From 7ae8f47d55a6ad2d4a56f8b3f3bd49b46e9b5153 Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Tue, 15 Jan 2013 18:08:58 +0900
Subject: [PATCH] =?UTF-8?q?=EB=94=B0=EC=98=B4=ED=91=9C=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/move_update.php | 140 ++++++++++++++++++++++----------------------
 1 file changed, 70 insertions(+), 70 deletions(-)

diff --git a/bbs/move_update.php b/bbs/move_update.php
index 6d7e5cee0..0977a299b 100644
--- a/bbs/move_update.php
+++ b/bbs/move_update.php
@@ -21,11 +21,11 @@ $cnt = 0;
 
 // SQL Injection 으로 인한 코드 보완
 //$sql = " select distinct wr_num from {$write_table} where wr_id in (" . stripslashes($wr_id_list) . ") order by wr_id ";
-$sql = " select distinct wr_num from {$write_table} where wr_id in ({$wr_id_list}) order by wr_id ";
+$sql = " select distinct wr_num from $write_table where wr_id in ({$wr_id_list}) order by wr_id ";
 $result = sql_query($sql);
 while ($row = sql_fetch_array($result))
 {
-    $wr_num = $row[wr_num];
+    $wr_num = $row['wr_num'];
     for ($i=0; $i<count($_POST['chk_bo_table']); $i++)
     {
         $move_bo_table = $_POST['chk_bo_table'][$i];
@@ -40,86 +40,86 @@ while ($row = sql_fetch_array($result))
         $next_wr_num = get_next_num($move_write_table);
 
         //$sql2 = " select * from {$write_table} where wr_num = '{$wr_num}' order by wr_parent, wr_comment desc, wr_id ";
-        $sql2 = " select * from {$write_table} where wr_num = '{$wr_num}' order by wr_parent, wr_is_comment, wr_comment desc, wr_id ";
+        $sql2 = " select * from $write_table where wr_num = '$wr_num' order by wr_parent, wr_is_comment, wr_comment desc, wr_id ";
         $result2 = sql_query($sql2);
         while ($row2 = sql_fetch_array($result2))
         {
-            $nick = cut_str($member[mb_nick], $config[cf_cut_name]);
-            if (!$row2[wr_is_comment] && $config[cf_use_copy_log])
-                $row2[wr_content] .= PHP_EOL.'[이 게시물은 '.$nick.'님에 의해 '.$g4[time_ymdhis].' '.$board[bo_subject].'에서 '.($sw == 'copy' ? '복사' : '이동').' 됨]';
+            $nick = cut_str($member['mb_nick'], $config['cf_cut_name']);
+            if (!$row2['wr_is_comment'] && $config['cf_use_copy_log'])
+                $row2['wr_content'] .= "\n".'[이 게시물은 '.$nick.'님에 의해 '.$g4['time_ymdhis'].' '.$board['bo_subject'].'에서 '.($sw == 'copy' ? '복사' : '이동').' 됨]';
 
