user.php

Go to the documentation of this file.

<?php
// This file should be in UTF8 without BOM - Accents examples: éèê
// +----------------------------------------------------------------------+
// | Copyright (c) 2004-2015 Advisto SAS, service PEEL - contact@peel.fr  |
// +----------------------------------------------------------------------+
// | This file is part of PEEL Shopping 8.0.0, which is subject to an   |
// | opensource GPL license: you are allowed to customize the code           |
// | for your own needs, but must keep your changes under GPL                |
// | More information: https://www.peel.fr/lire/licence-gpl-70.html          |
// +----------------------------------------------------------------------+
// | Author: Advisto SAS, RCS 479 205 452, France, https://www.peel.fr/      |
// +----------------------------------------------------------------------+
// $Id: user.php 47366 2015-10-13 11:34:11Z gboussin $
if (!defined('IN_PEEL')) {
     die();
}

function est_identifie()
{
     return isset($_SESSION) && isset($_SESSION['session_utilisateur']) && !empty($_SESSION['session_utilisateur']['id_utilisateur']);
}

function get_profil_select_options($selected_priv = null)
{
     $output = '';
     $sql_profil = "SELECT id, name_".$_SESSION['session_langue']." AS name, priv
          FROM peel_profil
          WHERE " . get_filter_site_cond('profil') . "
          ORDER BY name DESC";
     $res_profil = query($sql_profil);
     while ($tab_profil = fetch_assoc($res_profil)) {
          $output .= '<option value="' . String::str_form_value($tab_profil['priv']) . '" ' . frmvalide($selected_priv == $tab_profil['priv'], ' selected="selected"') . '>' . $tab_profil['name'] . '</option>';
     }
     return $output;
}

function a_priv($requested_priv, $demo_allowed = false, $site_configuration_modification = false, $user_id = null)
{
     if(empty($user_id)) {
          if (isset($_SESSION) && isset($_SESSION['session_utilisateur']) && !empty($_SESSION['session_utilisateur']['priv'])) {
               $user_priv = $_SESSION['session_utilisateur']['priv'];
          }
     } else {
          $user_infos = get_user_information($user_id);
          $user_priv = vb($user_infos['priv']);
     }
     if (!empty($user_priv)) {
           if($site_configuration_modification && !empty($GLOBALS['site_parameters']['admin_configuration_only_by_user_ids']) && !in_array(vn($_SESSION['session_utilisateur']['id_utilisateur']), $GLOBALS['site_parameters']['admin_configuration_only_by_user_ids'])) {
               // Des droits de modification de la configuration du site sont nécessaires et définis par une variable de configuration qui ne comprends pas dans sa liste l'id de l'utilisateur
               return false;
           }
           if (strpos($requested_priv, ',') !== false) {
               // On autorise plusieurs droits différents => récursif
               $requested_priv_array = explode(',', $requested_priv);
               $allowed = false;
               foreach($requested_priv_array as $this_requested_priv) {
                    if (a_priv(trim($this_requested_priv), $demo_allowed)) {
                         $allowed = true;
                    }
               }
               return $allowed;
          } elseif (strpos($requested_priv, '+') !== false) {
               // On demande plusieurs droits => récursif
               $requested_priv_array = explode('+', $requested_priv);
               $not_allowed = false;
               foreach($requested_priv_array as $this_requested_priv) {
                    if (!a_priv(trim($this_requested_priv), $demo_allowed)) {
                         $not_allowed = true;
                    }
               }
               return !$not_allowed;
          } else {
               $user_priv_array = explode('+', $user_priv);
               foreach($user_priv_array as $this_user_priv) {
                    if (substr($requested_priv, 0, 5) == 'admin' && $this_user_priv == 'admin') {
                         // admin est un administrateur global qui a tous les droits de type admin*
                         return true;
                    } elseif ($demo_allowed && $this_user_priv == 'demo') {
                         // On a les droits demo qui sont autorisés
                         return true;
                    }
                    if (strpos($requested_priv, '*') !== false) {
                         // Pour admin*, tout droit du type admin ou admin_.... est autorisé
                         if (strpos($requested_priv, substr($this_user_priv, 0, strpos($requested_priv, '*'))) === 0) {
                              return true;
                         }
                    } elseif ($this_user_priv == $requested_priv) {
                         return true;
                    }
               }
               return false;
          }
     } else {
          return null;
     }
}

function insere_utilisateur(&$frm, $password_already_encoded = false, $send_user_confirmation = false, $warn_admin_if_template_active = true, $skip_existing_account_tests = false)
{
     $sql_condition_array = array();
     // Si un compte a un privilège ci-dessous, et qu'un utilisateur veut créer un nouveau compte avec le même email, alors il est remplacé automatiquement par le nouveau compte
     // Sinon, tout autre compte empêche la création d'un compte avec le même email, et la fonction renvoie l'id du compte déjà existant.
     $user_low_priviledges_array = vb($GLOBALS['site_parameters']['user_low_priviledges_array'], array('load', 'newsletter'));
     // L'inscription de certains utilisateurs  nécessite d'être validée manuellement par l'administrateur. Le compte est désactivé en attendant la validation manuelle du compte.
     $manual_validation_registration = vb($GLOBALS['site_parameters']['manual_validation_registration'], array());

