투표 결과 테마스킨 적용 오류 수정

그누보드 5.1.0 테마 지원버전
XSS 취약점 및 기타 오류 수정
2015-08-04 09:05:41 +09:00 · 2015-08-03 15:44:15 +09:00 · 2015-07-27 14:08:23 +09:00 · 2015-07-21 09:48:45 +09:00 · 2015-07-20 11:52:21 +09:00 · 2015-07-20 11:40:09 +09:00
341 changed files with 15074 additions and 604 deletions
@@ -12,11 +12,30 @@ if (!get_session('ss_admin')) {
 // 스킨디렉토리를 SELECT 형식으로 얻음
 function get_skin_select($skin_gubun, $id, $name, $selected='', $event='')
 {
-    $skins = get_skin_dir($skin_gubun);
+    global $config;
+
+    $skins = array();
+
+    if(defined('G5_THEME_PATH') && $config['cf_theme']) {
+        $dirs = get_skin_dir($skin_gubun, G5_THEME_PATH.'/'.G5_SKIN_DIR);
+        if(!empty($dirs)) {
+            foreach($dirs as $dir) {
+                $skins[] = 'theme/'.$dir;
+            }
+        }
+    }
+
+    $skins = array_merge($skins, get_skin_dir($skin_gubun));
+
    $str = "<select id=\"$id\" name=\"$name\" $event>\n";
    for ($i=0; $i<count($skins); $i++) {
        if ($i == 0) $str .= "<option value=\"\">선택</option>";
-        $str .= option_selected($skins[$i], $selected);
+        if(preg_match('#^theme/(.+)$#', $skins[$i], $match))
+            $text = '(테마) '.$match[1];
+        else
+            $text = $skins[$i];
+
+        $str .= option_selected($skins[$i], $selected, $text);
    }
    $str .= "</select>";
    return $str;
@@ -25,11 +44,30 @@ function get_skin_select($skin_gubun, $id, $name, $selected='', $event='')
 // 모바일 스킨디렉토리를 SELECT 형식으로 얻음
 function get_mobile_skin_select($skin_gubun, $id, $name, $selected='', $event='')
 {
-    $skins = get_skin_dir($skin_gubun, G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
+    global $config;
+
+    $skins = array();
+
+    if(defined('G5_THEME_PATH') && $config['cf_theme']) {
+        $dirs = get_skin_dir($skin_gubun, G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR);
+        if(!empty($dirs)) {
+            foreach($dirs as $dir) {
+                $skins[] = 'theme/'.$dir;
+            }
+        }
+    }
+
+    $skins = array_merge($skins, get_skin_dir($skin_gubun, G5_MOBILE_PATH.'/'.G5_SKIN_DIR));
+
    $str = "<select id=\"$id\" name=\"$name\" $event>\n";
    for ($i=0; $i<count($skins); $i++) {
        if ($i == 0) $str .= "<option value=\"\">선택</option>";
-        $str .= option_selected($skins[$i], $selected);
+        if(preg_match('#^theme/(.+)$#', $skins[$i], $match))
+            $text = '(테마) '.$match[1];
+        else
+            $text = $skins[$i];
+
+        $str .= option_selected($skins[$i], $selected, $text);
    }
    $str .= "</select>";
    return $str;
@@ -44,6 +82,9 @@ function get_skin_dir($skin, $skin_path=G5_SKIN_PATH)
    $result_array = array();

    $dirname = $skin_path.'/'.$skin.'/';
+    if(!is_dir($dirname))
+        return;
+
    $handle = opendir($dirname);
    while ($file = readdir($handle)) {
        if($file == '.'||$file == '..') continue;
@@ -57,6 +98,101 @@ function get_skin_dir($skin, $skin_path=G5_SKIN_PATH)
 }


