From e5ab7456f202b41386eb7acc781e558ff56c70ce Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Wed, 6 Jan 2021 09:59:33 +0900
Subject: [PATCH] =?UTF-8?q?PHP80=20=EB=B2=84=EC=A0=84=EC=97=90=EC=84=9C=20?=
 =?UTF-8?q?=EA=B2=BD=EA=B3=A0=EB=AC=B8=EC=9D=B4=20=EB=82=98=EC=98=A4?=
 =?UTF-8?q?=EB=8A=94=20=EC=BD=94=EB=93=9C=20=EB=B0=8F=20=EA=B8=80=20?=
 =?UTF-8?q?=EC=9D=B4=EB=8F=99=EC=8B=9C=20=EC=98=A4=EB=A5=98=20=ED=98=84?=
 =?UTF-8?q?=EC=83=81=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/admin.lib.php                      |  2 +-
 adm/sms_admin/emoticon_move_update.php | 15 +++++++--------
 adm/sms_admin/form_list.php            |  9 +++++----
 adm/sms_admin/form_multi_update.php    |  3 ++-
 adm/sms_admin/form_update.php          |  1 +
 bbs/move.php                           |  2 +-
 bbs/move_update.php                    | 14 ++++++--------
 bbs/scrap_popin_update.php             | 16 +++++++---------
 lib/uri.lib.php                        |  8 ++++----
 9 files changed, 34 insertions(+), 36 deletions(-)

diff --git a/adm/admin.lib.php b/adm/admin.lib.php
index d420b18b1..af780a2ff 100644
--- a/adm/admin.lib.php
+++ b/adm/admin.lib.php
@@ -184,7 +184,7 @@ function get_theme_config_value($dir, $key='*')
         } else {
             $keys = array_map('trim', explode(',', $key));
             foreach($keys as $v) {
-                $tconfig[$v] = trim($theme_config[$v]);
+                $tconfig[$v] = isset($theme_config[$v]) ? trim($theme_config[$v]) : '';
             }
         }
     }
diff --git a/adm/sms_admin/emoticon_move_update.php b/adm/sms_admin/emoticon_move_update.php
index 30a6bf330..08fe2848e 100644
--- a/adm/sms_admin/emoticon_move_update.php
+++ b/adm/sms_admin/emoticon_move_update.php
@@ -1,4 +1,5 @@
 <?php
+$sub_menu = "900600";
 include_once('./_common.php');
 
 auth_check_menu($auth, $sub_menu, "r");
@@ -46,18 +47,16 @@ if ($sw == 'move')
 
 $msg = '해당 이모티콘을 선택한 그룹으로 이동 하였습니다.';
 $opener_href = './form_list.php?page='.$page;
-
-echo <<<HEREDOC
+?>
 <meta http-equiv="content-type" content="text/html; charset=utf-8">
 <script>
-alert("$msg");
-opener.document.location.href = "$opener_href";
+alert("<?php echo $msg; ?>");
+opener.document.location.href = "<?php echo $opener_href; ?>";
 window.close();
 </script>
 <noscript>
 <p>
-    "$msg"
+    <?php echo $msg; ?>
 </p>
-<a href="$opener_href">돌아가기</a>
-</noscript>
-HEREDOC;
\ No newline at end of file
+<a href="<?php echo $opener_href; ?>">돌아가기</a>
+</noscript>
\ No newline at end of file
diff --git a/adm/sms_admin/form_list.php b/adm/sms_admin/form_list.php
index 64b771ae3..9fb66bb4a 100644
--- a/adm/sms_admin/form_list.php
+++ b/adm/sms_admin/form_list.php
@@ -34,7 +34,7 @@ if ($st == 'all') {
 }
 
 $total_res = sql_fetch("select count(*) as cnt from {$g5['sms5_form_table']} where 1 $sql_group $sql_search");
-$total_count = $total_res['cnt'];
+$total_count = isset($total_res['cnt']) ? $total_res['cnt'] : 0;
 
 $total_page = (int)($total_count/$page_size) + ($total_count%$page_size==0 ? 0 : 1);
 $page_start = $page_size * ( $page - 1 );
@@ -46,7 +46,7 @@ $qry = sql_query("select * from {$g5['sms5_form_group_table']} order by fg_name"
 while ($res = sql_fetch_array($qry)) array_push($group, $res);
 
 $res = sql_fetch("select count(*) as cnt from {$g5['sms5_form_table']} where fg_no=0");
-$no_count = $res['cnt'];
+$no_count = isset($res['cnt']) ? $res['cnt'] : 0;
 