     if (!empty($frm['priv'])) {
          if(is_array($frm['priv'])) {
               $frm['priv'] = implode('+', $frm['priv']);
          }
     } else {
          if(!empty($GLOBALS['site_parameters']['user_creation_default_profile'])) {
               // ce paramètre permet de définir un privilège utilisateur dès l'inscription en front-office, ou lorsqu'aucun privilège n'est demandé explicitement via l'administration
               $allowed_profil = array();
               $query = query("SELECT priv FROM peel_profil WHERE priv NOT LIKE 'admin%' AND " . get_filter_site_cond('profil') . "");
               while($result = fetch_assoc($query)) {
                    // Création du tableau des privilèges provenant de la BDD, sans les privilèges admin pour éviter la création non controllée d'administrateur sur la boutique
                    $allowed_profil[] = $result['priv'];
               }
               if (in_array($GLOBALS['site_parameters']['user_creation_default_profile'], $allowed_profil)) {
                    $frm['priv'] = $GLOBALS['site_parameters']['user_creation_default_profile'];
               } else {
                    // privilège par défaut
                    $frm['priv'] = 'util';
               }
          } else {
               // privilège par défaut
               $frm['priv'] = 'util';
          }
     }
     if (!empty($frm['email'])) {
          $sql_condition_array[] = "email='" . word_real_escape_string(vb($frm['email'])) . "'";
     }
     if (empty($GLOBALS['site_parameters']['pseudo_is_not_used']) && !empty($frm['pseudo'])) {
          $sql_condition_array[] = "pseudo='" . nohtml_real_escape_string(vb($frm['pseudo'])) . "'";
     }
     if (!empty($sql_condition_array)) {
          if (!empty($frm['priv']) && !in_array($frm['priv'], $user_low_priviledges_array)) {
               // On veut créer un vrai compte
               // Si cet utilisateur est déjà inscrit pour un téléchargement ou une newsletter, il faut supprimer l'enregistrement correspondant à son email pour permettre la création du nouveau compte
               $sql = "SELECT id_utilisateur, priv
                    FROM peel_utilisateurs
                    WHERE (" . implode(' OR ', $sql_condition_array).") AND priv IN ('" . implode("', '", real_escape_string($user_low_priviledges_array)) . "') AND " . get_filter_site_cond('utilisateurs') . '';
               $result = query($sql);
               if ($user_already_exists_infos = fetch_assoc($result)) {
                    query("DELETE FROM peel_utilisateurs
                         WHERE id_utilisateur='" . intval($user_already_exists_infos['id_utilisateur']) . "' AND " . get_filter_site_cond('utilisateurs') . "");
               }
          }
          if (!$skip_existing_account_tests) {
               // On veut créer un compte normal, ou même newsletter ou load : n'importe quel type de compte
               // On teste si l'utilisateur existe déjà (si ses droits étaient inférieurs, le compte existant déjà vient d'être supprimé ci-dessus)
               $sql = "SELECT id_utilisateur
                    FROM peel_utilisateurs
                    WHERE (" . implode(' OR ', $sql_condition_array).") AND " . get_filter_site_cond('utilisateurs') . "";
               $result = query($sql);
               if ($user_already_exists_infos = fetch_assoc($result)) {
                    // L'utilisateur existe déjà, on donne son id
                    return $user_already_exists_infos['id_utilisateur'];
               }
          }
     }
     if (!isset($frm['remise_percent'])) {
          $remise_percent = 0;
     } else {
          $remise_percent = (float)$frm['remise_percent'];
     }
     if (!empty($frm['mot_passe']) && $password_already_encoded) {
          $password_hash = trim($frm['mot_passe']);
     } elseif (!empty($frm['mot_passe'])) {
          $password_hash = get_user_password_hash(trim($frm['mot_passe']));
     } elseif(empty($frm['mot_passe']) && !empty($GLOBALS['site_parameters']['register_during_order_process'])) {
          // Création d'un utilisateur lors du process de commande. Le mot de passe est envoyé à l'utilisateur
          $frm['mot_passe'] = MDP();
          $password_hash = get_user_password_hash($frm['mot_passe']);
     } else {
          // On crée un utilisateur qui ne pourra pas se connecter avant de demander un mot de passe
          $password_hash = get_user_password_hash(MDP());
     }
     if (!empty($frm['date_insert'])) {
          $date_insert = $frm['date_insert'];
     } else {
          $date_insert = date('Y-m-d H:i:s', time());
     }
     if (!empty($frm['date_update'])) {
          $date_update = $frm['date_update'];
     } else {
          $date_update = date('Y-m-d H:i:s', time());
     }
     if (isset($frm['points'])) {
          $points = $frm['points'];
     } else {
          $points = 0;
     }

     if (in_array($frm['priv'], $manual_validation_registration)) {
          // L'état d'activation par défaut lors de l'inscription d'un utilisateur dépend du statut. Pour les utilisateurs revendeur en attente, ou les affiliés en attente on ne souhaite pas qu'ils puissent se connecter à leur compte pendant le délai de validation. L'utilisateur est informé de ce fonctionnement via l'email qui a pour code technique "send_mail_for_account_creation_" . $priv (cf. à la fin de cette fonction) 
          $frm['etat'] = 0;
     } elseif (!isset($frm['etat'])) {
          // Par sécurité on fait ce test. On ne peut pas laisser le champs etat sans valeur.
          $frm['etat'] = 1;
     }
     if(defined('IN_REGISTER')) {
          $form_usage = 'user';
     } elseif(check_if_module_active('reseller') && defined('IN_RETAILER')) {
          $form_usage = 'reseller';
     }
     if(!empty($form_usage)) {
          handle_specific_fields($frm, $form_usage);
     }
     
