diff --git a/adm/_common.php b/adm/_common.php index 1f7dc8ed3..5933037da 100644 --- a/adm/_common.php +++ b/adm/_common.php @@ -1,5 +1,5 @@ diff --git a/adm/auth_list.php b/adm/auth_list.php index 38693e262..ba431734c 100644 --- a/adm/auth_list.php +++ b/adm/auth_list.php @@ -13,7 +13,7 @@ $sql_search = " where (1) "; if ($stx) { $sql_search .= " and ( "; switch ($sfl) { - default : + default : $sql_search .= " ($sfl like '%$stx%') "; break; } @@ -27,18 +27,18 @@ if (!$sst) { $sql_order = " order by $sst $sod "; $sql = " select count(*) as cnt - $sql_common - $sql_search + $sql_common + $sql_search $sql_order "; $row = sql_fetch($sql); -$total_count = $row[cnt]; +$total_count = $row['cnt']; -$rows = $config[cf_page_rows]; +$rows = $config['cf_page_rows']; $total_page = ceil($total_count / $rows); // 전체 페이지 계산 if ($page == "") $page = 1; // 페이지가 없으면 첫 페이지 (1 페이지) $from_record = ($page - 1) * $rows; // 시작 열을 구함 -$sql = " select * +$sql = " select * $sql_common $sql_search $sql_order @@ -50,7 +50,7 @@ if ($sfl || $stx || $sod) // 검색 혹은 정렬일 때만 처음 버튼을 보 $listall = '처음으로'; $g4['title'] = "관리권한설정"; -include_once("./admin.head.php"); +include_once('./admin.head.php'); $colspan = 5; ?> @@ -91,7 +91,7 @@ var list_delete_php = 'auth_list_delete.php'; 자료가 없습니다.'; ?> diff --git a/adm/auth_list_delete.php b/adm/auth_list_delete.php index ec3842846..171f0107a 100644 --- a/adm/auth_list_delete.php +++ b/adm/auth_list_delete.php @@ -1,6 +1,6 @@ diff --git a/adm/auth_update.php b/adm/auth_update.php index 0237e117a..8c17d066d 100644 --- a/adm/auth_update.php +++ b/adm/auth_update.php @@ -7,7 +7,7 @@ if ($is_admin != 'super') $mb = get_member($mb_id); if (!$mb['mb_id']) - alert('존재하는 회원아이디가 아닙니다.'); + alert('존재하는 회원아이디가 아닙니다.'); check_token(); @@ -15,20 +15,20 @@ if ($member['mb_password'] != sql_password($_POST['admin_password'])) { alert('패스워드가 다릅니다.'); } -$sql = " insert into {$g4[auth_table]} +$sql = " insert into {$g4['auth_table']} set mb_id = '{$_POST['mb_id']}', - au_menu = '$_POST[au_menu]', - au_auth = '{$_POST['r']},{$_POST[$w]},{$_POST[$d]}' "; + au_menu = '{$_POST['au_menu']}', + au_auth = '{$_POST['r']},{$_POST['w']},{$_POST['d']}' "; $result = sql_query($sql, FALSE); if (!$result) { - $sql = " update $g4[auth_table] - set au_auth = '{$_POST[r]},{$_POST[$w]},{$_POST[$d]}' + $sql = " update $g4['auth_table'] + set au_auth = '{$_POST[r]},{$_POST['w']},{$_POST['d']}' where mb_id = '{$_POST['mb_id']}' - and au_menu = '$_POST[au_menu]' "; + and au_menu = '{$_POST['au_menu']}' "; sql_query($sql); } //sql_query(" OPTIMIZE TABLE `$g4[auth_table]` "); -goto_url('./auth_list.php?$qstr'); +goto_url('./auth_list.php?'.$qstr); ?> diff --git a/adm/board_copy.php b/adm/board_copy.php index 2e36d8bf9..aadb16082 100644 --- a/adm/board_copy.php +++ b/adm/board_copy.php @@ -7,7 +7,7 @@ auth_check($auth[$sub_menu], 'w'); $token = get_token(); $g4[title] = '게시판 복사'; -include_once('$g4['path']/head.sub.php'); +include_once($g4['path'].'/head.sub.php'); ?