<?php
include('includes/debut.php');
if (!isset($_POST['login']))
{
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr" >
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<link href="design/css/design.css" rel="stylesheet" type="text/css"/>
<?php
include('./includes/title.php');
$page='Login_Admin';
?>
Login Admin</title>
</head>
<body>
<div id="corps">
<div id="bann">
</div>
<?php
include('./includes/menu.php');
?>
<div id="contenu">
<h1>Bienvenue dans l'espace d'administration !</h1>
<p>
Avant de poursuivre il va falloir vous identifier.<br />
<form action="login.php" method="post">
<label>Pseudo </label><input type="text" name="pseudo" id="pseudo"/><br /><br />
<label>Mot de passe </label><input type="password" name="pass" id="pass" /><br /><br />
<input type="submit" value="Envoyer" />
<input type="hidden" name="login" value="1" />
</form>
</p>
</div>
<?php include('includes/footer.php'); ?>
</div>
</body>
</html>
<?php
}
else
{
$formular_username = $_POST['pseudo'];
$formular_password = md5($_POST['pass']);
include('includes/mysql_connect.php');
$result = mysql_query("SELECT * FROM admin_membres WHERE pseudo = '".$formular_username."'");
$nb_requete ++;
$userdata[0] = mysql_fetch_object($result);
$username = $userdata[0]->pseudo;
$password = $userdata[0]->pass;
mysql_close();
if ($formular_username == $username && $formular_password == $password)
{
$expire = time() + 3600;
setcookie('pseudo', $formular_username, $expire, null, null, false, true);
setcookie('pass', $formular_pass, $expire, null, null, false, true);
header("location: contenu.php");
}
else
{
header("location: index.php");
}
}
?>