     if(empty($frm['lang'])) {
          $frm['lang'] = $_SESSION['session_langue'];
     }
     if(!isset($frm['site_id'])) {
          $frm['site_id'] = $GLOBALS['site_id'];
     }
     if(!defined('PEEL_ADMIN')) {
          if(!empty($GLOBALS['site_parameters']['devise_force_user_choices']) && check_if_module_active('devises')) {
               $frm['devise'] = $_SESSION['session_devise'];
          }
          if(!empty($GLOBALS['site_parameters']['site_country_forced_by_user']) && !empty($GLOBALS['site_parameters']['site_country_allowed_array'])) {
               if(in_array(strval(vb($frm['pays'])), $GLOBALS['site_parameters']['site_country_allowed_array'])) {
                    $frm['site_country'] = $frm['pays'];
               } else {
                    $frm['site_country'] = $_SESSION['session_site_country'];
               }
          }
     }
     $sql = "INSERT INTO peel_utilisateurs (
          date_insert
          , date_update
          , email
          , mot_passe
          , priv
          , civilite
          , prenom
          , pseudo
          , nom_famille
          , telephone
          , fax
          , portable
          , adresse
          , code_postal
          , ville
          , pays
          , newsletter
          , commercial
          , remise_percent
          , points
          , format
          , societe
          , intracom_for_billing
          , siret
          , ape
          , code_banque
          , code_guichet
          , numero_compte
          , cle_rib
          , domiciliation
          , iban
          , bic
          , url
          , description
          , avoir
          , naissance
          , id_groupe
          , origin
          , origin_other
          , lang
          , on_vacances
          , on_vacances_date
          , promo
          " . (!empty($frm['id_categories'])?', id_categories':'') . "
          " . (!empty($frm['id_cat_1'])?', id_cat_1':'') . "
          " . (!empty($frm['id_cat_2'])?', id_cat_2':'') . "
          " . (!empty($frm['id_cat_3'])?', id_cat_3':'') . "
          , activity
          , seg_who
          , seg_want
          , seg_think
          , seg_followed
          , seg_buy
          , project_product_proposed
          , project_date_forecasted
          , commercial_contact_id
          , type
          , on_client_module
          , on_photodesk
          , site_id
          , fonction
          , etat
          " . (!empty($frm['id_utilisateur'])?', id_utilisateur':'') . "
          " . (!empty($frm['control_plus'])?', control_plus':'') . "
          " . (!empty($frm['note_administrateur'])?', note_administrateur':'') . "
          " . (isset($frm['logo'])?', logo':'') . "
          " . (isset($frm['devise'])? ", devise":'') . "
          " . (isset($frm['site_country'])? ", site_country":'') . "
          , description_document
          " . (!empty($frm['document'])? ", document " : "") . "
          " . (!empty($frm['specific_field_values'])? ',' . implode(',', word_real_escape_string(array_keys($frm['specific_field_values']))) : "") . "
          , message
          , alerte
          , address_bill_default
          , address_ship_default
     ) VALUES (
          '" . nohtml_real_escape_string($date_insert) . "'
          , '" . nohtml_real_escape_string($date_update) . "'
          , '" . nohtml_real_escape_string(trim($frm['email'])) . "'
          , '" . nohtml_real_escape_string($password_hash) . "'
          , '" . nohtml_real_escape_string(vb($frm['priv'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['civilite'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['prenom'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['pseudo'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['nom_famille'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['telephone'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['fax'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['portable'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['adresse'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['code_postal'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['ville'])) . "'
          , '" . intval(vn($frm['pays'])) . "'
          , '" . intval(vn($frm['newsletter'])) . "'
          , '" . intval(vn($frm['commercial'])) . "'
          , '" . nohtml_real_escape_string(vb($remise_percent)) . "'
          , '" . intval(vb($points)) . "'
          , '" . nohtml_real_escape_string(vb($GLOBALS['site_parameters']['email_sending_format_default'], 'html')) . "'
          , '" . nohtml_real_escape_string(vb($frm['societe'])) . "'
          , '" . nohtml_real_escape_string(String::strtoupper(vb($frm['intracom_for_billing']))) . "'
          , '" . nohtml_real_escape_string(vb($frm['siret'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['ape'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['code_banque'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['code_guichet'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['numero_compte'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['cle_rib'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['domiciliation'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['iban'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['bic'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['url'])) . "'
          , '" . real_escape_string(vb($frm['description'])) . "'
          , '" . nohtml_real_escape_string(vn($frm['avoir'])) . "'
          , '" . nohtml_real_escape_string(get_mysql_date_from_user_input(vb($frm['naissance']))) . "'
          , '" . nohtml_real_escape_string(vn($frm['id_groupe'])) . "'
          , '" . nohtml_real_escape_string(vn($frm['origin'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['origin_other'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['lang'])) . "'
          , '" . intval(vn($frm['on_vacances'])) . "'
          , '" . nohtml_real_escape_string(get_mysql_date_from_user_input(vb($frm['on_vacances_date']))) . "'
          , '" . nohtml_real_escape_string(vb($frm['promo_code'])) . "'
          " . (!empty($frm['id_categories'])? ",'" . implode("','", $frm['id_categories']) : "") . "
          " . (!empty($frm['id_cat_1'])? ', ' . intval(vn($frm['id_cat_1'])):'') . "
          " . (!empty($frm['id_cat_2'])? ', ' . intval(vn($frm['id_cat_2'])):'') . "
          " . (!empty($frm['id_cat_3'])? ', ' . intval(vn($frm['id_cat_3'])):'') . "
          , '" . nohtml_real_escape_string(vb($frm['activity'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['seg_who'], 'no_info')) . "'
          , '" . nohtml_real_escape_string(vb($frm['seg_want'], 'no_info')) . "'
          , '" . nohtml_real_escape_string(vb($frm['seg_think'], 'no_info')) . "'
          , '" . nohtml_real_escape_string(vb($frm['seg_followed'], 'no_info')) . "'
          , '" . nohtml_real_escape_string(vb($frm['seg_buy'], 'no_info')) . "'
          , '" . nohtml_real_escape_string(vb($frm['project_product_proposed'])) . "'
          , '" . nohtml_real_escape_string(get_mysql_date_from_user_input(vb($frm['project_date_forecasted']))) . "'
          , '" . intval(vn($frm['commercial_contact_id'])) . "'
          , '" . nohtml_real_escape_string(vb($frm['type'])) . "'
          , '" . intval(vn($frm['on_client_module'])) . "'
          , '" . intval(vn($frm['on_photodesk'])) . "'
          , '" . nohtml_real_escape_string(get_site_id_sql_set_value(vb($frm['site_id']))) . "'
          , '" . nohtml_real_escape_string(vb($frm['fonction'])) . "'
          , '" . intval($frm['etat']) . "'
          " . (!empty($frm['id_utilisateur'])?', ' . intval($frm['id_utilisateur']):'') . "
          " . (!empty($frm['control_plus'])?', ' . intval($frm['control_plus']):'') . "
          " . (!empty($frm['note_administrateur'])?', ' . intval($frm['note_administrateur']):'') . "
          " . (isset($frm['logo'])?', "' . nohtml_real_escape_string(vb($frm['logo'])).'"':'') . "
          " . (isset($frm['devise'])? ", '" . nohtml_real_escape_string($frm['devise']) . "'" : "") . "
          " . (isset($frm['site_country'])? ", '" . nohtml_real_escape_string($frm['site_country']) . "'" : "") . "
          , '" . nohtml_real_escape_string(vb($frm['description_document'])) . "'
          " . (!empty($frm['document'])? ", '" . nohtml_real_escape_string(vb($frm['document'])) . "'" : "") . "
          " . (!empty($frm['specific_field_values'])? ", '" . implode("','", real_escape_string($frm['specific_field_values'])) . "'" : "") . "
          , ''
          , ''
          , 'original_address'
          , 'original_address'
          )";
     $qid = query($sql);

     $frm['id'] = insert_id();
     $code_client = "CLT" . date("Y") . $frm['id'];

     query("UPDATE peel_utilisateurs
          SET code_client = '" . nohtml_real_escape_string($code_client) . "'
          WHERE id_utilisateur = '" . intval($frm['id']) . "' AND " . get_filter_site_cond('utilisateurs') . "");

     if ($send_user_confirmation) {
          // Envoi de l'email qui contient le mot de passe qui a été demandé ou créé automatiquement suivant que $frm['mot_passe'] était vide ou déjà rempli
          send_mail_for_account_creation($frm['email'], $frm['mot_passe'], vb($frm['priv']));
     }
     if ($warn_admin_if_template_active) {
          // Prévenir l'administrateur d'une création d'utilisateur
          $qid = query("SELECT name_".$_SESSION['session_langue']." AS name
               FROM `peel_profil`
               WHERE priv = '" . nohtml_real_escape_string(vb($frm['priv'])) . "' AND " . get_filter_site_cond('profil') . "
               LIMIT 0 , 30");
          $qid = fetch_assoc($qid);
          $custom_template_tags['PRIV'] = $qid['name'];
          $custom_template_tags['CIVILITE'] = $frm['civilite'];
          $custom_template_tags['PRENOM'] = $frm['prenom'];
          $custom_template_tags['NOM_FAMILLE'] = $frm['nom_famille'];
          $custom_template_tags['EMAIL'] = $frm['email'];
          $custom_template_tags['DATE'] = get_formatted_date(time(), 'short', 'long');
          $custom_template_tags['SOCIETE'] = $frm['societe'];
          $custom_template_tags['TELEPHONE'] = $frm['telephone'];
          $custom_template_tags['ADMIN_URL'] = $GLOBALS['administrer_url'] . '/utilisateurs.php?mode=modif&id_utilisateur=' . $frm['id'] . '&start=0';

          if ($frm['priv'] == 'stop') {
               $template_technical_code = 'warn_admin_reve_subscription';
          } else {
               $template_technical_code = 'warn_admin_user_subscription';
          }
          send_email($GLOBALS['support_sav_client'], '', '', $template_technical_code, $custom_template_tags, null, $GLOBALS['support_sav_client']);
     }
     call_module_hook('user_create', $frm);
     return $frm['id'];
}

