alpha_full/pages/index/adminConnect.controle.php
2026-04-06 22:58:51 +02:00

118 lines
4.6 KiB
PHP
Executable File
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?php
$nomFicAppelant = basename(__FILE__);
// ---------------------------------------------------
// Init
// ---------------------------------------------------
if (empty($contactMsg[47])) {$refresh="Oui";include ($includePath. "/req/13-init.contactMsgList.php");}
if (empty($clientMsg[86])) {$refresh="Oui"; include ($includePath. "/req/06-init.cliMsgList.php");}
if (empty($navMsg)) {$refresh="Oui"; include ($includePath. "/req/05-init.navMsgList.php");}
$mess1='<span >' .$clientMsg[82]. '</span>';//caracteres
$mess2='<span >' .$clientMsg[83]. '</span>';//interdit dans la chaine
$mess3='<span >' .$clientMsg[84]. '</span>';//Message : caractères dans
$mess4='<span >' .$clientMsg[85]. '</span>';// trop court
$mess5='<span >' .$clientMsg[86]. '</span>';// au lieu de
$lienContact='<span class="boutons" style="grid-row:7; grid-column: 2 / span 2; wrap:breakword; margin-left:150px"><a style="white-space:normal;" class="boutons" href="mailto:'.strip_tags($contactMsg[47]). '?subject= R&#233;cup&#233;rer identifiants " title="' .$navTitle[20]. '">' .$navMsg[20]. '</a></span>';
// ---------------------------------------------------
// Form
// ---------------------------------------------------
$contAdmLogin='Oui';
// ---------------------------------------------------
// Regarde si le mail n'est pas vide
// ---------------------------------------------------
if (empty ($adminMail)) {
$contAdmLogin='Non';
$usrSiteMsgClass='ko';
$usrSiteMsg .= $clientMsg[39]. '';
}
// ---------------------------------------------------
// Regarde si le mail a un @
// ---------------------------------------------------
$testM=mb_strpos($adminMail,'@');
if (empty ($testM) && $contAdmLogin=='Oui') {
$contAdmLogin='Non';
$usrSiteMsgClass='ko';
$usrSiteMsg .= $clientMsg[43]. '';
}
// ---------------------------------------------------
// Regarde si le mail a un .
// ---------------------------------------------------
$testP=mb_strpos($adminMail,'.');
// le mail n'a pas de point
if (empty ($testP) && $contAdmLogin=='Oui') {
$contAdmLogin='Non';
$usrSiteMsgClass='ko';
$usrSiteMsg .= $clientMsg[42]. '';
}
// ---------------------------------------------------
// Caracteres dans mail
// ---------------------------------------------------
if ($adminMail!='' && $contAdmLogin=='Oui') {
$char =CheckValidName($adminMail);
if (!empty ($char)) {
$usrSiteMsg .= $mess1. '"' .$char. '" ' .$mess2. '"' .$adminMail. '"';
$contAdmLogin='N';
$usrSiteMsgClass='ko';
}
$nbCar=5;
$longueur=mb_strlen($adminMail);
if ($longueur < $nbCar && $contAdmLogin!='N') {
$usrSiteMsg .= $clientMsg[8].$mess4 .$longueur .$mess3. '"' .$adminMail. '" '.$mess5.' '.$nbCar.'';
$contAdmLogin='N';
$usrSiteMsgClass='ko';
}
}
// ---------------------------------------------------
// Controle saisie du mot de passe
// ---------------------------------------------------
if (empty ($pwdAdm) && $contAdmLogin=='Oui') {
$contAdmLogin='Non';
$usrSiteMsg .= $clientMsg[46]. '';
$usrSiteMsgClass='ko';
}
// ---------------------------------------------------
// Regarde s'il existe en base
// ---------------------------------------------------
if ($contAdmLogin=='Oui') {
$tabResult= dynRequete_select('SELECT', 'admin', ['loginWeb', 'pwdWeb'], ['loginWeb' =>$adminMail], '', 'adminConnect.controle.php', 0, $debug[2], 'tabResult');
if ($tabResult) {
foreach ($tabResult as $i => $row) {
$adminMailRecupBase = $row['loginWeb'];
$pwdAdmRecupBase = $row['pwdWeb'];
}
//hasher les anciens mdp le temps de la migration
// if (strlen($pwdAdmRecupBase) < 40) {
// include("migrate_pwd.php");
// }
// ---------------------------------------------------
// Contrôle egalité pwd
// ---------------------------------------------------
// 👉 password_verify() refait le hash et compare.
if (!password_verify($pwdAdm, $pwdAdmRecupBase)) {
// gérer les mises à jour automatiques dalgorithme
// if (password_needs_rehash($hash, PASSWORD_DEFAULT)) {
// include("migrate_pwd.php")
// }
$contAdmLogin='Non';
$usrSiteMsg .= $navMsg[4]; // mot de passe inexact
$usrSiteMsgClass='ko';
}
if (isset($debug[1]) && $debug[1] == '1' ) { $debugMsg .= monDebug (1,['contAdmLogin' =>$contAdmLogin, 'pwdAdm' =>$pwdAdm, 'pwdAdmRecupBase' =>$pwdAdmRecupBase ], 'adminConnect.controle.php') ;}
}
else {
$usrSiteMsg .= $navMsg[29]; // les données ne peuvent pas etre affichées
$usrSiteMsgClass='ko';
$contAdmLogin='N';
}
}
?>