+// 테마
+function get_theme_dir()
+{
+    $result_array = array();
+
+    $dirname = G5_PATH.'/'.G5_THEME_DIR.'/';
+    $handle = opendir($dirname);
+    while ($file = readdir($handle)) {
+        if($file == '.'||$file == '..') continue;
+
+        if (is_dir($dirname.$file)) {
+            $theme_path = $dirname.$file;
+            if(is_file($theme_path.'/index.php') && is_file($theme_path.'/head.php') && is_file($theme_path.'/tail.php'))
+                $result_array[] = $file;
+        }
+    }
+    closedir($handle);
+    natsort($result_array);
+
+    return $result_array;
+}
+
+
+// 테마정보
+function get_theme_info($dir)
+{
+    $info = array();
+    $path = G5_PATH.'/'.G5_THEME_DIR.'/'.$dir;
+
+    if(is_dir($path)) {
+        $screenshot = $path.'/screenshot.png';
+        if(is_file($screenshot)) {
+            $size = @getimagesize($screenshot);
+
+            if($size[2] == 3)
+                $screenshot_url = str_replace(G5_PATH, G5_URL, $screenshot);
+        }
+
+        $info['screenshot'] = $screenshot_url;
+
+        $text = $path.'/readme.txt';
+        if(is_file($text)) {
+            $content = file($text, false);
+            $content = array_map('trim', $content);
+
+            preg_match('#^Theme Name:(.+)$#i', $content[0], $m0);
+            preg_match('#^Theme URI:(.+)$#i', $content[1], $m1);
+            preg_match('#^Maker:(.+)$#i', $content[2], $m2);
+            preg_match('#^Maker URI:(.+)$#i', $content[3], $m3);
+            preg_match('#^Version:(.+)$#i', $content[4], $m4);
+            preg_match('#^Detail:(.+)$#i', $content[5], $m5);
+            preg_match('#^License:(.+)$#i', $content[6], $m6);
+            preg_match('#^License URI:(.+)$#i', $content[7], $m7);
+
+            $info['theme_name'] = trim($m0[1]);
+            $info['theme_uri'] = trim($m1[1]);
+            $info['maker'] = trim($m2[1]);
+            $info['maker_uri'] = trim($m3[1]);
+            $info['version'] = trim($m4[1]);
+            $info['detail'] = trim($m5[1]);
+            $info['license'] = trim($m6[1]);
+            $info['license_uri'] = trim($m7[1]);
+        }
+
+        if(!$info['theme_name'])
+            $info['theme_name'] = $dir;
+    }
+
+    return $info;
+}
+
+
+// 테마설정 정보
+function get_theme_config_value($dir, $key='*')
+{
+    $tconfig = array();
+
+    $theme_config_file = G5_PATH.'/'.G5_THEME_DIR.'/'.$dir.'/theme.config.php';
+    if(is_file) {
+        include($theme_config_file);
+
+        if($key == '*') {
+            $tconfig = $theme_config;
+        } else {
+            $keys = array_map('trim', explode(',', $key));
+            foreach($keys as $v) {
+                $tconfig[$v] = trim($theme_config[$v]);
+            }
+        }
+    }
+
+    return $tconfig;
+}
+
+
 // 회원권한을 SELECT 형식으로 얻음
 function get_member_level_select($name, $start_id=0, $end_id=10, $selected="", $event="")
 {
@@ -95,26 +231,48 @@ function get_member_id_select($name, $level, $selected="", $event="")
 }

 // 권한 검사
-function auth_check($auth, $attr)
+function auth_check($auth, $attr, $return=false)
 {
    global $is_admin;

    if ($is_admin == 'super') return;

-    if (!trim($auth))
-        alert('이 메뉴에는 접근 권한이 없습니다.\\n\\n접근 권한은 최고관리자만 부여할 수 있습니다.');
+    if (!trim($auth)) {
+        $msg = '이 메뉴에는 접근 권한이 없습니다.\\n\\n접근 권한은 최고관리자만 부여할 수 있습니다.';
+        if($return)
+            return $msg;
+        else
+            alert($msg);
+    }