function maj_utilisateur(&$frm, $update_current_session = false)
{
     if (empty($frm['id_utilisateur'])) {
          return false;
     }
     if (isset($frm['priv'])) {
          if(is_array($frm['priv'])) {
               $priv = implode('+', $frm['priv']);
          } else {
               $priv = $frm['priv'];
          }
     }
     if(!$update_current_session && !a_priv('admin', false, true)) {
          if(a_priv('admin*', false, false, $frm['id_utilisateur'])) {
               // L'utilisateur qu'on veut modifier est un administrateur et l'utilisateur loggué n'a pas le droit de le faire
               return false;
          } elseif(!empty($priv) && String::strpos($priv, 'admin') === 0) {
               unset($priv);
          }
     }
     if(check_if_module_active('reseller') && $frm['priv'] == 'reve') {
          $form_usage = 'reseller';
     }else{
          $form_usage = 'user';
     }
     handle_specific_fields($frm, $form_usage);

     if(empty($frm['lang'])) {
          $frm['lang'] = $_SESSION['session_langue'];
     }
     if(!isset($frm['site_id'])) {
          // Si site_id n'est pas défini dans le formulaire, le site_id défini pour l'utilisateur est celui du site en cours de consultation, sauf pour les administrateurs multisite.
          $this_user = get_user_information($frm['id_utilisateur']);
          if (empty($this_user) || $this_user['site_id']>0) {
               // si l'utilisateur est multisite, le champ site_id resera à 0 avec la fonction vn()
               $frm['site_id'] = $GLOBALS['site_id'];
          }
     }
     // MAJ du pseudo interdite pour les sites d'annonces en front office, pour éviter problèmes de traçabilité d'utilisateurs
     $sql = "UPDATE peel_utilisateurs SET
               civilite = '" . nohtml_real_escape_string(vb($frm['civilite'])) . "'
               , prenom = '" . nohtml_real_escape_string($frm['prenom']) . "'
               " . (isset($frm['pseudo']) && (!check_if_module_active('annonces') || (check_if_module_active('annonces') && !defined('IN_PEEL_ADMIN')))?", pseudo = '" . nohtml_real_escape_string($frm['pseudo']) . "'":"") . "
               , nom_famille = '" . nohtml_real_escape_string($frm['nom_famille']) . "'
               " . (isset($frm['societe'])?", societe = '" . nohtml_real_escape_string($frm['societe']) . "'":"") . "
               , intracom_for_billing  = '" . nohtml_real_escape_string(String::strtoupper(vb($frm['intracom_for_billing']))) . "'
               " . (isset($frm['telephone'])?", telephone = '" . nohtml_real_escape_string(vb($frm['telephone'])) . "'":"") . "
               " . (isset($frm['fax'])?", fax = '" . nohtml_real_escape_string(vb($frm['fax'])) . "'":"") . "
               " . (isset($frm['portable'])?", portable = '" . nohtml_real_escape_string(vb($frm['portable'])) . "'":"") . "
               " . (isset($frm['adresse'])?", adresse = '" . nohtml_real_escape_string($frm['adresse']) . "'":"") . "
               " . (isset($frm['code_postal'])?", code_postal = '" . nohtml_real_escape_string($frm['code_postal']) . "'":"") . "
               , ville = '" . nohtml_real_escape_string($frm['ville']) . "'
               , pays = '" . intval($frm['pays']) . "'
               , newsletter = '" . intval(vn($frm['newsletter'])) . "'
               , commercial = '" . intval(vn($frm['commercial'])) . "'
               , format = '" . nohtml_real_escape_string(vb($GLOBALS['site_parameters']['email_sending_format_default'], 'html')) . "'
               , date_update = '" . date('Y-m-d H:i:s', time()) . "'
               " . (!empty($frm['email'])?", email = '" . nohtml_real_escape_string($frm['email']) . "'":"") . "
               " . (!empty($frm['email'])?", email_bounce = ''":"") . "
               " . (!empty($frm['activity'])?", activity = '" . nohtml_real_escape_string($frm['activity']) . "'":"") . "
               " . (isset($frm['etat'])?", etat = '" . nohtml_real_escape_string($frm['etat']) . "'":"") . "
               " . (isset($frm['type'])?", type = '" . nohtml_real_escape_string($frm['type']) . "'":"") . "
               " . (isset($frm['note_administrateur'])?", note_administrateur = '" . intval($frm['note_administrateur']) . "'":"") . "
               " . (isset($frm['control_plus'])?", control_plus = '" . intval($frm['control_plus']) . "'":"") . "
               " . (isset($frm['fonction'])?", fonction = '" . nohtml_real_escape_string($frm['fonction']) . "'":"") . "
               " . (isset($frm['code_client'])?", code_client = '" . nohtml_real_escape_string($frm['code_client']) . "'":"") . "
               " . (isset($priv)?", priv = '" . nohtml_real_escape_string($priv) . "'":"") . "
               " . (isset($frm['remise_percent'])?", remise_percent = '" . nohtml_real_escape_string(floatval($frm['remise_percent'])) . "'":"") . "
               " . (isset($frm['points'])?", points = '" . intval($frm['points']) . "'":"") . "
               " . (isset($frm['siret'])?", siret = '" . nohtml_real_escape_string($frm['siret']) . "'":"") . "
               " . (isset($frm['ape'])?", ape = '" . nohtml_real_escape_string($frm['ape']) . "'":"") . "
               " . (isset($frm['code_banque'])?", code_banque = '" . nohtml_real_escape_string($frm['code_banque']) . "'":"") . "
               " . (isset($frm['code_guichet'])?", code_guichet = '" . nohtml_real_escape_string($frm['code_guichet']) . "'":"") . "
               " . (isset($frm['numero_compte'])?", numero_compte = '" . nohtml_real_escape_string($frm['numero_compte']) . "'":"") . "
               " . (isset($frm['cle_rib'])?", cle_rib = '" . nohtml_real_escape_string($frm['cle_rib']) . "'":"") . "
               " . (isset($frm['domiciliation'])?", domiciliation = '" . nohtml_real_escape_string($frm['domiciliation']) . "'":"") . "
               " . (isset($frm['iban'])?", iban = '" . nohtml_real_escape_string($frm['iban']) . "'":"") . "
               " . (isset($frm['bic'])?", bic = '" . nohtml_real_escape_string($frm['bic']) . "'":"") . "
               " . (isset($frm['url'])?", url = '" . nohtml_real_escape_string($frm['url']) . "'":"") . "
               " . (isset($frm['description'])?", description = '" . real_escape_string($frm['description']) . "'":"") . "
               " . (isset($frm['avoir'])?", avoir = '" . nohtml_real_escape_string(vn($frm['avoir'])) . "'":"") . "
               " . (isset($frm['naissance'])?", naissance = '" . nohtml_real_escape_string(get_mysql_date_from_user_input(vb($frm['naissance']))) . "'":"") . "
               " . (isset($frm['on_vacances_date'])?", on_vacances_date = '" . nohtml_real_escape_string(get_mysql_date_from_user_input($frm['on_vacances_date'])) . "'":"") . "
               , on_vacances = '" . intval(vn($frm['on_vacances'])) . "'
               " . (isset($frm['id_groupe'])?", id_groupe = '" . intval(vn($frm['id_groupe'])) . "'":"") . "
            , origin = '" . nohtml_real_escape_string(vb($frm['origin'])) . "'
            , origin_other = '" . nohtml_real_escape_string(vb($frm['origin_other'])) . "'
               , lang = '" . nohtml_real_escape_string(vb($frm['lang'])) . "'
               , project_budget_ht = '" . nohtml_real_escape_string(vb($frm['project_budget_ht'])) . "'
               , project_chances_estimated = '" . nohtml_real_escape_string(vb($frm['project_chances_estimated'])) . "'
               " . (isset($frm['type'])?", type = '" . nohtml_real_escape_string(vb($frm['type'])) . "'":"") . "
            , seg_who = '" . nohtml_real_escape_string(vb($frm['seg_who'])) . "'
               , seg_want = '" . nohtml_real_escape_string(vb($frm['seg_want'])) . "'
               , seg_think = '" . nohtml_real_escape_string(vb($frm['seg_think'])) . "'
               , seg_followed = '" . nohtml_real_escape_string(vb($frm['seg_followed'])) . "'
               , seg_buy = '" . nohtml_real_escape_string(vb($frm['seg_buy'])) . "'
               , project_product_proposed = '" . nohtml_real_escape_string(vb($frm['project_product_proposed'])) . "'
               , project_date_forecasted = '" . nohtml_real_escape_string(get_mysql_date_from_user_input(vb($frm['project_date_forecasted']))) . "'
               " . (isset($frm['url'])?", url = '" . nohtml_real_escape_string(vb($frm['url'])) . "'":"") . "
               " . (isset($frm['id_categories'])?", id_categories = '" . implode(',', nohtml_real_escape_string($frm['id_categories'])) . "'":"") . "
               " . (isset($frm['id_cat_1'])?", id_cat_1 = '" . nohtml_real_escape_string(vb($frm['id_cat_1'])) . "'":"") . "
               " . (isset($frm['id_cat_2'])?", id_cat_2 = '" . nohtml_real_escape_string(vb($frm['id_cat_2'])) . "'":"") . "
               " . (isset($frm['id_cat_3'])?", id_cat_3 = '" . nohtml_real_escape_string(vb($frm['id_cat_3'])) . "'":"") . "
               " . (isset($frm['commercial_contact_id'])?", commercial_contact_id = '" . intval(vn($frm['commercial_contact_id'])) . "'":"") . "
               , on_client_module = '" . intval(vn($frm['on_client_module'])) . "'
               , on_photodesk = '" . intval(vn($frm['on_photodesk'])) . "'
               , site_id = '" . nohtml_real_escape_string(get_site_id_sql_set_value(vb($frm['site_id']))) . "'
               , description_document =  '" . nohtml_real_escape_string(vb($frm['description_document'])) . "'
               " . (!empty($frm['document'])? ", document =  '" . nohtml_real_escape_string($frm['document']) . "'" : "") . "
               " . (isset($frm['logo'])? ", logo =  '" . nohtml_real_escape_string($frm['logo']) . "'" : "") . "
               " . (isset($frm['devise'])? ", devise =  '" . nohtml_real_escape_string($frm['devise']) . "'" : "") . "
               " . (isset($frm['site_country'])? ", site_country =  '" . nohtml_real_escape_string($frm['site_country']) . "'" : "") . "
               " . (check_if_module_active('maps')?", address_hash = ''" : "") . "
               " . (!empty($frm['specific_field_sql_set'])? "," . implode(',', $frm['specific_field_sql_set']) : "") . "
          WHERE id_utilisateur = '" . intval($frm['id_utilisateur']) . "'";
          query($sql);
          