> @@ -20,7 +20,7 @@ include_once('$g4['path']/head.sub.php'); - /img/icon_title.gif"> + @@ -33,7 +33,7 @@ include_once('$g4['path']/head.sub.php'); 게시판 제목 - + 복사 유형 @@ -62,5 +62,5 @@ function fboardcopy_check(f) diff --git a/adm/board_copy_update.php b/adm/board_copy_update.php index af91f2194..f32536635 100644 --- a/adm/board_copy_update.php +++ b/adm/board_copy_update.php @@ -4,112 +4,112 @@ include_once('./_common.php'); auth_check($auth[$sub_menu], 'w'); -$target_table = mysql_real_escape_string(trim($_POST["target_table"])); -$target_subject = mysql_real_escape_string(trim($_POST["target_subject"])); +$target_table = mysql_real_escape_string(trim($_POST['target_table'])); +$target_subject = mysql_real_escape_string(trim($_POST['target_subject'])); -if (!preg_match('/[A-Za-z0-9_]{1,20}/', $target_table)) -{ - alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)'); +if (!preg_match('/[A-Za-z0-9_]{1,20}/', $target_table)) +{ + alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)'); } -$row = sql_fetch(' select count(*) as cnt from $g4[board_table] where bo_table = "$target_table" '); -if ($row[cnt]) - alert('{$target_table}은(는) 이미 존재하는 게시판 TABLE 입니다.\\n\\n복사할 TABLE로 사용할 수 없습니다.'); +$row = sql_fetch(" select count(*) as cnt from {$g4['board_table']} where bo_table = $target_table "); +if ($row['cnt']) + alert($target_table.'은(는) 이미 존재하는 게시판 TABLE 입니다.\\n\\n복사할 TABLE로 사용할 수 없습니다.'); check_token(); // 게시판 테이블 생성 -$sql = get_table_define($g4[write_prefix] . $bo_table); -$sql = str_replace($g4[write_prefix] . $bo_table, $g4[write_prefix] . $target_table, $sql); +$sql = get_table_define($g4['write_prefix'] . $bo_table); +$sql = str_replace($g4['write_prefix'] . $bo_table, $g4['write_prefix'] . $target_table, $sql); sql_query($sql); $file_copy = array(); // 게시판 정보 -$sql = ' insert into $g4[board_table] - set bo_table = "$target_table", - bo_subject = "$target_subject", - gr_id = "$board[gr_id]", - bo_admin = "$board[bo_admin]", - bo_list_level = "$board[bo_list_level]", - bo_read_level = "$board[bo_read_level]", - bo_write_level = "$board[bo_write_level]", - bo_reply_level = "$board[bo_reply_level]", - bo_comment_level = "$board[bo_comment_level]", - bo_upload_level = "$board[bo_upload_level]", - bo_download_level = "$board[bo_download_level]", - bo_html_level = "$board[bo_html_level]", - bo_link_level = "$board[bo_link_level]", - bo_trackback_level = "$board[bo_trackback_level]", - bo_count_modify = "$board[bo_count_modify]", - bo_count_delete = "$board[bo_count_delete]", - bo_read_point = "$board[bo_read_point]", - bo_write_point = "$board[bo_write_point]", - bo_comment_point = "$board[bo_comment_point]", - bo_download_point = "$board[bo_download_point]", - bo_use_category = "$board[bo_use_category]", - bo_category_list = "$board[bo_category_list]", - bo_disable_tags = "$board[bo_disable_tags]", - bo_use_secret = "$board[bo_use_secret]", - bo_use_dhtml_editor = "$board[bo_use_dhtml_editor]", - bo_use_sideview = "$board[bo_use_sideview]", - bo_use_comment = "$board[bo_use_comment]", - bo_use_good = "$board[bo_use_good]", - bo_use_nogood = "$board[bo_use_nogood]", - bo_use_signature = "$board[bo_use_signature]", - bo_use_ip_view = "$board[bo_use_ip_view]", - bo_use_trackback = "$board[bo_use_trackback]", - bo_use_list_view = "$board[bo_use_list_view]", - bo_use_list_content = "$board[bo_use_list_content]", - bo_table_width = "$board[bo_table_width]", - bo_subject_len = "$board[bo_subject_len]", - bo_page_rows = "$board[bo_page_rows]", - bo_new = "$board[bo_new]", - bo_hot = "$board[bo_hot]", - bo_image_width = "$board[bo_image_width]", - bo_skin = "$board[bo_skin]", - bo_include_head = "$board[bo_include_head]", - bo_include_tail = "$board[bo_include_tail]", - bo_content_head = '".addslashes($board["bo_content_head"]).'", - bo_content_tail = '".addslashes($board["bo_content_tail"]).'", - bo_insert_content = '".addslashes($board["bo_insert_content"]).'", - bo_gallery_cols = "$board[bo_gallery_cols]", - bo_upload_size = "$board[bo_upload_size]", - bo_reply_order = "$board[bo_reply_order]", - bo_use_search = "$board[bo_use_search]", - bo_order_search = "$board[bo_order_search]", - bo_notice = "$board[bo_notice]", - bo_upload_count = "$board[bo_upload_count]", - bo_use_email = "$board[bo_use_email]", - bo_sort_field = "$board[bo_sort_field]", - bo_1_subj = "$board[bo_1_subj]", - bo_2_subj = "$board[bo_2_subj]", - bo_3_subj = "$board[bo_3_subj]", - bo_4_subj = "$board[bo_4_subj]", - bo_5_subj = "$board[bo_5_subj]", - bo_6_subj = "$board[bo_6_subj]", - bo_7_subj = "$board[bo_7_subj]", - bo_8_subj = "$board[bo_8_subj]", - bo_9_subj = "$board[bo_9_subj]", - bo_10_subj = "$board[bo_10_subj]", - bo_1 = "$board[bo_1]", - bo_2 = "$board[bo_2]", - bo_3 = "$board[bo_3]", - bo_4 = "$board[bo_4]", - bo_5 = "$board[bo_5]", - bo_6 = "$board[bo_6]", - bo_7 = "$board[bo_7]", - bo_8 = "$board[bo_8]", - bo_9 = "$board[bo_9]", - bo_10 = "$board[bo_10]" '; +$sql = " insert into {$g4['board_table']} + set bo_table = '$target_table', + bo_subject = '$target_subject', + gr_id = '{$board['gr_id']}', + bo_admin = '{$board['bo_admin']}', + bo_list_level = '{$board['bo_list_level']}', + bo_read_level = '{$board['bo_read_level']}', + bo_write_level = '{$board['bo_write_level']}', + bo_reply_level = '{$board['bo_reply_level']}', + bo_comment_level = '{$board['bo_comment_level']}', + bo_upload_level = '{$board['bo_upload_level']}', + bo_download_level = '{$board['bo_download_level']}', + bo_html_level = '{$board['bo_html_level']}', + bo_link_level = '{$board['bo_link_level']}', + bo_trackback_level = '{$board['bo_trackback_level']}', + bo_count_modify = '{$board['bo_count_modify']}', + bo_count_delete = '{$board['bo_count_delete']}', + bo_read_point = '{$board['bo_read_point']}', + bo_write_point = '{$board['bo_write_point']}', + bo_comment_point = '{$board['bo_comment_point']}', + bo_download_point = '{$board['bo_download_point']}', + bo_use_category = '{$board['bo_use_category']}', + bo_category_list = '{$board['bo_category_list']}', + bo_disable_tags = '{$board['bo_disable_tags']}', + bo_use_secret = '{$board['bo_use_secret']}', + bo_use_dhtml_editor = '{$board['bo_use_dhtml_editor']}', + bo_use_sideview = '{$board['bo_use_sideview']}', + bo_use_comment = '{$board['bo_use_comment']}', + bo_use_good = '{$board['bo_use_good']}', + bo_use_nogood = '{$board['bo_use_nogood']}', + bo_use_signature = '{$board['bo_use_signature']}', + bo_use_ip_view = '{$board['bo_use_ip_view']}', + bo_use_trackback = '{$board['bo_use_trackback']}', + bo_use_list_view = '{$board['o_use_list_view']}', + bo_use_list_content = '{$board['bo_use_list_content']}', + bo_table_width = '{$board['bo_table_width']}', + bo_subject_len = '{$board['bo_subject_len']}', + bo_page_rows = '{$board['bo_page_rows']}', + bo_new = '{$board['bo_new']}', + bo_hot = '{$board['bo_hot']', + bo_image_width = '{$board['bo_image_width']', + bo_skin = '{$board['bo_skin']}', + bo_include_head = '{$board['bo_include_head']}', + bo_include_tail = '{$board['bo_include_tail']}', + bo_content_head = '".addslashes($board['bo_content_head'])."', + bo_content_tail = '".addslashes($board['bo_content_tail'])."', + bo_insert_content = '".addslashes($board['bo_insert_content'])."', + bo_gallery_cols = '{$board['bo_gallery_cols']}', + bo_upload_size = '{$board['bo_upload_size']}', + bo_reply_order = '{$board['bo_reply_order']}', + bo_use_search = '{$board['bo_use_search']}', + bo_order_search = '{$board['bo_order_search']}', + bo_notice = '{$board['bo_notice']}', + bo_upload_count = '{$board['bo_upload_count']}', + bo_use_email = '{$board['bo_use_email']}', + bo_sort_field = '{$board['bo_sort_field']}', + bo_1_subj = '{$board['bo_1_subj']}', + bo_2_subj = '{$board['bo_2_subj']}', + bo_3_subj = '{$board['bo_3_subj']}', + bo_4_subj = '{$board['bo_4_subj']}', + bo_5_subj = '{$board['bo_5_subj']}', + bo_6_subj = '{$board['bo_6_subj']}', + bo_7_subj = '{$board['bo_7_subj']}', + bo_8_subj = '{$board['bo_8_subj']}', + bo_9_subj = '{$board['bo_9_subj']}', + bo_10_subj = '{$board['bo_10_subj']}', + bo_1 = '{$board['bo_1']}', + bo_2 = '{$board['bo_2']}', + bo_3 = '{$board['bo_3']}', + bo_4 = '{$board['bo_4']}', + bo_5 = '{$board['bo_5']}', + bo_6 = '{$board['bo_6']', + bo_7 = '{$board['bo_7']}', + bo_8 = '{$board['bo_8']}', + bo_9 = '{$board['bo_9']}', + bo_10 = '{$board['bo_10']}' "; sql_query($sql); // 게시판 폴더 생성 -@mkdir('$g4['path']/data/file/$target_table', 0707); -@chmod('$g4['path']/data/file/$target_table', 0707); +@mkdir($g4['path'].'/data/file/'.$target_table, 0707); +@chmod($g4['path'].'/data/file/'.$target_table, 0707); // 디렉토리에 있는 파일의 목록을 보이지 않게 한다. -$board_path = '$g4['path']/data/file/$target_table'; +$board_path = $g4['path'].'/data/file/'.$target_table; $file = $board_path . '/index.php'; $f = @fopen($file, 'w'); @fwrite($f, ''); @@ -117,10 +117,10 @@ $f = @fopen($file, 'w'); @chmod($file, 0606); $copy_file = 0; -if ($copy_case == 'schema_data_both') +if ($copy_case == 'schema_data_both') { - $d = dir('$g4['path']/data/file/$bo_table'); - while ($entry = $d->read()) + $d = dir($g4['path'].'/data/file/'.$bo_table); + while ($entry = $d->read()) { if ($entry == '.' || $entry == '..') continue; @@ -132,34 +132,34 @@ if ($copy_case == 'schema_data_both') */ // 김선용 201007 : - if(is_dir('$g4['path']/data/file/$bo_table/$entry')){ - $dd = dir('$g4['path']/data/file/$bo_table/$entry'); - @mkdir('$g4['path']/data/file/$target_table/$entry', 0707); + if(is_dir($g4['path'].'