firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

관리자 따옴표 수정

Browse Source
This commit is contained in:
chicpro
2012-11-02 17:18:27 +09:00
parent f3857b4e6c
commit eae06035b0
23 changed files with 831 additions and 833 deletions
Download Patch File Download Diff File Expand all files Collapse all files

262
adm/board_form_update.php
View File

@ -1,55 +1,55 @@
<?
$sub_menu = "300100";
include_once("./_common.php");
include_once('./_common.php');
if ($w == 'u')
check_demo();
auth_check($auth[$sub_menu], "w");
auth_check($auth[$sub_menu], 'w');
if ($member[mb_password] != sql_password($_POST['admin_password'])) {
alert("패스워드가 다릅니다.");
if ($member['mb_password'] != sql_password($_POST['admin_password'])) {
alert('패스워드가 다릅니다.');
}
if (!$_POST[gr_id]) { alert("그룹 ID는 반드시 선택하세요."); }
if (!$bo_table) { alert("게시판 TABLE명은 반드시 입력하세요."); }
if (!preg_match("/^([A-Za-z0-9_]{1,20})$/", $bo_table)) { alert("게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)"); }
if (!$_POST[bo_subject]) { alert("게시판 제목을 입력하세요."); }
if (!$_POST['gr_id']) { alert('그룹 ID는 반드시 선택하세요.'); }
if (!$bo_table) { alert('게시판 TABLE명은 반드시 입력하세요.'); }
if (!preg_match("/^([A-Za-z0-9_]{1,20})$/", $bo_table)) { alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)'); }
if (!$_POST['bo_subject']) { alert('게시판 제목을 입력하세요.'); }
if ($img = $_FILES[bo_image_head][name]) {
if ($img = $_FILES['bo_image_head']['name']) {
if (!preg_match("/\.(gif|jpg|png)$/i", $img)) {
alert("상단 이미지가 gif, jpg, png 파일이 아닙니다.");
alert('상단 이미지가 gif, jpg, png 파일이 아닙니다.');
}
}
if ($img = $_FILES[bo_image_tail][name]) {
if ($img = $_FILES['bo_image_tail']['name']) {
if (!preg_match("/\.(gif|jpg|png)$/i", $img)) {
alert("하단 이미지가 gif, jpg, png 파일이 아닙니다.");
alert('하단 이미지가 gif, jpg, png 파일이 아닙니다.');
}
}
if ($file = $_POST[bo_include_head]) {
if ($file = $_POST['bo_include_head']) {
if (!preg_match("/\.(php|htm[l]?)$/i", $file)) {
alert("상단 파일 경로가 php, html 파일이 아닙니다.");
alert('상단 파일 경로가 php, html 파일이 아닙니다.');
}
}
if ($file = $_POST[bo_include_tail]) {
if ($file = $_POST['bo_include_tail']) {
if (!preg_match("/\.(php|htm[l]?)$/i", $file)) {
alert("하단 파일 경로가 php, html 파일이 아닙니다.");
alert('하단 파일 경로가 php, html 파일이 아닙니다.');
}
}
check_token();
$board_path = "$g4[path]/data/file/$bo_table";
$board_path = $g4['path'].'/data/file/'.$bo_table;
// 게시판 디렉토리 생성
@mkdir($board_path, 0707);
@chmod($board_path, 0707);
// 디렉토리에 있는 파일의 목록을 보이지 않게 한다.
$file = $board_path . "/index.php";
$file = $board_path . '/index.php';
$f = @fopen($file, "w");
@fwrite($f, "");
@fclose($f);
@ -57,118 +57,118 @@ $f = @fopen($file, "w");
// 분류에 & 나 = 는 사용이 불가하므로 2바이트로 바꾼다.
