MOTEUR DE NEWS SIMPLE

<?php
include ("config.inc.php");
$connect = mysql_connect($host, $user, $password);
mysql_select_db('test');
print ("<a href=news.php?action=look>Voir les news</a>
		<br><a href=news.php?action=admin&pass=password>Ajouter une news</a>
		<br><a href=news.php?action=delete&pass=password>Supprimer une news</a>
		<br><a href=news.php>Retour index</a>

");
if ($_GET['action']=="look")
	{	
	$sql = mysql_query("SELECT * FROM tbl_news ORDER BY id DESC LIMIT 0,5");
	$num = mysql_num_rows($sql);
	$i = 0;
	print ("<table border=1>");
		while ($i < $num)
			{
			$date =  mysql_result($sql, $i, "date");
			$titre = mysql_result($sql, $i, "titre");
			$texte = mysql_result($sql, $i, "texte");
			print("<tr><td>Titre : $titre</td></tr>
			<tr><td>Posté le : $date</td></tr>
			<tr><td>Devellopement: <td> $texte</td></td></tr>");
			$i++;
			}
	print("<br></table>");
	}
	
elseif ($_GET['action']=="admin" && $_GET['pass']=="password" && empty($_GET['mode']))
	{
	print("<form method=\"post\" action =\"news.php?action=admin&pass=password&mode=add
\">
			<input type=\"text\" name=\"titre_add\">Titre :<br>
			<input type =\"text\" name=\"date_add\">Date :<br>
			<textarea name=\"texte_add\">Texte :</textarea><br>
			<input type=\"submit\" value=\"Envoyer\">");
	}
elseif ($_GET['action']=="admin" && $_GET['pass']=="password" && $_GET['mode']=="add")
	{		
	$titre = $_POST['titre_add'];
	$date = $_POST['date_add'];
	$texte = $_POST['texte_add'];
	mysql_query("INSERT INTO tbl_news(titre,texte,date) VALUES('$titre','$texte','$date')");
	print ("News ajoutée");
	print "<br>".mysql_error();
	}
elseif ($_GET['action']=="delete" && $_GET['pass']=="password" && empty($_GET['mode']))
	{
	$idcount1 = 0;	
	$sql = mysql_query("SELECT * FROM tbl_news ORDER BY id");
	$num = mysql_num_rows($sql);
		print ("<table border=\"1\">");
		while ($idcount1 < $num)
		{
		$id2 = mysql_result($sql, $idcount1, "id");
		$title = mysql_result($sql, $idcount1, "titre");
		print ("<tr><td>$id2</td>
				<td>$title</td></tr>");
		$idcount1++;
		}
		print ("</table>");
		print("<form method=\"post\" action=\"news.php?action=delete&pass=password&mode=delete\">");
		//$ask = mysql_query("SELECT id FROM tbl_news");
		//$numid = mysql_num_rows($ask);
		//$e = 0;
		print ("<input type=\"text\" name=\"printid\">");		

	print ("<input type=\"submit\" value=\"supprimer\">");


	}
elseif ($_GET['action']=="delete" && $_GET['pass']=="password" && $_GET['mode']=="delete")
	{
	$idelete = $_POST['printid'];
	print $idelete;
	mysql_query("DELETE FROM tbl_news WHERE id=$idelete");
	print ("<br>news supprimée");
	print "<br>".mysql_error();
	
	}
?>