www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/pro/detail.php (0604)

<?
require("../conf/global.php");
if (isset($raison_unlogged) ){
	echo $raison_unlogged;
}else{
	//if ( isset ($HTTP_COOKIE_VARS['username']) && $HTTP_COOKIE_VARS['username']!="") {
	if ($user_info['username']!="" && $user_info['catid']=='3') {   	
		$paramsgeneraux=$DB_site->query_first("SELECT * FROM general WHERE id=\"1\" ");
		$metakeywords=$paramsgeneraux["metakeywordsFR"];
		$title=$paramsgeneraux["titleFR"];
		$metadescription=$paramsgeneraux["metadescriptionFR"];
		$pageactu="Espace professionnel";
		include_once($DOCUMENT_ROOT."/includes/headerPro.php");
		echo "<div class=\"bienvenue\"><div class=\"messagebienvenue\">Bonjour $user_info[prenom] $user_info[nom]. utilisateur numero $user_info[userid]. Nous sommes le 28 Avril 2008.</div></div>";			
		if ($catid=='1') {
			$categ="Partenaires";
		}
		if ($catid=='2') {
			$categ="Clients";
		}
?>
		<div class="descriptiondetail"> 
			<?
				if (isset ($catid) && $catid!="" ){
			?>
			<table>
			   <caption>Liste des <?=$categ?></caption>
			   <thead>
				   <tr>
					   <th>Username</th>
					   <th>Nom</th>
					   <th>Pr&eacute;nom</th>
					   <th>Derni&egrave;re visite</th>
					   <th>Email</th>
					   <th>Uploads</th>
					   <th>Topics</th>
				   </tr>
			   </thead>
			   <tfoot>
				   <tr>
					   <th>Username</th>
					   <th>Nom</th>
					   <th>Pr&eacute;nom</th>
					   <th>Derni&egrave;re visite</th>
					   <th>Email</th>
					   <th>Uploads</th>
					   <th>Topics</th>
				   </tr>
			   </tfoot>
			
			   <tbody>
			   	   <?
				   		$utilisateurs=$DB_site->query("SELECT * FROM utilisateur WHERE catid=\"$catid\" ORDER BY username ");
						while ($utilisateur=$DB_site->fetch_array($utilisateurs) ){
							echo "";
							echo"<tr>
									<td>$utilisateur[username]</td>
									<td>$utilisateur[nom]</td>
									<td>$utilisateur[prenom]</td>
									<td>".date('d/m/Y \a H \h i',$utilisateur[lastvisit])."</td>
									<td>$utilisateur[mail]</td>
									<td><a href=\"detail.php?userid=$utilisateur[userid]\">Voir</a></td>
									<td><a href=\"historique.php?id=$utilisateur[userid]\">Voir</a></td>
								</tr>";
						}
				   ?>
			   </tbody>
			</table>
			<?
				}
				if (isset($userid) && $userid!="" ) {
					$utilisateur=$DB_site->query_first("SELECT * FROM utilisateur WHERE userid=\"$userid\" ");
					if ($utilisateur[catid]=='1' ) $categ="Partenaire";
					if ($utilisateur[catid]=='2' ) $categ="Client";

echo "<div class=\"titre\">Liste des upload du $categ $utilisateur[prenom] $utilisateur[nom] : </div><ul>";
					$uploads=$DB_site->query("SELECT * FROM upload WHERE userid=\"$userid\" ORDER BY dateupload DESC ");
					while ($upload=$DB_site->fetch_array($uploads) ){
						$lien=$upload[id].".".$upload[extension];
						$taille=number_format( filesize($DOCUMENT_ROOT."/pro/upload/$lien")/1024); 
						echo "<li>$upload[libelle]  ($upload[extension] - $taille Ko) <a href=\"telecharger.php?fid=$upload[id]\"><img src=\"/images/document.jpg\" /></a> <a href=\"repondre.php?fid=$upload[id]\"><img src=\"/images/editer.gif\" /></a> <a href=\"supprimer.php?fid=$upload[id]\"><img src=\"/images/supprimer.gif\" /></a></li>";
					}
					echo "</ul>";		
				}
			?>	
			<div class="clear"></div>
			<center><a href=../pro/>Retour</a></center>			
		</div>	
	
<div class="footer">
	<?
		$menusbas=$DB_site->query("SELECT * FROM instit WHERE catid=\"5\" ORDER BY ordre");
		while ($menubas=$DB_site->fetch_array($menusbas) ){
			$liens=url_rewrite($menubas[titreFR])."-ins".$menubas[id].".htm";
			echo "<a href=\"/$liens\">$menubas[titreFR]</a> | ";
		}
	?>
	<a href="#" onclick="ajouter_favori('PhiAdvisory', window.location.href); return false;" > <b>Ajoutez &agrave; mes favoris</b></a> | <a href="plan-du-site.php">Plan du site</a> | <a href="contact.php">Contact</a>
</div>
<div class="copyright">
	Copyright www.phiadvisorypartners.com 2008 &copy; - All rights reserved - Tous droits r&eacute;serv&eacute;s
</div>
<script type="text/javascript">
	function ajouter_favori(texte,url){
	   if (window.sidebar){
		window.sidebar.addPanel(texte, url,"");
	   }else if( document.all ){
		window.external.AddFavorite(url, texte);
	   }else{
		return true;
	   }
	}
</script>
	<?				
	}
}
?>	
</div>
</div>
<div class="degradefin"></div>
</body>
</html>

IQ-ScuritY Shell