$src_char = array('&', '=');
$dst_char = array('＆', '〓');
$dst_char = array('＆', '〓');
$bo_category_list = str_replace($src_char, $dst_char, $bo_category_list);
$sql_common = " gr_id = '$_POST[gr_id]',
bo_subject = '$_POST[bo_subject]',
bo_admin = '$_POST[bo_admin]',
bo_list_level = '$_POST[bo_list_level]',
bo_read_level = '$_POST[bo_read_level]',
bo_write_level = '$_POST[bo_write_level]',
bo_reply_level = '$_POST[bo_reply_level]',
bo_comment_level = '$_POST[bo_comment_level]',
bo_html_level = '$_POST[bo_html_level]',
bo_link_level = '$_POST[bo_link_level]',
bo_trackback_level = '$_POST[bo_trackback_level]',
bo_count_modify = '$_POST[bo_count_modify]',
bo_count_delete = '$_POST[bo_count_delete]',
bo_upload_level = '$_POST[bo_upload_level]',
bo_download_level = '$_POST[bo_download_level]',
bo_read_point = '$_POST[bo_read_point]',
bo_write_point = '$_POST[bo_write_point]',
bo_comment_point = '$_POST[bo_comment_point]',
bo_download_point = '$_POST[bo_download_point]',
bo_use_category = '$_POST[bo_use_category]',
bo_category_list = '$_POST[bo_category_list]',
bo_disable_tags = '$_POST[bo_disable_tags]',
bo_use_sideview = '$_POST[bo_use_sideview]',
bo_use_file_content = '$_POST[bo_use_file_content]',
bo_use_secret = '$_POST[bo_use_secret]',
bo_use_dhtml_editor = '$_POST[bo_use_dhtml_editor]',
bo_use_rss_view = '$_POST[bo_use_rss_view]',
bo_use_comment = '$_POST[bo_use_comment]',
bo_use_good = '$_POST[bo_use_good]',
bo_use_nogood = '$_POST[bo_use_nogood]',
bo_use_name = '$_POST[bo_use_name]',
bo_use_signature = '$_POST[bo_use_signature]',
bo_use_ip_view = '$_POST[bo_use_ip_view]',
bo_use_trackback = '$_POST[bo_use_trackback]',
bo_use_list_view = '$_POST[bo_use_list_view]',
bo_use_list_content = '$_POST[bo_use_list_content]',
bo_use_email = '$_POST[bo_use_email]',
bo_table_width = '$_POST[bo_table_width]',
bo_subject_len = '$_POST[bo_subject_len]',
bo_page_rows = '$_POST[bo_page_rows]',
bo_new = '$_POST[bo_new]',
bo_hot = '$_POST[bo_hot]',
bo_image_width = '$_POST[bo_image_width]',
bo_skin = '$_POST[bo_skin]',
bo_include_head = '$_POST[bo_include_head]',
bo_include_tail = '$_POST[bo_include_tail]',
bo_content_head = '$_POST[bo_content_head]',
bo_content_tail = '$_POST[bo_content_tail]',
bo_insert_content = '$_POST[bo_insert_content]',
bo_gallery_cols = '$_POST[bo_gallery_cols]',
bo_upload_count = '$_POST[bo_upload_count]',
bo_upload_size = '$_POST[bo_upload_size]',
bo_reply_order = '$_POST[bo_reply_order]',
bo_use_search = '$_POST[bo_use_search]',
bo_order_search = '$_POST[bo_order_search]',
bo_write_min = '$_POST[bo_write_min]',
bo_write_max = '$_POST[bo_write_max]',
bo_comment_min = '$_POST[bo_comment_min]',
bo_comment_max = '$_POST[bo_comment_max]',
bo_sort_field = '$_POST[bo_sort_field]',
bo_1_subj = '$_POST[bo_1_subj]',
bo_2_subj = '$_POST[bo_2_subj]',
bo_3_subj = '$_POST[bo_3_subj]',
bo_4_subj = '$_POST[bo_4_subj]',
bo_5_subj = '$_POST[bo_5_subj]',
bo_6_subj = '$_POST[bo_6_subj]',
bo_7_subj = '$_POST[bo_7_subj]',
bo_8_subj = '$_POST[bo_8_subj]',
bo_9_subj = '$_POST[bo_9_subj]',
bo_10_subj = '$_POST[bo_10_subj]',
bo_1 = '$_POST[bo_1]',
bo_2 = '$_POST[bo_2]',
