Je veux savoir si mon domaine d'identification est securise, et pourquoi il n'affiche pas le message "bienvenue $pseudo" il affiche seulement "bienvenue".
<?php
/*
in varchar(20) NOT NULL, // temps de connexion (A)
out varchar(20) NOT NULL, // temps de deconnexion (B)
session varchar(20) NOT NULL, // B-A temps passe en une connexion
*/
include ("include_files/config.php");
isset($_POST['date']) ? $date=$_POST['date']:$date='';
isset($_POST['hour']) ? $hour=addslashes(trim($_POST['hour'])):$hour='';
isset($_POST['pseudo']) ? $pseudo=strtolower(addslashes(trim($_POST['pseudo']))):$pseudo='زائر';
isset($_POST['passwd']) ? $passwd=addslashes(trim($_POST['passwd'])):$passwd='';
if ($pseudo == ''){
echo $ErrorPseudo1;
echo $ErrorReturn;
}
elseif ($passwd == ''){
echo $ErrorPassword1;
echo $ErrorReturn;
}
elseif (strlen($pseudo)<5){
echo $ErrorPseudo2;
echo $ErrorReturn;
}
elseif (strlen($passwd)<5){
echo $ErrorPassword2;
echo $ErrorReturn;
}
elseif (strrpos($pseudo,' ') > 0){
echo $ErrorPseudo3;
echo $ErrorReturn;
}
elseif (strrpos($passwd,' ') > 0){
echo $ErrorPassword3;
echo $ErrorReturn;
}
elseif(!eregi("^[a-z]+$", $pseudo)){
echo $ErrorPseudo4;
echo $ErrorReturn;
}
/*
elseif (strspn($pseudo,"abcdefghijklmnopqrstuvwxyz0123456789") < 4) {
echo $ErrorPseudo5;
echo $ErrorReturn;
}
*/
elseif(!eregi("^[a-zA-Z0-9]+$", $passwd)){
echo $ErrorPassword4;
echo $ErrorReturn;
}
else
{
$connection = mysql_connect("$dbhost", "$dblogin", "$dbpassword") or die ($ErrorConnection);
$db = mysql_select_db($db_name, $connection) or die($ErrorDBase);
$sql = "SELECT pseudo FROM $Idara_table WHERE passwd = '". $passwd ."'";
$result = mysql_query($sql,$connection) or die ($ErrorSelect);
$num = mysql_num_rows($result);
if ($num =='1')
{
$pseudo = $_SESSION['pseudo'];
echo 'Bienvenue' .$pseudo;
?>
<a href="page2.php">page2</a>
<?
echo 'vous pouvez se deconnecter [<a href="index.php?rub=Deconnexion" name="logout">ici</a>]';
}
}
else
{
echo 'desole<br/>';
include ('login_form.php');
mysql_free_result($result);
mysql_close($result);
}
?>
