ProjetPHP/newdata_processing.php at main · NotDemin/ProjetPHP · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
<?php
  require 'utils.inc.php';
  start_page('newdata_processing');
  $loginnewpassword = $_POST['loginchangepassword'];
  $newpassword1 = $_POST['nouveaumotdepasse1'];
  $newpassword2 = $_POST['nouveaumotdepasse2'];
  $currentpassword = $_POST['currentpassword'];
  session_start();

  $dbLink = mysqli_connect('mysql-e-eventio.alwaysdata.net', 'e-eventio_login', 'php123456$') or die('Erreur de connexion au serveur : ' . mysqli_connect_error());
  mysqli_select_db($dbLink , 'e-eventio_sql') or die('Erreur dans la sélection de la base : ' . mysqli_error($dbLink));
  $query = "SELECT * FROM users WHERE login =  '" . $loginnewpassword . "' AND passwd =  '" . $currentpassword . "'";

  if(!($dbResult = mysqli_query($dbLink, $query)))
     {
       echo 'Erreur de requête<br/>';
       echo 'Erreur : ' . mysqli_error($dbLink) . '<br/>';
       echo 'Requête : ' . $query . '<br/>';
      exit();
    }

  elseif($dbRow = mysqli_fetch_row($dbResult))
    {
      if($newpassword1 == $newpassword2){

        $newpassword = $newpassword1;

        $dbLink = mysqli_connect('mysql-e-eventio.alwaysdata.net', 'e-eventio_login', 'php123456$') or die('Erreur de connexion au serveur : ' . mysqli_connect_error());
        mysqli_select_db($dbLink , 'e-eventio_sql') or die('Erreur dans la sélection de la base : ' . mysqli_error($dbLink));

        $query2 = "SELECT * FROM users WHERE login =  '" . $loginnewpassword  . "'";

        if(!($dbResult = mysqli_query($dbLink, $query2)))
           {
             echo 'Erreur de requête<br/>';
             echo 'Erreur : ' . mysqli_error($dbLink) . '<br/>';
             echo 'Requête : ' . $query2 . '<br/>';
            exit();
          }
        elseif ($dbRow = mysqli_fetch_assoc($dbResult))
          {
            mysqli_select_db($dbLink , 'e-eventio_sql') or die('Erreur dans la sélection de la base : ' . mysqli_error($dbLink));
            $query3 = "UPDATE users SET passwd = '" . $newpassword . "' where login = '" . $loginnewpassword . "'";
            mysqli_query($dbLink, $query3);
            $_SESSION['errornewpassword'] = 'Mot de passe changé';
            header('Location: ChangePassword.php');


          }
        else
          {
            $_SESSION['errornewpassword'] = 'Mauvais login';
            header('Location: ChangePassword.php');
          }
      }
      else{

        $_SESSION['errornewpassword'] = 'Les mots de passe ne correspondent pas';
        header('Location: ChangePassword.php');

      }
    }
  else{
      $_SESSION['errornewpassword'] = 'Mauvais identifiant ou mot de passe';
      header('Location: ChangePassword.php');
  }


  end_page();

?>