/data/file/'.$bo_table.'/'.$entry)){ + $dd = dir($g4['path'].'/data/file/'.$bo_table.'/'.$entry); + @mkdir($g4['path'].'/data/file/'.$target_table.'/'.$entry, 0707); @chmod('$g4['path']/data/file/$target_table/$entry', 0707); while ($entry2 = $dd->read()) { if ($entry2 == '.' || $entry2 == '..') continue; - @copy('$g4['path']/data/file/$bo_table/$entry/$entry2', '$g4['path']/data/file/$target_table/$entry/$entry2'); - @chmod('$g4['path']/data/file/$target_table/$entry/$entry2', 0707); + @copy($g4['path'].'/data/file/'.$bo_table.'/'.$entry.'/'.$entry2, $g4['path'].'/data/file/'.$target_table.'/'.$entry.'/'.$entry2); + @chmod($g4['path'].'/data/file/'.$target_table.'/'.$entry.'/'.$entry2, 0707); $copy_file++; } $dd->close(); } else { - @copy('$g4['path']/data/file/$bo_table/$entry', '$g4['path']/data/file/$target_table/$entry'); - @chmod('$g4['path']/data/file/$target_table/$entry', 0707); + @copy($g4['path'].'/data/file/'.$bo_table.'/'.$entry, $g4['path'].'/data/file/'.$target_table.'/'.$entry); + @chmod($g4['path'].'/data/file/'.$target_table.'/'.$entry, 0707); $copy_file++; } } $d->close(); // 글복사 - $sql = ' insert into $g4[write_prefix]$target_table select * from $g4[write_prefix]$bo_table '; + $sql = " insert into {$g4['write_prefix']}$target_table select * from {$g4['write_prefix']}$bo_table "; sql_query($sql); // 게시글수 저장 - $sql = ' select bo_count_write, bo_count_comment from $g4[board_table] where bo_table = "$bo_table" '; + $sql = " select bo_count_write, bo_count_comment from {$g4['board_table']} where bo_table = '$bo_table' "; $row = sql_fetch($sql); - $sql = ' update $g4[board_table] set bo_count_write = "$row[bo_count_write]", bo_count_comment = "$row[bo_count_comment]" where bo_table = "$target_table" '; + $sql = " update {$g4['board_table']} set bo_count_write = '{$row['bo_count_write']}', bo_count_comment = '{$row['bo_count_comment']}' where bo_table = '$target_table' "; sql_query($sql); // 05.05.24 @@ -169,41 +169,41 @@ if ($copy_case == 'schema_data_both') // 4.00.01 // 위의 코드는 같은 테이블명을 사용하였다는 오류가 발생함. (희한하네 ㅡㅡ;) - $sql = ' select * from $g4[board_file_table] where bo_table = "$bo_table" '; + $sql = " select * from {$g4['board_file_table']} where bo_table = '$bo_table' "; $result = sql_query($sql); - for ($i=0; $row=sql_fetch_array($result); $i++) + for ($i=0; $row=sql_fetch_array($result); $i++) $file_copy[$i] = $row; -} +} -if (count($file_copy)) +if (count($file_copy)) { for ($i=0; $i'; -echo ''; + echo "\\n\\n복사한 파일 : 총 {$copy_file}개"; +echo ");"; +echo "opener.document.location.reload();"; +echo ""; -goto_url('./board_copy.php?bo_table=$bo_table&$qstr'); +goto_url('./board_copy.php?bo_table='.$bo_table.'&'.$qstr'); ?> diff --git a/adm/config_form.php b/adm/config_form.php index 8e3ba826d..7599ff776 100644 --- a/adm/config_form.php +++ b/adm/config_form.php @@ -23,6 +23,8 @@ $g4['title'] = '환경설정'; include_once ('./admin.head.php'); ?> + +
@@ -148,7 +150,7 @@ include_once ('./admin.head.php'); - + 건 단위로 검색 @@ -393,13 +395,16 @@ include_once ('./admin.head.php'); XSS 혹은 CSRF 방지

관리자 권한을 탈취당하는 경우를 대비하여 패스워드를 다시 한번 확인합니다.

- +