bo_3 = '$_POST[bo_3]',
bo_4 = '$_POST[bo_4]',
bo_5 = '$_POST[bo_5]',
bo_6 = '$_POST[bo_6]',
bo_7 = '$_POST[bo_7]',
bo_8 = '$_POST[bo_8]',
bo_9 = '$_POST[bo_9]',
bo_10 = '$_POST[bo_10]' ";
$sql_common = " gr_id = '{$_POST['gr_id']}',
bo_subject = '{$_POST['bo_subject']}',
bo_admin = '{$_POST['bo_admin']}',
bo_list_level = '{$_POST['bo_list_level']}',
bo_read_level = '{$_POST['bo_read_level']}',
bo_write_level = '{$_POST['bo_write_level']}',
bo_reply_level = '{$_POST['bo_reply_level']}',
bo_comment_level = '{$_POST['bo_comment_level']}',
bo_html_level = '{$_POST['bo_html_level']}',
bo_link_level = '{$_POST['bo_link_level']}',
bo_trackback_level = '{$_POST['bo_trackback_level']}',
bo_count_modify = '{$_POST['bo_count_modify']}',
bo_count_delete = '{$_POST['bo_count_delete']}',
bo_upload_level = '{$_POST['bo_upload_level']}',
bo_download_level = '{$_POST['bo_download_level']}',
bo_read_point = '{$_POST['bo_read_point']}',
bo_write_point = '{$_POST['bo_write_point']}',
bo_comment_point = '{$_POST['bo_comment_point']}',
bo_download_point = '{$_POST['bo_download_point']}',
bo_use_category = '{$_POST['bo_use_category']}',
bo_category_list = '{$_POST['bo_category_list']}',
bo_disable_tags = '{$_POST['bo_disable_tags']}',
bo_use_sideview = '{$_POST['bo_use_sideview']}',
bo_use_file_content = '{$_POST['bo_use_file_content']}',
bo_use_secret = '{$_POST['bo_use_secret']}',
bo_use_dhtml_editor = '{$_POST['bo_use_dhtml_editor']}',
bo_use_rss_view = '{$_POST['bo_use_rss_view']}',
bo_use_comment = '{$_POST['bo_use_comment']}',
bo_use_good = '{$_POST['bo_use_good']}',
bo_use_nogood = '{$_POST['bo_use_nogood']}',
bo_use_name = '{$_POST['bo_use_name']}',
bo_use_signature = '{$_POST['bo_use_signature']}',
bo_use_ip_view = '{$_POST['bo_use_ip_view']}',
bo_use_trackback = '{$_POST['bo_use_trackback']}',
bo_use_list_view = '{$_POST['bo_use_list_view']}',
bo_use_list_content = '{$_POST['bo_use_list_content']}',
bo_use_email = '{$_POST['bo_use_email']}',
bo_table_width = '{$_POST['bo_table_width']}',
bo_subject_len = '{$_POST['bo_subject_len']}',
bo_page_rows = '{$_POST['bo_page_rows']}',
bo_new = '{$_POST['bo_new']}',
bo_hot = '{$_POST['bo_hot']}',
bo_image_width = '{$_POST['bo_image_width']}',
bo_skin = '{$_POST['bo_skin']}',
bo_include_head = '{$_POST['bo_include_head']}',
bo_include_tail = '{$_POST['bo_include_tail']}',
bo_content_head = '{$_POST['bo_content_head']}',
bo_content_tail = '{$_POST['bo_content_tail']}',
bo_insert_content = '{$_POST['bo_insert_content']}',
bo_gallery_cols = '{$_POST['bo_gallery_cols']}',
bo_upload_count = '{$_POST['bo_upload_count']}',
bo_upload_size = '{$_POST['bo_upload_size']}',
bo_reply_order = '{$_POST['bo_reply_order']}',
bo_use_search = '{$_POST['bo_use_search']}',
bo_order_search = '{$_POST['bo_order_search']}',
bo_write_min = '{$_POST['bo_write_min']}',
bo_write_max = '{$_POST['bo_write_max']}',
bo_comment_min = '{$_POST['bo_comment_min']}',
bo_comment_max = '{$_POST['bo_comment_max']}',
bo_sort_field = '{$_POST['bo_sort_field']}',
bo_1_subj = '{$_POST['bo_1_subj']}',
bo_2_subj = '{$_POST['bo_2_subj']}',
bo_3_subj = '{$_POST['bo_3_subj']}',
