firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

사용자단 따옴표 작업 bbs/write_update.php 할 차례

Browse Source
This commit is contained in:
whitedot
2012-11-30 19:10:49 +09:00
parent 68ae98cd95
commit de88c60cd2
54 changed files with 1264 additions and 1247 deletions
Download Patch File Download Diff File Expand all files Collapse all files

92
bbs/search.php
View File

@ -3,7 +3,7 @@ include_once('./_common.php');
//if (!$stx) alert("검색어가 없습니다.");
$g4['title'] = "검색 : " . $stx;
$g4['title'] = '검색 : '.$stx;
include_once('./_head.php');
if ($stx)
@ -11,25 +11,25 @@ if ($stx)
//$stx = trim($stx);
$stx = preg_replace("/\//", "\/", trim($stx));
$sop = strtolower($sop);
if (!$sop || !($sop == "and" || $sop == "or")) $sop = "and"; // 연산자 and , or
if (!$sop || !($sop == 'and' || $sop == 'or')) $sop = 'and'; // 연산자 and , or
if (!$srows) $srows = 10; // 한페이지에 출력하는 검색 행수
unset($g4_search[tables]);
unset($g4_search[read_level]);
$sql = " select gr_id, bo_table, bo_read_level from $g4[board_table] where bo_use_search = '1' and bo_list_level <= '$member[mb_level]' ";
$sql = " select gr_id, bo_table, bo_read_level from {$g4[board_table]} where bo_use_search = 1 and bo_list_level <= '{$member[mb_level]}' ";
// and bo_read_level <= '$member[mb_level]' ";
if ($gr_id)
$sql .= " and gr_id = '$gr_id' ";
$sql .= " and gr_id = '{$gr_id}' ";
if ($onetable) // 하나의 게시판만 검색한다면
$sql .= " and bo_table = '$onetable' ";
$sql .= " and bo_table = '{$onetable}' ";
$sql .= " order by bo_order_search, gr_id, bo_table ";
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++)
{
if ($is_admin != "super")
if ($is_admin != 'super')
{
// 그룹접근 사용에 대한 검색 차단
$sql2 = " select gr_use_access, gr_admin from $g4[group_table] where gr_id = '$row[gr_id]' ";
$sql2 = " select gr_use_access, gr_admin from {$g4[group_table]} where gr_id = '{$row[gr_id]}' ";
$row2 = sql_fetch($sql2);
// 그룹접근을 사용한다면
if ($row2[gr_use_access])
@ -39,7 +39,7 @@ if ($stx)
;
else
{
$sql3 = " select count(*) as cnt from $g4[group_member_table] where gr_id = '$row[gr_id]' and mb_id = '$member[mb_id]' and mb_id <> '' ";
$sql3 = " select count(*) as cnt from {$g4[group_member_table]} where gr_id = '{$row[gr_id]}' and mb_id = '{$member[mb_id]}' and mb_id <> '' ";
$row3 = sql_fetch($sql3);
if (!$row3[cnt])
continue;
@ -50,44 +50,44 @@ if ($stx)
$g4_search[read_level][] = $row[bo_read_level];
}
$search_query = "sfl=".urlencode($sfl)."&stx=".urlencode($stx)."&sop=$sop";
$search_query = 'sfl='.urlencode($sfl).'&stx='.urlencode($stx).'&amp;sop='.$sop;
$text_stx = get_text(stripslashes($stx));
$op1 = "";
$op1 = '';
// 검색어를 구분자로 나눈다. 여기서는 공백
$s = explode(" ", strip_tags($stx));
$s = explode(' ', strip_tags($stx));
// 검색필드를 구분자로 나눈다. 여기서는 +
$field = explode("||", trim($sfl));
$field = explode('||', trim($sfl));
$str = "(";
$str = '(';
for ($i=0; $i<count($s); $i++)
{
if (trim($s[$i]) == "") continue;
if (trim($s[$i]) == '') continue;
//$search_str = strtolower($s[$i]);
$search_str = $s[$i];
$str .= $op1;
$str .= "(";
$op2 = "";
$op2 = '';
for ($k=0; $k<count($field); $k++) // 필드의 수만큼 다중 필드 검색 가능 (필드1+필드2...)
{
$str .= $op2;
switch ($field[$k])
{
case "mb_id" :
case "wr_name" :
case 'mb_id' :
case 'wr_name' :
$str .= "$field[$k] = '$s[$i]'";
break;
case "wr_subject" :
case "wr_content" :
case 'wr_subject' :
case 'wr_content' :
if (preg_match("/[a-zA-Z]/", $search_str))
$str .= "INSTR(LOWER($field[$k]), LOWER('$search_str'))";
$str .= "INSTR(LOWER({$field[$k]}), LOWER('{$search_str}'))";
else
$str .= "INSTR($field[$k], '$search_str')";
$str .= "INSTR({$field[$k]}, '{$search_str}')";
break;
default :
$str .= "1=0"; // 항상 거짓
@ -97,10 +97,10 @@ if ($stx)
}
$str .= ")";
$op1 = " $sop ";
$op1 = " {$sop} ";
// 인기검색어
$sql = " insert into $g4[popular_table] set pp_word = '$search_str', pp_date = '$g4[time_ymd]', pp_ip = '$_SERVER[REMOTE_ADDR]' ";
$sql = " insert into {$g4[popular_table]} set pp_word = '{$search_str}', pp_date = '{$g4[time_ymd]}', pp_ip = '{$_SERVER[REMOTE_ADDR]}' ";
sql_query($sql, FALSE);
}
$str .= ")";
@ -117,8 +117,8 @@ if ($stx)
for ($i=0; $i<count($g4_search[tables]); $i++)
{
$tmp_write_table = $g4[write_prefix] . $g4_search[tables][$i];
$sql = " select wr_id from $tmp_write_table where $sql_search ";