    $attr = strtolower($attr);

    if (!strstr($auth, $attr)) {
-        if ($attr == 'r')
-            alert('읽을 권한이 없습니다.');
-        else if ($attr == 'w')
-            alert('입력, 추가, 생성, 수정 권한이 없습니다.');
-        else if ($attr == 'd')
-            alert('삭제 권한이 없습니다.');
-        else
-            alert('속성이 잘못 되었습니다.');
+        if ($attr == 'r') {
+            $msg = '읽을 권한이 없습니다.';
+            if($return)
+                return $msg;
+            else
+                alert($msg);
+        } else if ($attr == 'w') {
+            $msg = '입력, 추가, 생성, 수정 권한이 없습니다.';
+            if($return)
+                return $msg;
+            else
+                alert($msg);
+        } else if ($attr == 'd') {
+            $msg = '삭제 권한이 없습니다.';
+            if($return)
+                return $msg;
+            else
+                alert($msg);
+        } else {
+            $msg = '속성이 잘못 되었습니다.';
+            if($return)
+                return $msg;
+            else
+                alert($msg);
+        }
    }
 }

@@ -191,7 +349,6 @@ function order_select($fld, $sel='')
 // 접근 권한 검사
 if (!$member['mb_id'])
 {
-    //alert('로그인 하십시오.', '$g5['bbs_path']/login.php?url=' . urlencode('$_SERVER['PHP_SELF']?w=$w&mb_id=$mb_id'));
    alert('로그인 하십시오.', G5_BBS_URL.'/login.php?url=' . urlencode(G5_ADMIN_URL));
 }
 else if ($is_admin != 'super')
@@ -3,6 +3,7 @@ $menu['menu100'] = array (
    array('100000', '환경설정', G5_ADMIN_URL.'/config_form.php',   'config'),
    array('', '기본환경설정', G5_ADMIN_URL.'/config_form.php',   'cf_basic'),
    array('', '관리권한설정', G5_ADMIN_URL.'/auth_list.php',     'cf_auth'),
+    array('', '테마설정', G5_ADMIN_URL.'/theme.php',     'cf_theme', 1),
    array('', '메뉴설정', G5_ADMIN_URL.'/menu_list.php',     'cf_menu', 1),
    array('100300', '메일 테스트', G5_ADMIN_URL.'/sendmail_test.php', 'cf_mailtest'),
    array('100310', '팝업레이어관리', G5_ADMIN_URL.'/newwinlist.php', 'scf_poplayer'),
@@ -45,7 +45,7 @@ $sql = " select *
            limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = "관리권한설정";
 include_once('./admin.head.php');
@@ -158,7 +158,7 @@ else
 </form>

 <?php
-$pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF'].'?'.$qstr.'&amp;page=');
+$pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$qstr.'&amp;page=');
 echo $pagelist;
 ?>

@@ -153,10 +153,9 @@ $pg_anchor = '<ul class="anchor">
 $frm_submit = '<div class="btn_confirm01 btn_confirm">
    <input type="submit" value="확인" class="btn_submit" accesskey="s">
    <a href="./board_list.php?'.$qstr.'">목록</a>'.PHP_EOL;
-if ($w == 'u') $frm_submit .= '    <a href="./board_copy.php?bo_table='.$bo_table.'" id="board_copy" target="win_board_copy">게시판복사</a>
+if ($w == 'u') $frm_submit .= '<a href="./board_copy.php?bo_table='.$bo_table.'" id="board_copy" target="win_board_copy">게시판복사</a>
    <a href="'.G5_BBS_URL.'/board.php?bo_table='.$board['bo_table'].'" class="btn_frmline">게시판 바로가기</a>
-    <a href="./board_thumbnail_delete.php?bo_table='.$board['bo_table'].'&amp;'.$qstr.'" onclick="return delete_confirm2(\'게시판 썸네일 파일을 삭제하시겠습니까?\');">게시판 썸네일 삭제</a>
-    '.PHP_EOL;
+    <a href="./board_thumbnail_delete.php?bo_table='.$board['bo_table'].'&amp;'.$qstr.'" onclick="return delete_confirm2(\'게시판 썸네일 파일을 삭제하시겠습니까?\');">게시판 썸네일 삭제</a>'.PHP_EOL;
 $frm_submit .= '</div>';
 ?>