     if ($update_current_session) {
          // Mise à jour de la session en cours
          $requete = "SELECT *
               FROM peel_utilisateurs
               WHERE id_utilisateur = '" . intval($frm['id_utilisateur']) . "' AND " . get_filter_site_cond('utilisateurs') . "";
          $qid = query($requete);
          if($user_infos = fetch_assoc($qid)) {
               $_SESSION['session_utilisateur']['pays'] = $user_infos['pays'];
               $_SESSION['session_utilisateur']['civilite'] = vb($user_infos['civilite']);
               $_SESSION['session_utilisateur']['prenom'] = $user_infos['prenom'];
               $_SESSION['session_utilisateur']['pseudo'] = $user_infos['pseudo'];
               $_SESSION['session_utilisateur']['nom_famille'] = $user_infos['nom_famille'];
               $_SESSION['session_utilisateur']['societe'] = $user_infos['societe'];
               $_SESSION['session_utilisateur']['intracom_for_billing'] = String::strtoupper(vb($user_infos['intracom_for_billing']));
               $_SESSION['session_utilisateur']['telephone'] = $user_infos['telephone'];
               $_SESSION['session_utilisateur']['fax'] = $user_infos['fax'];
               $_SESSION['session_utilisateur']['portable'] = $user_infos['portable'];
               $_SESSION['session_utilisateur']['adresse'] = $user_infos['adresse'];
               $_SESSION['session_utilisateur']['code_postal'] = $user_infos['code_postal'];
               $_SESSION['session_utilisateur']['ville'] = $user_infos['ville'];
               $_SESSION['session_utilisateur']['newsletter'] = intval(vn($user_infos['newsletter']));
               $_SESSION['session_utilisateur']['commercial'] = intval(vn($user_infos['commercial']));
               $_SESSION['session_utilisateur']['format'] = vb($GLOBALS['site_parameters']['email_sending_format_default'], 'html');
          }
     }
     if (!empty($frm['email'])) {
          if (check_if_module_active('bounces')) {
               include_once($GLOBALS['dirroot'] . "/modules/bounces/bounce_driver.php");
               resolve_bounce($frm['id_utilisateur'], $frm['email']);
          }
     }
     if (!empty($frm['comments'])) {
          create_or_update_comments($frm);
     }
     call_module_hook('user_update', $frm);
     if (affected_rows()) {
          return true;
     } else {
          return false;
     }
}

function efface_utilisateur($id_utilisateur)
{
     query("DELETE FROM peel_utilisateurs
          WHERE id_utilisateur = '" . intval($id_utilisateur) . "' AND " . get_filter_site_cond('utilisateurs') . "");
     call_module_hook('user_delete', array('id' => $id_utilisateur));
}

function initialise_mot_passe($email)
{
     // Chargement des infos de l'utilisateur
     $qid = query("SELECT id_utilisateur, mot_passe
          FROM peel_utilisateurs
          WHERE email='" . nohtml_real_escape_string($email) . "' AND " . get_filter_site_cond('utilisateurs') . "");

     if ($utilisateur = fetch_assoc($qid)) {
          $timestamp = time();
          $hash = sha256($email . $timestamp . $utilisateur['id_utilisateur'] . $utilisateur['mot_passe']);

