Bonjour, j'aimerais gader la personne qui réponds sans passé par la session car j'ai une faile d'accés a la basse ou alors en verifiant lesd password de celui qui repondrais et de celui qui lit .
quelqu'un a une solutions svp???
<?php session_start(); ?>
<html>
<title>Dialogue-Priver</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<head>
<style>
#recu{
position:absolute;
background-color:#00FFCC;
overflow:scroll;
width: 380px;
height:100px;
border:#00FF33;
}
#envois{
position:absolute;
background-color:#00FFCC;
width: 380px;
height:180px;
border:#00FF33;
top:140px;
}
</style>
<script language="javascript" type="text/javascript">
nom_de_la_page='messachat12.php';
var xhr=null;
function rafraichir() {
/* if (window.XMLHttpRequest) xhr = new XMLHttpRequest();
else if (window.ActiveXObject) xhr = new ActiveXObject('Microsoft.XMLHTTP');*/
if(xhr == false) alert ('JavaScript : votre navigateur ne supporte pas les objets XMLHttpRequest...');
try{ xhr = new ActiveXObject("Microsoft.XMLHTTP");}
catch(e){
try{ xhr = new ActiveXObject("Msxml2.XMLHTTP");}
catch(e){
try{ xhr = new XMLHttpRequest();}
catch(e){ xhr = false;}
}
}
xhr.open('GET',nom_de_la_page,true);
xhr.onreadystatechange = ajaxReponse;
xhr.send(null);
}
function ajaxReponse() {
if (xhr.readyState == 4) {
document.getElementById('recu').innerHTML=xhr.responseText;
var timer=setTimeout("rafraichir()",300);
}
}
rafraichir();
</script>
</head>
<body onLoad="rafraichir();">
<?php
if (!isset($_SESSION['login'])) {
echo "<script language=\"JavaScript\">
setTimeout(\"window.location='index2.php'\",0); // delai en millisecondes
</script>";
exit();
}
require_once'../include/connexion.inc';
$id_chat=$_GET['id_chat'];
mysql_query("UPDATE chatonline SET open='1' WHERE id_chat='$id_chat' AND dest='".$_SESSION['login']."'") or die (mysql_error());
$chat = mysql_query("SELECT expe,messy FROM chatonline WHERE dest='".$_SESSION['login']."' ORDER BY id_chat ASC") or die (mysql_error());
///////////////lecture message/////////////////////////////////////////////////////////
while($row= mysql_fetch_array($chat)){
$env_mess=$row['expe'];
$message_mess=$row['messy'];
echo"<div id='recu'><left><b>$env_mess :</b>";
echo" => $message_mess </left><br /></div></td></tr>";
}
////// conversation avec le message envoyez/////////////////////////////////////////////////
echo"<tr><td>";
/////////////////////teste si le membre est en ligne///////////////////////////////////////
$retourdest=$env_mess;
if ($retourdest=="") {
echo "Erreur, aucun destinataire pour ce message";
exit();
}
//////////////////////////////////Teste si membre est blocker////////////////////////////////
$verif_block=mysql_query("SELECT * FROM fk_block WHERE login='".$_SESSION['login']."' AND blocker='$retourdest'") or die (mysql_error());
$nb_verif_block=mysql_num_rows($verif_block);
if($nb_verif_block==1)
{
echo"<center>$messdest vous a bloqué et donc vous ne pouvez pas lui envoyer de message<br><a href='#' onClick='history.back()'>Retour</a></center>";
return FALSE;
}
//si message inserer
$pseudoretour=$_SESSION["login"];
$date = time();
if (($message!="")) {
$query = "INSERT INTO chatonline (`id_chat`,`expe`, `dest`, `messy`,`open`,`date`) VALUES ('','$pseudoretour', '$retourdest', '$message','0','$date')";
$result = mysql_query($query);
mysql_close();
}
$message=nl2br($message); echo"<div id='envois'><center>
<form action=\"messachat12.php?Login=$waza\" method=\"post\">
<div align=\"center\">
<p><b>Chat avec : ".stripslashes(htmlspecialchars($retourdest))."
<a href=\"#\" onClick=\"window.open('membre/details.php?det=$env_mess','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=600, height=550, right=1, top=0');return(false)\"><img src=\"../design/voir.gif\" width=\"20\" heigth=\"25\" border=\"0\" title=\"Profil\"></a>
<a href='chat_block.php?page=block&id_block=$env_mess'><img src=\"../design/b_supprimer.gif\" width=\"15\" heigth=\"15\" border=\"0\" title=\"blocker\"></a>
</b>
<input type=\"hidden\" id=\"messy\" name=\"destinataire\" value=\"".stripslashes(htmlspecialchars($retourdest))."\" size=\"15\" maxlength=\"30\" readonly>
</p>
</div>
<p>
<textarea cols=\"40\" rows=\"2\" name=\"message\"></textarea>
<BR />
</p>
<p>
<input type=\"submit\" value=\"Chat\" onClick=\"compt=setTimeout(self.close();,10)\">
</p>
</form>
</center></div></td>
</tr>";
/////suppressions après x message/////////////////////////////
$chat2 = mysql_query("select count(id_chat) AS nb_mess from chatonline WHERE dest='".$_SESSION['login']."'") or die (mysql_error());
$nb_mess = mysql_result($chat2,0,"nb_mess");
if($nb_mess >=8){
$chat3 = mysql_query("select min(id_chat) AS min_mess from chatonline WHERE dest='".$_SESSION['login']."'") or die (mysql_error());
$min_mess = mysql_result($chat3,0,"min_mess");
$chat4 = mysql_query("delete from chatonline where id_chat=".$min_mess."") or die (mysql_error());
}
?>
</table>
</body>
</html>