$sql = " select wr_id from {$tmp_write_table} where {$sql_search} ";
$result = sql_query($sql, false);
$row[cnt] = @mysql_num_rows($result);
@ -133,9 +133,9 @@ if ($stx)
$read_level[] = $g4_search[read_level][$i];
$search_table_count[] = $total_count;
$sql2 = " select bo_subject from $g4[board_table] where bo_table = '{$g4_search[tables][$i]}' ";
$sql2 = " select bo_subject from {$g4[board_table]} where bo_table = '{$g4_search[tables][$i]}' ";
$row2 = sql_fetch($sql2);
$str_board_list .= "<li><a href='$_SERVER[PHP_SELF]?$search_query&gr_id=$gr_id&onetable={$g4_search[tables][$i]}'>$row2[bo_subject]</a> ($row[cnt])";
$str_board_list .= '<li><a href="'.$_SERVER[PHP_SELF].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;onetable='.$g4_search[tables][$i].'">'.$row2[bo_subject].'</a> ('.$row[cnt].')';
}
}
@ -160,41 +160,41 @@ if ($stx)
$k=0;
for ($idx=$table_index; $idx<count($search_table); $idx++)
{
$sql = " select bo_subject from $g4[board_table] where bo_table = '$search_table[$idx]' ";
$sql = " select bo_subject from {$g4[board_table]} where bo_table = '{$search_table[$idx]}' ";
$row = sql_fetch($sql);
$bo_subject[$idx] = $row[bo_subject];
$tmp_write_table = $g4[write_prefix] . $search_table[$idx];
$sql = " select * from $tmp_write_table where $sql_search order by wr_id desc limit $from_record, $rows ";
$sql = " select * from {$tmp_write_table} where {$sql_search} order by wr_id desc limit {$from_record}, {$rows} ";
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++)
{
// 검색어까지 링크되면 게시판 부하가 일어남
$list[$idx][$i] = $row;
$list[$idx][$i][href] = "./board.php?bo_table=$search_table[$idx]&amp;wr_id=$row[wr_parent]";
$list[$idx][$i][href] = './board.php?bo_table='.$search_table[$idx].'&amp;wr_id='.$row[wr_parent];
if ($row[wr_is_comment])
{
$link .= "#c{$row[wr_id]}";
$sql2 = " select wr_subject, wr_option from $tmp_write_table where wr_id = '$row[wr_parent]' ";
$link .= '#c'.$row[wr_id];
$sql2 = " select wr_subject, wr_option from {$tmp_write_table} where wr_id = '{$row[wr_parent]}' ";
$row2 = sql_fetch($sql2);
//$row[wr_subject] = $row2[wr_subject];
$row[wr_subject] = get_text($row2[wr_subject]);
}
// 비밀글은 검색 불가
if (strstr($row[wr_option].$row2[wr_option], "secret"))
$row[wr_content] = "[비밀글 입니다.]";
if (strstr($row[wr_option].$row2[wr_option], 'secret'))
$row[wr_content] = '[비밀글 입니다.]';
$subject = get_text($row[wr_subject]);
if (strstr($sfl, "wr_subject"))
if (strstr($sfl, 'wr_subject'))
$subject = search_font($stx, $subject);
if ($read_level[$idx] <= $member[mb_level])
{
$content = cut_str(get_text($row[wr_content]),300,"…");
if (strstr($sfl, "wr_content"))
if (strstr($sfl, 'wr_content'))
$content = search_font($stx, $content);
}
else
@ -216,23 +216,23 @@ if ($stx)
$from_record = 0;
}
$write_pages = get_paging($config[cf_write_pages], $page, $total_page, "$_SERVER[PHP_SELF]?$search_query&gr_id=$gr_id&srows=$srows&onetable=$onetable&amp;page=");
$write_pages = get_paging($config[cf_write_pages], $page, $total_page, $_SERVER[PHP_SELF].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;srows='.$srows.'&amp;onetable='.$onetable.'&amp;page=');
echo "<script src=\"$g4['path']/js/sideview.js\"></script>";
echo '<script src="'.$g4['path'].'/js/sideview.js"></script>';
}
$group_select = "<select id='gr_id' name='gr_id' class=select><option value=''>전체 분류";
$sql = " select gr_id, gr_subject from $g4[group_table] order by gr_id ";
$group_select = '<select id="gr_id" name="gr_id" class="select"><option value="">전체 분류';
$sql = " select gr_id, gr_subject from {$g4[group_table]} order by gr_id ";
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++)
$group_select .= "<option value='$row[gr_id]'>$row[gr_subject]";
$group_select .= "</select>";
$group_select .= '<option value="'.$row[gr_id].'">'.$row[gr_subject].'</option>';
$group_select .= '</select>';
if (!$sfl) $sfl = "wr_subject";
if (!$sop) $sop = "or";
if (!$sfl) $sfl = 'wr_subject';
if (!$sop) $sop = 'or';
$search_skin_path = "$g4['path']/skin/search/$config[cf_search_skin]";
include_once("$search_skin_path/search.skin.php");
$search_skin_path = $g4['path'].'/skin/search/'.$config[cf_search_skin];
include_once($search_skin_path.'/search.skin.php');
include_once('./_tail.php');
?>