          $custom_template_tags['LINK'] = get_url('/utilisateurs/oubli_mot_passe.php', array('hash' => $hash, 'time' => $timestamp, 'email' => $email));
          $custom_template_tags['SITE'] = $GLOBALS['site'];
          $result = send_email($email, '', '', 'initialise_mot_passe', $custom_template_tags, null, $GLOBALS['support_sav_client']);
     } else {
          $result = null;
     }
     return $result;
}

function maj_mot_passe($user_id, $nouveau_mot_passe)
{
     query("UPDATE peel_utilisateurs
          SET mot_passe = '" . get_user_password_hash($nouveau_mot_passe) . "', date_update='" . date('Y-m-d H:i:s', time()) . "'
          WHERE id_utilisateur = '" . intval($user_id) . "' AND " . get_filter_site_cond('utilisateurs') . "");
     if (affected_rows()) {
          return true;
     } else {
          return false;
     }
}

function user_login_now($email_or_pseudo, $mot_passe, $check_password = true, $password_given_as_first_password_hash = false, $password_length_if_given_as_first_password_hash = null)
{
     if (empty($_SESSION['session_login_tried'])) {
          $_SESSION['session_login_tried'] = 0;
     }
     $_SESSION['session_login_tried']++;
     if ($_SESSION['session_login_tried'] < 30) {
          // Limitation à 30 tentatives de login dans la même session
          $utilisateur = verifier_authentification(trim($email_or_pseudo), trim($mot_passe), null, $check_password, $password_given_as_first_password_hash, $password_length_if_given_as_first_password_hash);
          if ($utilisateur) {
               // On force la prochaine mise à jour des informations du compte utilisateur
               unset($_SESSION['session_update_account']);
               
               $_SESSION['session_utilisateur'] = $utilisateur;
               $_SESSION['session_ip'] = vb($_SERVER['REMOTE_ADDR']);
               $_SESSION['session_url'] = $_SERVER['HTTP_HOST'];
               if (!empty($_SESSION['session_caddie'])) {
                    $_SESSION['session_caddie']->update(get_current_user_promotion_percentage());
               }
               if (!empty($_SESSION['session_utilisateur']['pays'])) {
                    // Enregistrer la zone d'expedition de l'utilisateur
                    $sqlUserZone = 'SELECT zone
                         FROM peel_pays
                         WHERE id="' . intval($_SESSION['session_utilisateur']['pays']) . '" AND ' . get_filter_site_cond('pays') . '
                         LIMIT 1';
                    $resUserZone = query($sqlUserZone);
                    if ($Zone = fetch_assoc($resUserZone)) {
                         $_SESSION['session_utilisateur']['zoneId'] = $Zone['zone'];
                    }
               }
               if(a_priv('admin') && count(get_all_sites_name_array(false, false, true)) == 1) {
                    // Si l'utilisateur est un administrateur et qu'un seul site est configuré, on lui attribue les droits pour toutes les sites (0 et 1 dans ce cas)
                    $_SESSION['session_utilisateur']['site_id'] = 0;
               }
               if (!empty($_SESSION['session_utilisateur']['devise'])) {
                    set_current_devise($_SESSION['session_utilisateur']['devise']);
               }
               if (!empty($_SESSION['session_utilisateur']['site_country'])) {
                    // Définition de session_site_country à partir de l'information de la table utilisateurs, et non pas à partir de la géolocalisation IP
                    $_SESSION['session_site_country'] = intval($_SESSION['session_utilisateur']['site_country']);
               }
               if (a_priv('admin*')) {
                    // On met à jour les appels de clients dont l'heure de cloture n'est pas précisée
                    // NB : On pourrait faire cela par cron plutôt qu'ici, mais sans cron c'est plus facilement gérable
                    updateTelContactNotClosed();
                    // On avertit le contact boutique du login d'un administrateur
                    $custom_template_tags['USER'] = $email_or_pseudo;
                    $custom_template_tags['REVERSE_DNS'] = gethostbyaddr(vb($_SERVER['REMOTE_ADDR']));
                    send_email($GLOBALS['support_sav_client'], '', '', 'admin_login', $custom_template_tags, null, $GLOBALS['support'], true, false, true, $GLOBALS['support']);
               }
               // On enregistre la connexion de l'utilisateur
               if (!empty($_SESSION['session_utilisateur']['pseudo'])) {
                    $user_pseudo = $_SESSION['session_utilisateur']['pseudo'];
               } else {
                    $user_pseudo = $_SESSION['session_utilisateur']['email'];
               }

               query('INSERT INTO peel_utilisateur_connexions (user_id, user_login, user_ip, date, site_id)
                    VALUES (' . intval($_SESSION['session_utilisateur']['id_utilisateur']) . ', "' . nohtml_real_escape_string($user_pseudo) . '", "' . ip2long(ipget()) . '", "' . date('Y-m-d H:i:s', time()) . '",  "' . nohtml_real_escape_string(get_site_id_sql_set_value($GLOBALS['site_id'])) . '")');

               $_SESSION['session_login_tried'] = 0;
          }
          if (!empty($GLOBALS['site_parameters']['redirect_user_after_login_by_priv'][$utilisateur['priv']])) {
               // Redirection vers une url administrable après la connexion réussie d'un utilisateur.
               redirect_and_die($GLOBALS['site_parameters']['redirect_user_after_login_by_priv'][$utilisateur['priv']]);
          } else {
               return $utilisateur;
          }
     } else {
          return null;
     }
}

function verifier_authentification($email_or_pseudo, $mot_passe, $user_id = null, $check_password = true, $password_given_as_first_password_hash = false, $password_length_if_given_as_first_password_hash = null)
{
     $get_table_field_names = get_table_field_names('peel_configuration');
     if (!in_array('site_id', $get_table_field_names)) {
          $GLOBALS['site_parameters']['multisite_disable'] = true;
          $skip_state_test = true;
     }
     
     $requete = "SELECT *
          FROM peel_utilisateurs
          WHERE " . (empty($skip_state_test)? "etat=1":"") . "  AND " . get_filter_site_cond('utilisateurs') . " AND priv NOT IN ('".implode("','", $GLOBALS['disable_login_by_privilege'])."') AND ";
     if (!empty($email_or_pseudo)) {
          $requete .= "(email='" . nohtml_real_escape_string($email_or_pseudo) . "' OR pseudo ='" . nohtml_real_escape_string($email_or_pseudo) . "')";
     } else {
          $requete .= "id_utilisateur='" . intval($user_id) . "'";
     }
     $qid = query($requete);
     $user_infos = fetch_assoc($qid);
     if (!empty($user_infos) && (!$check_password || get_user_password_hash($mot_passe, $user_infos['mot_passe'], $password_given_as_first_password_hash, $password_length_if_given_as_first_password_hash))) {
          if(!$check_password && String::strpos($user_infos['priv'], 'admin') === 0) {
               // Utilisateur avec droits d'administration, loggué via processus simplifié => on désactive les droits d'administration
               $user_infos['priv'] = 'util';
          }
          return $user_infos;
     } else {
          return false;
     }
}

