<?php

// On appelle Mysql.php.

require_once('./Config/Mysql.php');

// On se connecte à Mysql grâce à l'apelle.

    $Mysql = mysql_connect($Ip, $Utilisateur, $MotDePasse);
    mysql_select_db($DBAccount, $Mysql);
	
// On prépare les données

    $sLogin    = mysql_real_escape_string($_POST['login']);
    $sPassword = mysql_real_escape_string($_POST['pass']);
   
    $sQuery = "SELECT * FROM `account` WHERE `login` = '" . $sLogin . "' AND PASSWORD(`password`) = '" . $sPassword . "' LIMIT 1;";
    $oQuery = mysql_query($sQuery) or die('Erreur SQL !<br>'.$Mysql.'<br>'.mysql_error());
   
    if (mysql_num_rows($oQuery) == 1) {
		
		session_start();
                 $_SESSION['login'] = $sLogin;
echo 'OK';
    }
    else {
		
echo 'NON';

}
mysql_close();
?>

$sQuery = "SELECT * FROM `account` WHERE `login` = '" . $sLogin . "' AND PASSWORD(`password`) = '" . $sPassword . "' LIMIT 1;";

<?php
    $sLogin    = mysql_real_escape_string($_POST['login']);
    $sPassword = mysql_real_escape_string($_POST['password']);
    
    $sQuery = "SELECT * FROM `account` WHERE `login` = '" . $sLogin . "' AND `password` = '" . $sPassword . "' LIMIT 1;";
    $oQuery = mysql_query($sQuery) or die('Erreur SQL !<br>'.$sql.'<br>'.mysql_error());
    
    if (mysql_num_rows($oQuery) == 1) {
        // OK, ce compte existe et le mot de passe est correct.
    }
    else {
        // Oups, ce compte n'existe pas ou le mot de passe est incorrect.
    }
?>

<?php 
include('Ouverall.php');
include('Motd.php');
include('Menu_Gauche.php');
?>
<div id="right"><div class="bloc2"><div class="tng">... Connexion ...</div><div class="texte">
<br><center>
<form action="Connexion_Valide.php" method='post'>


<b>Nom du Compte <span style="color:red"><strong>*</strong></span></b><br>
<INPUT type="text" name="login"><br><br>
<b>Mot de passe <span style="color:red"><strong>*</strong></span></b><br>
<INPUT type="password" name="password"><br><br>


<td colspan="2" align="center"><input type="submit" value="Connexion"></td>
</form> 		
</center>


</div></div></div><div class="clear"></div>
<?php
include('Footer.php');
?>

<?php 
include('Ouverall.php');
include('Motd.php');
include('Menu_Gauche.php');
?>
<div id="right"><div class="bloc2"><div class="tng">... Connexion ...</div><div class="texte">

<?php
require_once('./Config/Mysql.php');

    mysql_connect($Ip, $Utilisateur, $MotDePasse);
    mysql_select_db($DBAccount);

if(isset($_POST) && !empty($_POST['login']) && !empty($_POST['password'])) {
  extract($_POST);
  $sql = "select password,login from account where login='".$login."'";
  $req = mysql_query($sql) or die('Erreur SQL !<br>'.$sql.'<br>'.mysql_error());
  $data = mysql_fetch_assoc($req);
  if($data['password'] != $password) {
                echo '<br><div align="center"><span style="color:red"><strong>Une erreur est surevenue.<br />Votre nom d\'utilisateur ou votre mot de passe est incorrecte.<br>Redirection dans 3 secondes.</strong></span></div>';
    header('Refresh: 3; Connexion.php');
  }
  else {
    session_start();
    $_SESSION['login'] = $login;
                echo '<br><div align="center"><span style="color:green"><strong>Vous êtes à présent connecté.<br>Redirection dans 3 secondes.</strong></span></div>';
	    header('Refresh: 3; Account.php');
  }   
}
else {
                echo '<br><div align="center"><span style="color:red"><strong>Une erreur est surevenue.<br />Des informations sont manquantes.<br>Redirection dans 3 secondes.</strong></span></div>';
    header('Refresh: 3; Connexion.php');
}
mysql_close();
?>

</div>
</div></div><div class="clear"></div>
<?php
include('Footer.php');
?>