je peut pas accéder au base pour verifier login et password des utilisateur et voici les fichiers .
Merci d'avance.
---------------------page Admin--------------------------------------
<?php
session_start();
include ("../classes/Page.class.php");
include ("../classes/User.class.php");
//session_start(); //Variable session.auto_start = on in php.ini file
if (!($_SESSION["Login"]) || ($_SESSION["Login"] == "")) {
Header("Location: ../index.php?logonerror");
exit();
}
$usr = new User($_SESSION["Login"]);
$webPage = new Page(NULL,serialize($usr));
/*************** Ajouter le contenu de la page *******************/
$webPage->AddContent($usr->Display("black"));
/*********************** Afficher la page ************************/
echo $webPage->getPage();
?>
-----------------------page index-------------------------------------
<?
session_start();
include("./classes/User.class.php");
//session_start(); //Variable session.auto_start = on in php.ini file
//echo $_POST['login'] . ".<br>";
//echo $_POST['password']. ".<br>";
if(isset($_GET['logoff']))
{
session_unset();
session_destroy();
}
if( isset($_POST['login']) && $_POST['login'] != "")
{
$usr = new User(trim($_POST['login']));
//$usr->Login = $_POST['login'];
$usr->SetPassword($_POST['password']);
//echo $usr->UsrPasswd . "<br>";
if($usr->CheckPassword()){
$_SESSION['Login'] = $usr->Login;
$_SESSION['UsrFName'] = $usr->UsrFName;
$_SESSION['UsrLName'] = $usr->UsrLName;
$_SESSION['USRGRPPRIVILIGE'] = $usr->GetPrivilege();
Header("Location: ../admin/admin.php");
exit("aprés redirection à admin.php");
}
else{
//echo "\$usr->CheckPassword() return False<br>";
//$page = $_SERVER['PHP_SELF'] . "?logonerror";
Header("Location: {$_SERVER['PHP_SELF']}?logonerror");
exit("aprés redirection à {$_SERVER['PHP_SELF']}");
}
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!-- saved from url=(0033)http://optinet/backoffice/login.x -->
<HTML><HEAD><TITLE>login</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1"><LINK
href="login_fichiers/optinet.css" type=text/css rel=stylesheet>
<SCRIPT language=JavaScript
src="login_fichiers/fonctions.js;jsessionid=F84F524B81A61AC257F18E42E9467AE0">
</SCRIPT>
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<TABLE cellSpacing=6 cellPadding=1 width="100%" border=0>
<TBODY>
<TR>
<TD width=30 %><img height=72 src="logo_footer.gif"
width=252></TD>
<TD width="393" align=middle><img src="url.gif" width="191" height="31" hspace="500" vspace="0">
</TD>
</TR>
</TBODY>
</TABLE>
<BODY>
<TD align=middle width=\"98%\"><FONT style=\"FONT-SIZE: 20pt\" face=\"Time New Roman\" color=#EA591D><DIV align=center><strong><i>Bienvenue sur le site de suivi de l'interconnexion TT</i></strong></DIV></FONT></TD>
<p> </p>
<p> </p>
<p> </p>
<table cellspacing=0 cellpadding=0 width="70%" align=center border=0>
<tbody>
<tr>
<td valign=top width="100%"><img height=9 src="login_fichiers/pix.gif"
width=1><br> <table cellspacing=0 cellpadding=0 width="100%" border=0>
<tbody>
<tr>
<td><img height=38 src="login_fichiers/titre_gauche.gif"
width=12></td>
<td background=login_fichiers/fond_titre1.gif><div align="right"><font color="EA591D">
<center>
<strong>AUTHENTIFICATION</strong>
</center>
</font><img height=1
src="login_fichiers/pix.gif" width=180></div></td>
<td><img height=38 src="login_fichiers/separe_titre.gif"
width=23></td>
<td valign=bottom align=right width="100%"
background=login_fichiers/fond_titre2.gif> </td>
<td><img height=38 src="login_fichiers/titre_droite.gif"
width=12></td>
</tr>
</tbody>
</table>
<table cellspacing=0 cellpadding=0 width="100%" border=0>
<tbody>
<tr>
<td bgcolor=#dddddd><img height=1 src="login_fichiers/pix.gif"
width=1></td>
<td valign=top width="100%"> <table cellspacing=6 cellpadding=1 width="100%" border=0>
<tbody>
<tr>
<td width=30 %> </td>
<td width="393" align=middle> </td>
</tr>
</tbody>
</table>
<?php
if(isset($_GET['logonerror'])){
echo "<center><font color=\"red\"><b>Wrong login and/or password.</b></font><br>
Please try again.<br></center>";
}
if(isset($_GET['logoff'])) echo "<b>Session fermée.</b><br>";
?>
<form <?php echo "action=\"{$_SERVER['PHP_SELF']}\""; ?> method="post">