function get_user_password_hash($password, $tested_hash = null, $password_given_as_first_password_hash = false, $password_length_if_given_as_first_password_hash = null)
{
     if ($tested_hash == md5($password)) {
          // Pour des raisons de compatibilité avec les données d'anciens sites PEEL dont version < 6.0, on teste aussi si le md5 fonctionne
          // En termes de sécurité, cette compatibilité n'induit pas de faille particulière sur les nouveaux comptes, mais bien évidemment
          // continuer à utiliser d'anciens mots de passe encodés ne permet pas de bénéficier de la sécurité accrue dans les version >=6.0.
          return $tested_hash;
     }
     if (!$password_given_as_first_password_hash) {
          // Création d'un premier hash du mot de passe
          $first_password_hash = sha256(vb($GLOBALS['site_parameters']['sha256_encoding_salt']) . $password);
          // set where salt will appear in hash
          $salt_start = String::strlen($password);
     } else {
          $first_password_hash = $password;
          $salt_start = $password_length_if_given_as_first_password_hash;
     }
     // if no salt given create random one
     if ($tested_hash == null) {
          $salt_hash = String::substr(sha256(vb($GLOBALS['site_parameters']['sha256_encoding_salt']) . uniqid(mt_rand(), true)), 0, 6);
     } else {
          $salt_hash = String::substr($tested_hash, 0, 6);
     }
     // add salt into text hash at pass length position and hash it
     if ($salt_start > 0 && $salt_start < String::strlen($salt_hash)) {
          $first_password_hash_start = String::substr($first_password_hash, 0, $salt_start);
          $first_password_hash_end = String::substr($first_password_hash, $salt_start, strlen($salt_hash));
          $hash_rough = sha256(vb($GLOBALS['site_parameters']['sha256_encoding_salt']) . $first_password_hash_end . $salt_hash . $first_password_hash_start);
     } elseif ($salt_start > (strlen($salt_hash) - 1)) {
          $hash_rough = sha256(vb($GLOBALS['site_parameters']['sha256_encoding_salt']) . $first_password_hash . $salt_hash);
     } else {
          $hash_rough = sha256(vb($GLOBALS['site_parameters']['sha256_encoding_salt']) . $salt_hash . $first_password_hash);
     }
     // put salt at front of hash
     $password_hash = $salt_hash . String::substr($hash_rough, 0, 26);
     if (empty($tested_hash) || $tested_hash == $password_hash) {
          return $password_hash;
     } else {
          return false;
     }
}

function send_mail_for_account_creation($email, $mot_passe, $priv)
{
     $custom_template_tags['EMAIL'] = $email;
     $custom_template_tags['MOT_PASSE'] = $mot_passe;

     // Template d'email spécifique pour le profil d'utilisateur. Cet email est envoyé en plus de l'email d'inscription. L'email d'inscription contient les identifiants du compte.
     $template_infos = getTextAndTitleFromEmailTemplateLang('send_mail_for_account_creation_'.$priv, $_SESSION['session_langue']);
     if (!empty($template_infos) && (!empty($template_infos['subject']) || !empty($template_infos['text']))) {
          // Le template d'email existe, il faut l'utiliser
          send_email($email, $template_infos['subject'], $template_infos['text'], "", $custom_template_tags, null, $GLOBALS['support_sav_client']);
     }

     // Il faut utiliser le template de création de compte standard.
     $result = send_email($email, "", "",  'send_mail_for_account_creation', $custom_template_tags, null, $GLOBALS['support_sav_client']);
     return $result;
}

function getUsername($user_id)
{
     if ($user_infos = get_user_information($user_id)) {
          return $user_infos['prenom'] . ' ' . $user_infos['nom_famille'];
     } else {
          return null;
     }
}

function get_user_information($user_id = null, $get_full_infos = false)
{
     static $result_array;
     $sql_cond = '';
     if ($user_id === null && est_identifie()) {
          $user_id = $_SESSION['session_utilisateur']['id_utilisateur'];
     } elseif (est_identifie() && a_priv('demo')) {
          // Pas les droits pour voir les informations sur les administrateurs et les revendeurs
          $sql_cond .= " AND priv NOT LIKE '%admin%' AND priv NOT LIKE '%reve%'";
     }
     $cache_id = md5($user_id.$sql_cond.($get_full_infos?'full':''));
     if (!empty($user_id)) {
          if (!isset($result_array[$cache_id])) {
               $qid = query("SELECT *
                    FROM peel_utilisateurs
                    WHERE id_utilisateur = '" . intval($user_id) . "' AND " . get_filter_site_cond('utilisateurs') . "" . $sql_cond);
               $result_array[$cache_id] = fetch_assoc($qid);
               if(!empty($result_array[$cache_id]) && $get_full_infos) {
                    $hook_result = call_module_hook('user_get_information_full', array('id' => $user_id, 'etat' => $result_array[$cache_id]['etat']), 'array');
                    $result_array[$cache_id] = array_merge_recursive($result_array[$cache_id], $hook_result);
               }
          }
          return $result_array[$cache_id];
     } else {
          return null;
     }
}

function get_current_user_promotion_percentage()
{
     if(empty($_SESSION['session_utilisateur']['calculated_promotion_percentage'])) {
          $hook_result_percent = call_module_hook('user_promotion_percentage', vb($_SESSION['session_utilisateur'], array()), 'max');
          $user_specific_discount = vn($_SESSION['session_utilisateur']['remise_percent']);
          if(!empty($GLOBALS['site_parameters']['group_and_user_discount_cumulate_disable'])) {
               $_SESSION['session_utilisateur']['calculated_promotion_percentage'] = max($user_specific_discount, $hook_result_percent);
          } else {
               $_SESSION['session_utilisateur']['calculated_promotion_percentage'] = (1 - (1 - $user_specific_discount / 100) * (1 - $hook_result_percent / 100)) * 100;
          }
     }
     return $_SESSION['session_utilisateur']['calculated_promotion_percentage'];
}

function is_user_tva_intracom_for_no_vat($user_id = null)
{
     if (empty($user_id) && est_identifie()) {
          $user_id = $_SESSION['session_utilisateur']['id_utilisateur'];
     }
     if (!empty($user_id)) {
          if ($user_infos = get_user_information($user_id)) {
               // Pas de vérification trop stricte du numéro de TVA intracommunautaire pour éviter les problèmes liés à des formats différents
               if (!empty($GLOBALS['site_parameters']['pays_exoneration_tva']) && String::strlen($GLOBALS['site_parameters']['pays_exoneration_tva'])==2 && !is_numeric(String::substr($user_infos['intracom_for_billing'], 0, 2)) && String::substr(String::strtoupper($user_infos['intracom_for_billing']), 0, 2) != $GLOBALS['site_parameters']['pays_exoneration_tva'] && String::strlen($user_infos['intracom_for_billing']) >= 7 && String::strlen(str_replace(' ', '', $user_infos['intracom_for_billing'])) <= 14) {
                    // Utilisateur avec un n° de TVA intracom, en Europe mais pas dans le pays de référence de la boutique dont le code ISO sur 2 chiffres est dans "pays_exoneration_tva"
                    return true;
               }
          }
     }
     return false;
}

