Forum Alsacréations : CSS et Standards Web

$editFormAction = $_SERVER['PHP_SELF'];

if (isset($_SERVER['QUERY_STRING'])) {

  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);

}



if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "form1")) {

  $updateSQL = sprintf("UPDATE clients SET nom=%s, prenom=%s, adresse=%s, ville=%s, 

cp=%s, tel=%s, email=%s, pass=md5(%s), statut=%s WHERE ID=%s",

                       GetSQLValueString($_POST['nom'], "text"),

                       GetSQLValueString($_POST['prenom'], "text"),

                       GetSQLValueString($_POST['adresse'], "text"),

                       GetSQLValueString($_POST['ville'], "text"),

                       GetSQLValueString($_POST['cp'], "text"),

                       GetSQLValueString($_POST['tel'], "text"),

                       GetSQLValueString($_POST['email'], "text"),

                       GetSQLValueString($_POST['pass'], "text"),

                       GetSQLValueString($_POST['statut'], "text"),

                       GetSQLValueString($_POST['ID'], "int"));



  mysql_select_db($database_Connexion, $Connexion);

  $Result1 = mysql_query($updateSQL, $Connexion) or die(mysql_error());

<form action="<?php echo $editFormAction; ?>" method="POST" ...>

<input name="mail" type="text" class="input" id="mail" value="<?php echo htmlentities($row_rsclient['email'], ENT_COMPAT, 'utf-8'); ?>" />

</form>

if(isset($_POST['pass']) && strlen($_POST['pass'])>5)) $update_pass=' ,pass=md5(\''.addslashes($_POST['pass']).'\') ';

$updateSQL = 'blabla ... '.$update_pass.' blabla';