<table cellspacing=0 cellpadding=0 width="70%" align=center
border=0>
<tbody>
<tr>
<td colspan=2> <p></p>
<p></p></td>
</tr>
<tr>
<td class=textebold align=right width="30%">login:
</td>
<td width="70%"><input class=textenoir name=login>
<span
class=textenoir> </span> </td>
</tr>
<tr>
<td class=textebold align=right width="30%">mot de passe:
</td>
<td width="70%"><input class=textenoir type=password
name=password>
</td>
</tr>
<tr>
<td class=text align=right width="30%"> </td>
<td width="70%"> <span class=textered> </span></td>
</tr>
<tr>
<td class=text align=right width="30%"> </td>
<td width="70%"><input type=hidden value=enter name=action>
<input type=image
src="login_fichiers/valider.gif" value= valider
name=image> </td>
</tr>
<!-- dans le cas de retour de nouvelle inscription-->
</tbody>
</table><!--<center>Merci de vous identifier p.</center>-->
</form></td>
<td bgcolor=#dddddd><img height=1 src="login_fichiers/pix.gif"
width=1></td>
</tr>
</tbody>
</table>
<table cellspacing=0 cellpadding=0 width="100%" border=0>
<tbody>
<tr>
<td><img height=12 src="login_fichiers/bas2_content.gif"
width=12></td>
<td width="100%" background=login_fichiers/fond_bascontent.gif><img
height=1 src="login_fichiers/pix.gif" width=1></td>
<td><img height=12 src="login_fichiers/bas1_content.gif"
width=12></td>
</tr>
</tbody>
</table></td>
</tr>
</tbody>
</table>
</BODY></HTML>
---------------------page user.class-----------------------------------------------
<?php
if(!defined("PHP_USER_CLASS"))
{
define("PHP_USER_CLASS",1,True);
include("OraBase.class.php");
include("Frame.class.php");
class User
{
var $Login;
var $UsrGrpName;
var $UsrFName;
var $UsrLName;
var $UsrFunction;
var $UsrEmail;
var $UsrPasswd;
var $UsrPrivilege;
function User($Login=""){
$this->Login = $Login;
if(($Login != "") && $this->Check()){
$this->Load();
}
else {
$this->UsrGrpName = "";
$this->UsrFName = "";
$this->UsrLName = "";
$this->UsrFunction = "";
$this->UsrEmail = "";
$this->UsrPasswd = "";
$this->UsrPrivilege = "00000000000";
}
//echo $this->Display();
}
function SetPassword($UsrPasswd){
$this->UsrPasswd = sha1($UsrPasswd);
}
function Add()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select Login from users where Login = '$this->Login'";
$results = $OraDb->Execute();
//echo count($results)."<br>";
list($key,$value) = each($results);
if(!isset($value[0])){//s'il n'y a 1 autre user ayant le même login
//echo "User Add : UsrEmail : $this->UsrEmail<br>";
$OraDb->Query = "insert into users values('$this->Login','$this->UsrGrpName','$this->UsrFName','$this->UsrLName','$this->UsrFunction','$this->UsrEmail','$this->UsrPasswd')";
if($OraDb->Execute()) return True;
return False;
}
else{
echo "<font color=red>Opération User->Add a échoué: '$this->Login' : Utilisateur existant</font><br>";
return False;
}
}
function Delete()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select Login from users where Login = '$this->Login'";
$results = $OraDb->Execute();
//echo count($results)."<br>";
list($key,$value) = each($results);
if(isset($value[0])){//s'il n'y a 1 autre user ayant le même login
//echo "User Add : UsrEmail : $this->UsrEmail<br>";
$OraDb->Query = "DELETE FROM USERS WHERE LOGIN='$this->Login'";
if($OraDb->Execute()) return True;
return False;
}
else{
throw new Exception("<font color=red>Opération User->Delete a échouée: '$this->Login' : Utilisateur absent</font><br>");
return False;
}
}
function Load(){
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select * from users where Login = '$this->Login'";
$results = $OraDb->Execute();
//print_r($results);
if($results){
reset($results);
$oparray = array();
$this->UsrPasswd = $results['USRPASSWD'][0];
$this->UsrEmail = $results['USREMAIL'][0];
$this->UsrFunction = $results['USRFUNCTION'][0];
$this->UsrLName = $results['USRLNAME'][0];
$this->UsrFName = $results['USRFNAME'][0];
$this->UsrGrpName = $results['USRGRPNAME'][0];
$this->Login = $results['LOGIN'][0];
$this->UsrPrivilege = $this->GetPrivilege();
return True;
}
echo "<font color=red>Opération User->Load a échoué: '$this->Login' : Utilisateur absent</font><br>";
return False;
}
function Update()