function get_priv_options($preselectionne, $return_mode = false)
{
     $output = '';
     $resProfil = query("SELECT *, name_".$_SESSION['session_langue']." AS name
          FROM peel_profil
          WHERE " . get_filter_site_cond('profil') . "");
     $tpl = $GLOBALS['tplEngine']->createTemplate('priv_options.tpl');
     $tpl_options = array();
     if (num_rows($resProfil)) {
          while ($Profil = fetch_assoc($resProfil)) {
               $tpl_options[] = array(
                    'value' => $Profil['priv'],
                    'issel' => ($Profil['priv'] == $preselectionne),
                    'name' => $Profil['name']
               );
          }
     }
     $tpl->assign('options', $tpl_options);
     $output .= $tpl->fetch();

     if ($return_mode) {
          return $output;
     } else {
          echo $output;
     }
}

function get_user_id_from_email($email)
{
     // si la valeur est un bien un email, ont recherche l'id a partir de cet email
     if (EmailOK($email)) {
          $q = query('SELECT id_utilisateur
               FROM peel_utilisateurs
               WHERE email = "' . word_real_escape_string($email) . '" AND ' . get_filter_site_cond('utilisateurs') . '');
          if ($user = fetch_assoc($q)) {
               return $user['id_utilisateur'];
          } else {
               return false;
          }
     } else {
          return false;
     }
}

function getUserAgentHash()
{
     // Returns an int on 4 bytes
     if (!empty($_SERVER['HTTP_USER_AGENT'])) {
          return base_convert(String::substr(md5($_SERVER['HTTP_USER_AGENT']), 9, 8), 16, 10);
     } else {
          return 0;
     }
}

function get_trader_select_options($selected_trader_name = null, $selected_trader_id = null, $option_value = 'name', $is_admin_mode = false, $display_inactive_trader = false)
{
     $tpl = $GLOBALS['tplEngine']->createTemplate('trader_select_options.tpl');
     $tpl->assign('STR_NOT_ATTRIBUED', $GLOBALS['STR_NOT_ATTRIBUED']);
     $tpl->assign('is_admin_mode', $is_admin_mode);
     $sql_condition = '';
     if (empty($selected_trader_name) && empty($selected_trader_id)) {
          $selected_country_id = 0;
     }
     if (!$display_inactive_trader) {
          $sql_condition .= ' AND u.etat = "1"';
     }
     $sql_trader = 'SELECT u.id_utilisateur, u.nom_famille , u.prenom
          FROM peel_utilisateurs u
          WHERE u.priv LIKE "admin%" AND ' . get_filter_site_cond('utilisateurs', 'u') . ' ' . $sql_condition . '
          ORDER BY u.id_utilisateur';
     $res_trader = query($sql_trader);
     $tpl_options = array();
     while ($tab_trader = fetch_assoc($res_trader)) {
          if ($option_value == 'name') {
               $value = $tab_trader['prenom'] . ' ' . $tab_trader['nom_famille'];
          } elseif ($option_value == 'id') {
               $value = $tab_trader['id_utilisateur'];
          }
          $trader_name = $tab_trader['prenom'] . ' ' . $tab_trader['nom_famille'];
          $tpl_options[] = array(
               'value' => $value,
               'issel' => (vb($selected_trader_name) == $trader_name || vb($selected_trader_id) == $tab_trader['id_utilisateur']),
               'name' => $trader_name
          );
     }
     $tpl->assign('options', $tpl_options);
     return $tpl->fetch();
}

function account_update() {
     if ((!isset($_SESSION['session_update_account']) || $_SESSION['session_update_account'] < time()) || defined('IN_MESSAGING')) {
          // On met à jour les informations du compte toutes les minutes
          call_module_hook('account_update', array());
          $_SESSION['session_update_account'] = time() + vb($GLOBALS['site_parameters']['account_update_interval'], 60);
     }
}

function get_personal_address_form($id_utilisateur, $address_type = 'bill', $selected = null, $add_manage_choice = true, $css_style = null) {
     if(empty($id_utilisateur)) {
          return false;
     } else {
          $sql = 'SELECT id, nom
               FROM peel_adresses
               WHERE id_utilisateur="' . intval($id_utilisateur) . '" AND address_type IN ("","'.real_escape_string($address_type).'")';
          $q = query($sql);
          $output = '
          <select class="form-control" onchange="if(this.value){this.form.submit()}" name="personal_address_' . String::str_form_value($address_type) . '" style="' . $css_style. '">
               <option value="">' . $GLOBALS['STR_ADDRESS'] . '....</option>
               <option value="original_address"' . frmvalide($selected == 'original_address', ' selected="selected"') . '>' . $GLOBALS['STR_DEFAULT_ADDRESS'] . '</option>';
          while($result = fetch_assoc($q)) {
               $output .= '
               <option value="' . intval($result['id']) . '"' . frmvalide($selected == $result['id'], ' selected="selected"') . '>' . $result['nom'] . '</option>';
          }
          if($add_manage_choice) {
               $output .= '
               <option value="">-----</option>
               <option value="manage">' . $GLOBALS['STR_ADDRESS_TEXT'] . '</option>';
          }
          $output .= '
          </select>
';

          return $output;
     }
}

function insert_or_update_address($frm) {
     if(empty($_SESSION['session_utilisateur']['id_utilisateur'])) {
          return false;
     }
     if(!empty($frm['portable'])) {
          $tel = $frm['portable'];
     } elseif(!empty($frm['contact1'])) {
          $tel = $frm['contact1'];
     } else {
          $tel = null;
     }
     $set_sql = "civilite = '" . nohtml_real_escape_string(vb($frm['civilite'])) . "'
               , email = '" . nohtml_real_escape_string($frm['email']) . "'
               , nom = '" . nohtml_real_escape_string($frm['name_adresse']) . "'
               , prenom = '" . nohtml_real_escape_string($frm['prenom']) . "'
               , nom_famille = '" . nohtml_real_escape_string($frm['nom_famille']) . "'
               , societe = '" . nohtml_real_escape_string($frm['societe']) . "'
               , telephone = '" . nohtml_real_escape_string($tel) . "'
               , portable = '" . nohtml_real_escape_string($frm['portable']) . "'
               , adresse = '" . nohtml_real_escape_string($frm['adresse']) . "'
               , code_postal = '" . nohtml_real_escape_string($frm['code_postal']) . "'
               , ville = '" . nohtml_real_escape_string($frm['ville']) . "'
               ".(isset($frm['address_type'])?", address_type = '" . nohtml_real_escape_string($frm['address_type']) . "'":'')."
               , pays = '" . intval($frm['pays']) . "'
               , id_utilisateur = '" . intval($_SESSION['session_utilisateur']['id_utilisateur']) . "'";
     if (!empty($frm['id'])) {
          return query("UPDATE peel_adresses SET
               ".$set_sql."
               WHERE id = '" . intval(vn($frm['id'])) . "'");
     } else {
          return query("INSERT INTO peel_adresses SET 
          ".$set_sql."");
     }
}