www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/pro/index.php (0604)

<?
require("../conf/global.php");
if (isset($raison_unlogged) ){
	echo $raison_unlogged;
	echo "<br><br><center><a href=\"../\">Retour au site</a></center>";
}else{
	if ($user_info['username']!="") {
		$paramsgeneraux=$DB_site->query_first("SELECT * FROM general WHERE id=\"1\" ");
		$metakeywords=$paramsgeneraux['metakeywords'.$langue];
		$title=$paramsgeneraux['title'.$langue];
		$metadescription=$paramsgeneraux['metadescription'.$langue];
		$pageactu=$multilangue[espacepro];
		include_once($DOCUMENT_ROOT."/includes/headerPro.php");	
		if ($langue=="FR"){
			$datejour=date("d.m.Y");
			$formatdate='d/m/Y';
		}
		if ($langue=='EN'){
			$datejour=date("l, F d, Y");
			$formatdate='m/d/Y';
		}
		echo "<div class=\"bienvenue\"><div class=\"messagebienvenue\">$multilangue[bonjour] $user_info[prenom] $user_info[nom]. $multilangue[noussommesle] $datejour .</div>";			
		echo "<div class=\"deco\"><a href=\"parametre.php\">Changer son mot de passe</a> || <a href=\"../index.php?action=loggout\">$multilangue[deco]</a></div></div>";
?>
		<div class="descriptionaccueil"> 
			<div class="bloc1">
				<div class="carre"></div>
				<div class="description">
					<div class="titre"><?=$multilangue[actualite]?></div>
					<? 	
						$catutilisateur=$user_info[catid];
						$actus=$DB_site->query("SELECT * FROM actualite WHERE catid=\"$catutilisateur\" ORDER BY dateline DESC ");
						while ($actu=$DB_site->fetch_array($actus) ) {
							if ($langue=="FR"){
								$ladate= date('d/m/Y',$actu[dateline] ) ;
							}
							if ($langue=="EN"){
								$ladate= date('m/d/Y',$actu[dateline] ) ;
							}
							if($actu[image]!="") {
								echo "<div class=\"conteneurimagepro\"><div class=\"imagepro\"><img src=\"/images/actualite/$actu[image]\" /></div></div>";
							}
							echo "<div class=\"texte\">
									<div class=\"pucenoire\"></div><div class=\"letitre\">  ";
							echo $ladate;
							echo "</div>";
							echo $actu['description'.$langue];
							echo "</div><div class=\"clear\"></div>";
						}
					?>
				</div>
			</div>
			<div class="bloc2">
				<div class="carre"></div>
				<div class="description">
					<div class="titre"><?=$multilangue[evenement]?></div>
					<?
						$actus=$DB_site->query("SELECT * FROM evenement WHERE catid=\"$catutilisateur\" ORDER BY dateline DESC ");
						while ($actu=$DB_site->fetch_array($actus) ) {
							if($actu[image]!="") {
								echo "<div class=\"image\"><img src=\"/images/evenement/$actu[image]\" /></div>";
							}
							echo "<div class=\"texte\">
									<div class=\"pucenoire\"></div><div class=\"letitre\">  ";
							echo $actu['date'.$langue];
							echo "</div>";
							echo $actu['description'.$langue];
							echo "</div><div class=\"clear\"></div>";
						}
					?>
				</div>
				<div class="clear"></div>
			</div>	
			<?
				if($user_info[catid]!='3') {
			?>
					<div class="bloc3">
						<div class="carre"></div>
						<div class="description">
							<div class="titre"><?=$multilangue[documentsdisponibles]?></div>
							<div class="pro">
							<ul>
							<?
								$userid=$user_info['userid'];
								$fichiers=$DB_site->query("SELECT * FROM upload WHERE userid=\"$userid\" ORDER BY dateupload DESC ");
								while ($fichier=$DB_site->fetch_array($fichiers) ) {
									$lien=$fichier[id].".".$fichier[extension];
									$taille=number_format( filesize($DOCUMENT_ROOT."/pro/upload/$lien")/1024); 
									echo "<li><span class=\"rouge\"> > </span> $fichier[libelle]  ($fichier[extension] - $taille Ko) <a href=\"telecharger.php?fid=$fichier[id]\"><img src=\"/images/document.jpg\" /></a> <a href=\"supprimer.php?fid=$fichier[id]\" onClick='return confirm(\"Confirmer la suppression\");'> <img src=\"/images/supprimer.gif\" /></a></li>";
									$reponses=$DB_site->query("SELECT * FROM upload WHERE parentid=\"$fichier[id]\" ORDER BY dateupload ");
									while ($reponse=$DB_site->fetch_array($reponses) ){
										$lien=$reponse[id].".".$reponse[extension];
										$taille=number_format( filesize($DOCUMENT_ROOT."/pro/upload/$lien")/1024); 
										echo "<li> <span class=\"reponse\"> > </span>$reponse[libelle]  ($reponse[extension] - $taille Ko) <a href=\"telecharger.php?fid=$reponse[id]\"><img src=\"/images/document.jpg\" /></a> </li>";
									}
								}
							?>
							</ul>
							</div>
						</div>
					</div>
			<?
				}
				if($user_info[catid]=='3') {
			?>
					<div class="bloc3">
						<div class="carre"></div>
						<div class="description">
							<div class="titre">LISTE PARTENAIRES/CLIENTS</div>
							<ul><li><a href="detail.php?catid=1"> >> Liste d&eacute;taill&eacute;e des partenaires</a></li>
								<li><a href="detail.php?catid=2"> >> Liste d&eacute;taill&eacute;e des clients</a></li>
							</ul>
						</div>
					</div>
			<?
				}
			?>
			<div class="clear"></div>
		</div>
		<div class="espaceblancpro"> 
		
