulaire d'inscription et renvoie éventuellement un message d'erreur */ $erreurs = array(); $msg = array(); if (empty($frm['mot_passe'])) { $erreurs['mot_passe'] = true; $msg['mot_passe'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_PASSWORD).'</div>'; } if (empty($frm['prenom'])) { $erreurs['prenom'] = true; $msg['prenom'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_FIRSTNAME).'</div>'; } if (empty($frm['nom_famille'])) { $erreurs['nom_famille'] = true; $msg['nom_famille'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_NAME).'</div>'; } if (empty($frm['email'])) { $erreurs['email'] = true; $msg['email'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_EMAIL).'</div>'; } elseif (!preg_match('`^[[:alnum:]]([-_.]?[[:alnum:]])*@[[:alnum:]]([-_.]?[[:alnum:]])*.([a-z]{2,4})$`',$frm['email'])) { $erreurs['email'] = true; $msg['email'] = '<div class="littlewarning">'.stripslashes(ERR_EMAIL_BAD).'</div>'; } elseif ((mysql_num_rows_override(mysql_query_override("SELECT 1 FROM gaia_utilisateurs WHERE email = '".$frm['email']."'")) > 0) ) { $erreurs['email'] = true; $msg['email'] = '<div class="littlewarning">'.stripslashes(ERR_EMAIL_STILL).'</div>'; } if (empty($frm['telephone'])) { $erreurs['telephone'] = true; $msg['telephone'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_TEL).'</div>'; } if (empty($frm['adresse'])) { $erreurs['adresse'] = true; $msg['adresse'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_ADDRESS).'</div>'; } if (empty($frm['code_postal'])) { $erreurs['code_postal'] = true; $msg['code_postal'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_ZIP).'</div>'; } if (empty($frm['ville'])) { $erreurs['ville'] = true; $msg['ville'] = '<div class="littlewarning">'.stripslashes(MSG_ERR_TOWN).'</div>'; } return $msg; } function insere_utilisateur(&$frm) { global $support; $mot_passe_bak = trim(addslashes($_POST['mot_passe'])); $mot_passe = md5($frm['mot_passe']); $newsletter = valide($frm['newsletter']); $commercial = valide($frm['commercial']); $naissance = preg_replace('/(\d{2,4})-(\d{1,2})-(\d{1,2})/' , "\\3/\\2/\\1" ,$frm['naissance']); $sql = " INSERT INTO gaia_utilisateurs ( email , mot_passe , priv , civilite , prenom , nom_famille , naissance , telephone , portable , adresse , code_postal , ville , pays , newsletter , commercial , format , date_insert , date_update ) VALUES ( '".$frm['email']."' ,'$mot_passe' ,'util' ,'".vb($frm['civilite'])."' ,'".strtoupper(addslashes($frm['prenom']))."' ,'".strtoupper(addslashes($frm['nom_famille']))."' ,'$naissance' ,'".$frm['telephone']."' ,'".$frm['portable']."' ,'".addslashes($frm['adresse'])."' ,'".$frm['code_postal']."' ,'".addslashes($frm['ville'])."' ,'".addslashes($frm['pays'])."' ,'".intval($frm['newsletter'])."' ,'".intval($frm['commercial'])."' ,'".$frm['format']."' , now() , now() )"; /* Ajoute le nouvel utilisateur à la base */ $qid = mysql_query_override($sql) or DIE('Une erreur de connexion à la base s est produite ' . __LINE__ . '.<p>' . MYSQL_ERROR()); $clientid = mysql_insert_id_override(); if (intval($frm['newsletter'])==1) { mysql_query_override ("insert into gaia_newsletter_abo (email) values('".$frm['email']."')"); } else mysql_query_override ("delete from gaia_newsletter_abo where email = '".$frm['email']."'"); $d = @date("Y"); $code_client = "CLT".$d.$clientid; mysql_query_override("UPDATE gaia_utilisateurs SET code_client = '".$code_client."' WHERE id_utilisateur = '".$clientid."'"); # Envoi du mot de passe par mail $mailSujet = SUBJECT_ACCOUNT_EMAIL." : ". $mailObjet = OBJECT_ACCOUNT_EMAIL; $mailObjet .= IDENTIFIANT_EMAIL." : ".$frm['email']; $mailObjet .= IDENTIFIANT_PASSWORD." : ".$frm['mot_passe']; $mailObjet .= IDENTIFIANT_CLIENT." : ".$code_client; mail_confirm($frm['email'],$mailSujet,$mailObjet,"From:$support"); $utilisateur = verifier_authentification(trim(addslashes(strtolower($frm['email']))), $frm['mot_passe']); if ($utilisateur) { $_SESSION['utilisateur'] = $utilisateur; $sqlProfil = "SELECT id FROM gaia_profil WHERE priv = '".$_SESSION['utilisateur']['priv']."'"; $resProfil = mysql_query_override($sqlProfil) or DIE('Une erreur de connexion à la base s est produite ' . __LINE__ . '.<p>' . MYSQL_ERROR()); $Profil = mysql_fetch_object_override($resProfil); $profilId = $Profil->id; $_SESSION['utilisateur']['paiement'] = array(); $getpaiement = mysql_query_override("select * from gaia_utilisateurs_paiements where id_utilisateur = '".$_SESSION['utilisateur']['id_utilisateur']."'"); if(mysql_num_rows_override($getpaiement)>0) { while($d = mysql_fetch_array_override($getpaiement)) { $_SESSION['utilisateur']['paiement'][] = $d['id_paiement']; } } $_SESSION["ip"] = $_SERVER['REMOTE_ADDR']; $_SESSION["url"] = $_SERVER['HTTP_HOST']; } } ?>