@@ -1118,7 +1117,7 @@ $frm_submit .= '</div>';
    </div>
 </section>

-<?php echo $frm_submit; ?>
+<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_galc">테마 이미지설정 가져오기</button></div>', $frm_submit); ?>

 <section id="anc_bo_point">
    <h2 class="h2_frm">게시판 포인트 설정</h2>
@@ -1240,6 +1239,37 @@ $(function(){
        window.open(this.href, "win_board_copy", "left=10,top=10,width=500,height=400");
        return false;
    });
+
+    $(".get_theme_galc").on("click", function() {
+        if(!confirm("현재 테마의 게시판 이미지 설정을 적용하시겠습니까?"))
+            return false;
+
+        $.ajax({
+            type: "POST",
+            url: "./theme_config_load.php",
+            cache: false,
+            async: false,
+            data: { type: "board" },
+            dataType: "json",
+            success: function(data) {
+                if(data.error) {
+                    alert(data.error);
+                    return false;
+                }
+
+                var field = Array('bo_gallery_cols', 'bo_gallery_width', 'bo_gallery_height', 'bo_mobile_gallery_width', 'bo_mobile_gallery_height', 'bo_image_width');
+                var count = field.length;
+                var key;
+
+                for(i=0; i<count; i++) {
+                    key = field[i];
+
+                    if(data[key] != undefined && data[key] != "")
+                        $("input[name="+key+"]").val(data[key]);
+                }
+            }
+        });
+    });
 });

 function board_copy(bo_table) {
@@ -46,7 +46,7 @@ $from_record = ($page - 1) * $rows; // 시작 열을 구함
 $sql = " select * {$sql_common} {$sql_search} {$sql_order} limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = '게시판관리';
 include_once('./admin.head.php');
@@ -208,7 +208,7 @@ $colspan = 15;

 </form>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF'].'?'.$qstr.'&amp;page='); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$qstr.'&amp;page='); ?>

 <script>
 function fboardlist_submit(f)
@@ -50,7 +50,7 @@ $from_record = ($page - 1) * $rows; // 시작 열을 구함
 $sql = " select * {$sql_common} {$sql_search} {$sql_order} limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">처음</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">처음</a>';

 $g5['title'] = '게시판그룹설정';
 include_once('./admin.head.php');
@@ -190,7 +190,7 @@ $colspan = 10;
 </div>

 <?php
-$pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF'].'?'.$qstr.'&amp;page=');
+$pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$qstr.'&amp;page=');
 echo $pagelist;
 ?>

@@ -137,7 +137,7 @@ $colspan = 7;
 </div>
 </form>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;gr_id=$gr_id&page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;gr_id=$gr_id&page="); ?>

 <script>
 function fboardgroupmember_submit(f)
@@ -9,12 +9,9 @@ $token = get_token();
 if ($is_admin != 'super')
    alert('최고관리자만 접근 가능합니다.');