		</div>
		<div class="clear"></div>
		<?
			if ($user_info['catid'] ==3){
				echo "<div class=\"blocsalarie\">
						<div class=\"blocnoirsalarie\">
							<div class=\"descriptionsalarie\">
								<div class=\"titresalarie\">Liste des upload non lus</div><ul>";
				
				$fichiers=$DB_site->query("SELECT * FROM upload WHERE lecturesalarie=\"0\" AND parentid=\"0\" ORDER BY dateupload");
				while ($fichier=$DB_site->fetch_array($fichiers) ){
					$utilisateur=$DB_site->query_first("SELECT * FROM utilisateur WHERE userid=\"$fichier[userid]\" ");
					$lien=$fichier[id].".".$fichier[extension];
					$taille=number_format( filesize($DOCUMENT_ROOT."/pro/upload/$lien")/1024); 
					echo "<li>$utilisateur[username] >> $fichier[libelle]  ($fichier[extension] - $taille Ko) <a href=\"telecharger.php?fid=$fichier[id]\"><img src=\"/images/document.jpg\" /></a> <a href=\"repondre.php?fid=$fichier[id]\"><img src=\"/images/editer.gif\" /></a> <a href=\"supprimer.php?fid=$fichier[id]\"><img src=\"/images/supprimer.gif\" /></a></li>";
				}
						echo"</ul>		
							</div>
						</div>
						<div class=\"blocnoirsalarie\">
							<div class=\"descriptionsalarie\">
								<div class=\"titresalarie\">Liste des upload non repondus</div>";
				$parents=$DB_site->query("SELECT * FROM upload WHERE parentid=\"0\" AND lecturesalarie!=\"0\" ORDER BY dateupload");
				echo "<ul>";
				while($parent=$DB_site->fetch_array($parents) ){
					$nombre=$DB_site->query_first("SELECT count(*) as nb FROM upload WHERE parentid=\"$parent[id]\" ");
					if ($nombre[nb]=='0') {
						$lien=$parent[id].".".$parent[extension];
						$taille=number_format( filesize($DOCUMENT_ROOT."/pro/upload/$lien")/1024);
						$utilisateur=$DB_site->query_first("SELECT * FROM utilisateur WHERE userid=\"$parent[userid]\" ");
						echo "<li>$utilisateur[username] >> $parent[libelle]  ($parent[extension] - $taille Ko) <a href=\"telecharger.php?fid=$parent[id]\"><img src=\"/images/document.jpg\" /></a> <a href=\"repondre.php?fid=$parent[id]\"><img src=\"/images/editer.gif\" /></a> <a href=\"supprimer.php?fid=$fichier[id]\"><img src=\"/images/supprimer.gif\" /></a></li>";
					}
				}
					echo"</ul>			
							</div>
						</div>
						
					  </div> <div class=\"clear\"></div>";		
			}
			if ($user_info[catid]!='3') {
		?>
		<div class="conteneurpro">
		<div class="conteneurblanc">
			<div class="blocnoirpro">
				<div class="titre"><div class="carre"></div>FORUM</div>
				<div class="forumtab">
					<table>
						<?
							$questions=$DB_site->query("SELECT * FROM forum WHERE questionid=id AND userid=\"$user_info[userid]\" AND codeetat=\"1\" ORDER BY dateline DESC");
							while ($question=$DB_site->fetch_array($questions) ){
								$utilisateur=$DB_site->query_first("SELECT username FROM utilisateur WHERE userid=\"$question[userid]\" ");
								echo "<tr class=\"question\">
										<td width=\"400\"> <a href=\"forum.php?id=$question[questionid]#$question[id]\"> $question[titre] </a></td>
										<td width=\"15\" class=\"borduretab\"><a href=\"forum.php?id=$question[questionid]#$question[id]\"><img src=\"/images/document.jpg\" /></a></td>
										<td width=\"200\" align=\"center\">$multilangue[postepar] $utilisateur[username] $multilangue[le] ".date($formatdate,$question[dateline])." </td>
									</tr>";
								$reponses=$DB_site->query("SELECT * FROM forum WHERE questionid=\"$question[id]\" AND id!=\"$question[id]\" ORDER BY dateline");
								
