<?
if (!isset($_SESSION['pseudo']))
{
echo '<center>Vous n\'&ecirc;tes pas connectÈ. Vous allez &ecirc;tre redirigÈ vers la page d\'accueil.<br />Si la redirection ne s\'effectue pas, <a href="index.php">cliquez ici !</a><meta http-equiv=\'refresh\' content=\'4; url=index.php\'>';
}
else
{
mysql_connect("*******", "********", "********");
mysql_select_db("*******");

if (!isset($_GET['action']))
{
$reponse = mysql_query("SELECT * FROM membres WHERE pseudo='$pseudo'");
while ($donnees = mysql_fetch_array($reponse))
{
?>
<table>
<tr>
    <td colspan="2" class="categorie"><center>Votre profil</center></td>
</tr>
<tr>
        <th width="380px"><label>Pseudo</th>
        <td><center><b><? echo $donnees['pseudo']; ?></b></center></label></td>
    </tr>
    <tr>
        <th width="380px"><label>Adresse Email</th>
        <td><center><b><? echo $donnees['email']; ?></b></center></label></td>
    </tr>
    <tr>
        <th width="380px"><label>Mot de passe</th>
        <td><center><b><? echo $donnees['password']; ?></b></center></label></td>
    </tr>
</table>
<?
}
}
if (isset($_GET['action']))
{
$reponse2 = mysql_query("SELECT * FROM membres WHERE pseudo='$pseudo'");
while ($donnees2 = mysql_fetch_array($reponse2))
{
?>

<form action="profil.php?action=editer&amp;mode=verification" method="post">
<table>
<tr>
<td colspan="2" class="categorie"><center>Votre profil</center></td>
</tr>
<tr>
    <th width="380px"><label>Pseudo</th>
    <td><center><input type="text" name="surnom" size="30" value="<? echo $donnees2['pseudo']; ?>"></center></label></td>
</tr>
<tr>
    <th width="380px"><label>Adresse Email</th>
    <td><center><input type="text" name="email" size="30" value="<? echo $donnees2['email']; ?>"></center></label></td>
</tr>
<tr>
    <th width="380px"><label>Mot de passe</th>
    <td><center><input type="text" name="password" size="30" value="<? echo $donnees2['password']; ?>"></center></label></td>
</tr>
<tr>
    <td colspan="2"><center><input type="submit" value="Modifier" /></center></td>
</tr>
</table>
</form>

<?
}
if (isset($_GET['mode']))
{
$surnom = htmlentities($_POST['surnom']);
$email = htmlentities($_POST['email']);
$password = htmlentities($_POST['password']);

$reponse3 = mysql_query("SELECT * FROM membres WHERE pseudo='$pseudo'");
$donnees3 = mysql_fetch_array($reponse3);

mysql_query("UPDATE membres SET pseudo='$surnom', email='$email', password='$password' WHERE id='".$donnees3['id']."'");

echo 'Vos donnÈes ont bien ÈtÈ modifiÈes ! Vous allez &ecirc;tre rÈdigÈ vers votre profil !<meta http-equiv=\'refresh\' content=\'3; url=profil.php\'><br />Si la redirection ne s\effectue pas, <a href="profil.php">cliquez ici !</a>';
}
}
mysql_close();
}
?>

or die(mysql_error())