-if (!isset($config['cf_include_index'])) {
+if (!isset($config['cf_add_script'])) {
    sql_query(" ALTER TABLE `{$g5['config_table']}`
-                    ADD `cf_include_index` VARCHAR(255) NOT NULL AFTER `cf_admin`,
-                    ADD `cf_include_head` VARCHAR(255) NOT NULL AFTER `cf_include_index`,
-                    ADD `cf_include_tail` VARCHAR(255) NOT NULL AFTER `cf_include_head`,
-                    ADD `cf_add_script` TEXT NOT NULL AFTER `cf_include_tail` ", true);
+                    ADD `cf_add_script` TEXT NOT NULL AFTER `cf_admin_email_name` ", true);
 }

 if (!isset($config['cf_mobile_new_skin'])) {
@@ -341,105 +338,41 @@ if ($config['cf_icode_id'] && $config['cf_icode_pw']) {
        <tr>
            <th scope="row"><label for="cf_new_skin">최근게시물 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_new_skin" id="cf_new_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('new');
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_new_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_skin_select('new', 'cf_new_skin', 'cf_new_skin', $config['cf_new_skin'], 'required'); ?>
            </td>
            <th scope="row"><label for="cf_mobile_new_skin">모바일<br>최근게시물 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_mobile_new_skin" id="cf_mobile_new_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('new', G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_mobile_new_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_mobile_skin_select('new', 'cf_mobile_new_skin', 'cf_mobile_new_skin', $config['cf_mobile_new_skin'], 'required'); ?>
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_search_skin">검색 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_search_skin" id="cf_search_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('search');
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_search_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_skin_select('search', 'cf_search_skin', 'cf_search_skin', $config['cf_search_skin'], 'required'); ?>
            </td>
            <th scope="row"><label for="cf_mobile_search_skin">모바일 검색 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_mobile_search_skin" id="cf_mobile_search_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('search', G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_mobile_search_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_mobile_skin_select('search', 'cf_mobile_search_skin', 'cf_mobile_search_skin', $config['cf_mobile_search_skin'], 'required'); ?>
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_connect_skin">접속자 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_connect_skin" id="cf_connect_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('connect');
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_connect_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_skin_select('connect', 'cf_connect_skin', 'cf_connect_skin', $config['cf_connect_skin'], 'required'); ?>
            </td>
            <th scope="row"><label for="cf_mobile_connect_skin">모바일 접속자 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_mobile_connect_skin" id="cf_mobile_connect_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('connect', G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_mobile_connect_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_mobile_skin_select('connect', 'cf_mobile_connect_skin', 'cf_mobile_connect_skin', $config['cf_mobile_connect_skin'], 'required'); ?>
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_faq_skin">FAQ 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_faq_skin" id="cf_faq_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('faq');
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_faq_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_skin_select('faq', 'cf_faq_skin', 'cf_faq_skin', $config['cf_faq_skin'], 'required'); ?>
            </td>
            <th scope="row"><label for="cf_mobile_faq_skin">모바일 FAQ 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_mobile_faq_skin" id="cf_mobile_faq_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('faq', G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_mobile_faq_skin'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
+                <?php echo get_mobile_skin_select('faq', 'cf_mobile_faq_skin', 'cf_mobile_faq_skin', $config['cf_mobile_faq_skin'], 'required'); ?>
            </td>
        </tr>
        <tr>
@@ -532,7 +465,7 @@ if ($config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>
+<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_confc" data-type="conf_skin">테마 스킨설정 가져오기</button></div>', $frm_submit); ?>