 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>
@@ -146,6 +146,7 @@ function multi_update(sel)
 <form name="emoticonlist" id="emoticonlist" method="post" action="./form_multi_update.php" onsubmit="return emoticonlist_submit(this);" >
 <input type="hidden" name="page" value="<?php echo $page; ?>">
 <input type="hidden" name="token" value="<?php echo $token; ?>">
+<input type="hidden" name="fg_no" value="<?php echo $fg_no; ?>">
 <input type="hidden" name="sw" value="">
 <input type="hidden" name="atype" value="del">
 <ul id="sms5_preset" class="sms5_box">
@@ -234,7 +235,7 @@ function select_copy(sw, f) {
 }
 </script>
 
-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?fg_no=$fg_no&amp;st=$st&amp;sv=$sv&amp;page="); ?>
-
 <?php
+echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?fg_no=$fg_no&amp;st=$st&amp;sv=$sv&amp;page=");
+
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
\ No newline at end of file
diff --git a/adm/sms_admin/form_multi_update.php b/adm/sms_admin/form_multi_update.php
index d90793829..ae8b50129 100644
--- a/adm/sms_admin/form_multi_update.php
+++ b/adm/sms_admin/form_multi_update.php
@@ -8,6 +8,7 @@ check_admin_token();
 
 $post_fo_no = (isset($_POST['fo_no']) && is_array($_POST['fo_no'])) ? $_POST['fo_no'] : array();
 $atype = isset($_POST['atype']) ? clean_xss_tags($_POST['atype'], 1, 1) : '';
+$fg_no = isset($_POST['fg_no']) ? (int) $_POST['fg_no'] : 0;
 
 if($atype == "del"){
     $count = count($post_fo_no);
@@ -27,4 +28,4 @@ if($atype == "del"){
         sql_query("update {$g5['sms5_form_group_table']} set fg_count = fg_count - 1 where fg_no='{$res['fg_no']}'");
     }
 }
-goto_url('./form_list.php');
\ No newline at end of file
+goto_url('./form_list.php?fg_no='.$fg_no);
\ No newline at end of file
diff --git a/adm/sms_admin/form_update.php b/adm/sms_admin/form_update.php
index 3236eeee5..c086cb059 100644
--- a/adm/sms_admin/form_update.php
+++ b/adm/sms_admin/form_update.php
@@ -7,6 +7,7 @@ auth_check_menu($auth, $sub_menu, "w");
 $fo_name = isset($_REQUEST['fo_name']) ? strip_tags(clean_xss_attributes($_REQUEST['fo_name'])) : '';
 $fo_content = isset($_REQUEST['fo_content']) ? strip_tags(clean_xss_attributes($_REQUEST['fo_content'])) : '';
 $fo_receipt = isset($_REQUEST['fo_receipt']) ? clean_xss_tags($_REQUEST['fo_receipt'], 1, 1) : '';
+$get_fg_no = '';
 
 $g5['title'] = "이모티콘 업데이트";
 
diff --git a/bbs/move.php b/bbs/move.php
index 8ace121a3..9fbc97d51 100644
--- a/bbs/move.php
+++ b/bbs/move.php
@@ -25,7 +25,7 @@ else {
 
     $count_chk_wr_id = (isset($_POST['chk_wr_id']) && is_array($_POST['chk_wr_id'])) ? count($_POST['chk_wr_id']) : 0;
 
-    for ($i=0; $i<count($count_chk_wr_id); $i++) {
+    for ($i=0; $i<$count_chk_wr_id; $i++) {
         $wr_id_val = isset($_POST['chk_wr_id'][$i]) ? preg_replace('/[^0-9]/', '', $_POST['chk_wr_id'][$i]) : 0;
         $wr_id_list .= $comma . $wr_id_val;
         $comma = ',';
diff --git a/bbs/move_update.php b/bbs/move_update.php
index 4e2e253e3..dd5a6345a 100644
--- a/bbs/move_update.php
+++ b/bbs/move_update.php
@@ -242,18 +242,16 @@ $opener_href  = get_pretty_url($bo_table,'','&amp;page='.$page.'&amp;'.$qstr);
 $opener_href1 = str_replace('&amp;', '&', $opener_href);
 
 run_event('bbs_move_update', $bo_table, $chk_bo_table, $wr_id_list, $opener_href);
-
-echo <<<HEREDOC
+?>
 <meta http-equiv="content-type" content="text/html; charset=utf-8">
 <script>
-alert("$msg");
-opener.document.location.href = "$opener_href1";
+alert("<?php echo $msg; ?>");
+opener.document.location.href = "<?php echo $opener_href1; ?>";
 window.close();
 </script>
 <noscript>
 <p>
-    "$msg"
+    <?php echo $msg; ?>
 </p>
-<a href="$opener_href">돌아가기</a>
-</noscript>
-HEREDOC;
\ No newline at end of file
+<a href="<?php echo $opener_href; ?>">돌아가기</a>
+</noscript>
\ No newline at end of file
diff --git a/bbs/scrap_popin_update.php b/bbs/scrap_popin_update.php
index 5287d7652..86d25137a 100644
--- a/bbs/scrap_popin_update.php
+++ b/bbs/scrap_popin_update.php
@@ -11,7 +11,7 @@ if (!$is_member)
 }
 
