Untitled

<?php
$headers  = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";

$servername = "db";
$username = "username";
$password = "password";
$dbname = "dbname";

$allowed = array("user1", "user2", "user3","user4");

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
   die("Connection failed: " . $conn->connect_error);
}

echo "<head><title>PokeNamur ARENES</title></head>";

if (in_array($_SERVER['PHP_AUTH_USER'],$allowed) ) {
   echo "<form name='form' method='post' action=''>";
   echo "Nom: <input type='text' name='name' id='name' value='".$_SERVER['PHP_AUTH_USER']."'>&nbsp;";
   echo "<input type='submit' name='Envoyer' value='Envoyer'>";
   echo "</form>";
} else { $_POST[name] = $_SERVER['PHP_AUTH_USER'] ; }


$count = "SELECT count(*) as total
        FROM gympokemon
        JOIN gymmember ON  gympokemon.pokemon_uid = gymmember.pokemon_uid
        JOIN gym ON  gymmember.gym_id = gym.gym_id
        JOIN gymdetails ON gymdetails.gym_id = gym.gym_id
        WHERE trainer_name = '".$_POST[name]."'" ;

$sql = "SELECT pokemon_id, cp, concat(ifnull(description,''),' ',name) AS gym_name, gym_points, latitude, longitude, CONVERT_TZ(gym.last_scanned,'+00:00','+01:00') AS last_scanned, url
        FROM gympokemon
        JOIN gymmember ON  gympokemon.pokemon_uid = gymmember.pokemon_uid
        JOIN gym ON  gymmember.gym_id = gym.gym_id
        JOIN gymdetails ON gymdetails.gym_id = gym.gym_id
        WHERE trainer_name = '".$_POST[name]."'
    ORDER BY cp DESC" ;

$result = $conn->query($sql);
$count_result = $conn->query($count);

if(!empty($_POST['name'])) {
        echo "<B>".$_POST[name]."</B>";
    while($row = $count_result->fetch_assoc()) {
          echo "<B>&nbsp;DETIENT <font color='red'>".$row["total"]."</font>&nbsp;ARENES</B><BR><BR>";
        }
}
else {
        echo "<B>AUCUN RESULTAT A AFFICHER</B><BR>";
        echo "<B>VEUILLEZ INDIQUER VOTRE NOM DE JOUEUR</B><BR>";
}

if ($result->num_rows > 0) {
        echo "<CENTER><TABLE BORDER=1 CELLPADDING='10'>";
        echo "<TR>";
        echo "<TD></TD>";
        echo "<TD><B>NOM ARENE</B></TD>";
        echo "<TD ALIGN='CENTER'><B>POKEMON</B></TD>";
        echo "<TD ALIGN='CENTER'><B>POINTS ARENE</B></TD>";
        echo "<TD ALIGN='CENTER'><B>DATE MAJ</B></TD>";
        echo "</TR>";
        while($row = $result->fetch_assoc()) {
                echo "<TR>";
                echo "<TD><A HREF='".$row["url"]."'><IMG SRC='".$row["url"]."'WIDTH=100'</IMG></A></TD>";
                echo "<TD>".utf8_encode($row["gym_name"])."<BR><BR><a href='http://www.google.com/maps/place/".$row["latitude"].",".$row["longitude"]."'>Instructions GPS</a><BR><BR>".$row["latitude"].",".$row["longitude"]."</TD>";
                echo "<TD ALIGN='CENTER' WIDTH=100><IMG SRC='./icons/".$row["pokemon_id"].".png' WIDTH=50 </IMG><BR>";
                echo "".$row["cp"]."&nbsp;CP</TD>";
                if ($row["gym_points"] > 0) { $lvl = 1;}
                if ($row["gym_points"] >= 4000) { $lvl = 2;}
                if ($row["gym_points"] >= 6000) { $lvl = 3;}
                if ($row["gym_points"] >= 8000) { $lvl = 4;}
                if ($row["gym_points"] >= 12000) { $lvl = 5;}
                if ($row["gym_points"] >= 16000) { $lvl = 6;}
                if ($row["gym_points"] >= 20000) { $lvl = 7;}
                if ($row["gym_points"] >= 30000) { $lvl = 8;}
                if ($row["gym_points"] >= 40000) { $lvl = 9;}
                if ($row["gym_points"] >= 50000) { $lvl = 10;}
                echo "<TD ALIGN='CENTER'><IMG SRC='./shield/Valor_".$lvl.".png' WIDTH=50 </IMG><BR>".$row["gym_points"]."</TD>";
                echo "<TD ALIGN='CENTER' WIDTH=100>".$row["last_scanned"]."</TD>";
                echo "</TR>";
        }
        echo "</TABLE></CENTER>";
} else {
}
$conn->close();
?>