 <section id="anc_cf_board">
    <h2 class="h2_frm">게시판 기본 설정</h2>
@@ -636,27 +569,11 @@ if ($config['cf_icode_id'] && $config['cf_icode_pw']) {
        <tr>
            <th scope="row"><label for="cf_member_skin">회원 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_member_skin" id="cf_member_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('member');
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo '<option value="'.$arr[$i].'"'.get_selected($config['cf_member_skin'], $arr[$i]).'>'.$arr[$i].'</option>'."\n";
-                }
-                ?>
-                </select>
+                <?php echo get_skin_select('member', 'cf_member_skin', 'cf_member_skin', $config['cf_member_skin'], 'required'); ?>
            </td>
            <th scope="row"><label for="cf_mobile_member_skin">모바일<br>회원 스킨<strong class="sound_only">필수</strong></label></th>
            <td>
-                <select name="cf_mobile_member_skin" id="cf_mobile_member_skin" required class="required">
-                <?php
-                $arr = get_skin_dir('member', G5_MOBILE_PATH.'/'.G5_SKIN_DIR);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">선택</option>";
-                    echo '<option value="'.$arr[$i].'"'.get_selected($config['cf_mobile_member_skin'], $arr[$i]).'>'.$arr[$i].'</option>'."\n";
-                }
-                ?>
-                </select>
+                <?php echo get_mobile_skin_select('member', 'cf_mobile_member_skin', 'cf_mobile_member_skin', $config['cf_mobile_member_skin'], 'required'); ?>
            </td>
        </tr>
        <tr>
@@ -761,7 +678,7 @@ if ($config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>
+<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_confc" data-type="conf_member">테마 회원스킨설정 가져오기</button></div>', $frm_submit); ?>

 <section id="anc_cf_cert">
    <h2 class="h2_frm">본인확인 설정</h2>
@@ -1082,27 +999,6 @@ if ($config['cf_icode_id'] && $config['cf_icode_pw']) {
            <col>
        </colgroup>
        <tbody>
-        <tr>
-            <th scope="row"><label for="cf_include_index">초기화면 파일 경로</label></th>
-            <td>
-                <?php echo help('입력이 없으면 index.php가 초기화면 파일로 설정됩니다.<br>초기화면 파일은 index.php 파일과 동일한 위치에 존재해야 합니다.') ?>
-                <input type="text" name="cf_include_index" value="<?php echo $config['cf_include_index'] ?>" id="cf_include_index" class="frm_input" size="50">
-            </td>
-        </tr>
-        <tr>
-            <th scope="row"><label for="cf_include_head">상단 파일 경로</label></th>
-            <td>
-                <?php echo help('입력이 없으면 head.php가 상단 파일로 설정됩니다.<br>상단 파일은 head.php 파일과 동일한 위치에 존재해야 합니다.') ?>
-                <input type="text" name="cf_include_head" value="<?php echo $config['cf_include_head'] ?>" id="cf_include_head" class="frm_input" size="50">
-            </td>
-        </tr>
-        <tr>
-            <th scope="row"><label for="cf_include_tail">하단 파일 경로</label></th>
-            <td>
-                <?php echo help('입력이 없으면 tail.php가 하단 파일로 설정됩니다.<br>초기화면 파일은 tail.php 파일과 동일한 위치에 존재해야 합니다.') ?>
-                <input type="text" name="cf_include_tail" value="<?php echo $config['cf_include_tail'] ?>" id="cf_include_tail" class="frm_input" size="50">
-            </td>
-        </tr>
        <tr>
            <th scope="row"><label for="cf_add_script">추가 script, css</label></th>
            <td>
@@ -1250,6 +1146,42 @@ $(function(){
                break;
        }
    });
+
+    $(".get_theme_confc").on("click", function() {
+        var type = $(this).data("type");
+        var msg = "기본환경 스킨 설정";
+        if(type == "conf_member")
+            msg = "기본환경 회원스킨 설정";
+
+        if(!confirm("현재 테마의 "+msg+"을 적용하시겠습니까?"))
+            return false;
+
+        $.ajax({
+            type: "POST",
+            url: "./theme_config_load.php",
+            cache: false,
+            async: false,
+            data: { type: type },
+            dataType: "json",
+            success: function(data) {
+                if(data.error) {
+                    alert(data.error);
+                    return false;
+                }
+
+                var field = Array('cf_member_skin', 'cf_mobile_member_skin', 'cf_new_skin', 'cf_mobile_new_skin', 'cf_search_skin', 'cf_mobile_search_skin', 'cf_connect_skin', 'cf_mobile_connect_skin', 'cf_faq_skin', 'cf_mobile_faq_skin');
+                var count = field.length;
+                var key;
+
+                for(i=0; i<count; i++) {
+                    key = field[i];
+
+                    if(data[key] != undefined && data[key] != "")
+                        $("select[name="+key+"]").val(data[key]);
+                }
+            }
+        });
+    });
 });

