guns17

<?php

$to = 'nom@domaine.com';

$sujet = 'Contact client';

$nom = $_POST['nom'];

$prenom = $_POST['prenom'];

$tel = $_POST['tel'];

$mail = $_POST['mail'];

$adresse1 = $_POST['adresse1'];

$adresse2 = $_POST['adresse2'];

$cp = $_POST['cp'];

$ville = $_POST['ville'];

$pays = $_POST['pays'];

$suggestion = $_POST['suggestion'];



$message = "<h2><strong><u>Nouveau contact client</u></strong></h2>";

$message .= "<table>";

$message .= "<tr><td size=\"2\">Nom du contact : </td><td><strong>". $nom ." ".$prenom."</strong></td></tr>";

$message .= "<tr><td size=\"2\">adresse : </td><td><strong>". $adresse1 ."</strong></td></tr>";

$message .= "<tr><td size=\"2\"></td><td><strong>" . $adresse2 . "</strong></td></tr>";

$message .= "<tr><td size=\"2\"></td><td><strong>" . $cp . " " . $ville . "</strong></td></tr>";

$message .= "<tr><td size=\"2\">telephone : </td><td><strong>" . $tel . "</strong></td></tr>";

$message .= "<tr><td size=\"2\">mail : </td><td><strong>" . $mail . "</strong></td></tr>";

$message .= "<tr><td size=\"2\">Suggestions : </td><td><strong>" . $suggestion . "</strong></td></tr>";

if(isset($_POST['C1']))

{

	if(isset($_POST['C2']))

	{

		$message .= "<tr><td></td><td><ul><li><strong>Le contact souhaite recevoir un catalogue et connaitre son point de vente le plus proche</li></ul></strong></td></tr>";

	}

	else

	{

		$message .= "<tr><td></td><td><ul><li><strong>Le contact souhaite recevoir un catalogue</li></ul></strong></td></tr>";

	}

}

elseif(isset($_POST['C2']))

{

	$message .= "<tr><td></td><td><ul><li><strong>Le contact desire connaitre son point de vente le plus proche</strong></li></ul></td></tr>";

}

$message .= "</table>";



$entete = 'MIME-Version: 1.0\r\n';

$entete .= 'Content-Type: text/html; charset=iso-8859-1\r\n';

$entete .= 'To: Contact  <'.$to.'>\r\n';

$entete .= 'From: Contact site  <'.$mail.'>\r\n';



echo('to : '.$to);

echo('');

echo('sujet : '.$sujet);

echo('');

echo('message : '.$message);

echo('');

echo('entete :'.$entete);

echo('');



$test = mail($to,$sujet,$message,$entete);

echo('test : '.$test);

?>

<?php

// *** Validate request to login to this site.

session_start();



$loginFormAction = $_SERVER['PHP_SELF'];

if (isset($accesscheck)) {

  $GLOBALS['PrevUrl'] = $accesscheck;

  session_register('PrevUrl');

}



if (isset($_POST['name'])) {

  $loginUsername=$_POST['name'];

  echo ($loginUsername);

  $password=$_POST['mdp'];

  $MM_fldUserAuthorization = "";

  $MM_redirectLoginSuccess = "tables.php";

  $MM_redirectLoginFailed = "login_failed.php";

  $MM_redirecttoReferrer = true;

  mysql_select_db($database_conn_teissa, $conn_teissa);

  

  $LoginRS__query=sprintf("SELECT nom, pwd FROM tbl_user WHERE nom='%s' AND pwd='%s'",

    get_magic_quotes_gpc() ? $loginUsername : addslashes($loginUsername), get_magic_quotes_gpc() ? $password : addslashes($password)); 

   

  $LoginRS = mysql_query($LoginRS__query, $conn_teissa) or die(mysql_error());

  $loginFoundUser = mysql_num_rows($LoginRS);

  if ($loginFoundUser) {

     $loginStrGroup = "";

    

    //declare two session variables and assign them

    $GLOBALS['MM_Username'] = $loginUsername;

    $GLOBALS['MM_UserGroup'] = $loginStrGroup;	      



    //register the session variables

    session_register("MM_Username");

    session_register("MM_UserGroup");



    if (isset($_SESSION['PrevUrl']) && true) {

      $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];	

    }

    header("Location: " . $MM_redirectLoginSuccess );

  }

  else {

    header("Location: ". $MM_redirectLoginFailed );

  }

}

?>

echo ("user : " . $_SESSION['MM_Username']);

<?php

$link = mysql_connect("localhost", "root", "") or die("Impossible de se connecter");

	mysql_select_db("teissa") or die("Impossible de slectionner la base teissa");



    $enseigne = $_POST['enseigne'];

	$nom = $_POST['nom'];

	$prenom = $_POST['prenom'];

	$adresse1 = $_POST['adresse1'];

	$adresse2 = $_POST['adresse2'];

	$cp = $_POST['cp'];

	$ville = $_POST['ville'];

	$tel = $_POST['tel'];

	$fax = $_POST['fax'];

	$email  = $_POST['mail'];

	$descriptif = $_POST['descriptif'];

	$region = $_POST['region'];



$query = 'INSERT distributeur(enseigne, nom, prenom, adresse1, adresse2, ville, codePostal, telephone, fax, mail, descriptif, region) VALUES('.$enseigne.', '.$nom.', '.$prenom.', '.$adresse1.', '.$adresse2.', '.$ville.', '.$cp.', '.$tel.', '.$fax.', '.$email.', '.$descriptif.', '.$region.')';

$result = mysql_query($query, $link) or die("Impossible d'inserer dans la table");

?>

<?php

$uploaddir = 'C:\\';

	$uploadfilePhoto = $uploaddir . basename($_FILES['photo']['name']);

	$uploadfilePlan = $uploaddir . basename($_FILES['plan']['name']);

	move_uploaded_file($_FILES['photo']['tmp_name'], $uploadfilePhoto);

	move_uploaded_file($_FILES['plan']['tmp_name'], $uploadfilePlan);

	

	echo '<pre>';

	if (move_uploaded_file($_FILES['photo']['tmp_name'], $uploadfilePhoto) && move_uploaded_file($_FILES['plan']['tmp_name'], $uploadfilePlan)) {

    	echo "Les fichiers sont valides, et ont été téléchargés

           	avec succès. Voici plus d'informations :\n";

	} else {

    	echo "Attaque par upload potentielle. Voici plus d'informations :\n";

	}



	echo 'Voici quelques informations de déboguage :';

	print_r($_FILES);



	echo '</pre>';

?>