firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

사용자단 따옴표 작업 bbs/write_update.php 할 차례

Browse Source
This commit is contained in:
whitedot
2012-11-30 19:10:49 +09:00
parent 68ae98cd95
commit de88c60cd2
54 changed files with 1264 additions and 1247 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
bbs/tb.php
View File

@ -6,23 +6,22 @@ define("_GNUBOARD_", TRUE);
include_once('./_common.php');
// 오류는 write_log() 함수로 남긴다.
include_once("$g4['path']/lib/etc.lib.php");
include_once($g4['path'].'/lib/etc.lib.php');
function tb_xml_msg($error, $msg="")
function tb_xml_msg($error, $msg='')
{
global $g4;
$s = "";
$s .= "<?xml version=\"1.0\" encoding=\"$g4[charset]\"?>\n";
$s .= "<response>\n";
$s .= "<error>$error</error>\n";
$s .= "<message>$msg</message>\n";
$s .= "</response>\n";
$s = '';
$s .= '<?xml version="1.0" encoding="'.$g4[charset].'"?>'.PHP_EOL;
$s .= '<response>'.PHP_EOL;
$s .= '<error>'.$error.'</error>'.PHP_EOL;
$s .= '<message>'.$msg.'</message>'.PHP_EOL;
$s .= '</response>'.PHP_EOL;
return $s;
}
$arr = explode("/", $_SERVER[PATH_INFO]);
// 영문자 숫자 _ 과 일치하지 않는 문자는 삭제한다. (최대 20자)
$bo_table = preg_replace("/\W/", "", substr($arr[1],0,20));
@ -33,44 +32,43 @@ $to_token = preg_replace("/[^a-z0-9]/", "", substr($arr[3],0,32));
$write_table = $g4[write_prefix] . $bo_table; // 게시판 테이블 전체이름
$sql = " select wr_id, ca_name, wr_email from $write_table where wr_id = '$wr_id' ";
$sql = " select wr_id, ca_name, wr_email from {$write_table} where wr_id = '{$wr_id}' ";
$wr = sql_fetch($sql, FALSE);
// wr_id가 없거나 트랙백으로 넘어온게 아니라면
if (!$wr[wr_id] || !($_POST[title] && $_POST[excerpt] && $_POST[url] && $_POST[blog_name]))
{
$tmp_dir = str_replace("/tb.php", "", $_SERVER[SCRIPT_NAME]);
header("location:$tmp_dir/board.php?bo_table=$bo_table&amp;wr_id=$wr_id");
$tmp_dir = str_replace('/tb.php', '', $_SERVER[SCRIPT_NAME]);
header('location:'.$tmp_dir.'/board.php?bo_table='.$bo_table.'&amp;wr_id='.$wr_id);
exit;
}
if (!$to_token)
{
if (isset($_POST))
write_log("$g4['path']/data/log/tb.log", $_POST);
write_log($g4['path'].'/data/log/tb.log', $_POST);
echo tb_xml_msg(1, "토큰값이 넘어오지 않았습니다.");
echo tb_xml_msg(1, '토큰값이 넘어오지 않았습니다.');
exit;
}
$sql = " select to_token from $g4[token_table] where to_token = '$to_token' ";
$sql = " select to_token from {$g4[token_table]} where to_token = '{$to_token}' ";
$row = sql_fetch($sql);
if ($row[to_token] && $to_token)
{
// 두번 이상 트랙백을 보내지 못하도록 하기 위하여 토큰을 삭제한다
sql_query(" delete from $g4[token_table] where to_token = '$to_token' ");
sql_query(" delete from {$g4[token_table]} where to_token = '{$to_token}' ");
// 토큰검사 (3시간 이상 지난 토큰은 삭제)
if (isset($g4['token_time']) == false)
$g4['token_time'] = 3;
$sql = " delete from $g4[token_table] where to_datetime < '".date("Y-m-d", $g4[server_time] - 3600 * $g4['token_time'])."' ";
$sql = " delete from {$g4[token_table]} where to_datetime < '".date("Y-m-d", $g4[server_time] - 3600 * $g4['token_time'])."' ";
sql_query($sql);
}
else
{
echo tb_xml_msg(1, "트랙백 주소가 올바르지 않습니다. (토큰 유효시간 경과 등)");
echo tb_xml_msg(1, '트랙백 주소가 올바르지 않습니다. (토큰 유효시간 경과 등)');
exit;
}
@ -84,36 +82,36 @@ $msg = "";
// 두번씩 INSERT 되는것을 막기 위해
if ($_POST[title])
{
$board = sql_fetch(" select bo_subject, bo_use_trackback from $g4[board_table] where bo_table = '$bo_table' ");
$board = sql_fetch(" select bo_subject, bo_use_trackback from {$g4[board_table]} where bo_table = '{$bo_table}' ");
if (!$board[bo_use_trackback])
$msg = "트랙백 사용이 금지된 게시판입니다.";
$msg = '트랙백 사용이 금지된 게시판입니다.';
if (!$msg)
{
$next_num = get_next_num($write_table);
$sql = " select max(wr_comment) as max_comment from $write_table where wr_parent = '$wr_id' and wr_is_comment = 1 ";
$sql = " select max(wr_comment) as max_comment from {$write_table} where wr_parent = '{$wr_id}' and wr_is_comment = 1 ";
$row = sql_fetch($sql);
$row[max_comment] += 1;
$sql = " insert into $g4[write_prefix]$bo_table
set wr_num = '$next_num',
wr_parent = '$wr_id',
wr_is_comment = '1',
wr_comment = '$row[max_comment]',