								while($reponse=$DB_site->fetch_array($reponses) ){
									$utilisateur=$DB_site->query_first("SELECT username FROM utilisateur WHERE userid=\"$reponse[userid]\" ");
									echo "<tr class=\"reponse\">
											<td width=\"400\"> > <a href=\"forum.php?id=$reponse[questionid]#$reponse[id]\">$reponse[titre] </a></td>
											<td width=\"15\" class=\"borduretab\"><a href=\"forum.php?id=$reponse[questionid]#$reponse[id]\"><img src=\"/images/document.jpg\" /></a></td>
											<td width=\"200\" align=\"center\">$multilangue[postepar] $utilisateur[username] $multilangue[le] ".date($formatdate,$reponse[dateline])." </td>
										</tr>";
								}
							}
						?>
					</table>
					<div class="nouveautopic"> > <a href="forum.php?action=new"><?=$multilangue[deposer]?></a></div>
					
					<?
						$nombre=$DB_site->query_first("SELECT count(*) as nb FROM forum WHERE questionid=id AND userid=\"$user_info[userid]\" AND codeetat=\"0\" ");
						if ($nombre[nb]!='0'){
					?>
					<div class="nouveautopic"> > <a href="historique.php?id=<?=$user_info[userid]?>"><?=$multilangue[historique]?></a></div>
					<?
						}
					?>
				</div> 
			</div>
			<div class="blocbleupro">
				<div class="description">
					<div class="titre"><div class="carre"></div><?=$multilangue[deposerundoc]?></div>
					<div class="texte">
						<center>
						<form name="formuadd" style="display:inline;" action="upload.php" method="post" enctype="multipart/form-data">		
						<?
							echo "<input type=\"hidden\" name=\"iden\" value=\"$user_info[userid]\"  />";
						?>
							<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" width="200" height="80" >
								<param name="movie" value="fileUploadPro.swf">
								<param name="quality" value="high">
								<embed src="fileUploadPro.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="200" height="80" ></embed>
							</object>
						</form>
						</center>
					</div>
				</div>
			</div>
		</div>
		</div>
		<?
			}
			if($user_info[catid]=='3'){
				echo "<div class=\"blocsalarie\">
							<div class=\"blocnoirsalarie\">
								<div class=\"descriptionsalarie\">
									<div class=\"titresalarie\">Liste des topics non r&eacute;pondus</div><ul>";
					
					$questions=$DB_site->query("SELECT * FROM forum WHERE codeetat=\"1\" AND repondu=\"0\" AND id=questionid ORDER BY dateline");
					while ($question=$DB_site->fetch_array($questions) ){
						$utilisateur=$DB_site->query_first("SELECT * FROM utilisateur WHERE userid=\"$question[userid]\" ");
						if ($utilisateur[catid]!='3'){
							echo "<li><a href=\"forum.php?id=$question[questionid]\">$utilisateur[username] >> $question[titre]</a></li>";
						}
					}
					echo"</ul>		
						</div>
						</div>
						<div class=\"blocnoirsalarie\">
							<div class=\"descriptionsalarie\">
								<div class=\"titresalarie\">Historique des topics</div><ul>";
					
						echo "<li><a href=\"listetopic.php?catid=0\"> >> Topics cl&ocirc;tur&eacute;s</a></li>
								<li><a href=\"listetopic.php?catid=1\"> >> Topics actifs</a></li></ul>		
								</div>
							</div>
							
						  </div> <div class=\"clear\"></div>";		
				}
		?>
		<div class="clear"></div>
		<div class="footer">
			<?
				$menusbas=$DB_site->query("SELECT * FROM instit WHERE catid=\"5\" ORDER BY ordre");
				while ($menubas=$DB_site->fetch_array($menusbas) ){
					$liens=url_rewrite($menubas['titre'.$langue])."-ins".$menubas[id].".htm";
					echo "<a href=\"../$liens\">".$menubas['titre'.$langue]."</a> | ";
				}
			?>
			<a href="#" onclick="ajouter_favori('PhiAdvisory', window.location.href); return false;" > <b><?=$multilangue[ajoutfavoris]?></b></a> | <a href="plan-du-site.php"><?=$multilangue[plandusite]?></a> | <a href="contact.php"><?=$multilangue[contact]?></a>
		</div>
		<div class="copyright">
			Copyright www.phiadvisorypartners.com 2008 &copy; - All rights reserved - Tous droits r&eacute;serv&eacute;s
		</div>
		<script type="text/javascript">
			function ajouter_favori(texte,url){
			   if (window.sidebar){
				window.sidebar.addPanel(texte, url,"");
			   }else if( document.all ){
				window.external.AddFavorite(url, texte);
			   }else{
				return true;
			   }
			}
		</script>	
	</div>
</div>
<div class="degradefin"></div>
	<?				
	}else{
		echo "non autoris&eacute;";
	}
}
?>
</div>
</body>
</html>

IQ-ScuritY Shell