bo_4_subj = '{$_POST['bo_4_subj']}',
bo_5_subj = '{$_POST['bo_5_subj']}',
bo_6_subj = '{$_POST['bo_6_subj']}',
bo_7_subj = '{$_POST['bo_7_subj']}',
bo_8_subj = '{$_POST['bo_8_subj']}',
bo_9_subj = '{$_POST['bo_9_subj']}',
bo_10_subj = '{$_POST['bo_10_subj']}',
bo_1 = '{$_POST['bo_1']}',
bo_2 = '{$_POST['bo_2']}',
bo_3 = '{$_POST['bo_3']}',
bo_4 = '{$_POST['bo_4']}',
bo_5 = '{$_POST['bo_5']}',
bo_6 = '{$_POST['bo_6']}',
bo_7 = '{$_POST['bo_7']}',
bo_8 = '{$_POST['bo_8']}',
bo_9 = '{$_POST['bo_9']}',
bo_10 = '{$_POST['bo_10']}' ";
if ($bo_image_head_del) {
@unlink("$board_path/$bo_image_head_del");
@unlink($board_path.'/'.$bo_image_head_del);
$sql_common .= " , bo_image_head = '' ";
}
if ($bo_image_tail_del) {
@unlink("$board_path/$bo_image_tail_del");
@unlink($board_path.'/'.$bo_image_tail_del);
$sql_common .= " , bo_image_tail = '' ";
}
if ($_FILES[bo_image_head][name]) {
if ($_FILES['bo_image_head']['name']) {
//$bo_image_head_urlencode = urlencode($_FILES[bo_image_head][name]);
$bo_image_head_urlencode = $bo_table."_head_".time();
$bo_image_head_urlencode = $bo_table.'_head_'.time();
$sql_common .= " , bo_image_head = '$bo_image_head_urlencode' ";
}
if ($_FILES[bo_image_tail][name]) {
if ($_FILES['bo_image_tail']['name']) {
//$bo_image_tail_urlencode = urlencode($_FILES[bo_image_tail][name]);
$bo_image_tail_urlencode = $bo_table."_tail_".time();
$bo_image_tail_urlencode = $bo_table.'_tail_'.time();
$sql_common .= " , bo_image_tail = '$bo_image_tail_urlencode' ";
}
if ($w == "") {
$row = sql_fetch(" select count(*) as cnt from $g4[board_table] where bo_table = '$bo_table' ");
if ($w == '') {
$row = sql_fetch(" select count(*) as cnt from {$g4['board_table']} where bo_table = '$bo_table' ");
if ($row[cnt])
alert("{$bo_table} 은(는) 이미 존재하는 TABLE 입니다.");
alert($bo_table.' 은(는) 이미 존재하는 TABLE 입니다.');
$sql = " insert into $g4[board_table]
$sql = " insert into {$g4['board_table']}
set bo_table = '$bo_table',
bo_count_write = '0',
bo_count_comment = '0',
@ -176,38 +176,38 @@ if ($w == "") {
sql_query($sql);
// 게시판 테이블 생성
$file = file("./sql_write.sql");
$file = file('./sql_write.sql');
$sql = implode($file, "\n");
$create_table = $g4[write_prefix] . $bo_table;
$create_table = $g4['write_prefix'] . $bo_table;
// sql_board.sql 파일의 테이블명을 변환
$source = array("/__TABLE_NAME__/", "/;/");
$target = array($create_table, "");
$source = array('/__TABLE_NAME__/', '/;/');
$target = array($create_table, '');
$sql = preg_replace($source, $target, $sql);
sql_query($sql, FALSE);
} else if ($w == "u") {
} else if ($w == 'u') {
// 게시판의 글 수
$sql = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_is_comment = 0 ";
$sql = " select count(*) as cnt from {$g4['write_prefix']}$bo_table where wr_is_comment = 0 ";
$row = sql_fetch($sql);
$bo_count_write = $row[cnt];
$bo_count_write = $row['cnt'];
// 게시판의 코멘트 수
$sql = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_is_comment = 1 ";
$sql = " select count(*) as cnt from {$g4['write_prefix']}$bo_table where wr_is_comment = 1 ";
$row = sql_fetch($sql);
$bo_count_comment = $row[cnt];
$bo_count_comment = $row['cnt'];
// 글수 조정
if ($proc_count) {
// 원글을 얻습니다.