wr_content = '$title\n$excerpt',
wr_trackback = '$_POST[url]',
wr_name = '$_POST[blog_name]',
wr_password = '".sql_password($g4[server_time])."',
wr_datetime = '$g4[time_ymdhis]',
wr_ip = '$_SERVER[REMOTE_ADDR]' ";
$sql = " insert into {$g4[write_prefix]}{$bo_table}
set wr_num = '{$next_num}',
wr_parent = '{$wr_id}',
wr_is_comment = 1,
wr_comment = '{$row[max_comment]}',
wr_content = '{$title}\n{$excerpt}',
wr_trackback = '{$_POST[url]}',
wr_name = '{$_POST[blog_name]}',
wr_password = '".sql_password($g4[server_time])."',
wr_datetime = '{$g4[time_ymdhis]}',
wr_ip = '{$_SERVER[REMOTE_ADDR]}' ";
$result = sql_query($sql, FALSE);
if ($result)
{
$comment_id = mysql_insert_id();
sql_query(" update $write_table set wr_comment = wr_comment + 1 where wr_id = '$wr_id' ", FALSE);
sql_query(" insert into $g4[board_new_table] ( bo_table, wr_id, wr_parent, bn_datetime ) values ( '$bo_table', '$comment_id', '$wr_id', '$g4[time_ymdhis]' ) ");
sql_query(" update $g4[board_table] set bo_count_comment = bo_count_comment + 1 where bo_table = '$bo_table' ", FALSE);
sql_query(" update {$write_table} set wr_comment = wr_comment + 1 where wr_id = '{$wr_id}' ", FALSE);
sql_query(" insert into {$g4[board_new_table]} ( bo_table, wr_id, wr_parent, bn_datetime ) values ( '{$bo_table}', '{$comment_id}', '{$wr_id}', '{$g4[time_ymdhis]}' ) ");
sql_query(" update {$g4[board_table]} set bo_count_comment = bo_count_comment + 1 where bo_table = '{$bo_table}' ", FALSE);
} else
$msg = "$write_table TABLE INSERT 오류";
}
@ -130,43 +128,43 @@ if ($_POST[title])
// 메일발송 사용
if ($config[cf_email_use] && $board[bo_use_email])
{
include_once("$g4['path']/lib/mailer.lib.php");
include_once($g4['path'].'/lib/mailer.lib.php');
// 관리자의 정보를 얻고
$super_admin = get_admin("super");
$group_admin = get_admin("group");
$board_admin = get_admin("board");
$super_admin = get_admin('super');
$group_admin = get_admin('group');
$board_admin = get_admin('board');
$wr_name = $blog_name = get_text(stripslashes($_POST[blog_name]));
$wr_subject = $title = get_text(stripslashes($title));
$wr_content = $excerpt = nl2br(get_text(stripslashes($excerpt)));
$link_url = "http://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
$link_url = 'http://'.$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI];
$subject = "'{$board[bo_subject]}' 게시판에 트랙백에 의한 글이 올라왔습니다.";
$subject = $board[bo_subject].' 게시판에 트랙백에 의한 글이 올라왔습니다.';
define("_GNUBOARD_", TRUE);
ob_start();
include_once ("./write_update_mail.php");
include_once ('./write_update_mail.php');
$content = ob_get_contents();
ob_end_clean();
// 게시판 관리자에게 보내는 메일
if ($config[cf_email_wr_board_admin])
mailer($blog_name, "", $board_admin[mb_email], $subject, $content, 1);
mailer($blog_name, '', $board_admin[mb_email], $subject, $content, 1);
// 그룹 관리자에게 보내는 메일
if ($group_admin[mb_email] != $board_admin[mb_email])
{
if ($config[cf_email_wr_group_admin])
mailer($blog_name, "", $group_admin[mb_email], $subject, $content, 1);
mailer($blog_name, '', $group_admin[mb_email], $subject, $content, 1);
}
// 최고관리자에게 보내는 메일
if ($super_admin[mb_email] != $board_admin[mb_email])
{
if ($config[cf_email_wr_super_admin])
mailer($blog_name, "", $super_admin[mb_email], $subject, $content, 1);
mailer($blog_name, '', $super_admin[mb_email], $subject, $content, 1);
}
// 답변 메일받기 (원게시자에게 보내는 메일)
@ -179,18 +177,18 @@ if ($_POST[title])
// 코멘트 쓴 모든이에게 메일 발송
if ($config[cf_email_wr_comment_all])
{
$sql = " select wr_email from $write_table
where wr_email not in ( '$admin[mb_email]' , '$wr[wr_email]', '' )
and wr_parent = '$wr_id'
group by wr_email ";
$sql = " select wr_email from {$write_table}
where wr_email not in ( '{$admin[mb_email]}' , '{$wr[wr_email]}', '' )
and wr_parent = '{$wr_id}'
group by wr_email ";
$result = sql_query($sql);
while ($row=sql_fetch_array($result))
mailer($blog_name, "", $row[wr_email], $subject, $content, 1);
mailer($blog_name, '', $row[wr_email], $subject, $content, 1);
}
}
}
}
}
echo tb_xml_msg(0, "");
echo tb_xml_msg(0, '');
?>