{
if($this->Check()){
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "update users set USRGRPName='$this->UsrGrpName',USRFNAME='$this->UsrFName',USRLNAME='$this->UsrLName',USRFUNCTION='$this->UsrFunction',USREMAIL='$this->UsrEmail',USRPASSWD='$this->UsrPasswd' where Login='$this->Login'";
return($OraDb->Execute());
}
else return FALSE;//User absent
}
//return True if a user exists, else return false
function Check()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select Login from users where Login = '$this->Login'";
$results = $OraDb->Execute();
list($key,$value) = each($results);
if(isset($value[0])) return True;
else return False;
}
//return True if $this->Login and $this->UsrPasswd match, else return false
function CheckPassword()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select login from users where Login = '$this->Login' and UsrPasswd = '".$this->UsrPasswd."'";
$results = $OraDb->Execute();
list($key,$value) = each($results);
if(isset($value[0])) return True;
else return False;
}
function Display($color="Green",$passwd=False,$priv=True)
{
$strUser = "<font color=$color>
<table border=\"1\" cellspacing=\"0\" width=\"100%\" bordercolor=\"black\">\n";
$bool = True;
foreach($this as $key => $value) {
if($value=="") $value=" ";
$bool = true;
if($key=='UsrPrivilege') $bool = $priv;
if($key=='UsrPasswd') $bool = $passwd;
if($bool)$strUser .= "
<TR>
<th class=textenoir width=\"20%\" align=\"left\" > $key : </th>
<td class=textenoir width=\"80%\" align=\"left\" >$value</td>
</TR>";
}
$strUser .= "</table></font>";
$frame = new Frame("Utilisateur : $this->Login",$strUser,"center","70%");
return $frame->getFrame();
/*$strUser = "<font color=$color><table>";
$strUser .= "<tr><td>Login :</td><td> $this->Login<br/></td></tr>";
$strUser .= "<tr><td>UsrGrpName :</td><td> $this->UsrGrpName<br/></td></tr>";
$strUser .= "<tr><td>UsrFName :</td><td> $this->UsrFName<br/></td></tr>";
$strUser .= "<tr><td>UsrLName :</td><td> $this->UsrLName <br/></td></tr>";
$strUser .= "<tr><td>UsrFunction :</td><td> $this->UsrFunction <br/></td></tr>";
$strUser .= "<tr><td>UsrEmail :</td><td> $this->UsrEmail<br/></td></tr>";
if($passwd==true)
$strUser .= "<tr><td>UsrPasswd :</td><td> $this->UsrPasswd<br/></td></tr>";
if($priv==true)
$strUser .= "<tr><td>UsrPrivilege :</td><td> $this->UsrPrivilege<br/></td></tr>";
$strUser .= "</table></font>";
return $strUser;*/
}
function GetPrivilege()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "select USRGRPPRIVILIGE from usergroup where USRGRPNAME = (select USRGRPNAME from users where LOGIN='$this->Login')";
$results = $OraDb->Execute();
if($results){
list($key,$value) = each($results);
if(isset($value[0])) return $value[0];
else return False;
}
return False;
}
function HasPrivilege($Priv)
{
global $PRIVILEGE;
//echo "In HasPrivilege<br>";
//echo "Paramètre : $Priv<br/>";
if($Priv == -1) return True ; //All User Has This Privilege
if((isset($this->UsrPrivilege)) && ($this->UsrPrivilege != ""))
{
//echo "\$this->UsrPrivilege is set and != \"\"<br>";
if(is_numeric($Priv)) {
//echo "Priv is numeric : $Priv<br/>";
if(($Priv<0) || ($Priv > (count($PRIVILEGE)-1))) return False;
return ($this->UsrPrivilege[$Priv] == "1");
}
else {
//echo "$Priv is String<br/>";
$key = array_search($Priv,$PRIVILEGE);
if(($key===NULL) || ($key===""))return False;
//if($key==="") echo "vide<br>";
//if($key===NULL) echo "NULL<br/>";
//echo "$key not null : $key<br/>";
return ($this->UsrPrivilege[$key] == "1");
}
}
else{
//echo "\$this->UsrPrivilege is not set or == \"\"<br>";
return False;
}
}
function IsAdministrator()
{
global $ADMIN_PRIV;
if((isset($this->UsrPrivilege)) && ($this->UsrPrivilege != ""))
{
for($i=0;$i<count($ADMIN_PRIV);$i++){
if($this->UsrPrivilege[$ADMIN_PRIV[$i]]!== '1')return False;
}
return True;
}
}
function GetUsers()
{
$OraDb = new OraBase();
$OraDb->connect();
$OraDb->Query = "SELECT LOGIN FROM USERS ORDER BY LOGIN";
$_UsrNames = $OraDb->Execute();
$UsrNames = array();
if($_UsrNames){
foreach($_UsrNames['LOGIN'] as $key => $value){
$UsrNames["$key"] = "$value";
}
return $UsrNames;
}
else return False;
}
}
}
?>
![]()
< body>