$sql = " select wr_id from $g4[write_prefix]$bo_table where wr_is_comment = 0 ";
$sql = " select wr_id from {$g4['write_prefix']}$bo_table where wr_is_comment = 0 ";
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++) {
// 코멘트수를 얻습니다.
$sql2 = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_parent = '$row[wr_id]' and wr_is_comment = 1 ";
$sql2 = " select count(*) as cnt from {$g4['write_prefix']}$bo_table where wr_parent = '{$row['wr_id']}' and wr_is_comment = 1 ";
$row2 = sql_fetch($sql2);
sql_query(" update $g4[write_prefix]$bo_table set wr_comment = '$row2[cnt]' where wr_id = '$row[wr_id]' ");
sql_query(" update {$g4['write_prefix']}$bo_table set wr_comment = '{$row2['cnt']}' where wr_id = '{$row['wr_id']}' ");
}
}
@ -218,8 +218,8 @@ if ($w == "") {
$tmp_array = explode("\n", $board[bo_notice]);
for ($i=0; $i<count($tmp_array); $i++) {
$tmp_wr_id = trim($tmp_array[$i]);
$row = sql_fetch(" select count(*) as cnt from $g4[write_prefix]$bo_table where wr_id = '$tmp_wr_id' ");
if ($row[cnt])
$row = sql_fetch(" select count(*) as cnt from {$g4['write_prefix']}$bo_table where wr_id = '$tmp_wr_id' ");
if ($row[cnt])
{
$bo_notice .= $lf . $tmp_wr_id;
$lf = "\n";
@ -227,7 +227,7 @@ if ($w == "") {
}
}
$sql = " update $g4[board_table]
$sql = " update {$g4['board_table']}
set bo_notice = '$bo_notice',
bo_count_write = '$bo_count_write',
bo_count_comment = '$bo_count_comment',
@ -307,7 +307,7 @@ for ($i=1; $i<=10; $i++) {
}
if ($s) {
$sql = " update $g4[board_table]
$sql = " update {$g4['board_table']}
set bo_table = bo_table
{$s}
where gr_id = '$gr_id' ";
@ -315,15 +315,15 @@ if ($s) {
}
if ($_FILES[bo_image_head][name]) {
$bo_image_head_path = "$board_path/$bo_image_head_urlencode";
move_uploaded_file($_FILES[bo_image_head][tmp_name], $bo_image_head_path);
if ($_FILES['bo_image_head']['name']) {
$bo_image_head_path = $board_path.'/'.$bo_image_head_urlencode;
move_uploaded_file($_FILES['bo_image_head']['tmp_name'], $bo_image_head_path);
chmod($bo_image_head_path, 0606);
}
if ($_FILES[bo_image_tail][name]) {
$bo_image_tail_path = "$board_path/$bo_image_tail_urlencode";
move_uploaded_file($_FILES[bo_image_tail][tmp_name], $bo_image_tail_path);
if ($_FILES['bo_image_tail']['name']) {
$bo_image_tail_path = $board_path.'/'.$bo_image_tail_urlencode;
move_uploaded_file($_FILES['bo_image_tail']['tmp_name'], $bo_image_tail_path);
chmod($bo_image_tail_path, 0606);
}