             $sql = " insert into $move_write_table
                         set wr_num = '$next_wr_num',
-                             wr_reply = '$row2[wr_reply]',
-                             wr_is_comment = '$row2[wr_is_comment]',
-                             wr_comment = '$row2[wr_comment]',
-                             wr_comment_reply = '$row2[wr_comment_reply]',
-                             ca_name = '".addslashes($row2[ca_name])."',
-                             wr_option = '$row2[wr_option]',
-                             wr_subject = '".addslashes($row2[wr_subject])."',
-                             wr_content = '".addslashes($row2[wr_content])."',
-                             wr_link1 = '".addslashes($row2[wr_link1])."',
-                             wr_link2 = '".addslashes($row2[wr_link2])."',
-                             wr_link1_hit = '$row2[wr_link1_hit]',
-                             wr_link2_hit = '$row2[wr_link2_hit]',
-                             wr_hit = '$row2[wr_hit]',
-                             wr_good = '$row2[wr_good]',
-                             wr_nogood = '$row2[wr_nogood]',
-                             mb_id = '$row2[mb_id]',
-                             wr_password = '$row2[wr_password]',
-                             wr_name = '".addslashes($row2[wr_name])."',
-                             wr_email = '".addslashes($row2[wr_email])."',
-                             wr_homepage = '".addslashes($row2[wr_homepage])."',
-                             wr_datetime = '$row2[wr_datetime]',
-                             wr_last = '$row2[wr_last]',
-                             wr_ip = '$row2[wr_ip]',
-                             wr_1 = '".addslashes($row2[wr_1])."',
-                             wr_2 = '".addslashes($row2[wr_2])."',
-                             wr_3 = '".addslashes($row2[wr_3])."',
-                             wr_4 = '".addslashes($row2[wr_4])."',
-                             wr_5 = '".addslashes($row2[wr_5])."',
-                             wr_6 = '".addslashes($row2[wr_6])."',
-                             wr_7 = '".addslashes($row2[wr_7])."',
-                             wr_8 = '".addslashes($row2[wr_8])."',
-                             wr_9 = '".addslashes($row2[wr_9])."',
-                             wr_10 = '".addslashes($row2[wr_10])."' ";
+                             wr_reply = '{$row2['wr_reply']}',
+                             wr_is_comment = '{$row2['wr_is_comment']}',
+                             wr_comment = '{$row2['wr_comment']}',
+                             wr_comment_reply = '{$row2['wr_comment_reply']}',
+                             ca_name = '".addslashes($row2['ca_name'])."',
+                             wr_option = '{$row2['wr_option']}',
+                             wr_subject = '".addslashes($row2['wr_subject'])."',
+                             wr_content = '".addslashes($row2['wr_content'])."',
+                             wr_link1 = '".addslashes($row2['wr_link1'])."',
+                             wr_link2 = '".addslashes($row2['wr_link2'])."',
+                             wr_link1_hit = '{$row2['wr_link1_hit']}',
+                             wr_link2_hit = '{$row2['wr_link2_hit']}',
+                             wr_hit = '{$row2['wr_hit']}',
+                             wr_good = '{$row2['wr_good']}',
+                             wr_nogood = '{$row2['wr_nogood']}',
+                             mb_id = '{$row2['mb_id']}',
+                             wr_password = '{$row2['wr_password']}',
+                             wr_name = '".addslashes($row2['wr_name'])."',
+                             wr_email = '".addslashes($row2['wr_email'])."',
+                             wr_homepage = '".addslashes($row2['wr_homepage'])."',
+                             wr_datetime = '{$row2['wr_datetime']}',
+                             wr_last = '{$row2['wr_last']}',
+                             wr_ip = '{$row2['wr_ip']}',
+                             wr_1 = '".addslashes($row2['wr_1'])."',
+                             wr_2 = '".addslashes($row2['wr_2'])."',
+                             wr_3 = '".addslashes($row2['wr_3'])."',
+                             wr_4 = '".addslashes($row2['wr_4'])."',
+                             wr_5 = '".addslashes($row2['wr_5'])."',
+                             wr_6 = '".addslashes($row2['wr_6'])."',
+                             wr_7 = '".addslashes($row2['wr_7'])."',
+                             wr_8 = '".addslashes($row2['wr_8'])."',
+                             wr_9 = '".addslashes($row2['wr_9'])."',
+                             wr_10 = '".addslashes($row2['wr_10'])."' ";
             sql_query($sql);
 
             $insert_id = mysql_insert_id();
 
             // 코멘트가 아니라면
-            if (!$row2[wr_is_comment])
+            if (!$row2['wr_is_comment'])
             {
                 $save_parent = $insert_id;
 
-                $sql3 = " select * from {$g4[board_file_table]} where bo_table = '{$bo_table}' and wr_id = '{$row2[wr_id]}' order by bf_no ";
+                $sql3 = " select * from {$g4['board_file_table']} where bo_table = '$bo_table' and wr_id = '{$row2['wr_id']}' order by bf_no ";
                 $result3 = sql_query($sql3);
                 for ($k=0; $row3 = sql_fetch_array($result3); $k++)
                 {
-                    if ($row3[bf_file])
+                    if ($row3['bf_file'])
                     {
                         // 원본파일을 복사하고 퍼미션을 변경
-                        @copy($src_dir.'/'.$row3[bf_file], $dst_dir.'/'.$row3[bf_file]);
-                        @chmod($dst_dir/$row3[bf_file], 0606);
+                        @copy($src_dir.'/'.$row3['bf_file'], $dst_dir.'/'.$row3['bf_file']);
+                        @chmod($dst_dir/$row3['bf_file]', 0606);
                     }
 
-                    $sql = " insert into $g4[board_file_table]
+                    $sql = " insert into {$g4['board_file_table']}
                                 set bo_table = '$move_bo_table',
                                      wr_id = '$insert_id',
-                                     bf_no = '$row3[bf_no]',
-                                     bf_source = '$row3[bf_source]',
-                                     bf_file = '$row3[bf_file]',
-                                     bf_download = '$row3[bf_download]',
-                                     bf_content = '".addslashes($row3[bf_content])."',
-                                     bf_filesize = '$row3[bf_filesize]',
-                                     bf_width = '$row3[bf_width]',
-                                     bf_height = '$row3[bf_height]',
-                                     bf_type = '$row3[bf_type]',
-                                     bf_datetime = '$row3[bf_datetime]' ";
+                                     bf_no = '{$row3['bf_no']}',
+                                     bf_source = '{$row3['bf_source']}',
+                                     bf_file = '{$row3['bf_file']}',
+                                     bf_download = '{$row3['bf_download']}',
+                                     bf_content = '".addslashes($row3['bf_content'])."',
+                                     bf_filesize = '{$row3['bf_filesize']}',
+                                     bf_width = '{$row3['bf_width']}',
+                                     bf_height = '{$row3['bf_height']}',
+                                     bf_type = '{$row3['bf_type']}',
+                                     bf_datetime = '{$row3['bf_datetime']}' ";
                     sql_query($sql);
 
