<?php
/** requete SQL pour créer un utilisateur
*/

if(isset($_POST['creer'])) {

include("../config/config.db.php");

mysql_connect($server,$user,$password) or die ("erreur de connexion");

$new_name = mysql_real_escape_string(htmlentities($_POST['nom']));
$new_pass = mysql_real_escape_string(htmlentities($_POST['pass']));
$new_server = 'localhost';

$user_query="CREATE USER '$new_name'@'$new_server' IDENTIFIED BY '$new_pass';

GRANT SELECT ON * . *
TO '$new_name'@'$new_server'
IDENTIFIED BY '$new_pass'
WITH MAX_QUERIES_PER_HOUR 0
MAX_CONNECTIONS_PER_HOUR 0
MAX_UPDATES_PER_HOUR 0
MAX_USER_CONNECTIONS 0 ;";

echo $user_query;

mysql_connect($server,$user,$password) or die ("erreur de connexion");
mysql_select_db($dbname) or die ("erreur de connexion base");
mysql_query($user_query);

mysql_close();

echo "traitement terminé";
} else {
$html = "<form action='user.php' method='post'>
Nom : <input type=text name=nom><br><br>
Pass : <input type=password name=pass><br><br>
<input type=submit name=creer value='Créer cet utilisateur'></form>";

echo $html;
}

?>