jeff

<?php

include ('./_require/function_connect.php');



$titre = $_POST['titre'];

$texte = $_POST['texte'];



$id_article = (int) $_POST['id_article'];



$sql = "UPDATE article SET titre=':titre, texte=':texte WHERE id_article = :id_article";

$stmt = $dbh->prepare($sql);



$valeurs = array(':titre'=>$titre, ':texte'=>$texte, ':id_article'=>$id_article);



ligne 14 - $stmt->execute($valeurs);

ligne 15 - $stmt->execute();



$stmt = NULL;

?>

<?php

include ('./_require/function_connect.php');



$id_ar = (int) $_GET['id_article'];



$sql = "SELECT id_article,titre,texte FROM article WHERE id_article =$id_ar ";



$sth = $dbh->query($sql);

$result = $sth->fetchALL();



$row = $result[0];



$titre = $row['titre'];

$texte = $row['texte'];



$jour = substr($date_pud, 8, 2);

$mois = substr($date_pub, 5, 2);

$annee = substr($date_pub, 0, 4);

$date = $jour. '-' .$mois. '-' .$annee;



$dbh = NULL;

?>



<form method="post" action="edit_article_2.php">

<input type="text" name="titre" size="50" value="<?php echo $titre; ?> "/><br />

<textarea name="texte" rows="8" cols="30"><?php echo $texte; ?></textarea><br />

<input type="hidden" name="id_article" value="<?php $id_ar; ?>" />

<input type="submit" value="Modiffier" />

</form>

<?php

if (isset($_POST['go']) && $_POST['go']=='add_commanderies') {  

if ((isset($_POST['url']) && !empty($_POST['url'])) && (isset($_POST['nom']) && !empty($_POST['nom'])) && (isset($_POST['dep']) && !empty($_POST['dep'])) && (isset($_POST['news']) && !empty($_POST['news']))) {  

 

function db_connect()  

{  

$result = new mysqli('localhost', 'jackbocar', 'XXXXXXXXX', 'ma_base');  

if (!$result)  

throw new Exception('Connexion impossible au serveur');  

else  

return $result;  

}  

 

$conn = db_connect();  

$result = $conn->query('SELECT count(*) FROM commanderies WHERE nom="'.mysql_escape_string($_POST['nom']).'" AND dep="'.mysql_escape_string($_POST['dep']).'"');  

$data = $result->fetch_array(MYSQLI_NUM);  

 

if ($data[0] == 0) {  

$result = $conn->query('INSERT INTO commanderies VALUES("", "'.mysql_escape_string($_POST['url']).'", "'.mysql_escape_string($_POST['nom']).'", "'.mysql_escape_string($_POST['dep']).'", "'.mysql_escape_string($_POST['news']).'")');  

}  

else {  

$erreur = 'Le couple <span class="R">NOM et DEPARTEMENT</span> existe deja dans la table.<br /><br />';  

}  

}  

 

else {  

$erreur = 'Au moins un des champs est vide.<br /><br />';  

}  

}  

 

?>

<?php

function db_connect()

{

$result = new mysqli('localhost', 'jackbocar', 'XXXXXXXXXXXXXXXXX', 'ma_Table'); 

if (!$result)

throw new Exception('Connexion impossible au serveur');

else

return $result;

}



function register($nom, $dep)

{



$conn = db_connect();

$result = $conn->query("SELECT * FROM ma_table WHERE nom='$nom' AND dep='$dep' ");

if (!$result)

throw new Exception('Impossible executer la requete');

if ($result->num_rows>0) 

throw new Exception('Ce nom et ce departement sont deja dans la table.');



//Si tout est bon, enregistrement dans la base

$conn = db_connect();

$result = $conn->query("insert into ma_table values ('$nom', '$dep')");

if (!$result)

throw new Exception('Il y a un problème, il faut recommencer.');

return true;

}



?>