Inscription/base de donné
Posté : 07 déc. 2013, 22:21
J'ai besoin d'aide pour modifier un formulaire de connection d'un launcheur, voici mon formulaire d'inscription de mon site (si possible ne pas modifier)
<?php include('include/header.php'); ?>
<div id="contenu">
<div class="news">
<?php
if(isset($_POST['submit']))
{
include("include/config.php");
$db = mysql_connect($dbhost,$dbuser,$dbpass);
mysql_select_db($dbname,$db);
$pseudo = strip_tags(mysql_real_escape_string(stripslashes($pseudo = ($_POST['pseudo']))));
$pass = strip_tags(mysql_real_escape_string(stripslashes($pass = ($_POST['pass']))));
$mail = strip_tags(mysql_real_escape_string(stripslashes($mail = ($_POST['mail']))));
$sql = 'SELECT count(*) FROM users WHERE pseudo="'.$pseudo.'"';
$req = mysql_query($sql) or die('Erreur SQL !<br />'.$sql.'<br />'.mysql_error());
$data = mysql_fetch_array($req);
if ($data[0] == 0) {
$pass = md5($pass);
$sql = "INSERT INTO users VALUES('','$pseudo','$pass','$mail','0','steve','0')";
mysql_query($sql)
or die('Erreur SQL !'.$sql.'
'.mysql_error());
echo"Inscription validée ! Merci !";
echo'
<script type="text/javascript">
setTimeout("parent.document.location.href = index.php ;",2000);
</script> ';
}else echo"Erreur, un membre du meme pseudo existe deja";
mysql_close();
}else {
?>
<h1> Inscription au site <?php include("include/config.php");
$db = mysql_connect($dbhost,$dbuser,$dbpass);
mysql_select_db($dbname,$db);
$sql = ("SELECT * FROM config ORDER BY id DESC LIMIT 0,1");
$req = mysql_query($sql) or die('Erreur SQL ! Avez vous fait l installation ?
'.$sql.'
'.mysql_error());
while($data = mysql_fetch_array($req))
{ echo $data['nom'];} ?></h1>
<form method="post" action="/inscription.php" name="submit" >
<p>Pseudo Minecraft</p><input type="text" name="pseudo";> </input>
<p>Mot de passe</p><input type="password" name="pass";> </input>
<p>E-mail</p><input type="text" name="mail";> </input>
<br><input type="submit" value="Valider" name="submit">
</form>
<?php } ?>
</div>
<?php include('include/sidebar.php'); ?>
<?php include('include/footer.php'); ?><?php
if(!isset($_POST['pseudo']) OR !isset($_POST['password1']) OR !isset($_POST['password2']))
{
// SI un des champs n'est pas rempli...
}
else
{
if($_POST['password1'] === $_POST['password2'])
{
$username = $_POST['pseudo'];
$password = sha1($_POST['password1']);
// Base de données
try
{
$bdd = new PDO('mysql:host=localhost;dbname=launcher;charset=UTF-8', 'root', '');
$sql = 'INSERT INTO auth(username, password) VALUES (:username, :password)';
$req= $bdd->prepare($sql);
$req->execute(array(
'username' => $username,
'password' => $password
)
);
$data = $req->fetch();
}
catch(Exception $e)
{
echo 'Erreur dans la base de données.';
}
}
else
{
$message = 'Les champs "Pseudo" et "Mot de passe" doivent être remplis.';
}
}
?>
<html>
<head>
<meta charset="UTF-8" />
<title>Inscription</title>
</head>
<body>
<form method="post" action="inscription.php">
<fieldset>
<input type="text" name="pseudo" placeholder="Pseudo" /><br />
<input type="password" name="password1" placeholder="Mot de passe" /><br />
<input type="password" name="password2" placeholder="Mot de passe" /><br />
<input type="submit" value="Envoyer" />
</fieldset>
</form>
</body>
</html><?php
$username = isset($_POST['username']) ? $_POST['username'] : "";
$password = isset($_POST['password']) ? $_POST['password'] : "";
$session = sha1(md5($username . 'legitimfight' . rand()) . rand());
$result = "";
try
{
$bdd = new PDO('mysql:host=localhost;dbname=launcher;charset=UTF-8', 'root', '');
$sql = 'SELECT username FROM auth WHERE username = :username AND password = :password';
$req = $bdd->prepare($sql);
$req->execute(array(
'username' => $username,
'password' => $password
)
);
$data = $req->fetch();
}
catch(Exception $e)
{
echo 'Erreur de la base de données.';
}
if(empty($data))
{
echo 'Identifiants incorrects !';
}
else
{
$result = '1.5.2:' . $username . ':' . $session . ':' . $session;
echo $result;
}
?>
. A la limite utilise uniqid() au besoin mais session_id() est suffisant si tu as besoin de quelque chose d'unique (sinon l'id en base de l'utilisateur est lui aussi unique).