 // 게시글 존재하는지
-if(!$write['wr_id'])
+if(! (isset($write['wr_id']) && $write['wr_id']))
     alert_close('스크랩하시려는 게시글이 존재하지 않습니다.');
 
 $sql = " select count(*) as cnt from {$g5['scrap_table']}
@@ -19,7 +19,7 @@ $sql = " select count(*) as cnt from {$g5['scrap_table']}
             and bo_table = '$bo_table'
             and wr_id = '$wr_id' ";
 $row = sql_fetch($sql);
-if ($row['cnt'])
+if (isset($row['cnt']) && $row['cnt'])
 {
     echo '
     <script>
@@ -43,7 +43,7 @@ if ($wr_content && ($member['mb_level'] >= $board['bo_comment_level']))
 {
     $wr = get_write($write_table, $wr_id);
     // 원글이 존재한다면
-    if ($wr['wr_id'])
+    if (isset($wr['wr_id']) && $wr['wr_id'])
     {
 
         // 세션의 시간 검사
@@ -105,16 +105,14 @@ $sql = " update `{$g5['member_table']}` set mb_scrap_cnt = '".get_scrap_totals($
 sql_query($sql);
 
 delete_cache_latest($bo_table);
-
-echo <<<HEREDOC
+?>
 <script>
-    if (confirm('이 글을 스크랩 하였습니다.\\n\\n지금 스크랩을 확인하시겠습니까?'))
-        document.location.href = './scrap.php';
+    if (confirm("이 글을 스크랩 하였습니다.\n\n지금 스크랩을 확인하시겠습니까?"))
+        document.location.href = "./scrap.php";
     else
         window.close();
 </script>
 <noscript>
 <p>이 글을 스크랩 하였습니다.</p>
 <a href="./scrap.php">스크랩 확인하기</a>
-</noscript>
-HEREDOC;
\ No newline at end of file
+</noscript>
\ No newline at end of file
diff --git a/lib/uri.lib.php b/lib/uri.lib.php
index 397b204ed..00364af00 100644
--- a/lib/uri.lib.php
+++ b/lib/uri.lib.php
@@ -28,7 +28,7 @@ function get_pretty_url($folder, $no='', $query_string='', $action='')
             if( $config['cf_bbs_rewrite'] > 1 ){
 
                 $get_content = get_content_db( $no , true);
-                $segments[2] = $get_content['co_seo_title'] ? urlencode($get_content['co_seo_title']).'/' : urlencode($no);
+                $segments[2] = (isset($get_content['co_seo_title']) && $get_content['co_seo_title']) ? urlencode($get_content['co_seo_title']).'/' : urlencode($no);
 
             } else {
                 $segments[2] = urlencode($no);
@@ -44,7 +44,7 @@ function get_pretty_url($folder, $no='', $query_string='', $action='')
 
                 $get_write = get_write( $g5['write_prefix'].$folder, $no , true);
 
-                $segments[2] = $get_write['wr_seo_title'] ? urlencode($get_write['wr_seo_title']).'/' : urlencode($no);
+                $segments[2] = (isset($get_write['wr_seo_title']) && $get_write['wr_seo_title']) ? urlencode($get_write['wr_seo_title']).'/' : urlencode($no);
 
                 } else {
                     $segments[2] = urlencode($no);
@@ -282,7 +282,7 @@ function seo_title_update($db_table, $pk_id, $type='bbs'){
     if( $type === 'bbs' ){
 
         $write = get_write($db_table, $pk_id, true);
-        if( ! $write['wr_seo_title'] && $write['wr_subject'] ){
+        if( ! (isset($write['wr_seo_title']) && $write['wr_seo_title']) && (isset($write['wr_subject']) && $write['wr_subject']) ){
             $wr_seo_title = exist_seo_title_recursive('bbs', generate_seo_title($write['wr_subject']), $db_table, $pk_id);
 
             $sql = " update `{$db_table}` set wr_seo_title = '{$wr_seo_title}' where wr_id = '{$pk_id}' ";
@@ -291,7 +291,7 @@ function seo_title_update($db_table, $pk_id, $type='bbs'){
     } else if ( $type === 'content' ){
 
         $co = get_content_db($pk_id, true);
-        if( ! $co['co_seo_title'] && $co['co_subject'] ){
+        if( ! (isset($co['co_seo_title']) && $co['co_seo_title']) && (isset($co['co_subject']) && $co['co_subject']) ){
             $co_seo_title = exist_seo_title_recursive('content', generate_seo_title($co['co_subject']), $db_table, $pk_id);
 
             $sql = " update `{$db_table}` set co_seo_title = '{$co_seo_title}' where co_id = '{$pk_id}' ";