From fa7b92f6d4721bf8fc3687a0dfbbad1f37cfaa1b Mon Sep 17 00:00:00 2001
From: gnuboard <kagla@naver.com>
Date: Tue, 15 Jan 2013 19:00:44 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B2=8C=EC=8B=9C=ED=8C=90=20=EB=B3=B5?=
 =?UTF-8?q?=EC=82=AC=EC=97=90=20=EC=BA=A1=EC=B1=A0=20=EB=84=A3=EA=B8=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/board_copy.php        | 13 ++++++++-----
 adm/board_copy_update.php | 13 +++++++++----
 2 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/adm/board_copy.php b/adm/board_copy.php
index f251bf291..315df7bd5 100644
--- a/adm/board_copy.php
+++ b/adm/board_copy.php
@@ -1,5 +1,6 @@
 <?
 $sub_menu = "300100";
+define('_CAPTCHA_', 1);
 include_once("./_common.php");
 
 auth_check($auth[$sub_menu], 'w');
@@ -11,9 +12,8 @@ $administrator = 1;
 include_once($g4['path'].'/head.sub.php');
 ?>
 
-<form id="fboardcopy" name="fboardcopy" method="post" onsubmit="return fboardcopy_check(this);" autocomplete="off">
+<form id="fboardcopy" name="fboardcopy" method="post" action="./board_copy_update.php" onsubmit="return fboardcopy_check(this);">
 <input type="hidden" id="bo_table" name="bo_table" value="<?=$bo_table?>">
-<input type="hidden" id="token" name="token" value="<?=$token?>">
 <table>
 <caption>기존 게시판을 새 게시판으로 복사</caption>
 <tbody>
@@ -23,11 +23,11 @@ include_once($g4['path'].'/head.sub.php');
 </tr>
 <tr>
     <th scope="col"><label for="target_table">복사할 TABLE</label></th>
-    <td><input type="text" id="target_table" name="target_table" maxlength="20" required class="required alnum_"> 영문자, 숫자, _ 만 가능 (공백없이)</td>
+    <td><input type="text" id="target_table" name="target_table" maxlength="20" class="required alnum_" required="required" title="복사할 TABLE"> 영문자, 숫자, _ 만 가능 (공백없이)</td>
 </tr>
 <tr>
     <th scope="col"><label for="target_subject">게시판 제목</label></th>
-    <td><input type="text" id="target_subject" name="target_subject" maxlength="120" required value="[복사본] <?=$board['bo_subject']?>"></td>
+    <td><input type="text" id="target_subject" name="target_subject" maxlength="120" value="[복사본] <?=$board['bo_subject']?>" required="required" title="게시판 제목"></td>
 </tr>
 <tr>
     <th scope="col">복사 유형</th>
@@ -41,6 +41,8 @@ include_once($g4['path'].'/head.sub.php');
 </tbody>
 </table>
 
+<? echo captcha_html(); ?>
+
 <div class="btn_confirm">
     <input type="submit" value="복사">
     <input type="button" value="창닫기" onclick="window.close();">
@@ -51,7 +53,8 @@ include_once($g4['path'].'/head.sub.php');
 <script>
 function fboardcopy_check(f)
 {
-    f.action = "./board_copy_update.php";
+    <? echo chk_captcha_js(); ?>
+
     return true;
 }
 </script>
diff --git a/adm/board_copy_update.php b/adm/board_copy_update.php
index 73c6c2130..e25cda384 100644
--- a/adm/board_copy_update.php
+++ b/adm/board_copy_update.php
@@ -1,11 +1,16 @@
 <?
 $sub_menu = '300100';
+define('_CAPTCHA_', 1);
 include_once('./_common.php');
 
 auth_check($auth[$sub_menu], 'w');
 
-$target_table   = mysql_real_escape_string(trim($_POST['target_table']));
-$target_subject = mysql_real_escape_string(trim($_POST['target_subject']));
+if (!chk_captcha()) {
+    alert('스팸방지에 입력한 숫자가 틀렸습니다.');
+}
+
+$target_table   = escape_trim($_POST['target_table']);
+$target_subject = escape_trim($_POST['target_subject']);
 
 if (!preg_match('/[A-Za-z0-9_]{1,20}/', $target_table))
 {
@@ -156,7 +161,7 @@ if ($copy_case == 'schema_data_both')
     // 게시글수 저장
     $sql = " select bo_count_write, bo_count_comment from {$g4['board_table']} where bo_table = '$bo_table' ";
     $row = sql_fetch($sql);
-    $sql = " update {$g4['board_table']} set bo_count_write = '{$row['bo_count_write']}', bo_count_comment = '{$row['bo_count_comment]}' where bo_table = '$target_table' ";
+    $sql = " update {$g4['board_table']} set bo_count_write = '{$row['bo_count_write']}', bo_count_comment = '{$row['bo_count_comment']}' where bo_table = '$target_table' ";
     sql_query($sql);
 
     // 05.05.24
@@ -176,7 +181,7 @@ if (count($file_copy))
 {
     for ($i=0; $i<count($file_copy); $i++)
     {
-        $sql = " insert into $g4['board_file_table']
+        $sql = " insert into {$g4['board_file_table']}
                     set bo_table = '$target_table',
                          wr_id = '{$file_copy[$i]['wr_id']}',
                          bf_no = '{$file_copy[$i]['bf_no']}',