-                    if ($sw == 'move' && $row3[bf_file])
-                        $save[$cnt][bf_file][$k] = $src_dir.'/'.$row3[bf_file];
+                    if ($sw == 'move' && $row3['bf_file'])
+                        $save[$cnt]['bf_file'][$k] = $src_dir.'/'.$row3['bf_file'];
                 }
 
                 $count_write++;
@@ -127,10 +127,10 @@ while ($row = sql_fetch_array($result))
                 if ($sw == 'move' && $i == 0)
                 {
                     // 스크랩 이동
-                    sql_query(" update {$g4[scrap_table]} set bo_table = '{$move_bo_table}', wr_id = '{$save_parent}' where bo_table = '{$bo_table}' and wr_id = '{$row2[wr_id]}' ");
+                    sql_query(" update {$g4['scrap_table']} set bo_table = '$move_bo_table', wr_id = '$save_parent' where bo_table = '$bo_table' and wr_id = '{$row2['wr_id']}' ");
 
                     // 최신글 이동
-                    sql_query(" update {$g4[board_new_table]} set bo_table = '{$move_bo_table}', wr_id = '{$save_parent}', wr_parent = '{$save_parent}' where bo_table = '{$bo_table}' and wr_id = '{$row2[wr_id]}' ");
+                    sql_query(" update {$g4['board_new_table']} set bo_table = '$move_bo_table', wr_id = '$save_parent', wr_parent = '$save_parent' where bo_table = '$bo_table' and wr_id = '{$row2['wr_id']}' ");
                 }
             }
             else
@@ -140,21 +140,21 @@ while ($row = sql_fetch_array($result))
                 if ($sw == 'move')
                 {
                     // 최신글 이동
-                    sql_query(" update {$g4[board_new_table]} set bo_table = '{$move_bo_table}', wr_id = '{$insert_id}', wr_parent = '{$save_parent}' where bo_table = '{$bo_table}' and wr_id = '{$row2[wr_id]}' ");
+                    sql_query(" update {$g4['board_new_table']} set bo_table = '$move_bo_table', wr_id = '$insert_id', wr_parent = '$save_parent' where bo_table = '$bo_table' and wr_id = '{$row2['wr_id']}' ");
                 }
             }
 
-            sql_query(" update {$move_write_table} set wr_parent = '{$save_parent}' where wr_id = '{$insert_id}' ");
+            sql_query(" update $move_write_table set wr_parent = '$save_parent' where wr_id = '$insert_id' ");
 
             if ($sw == 'move')
-                $save[$cnt][wr_id] = $row2[wr_parent];
+                $save[$cnt]['wr_id'] = $row2['wr_parent'];
 
             $cnt++;
         }
 
 
-        sql_query(" update {$g4[board_table]} set bo_count_write = bo_count_write + '{$count_write}' where bo_table = '{$move_bo_table}' ");
-        sql_query(" update {$g4[board_table]} set bo_count_comment = bo_count_comment + '{$count_comment}' where bo_table = '{$move_bo_table}' ");
+        sql_query(" update {$g4['board_table']} set bo_count_write = bo_count_write + '$count_write' where bo_table = '$move_bo_table' ");
+        sql_query(" update {$g4['board_table']} set bo_count_comment = bo_count_comment + '$count_comment' where bo_table = '$move_bo_table' ");
     }
 
     $save_count_write += $count_write;
@@ -165,14 +165,14 @@ if ($sw == "move")
 {
     for ($i=0; $i<count($save); $i++)
     {
-        for ($k=0; $k<count($save[$i][bf_file]); $k++)
-            @unlink($save[$i][bf_file][$k]);
+        for ($k=0; $k<count($save[$i]['bf_file']); $k++)
+            @unlink($save[$i]['bf_file'][$k]);
 
-        sql_query(" delete from {$write_table} where wr_parent = '{$save[$i][wr_id]}' ");
-        sql_query(" delete from {$g4[board_new_table]} where bo_table = '{$bo_table}' and wr_id = '{$save[$i][wr_id]}' ");
-        sql_query(" delete from {$g4[board_file_table]} where bo_table = '{$bo_table}' and wr_id = '{$save[$i][wr_id]}' ");
+        sql_query(" delete from $write_table where wr_parent = '{$save[$i]['wr_id']}' ");
+        sql_query(" delete from {$g4['board_new_table']} where bo_table = '$bo_table' and wr_id = '{$save[$i]['wr_id']}' ");
+        sql_query(" delete from {$g4['board_file_table']} where bo_table = '$bo_table' and wr_id = '{$save[$i]['wr_id']}' ");
     }
-    sql_query(" update {$g4[board_table]} set bo_count_write = bo_count_write - '{$save_count_write}', bo_count_comment = bo_count_comment - '{$save_count_comment}' where bo_table = '{$bo_table}' ");
+    sql_query(" update {$g4['board_table']} set bo_count_write = bo_count_write - '$save_count_write', bo_count_comment = bo_count_comment - '$save_count_comment' where bo_table = '$bo_table' ");
 }
 
 $msg = '해당 게시물을 선택한 게시판으로 '.$act.' 하였습니다.';