 function fconfigform_submit(f)
@@ -29,9 +29,6 @@ $sql = " update {$g5['config_table']}
                cf_admin = '{$_POST['cf_admin']}',
                cf_admin_email = '{$_POST['cf_admin_email']}',
                cf_admin_email_name = '{$_POST['cf_admin_email_name']}',
-                cf_include_index = '{$_POST['cf_include_index']}',
-                cf_include_head = '{$_POST['cf_include_head']}',
-                cf_include_tail = '{$_POST['cf_include_tail']}',
                cf_add_script = '{$_POST['cf_add_script']}',
                cf_use_point = '{$_POST['cf_use_point']}',
                cf_point_term = '{$_POST['cf_point_term']}',
@@ -50,7 +50,7 @@ $result = sql_query($sql);
 ?>

 <div class="local_ov01 local_ov">
-    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['PHP_SELF']; ?>">처음으로</a><?php } ?>
+    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>">처음으로</a><?php } ?>
    <span>전체 내용 <?php echo $total_count; ?>건</span>
 </div>

@@ -91,7 +91,7 @@ $result = sql_query($sql);
    </table>
 </div>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>

 <?php
 include_once (G5_ADMIN_PATH.'/admin.tail.php');
@@ -714,3 +714,37 @@ strong.sodr_nonpay {display:block;padding:5px 0;text-align:right}
 .sevice_2 .svc_sms .svc_btn a{display:inline-block; background:#f8f8f8;width:100%;text-align:center;margin:0;padding:10px 0 0 }
 .sevice_2 .svc_design{overflow:hidden;height:210px;position:relative}
 .sevice_2 .svc_design .svc_btn a{margin:0 0 20px}
+
+/*테마*/
+.theme_p{padding:0 20px}
+#theme_list{padding:0;margin:0 10px;list-style:none;  width: 1000px;position:relative}
+#theme_list:after{display:block;visibility:hidden;clear:both;content:""}
+#theme_list li{padding:10px;margin:0;float:left;width:302px}
+#theme_list li:after{display:block;visibility:hidden;clear:both;content:""}
+#theme_list li .tmli_if{border: 1px solid #d1dee2;width:300px;}
+#theme_list li .tmli_if>img{width:300px;height:225px;}
+#theme_list li .tmli_if:hover>img{-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=50)";filter: alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;}
+#theme_list li .tmli_tit{position:relative; border-top: 1px solid #d1dee2; background: #e5ecef;}
+#theme_list li .tmli_tit p{height:40px;line-height:40px;padding:0 10px 0;font-weight:bold;text-overflow: ellipsis;  overflow: hidden;  white-space: nowrap;}
+#theme_list li .tmli_tit button.tmli_dt{position:absolute;top:8px;right:10px;padding:5px;background:#111;color:#fff;display:none;border:none}
+#theme_list li .tmli_if:hover button.tmli_dt{display:block}
+#theme_list li .theme_sl{float:left;border:none;margin-top:5px;padding:0 5px;height:26px;background:#999;color:#fff}
+#theme_list li .theme_sl:hover{background:#ff3061}
+#theme_list li .theme_deactive{margin-left:4px} 
+#theme_list li .theme_sl_use{background:#ff3061;line-height:26px}
+#theme_list li .theme_pr{float:right;margin-top:5px;padding:0 5px;height:24px;line-height:24px;  border: 1px solid #ccc;  background: #fafafa; }
+#theme_list li .theme_preview{  float: right;  margin-top: 5px; padding:0 5px;height:26px; border: 1px solid #ccc;  background: #fafafa; margin-right:3px}
+
+#theme_detail{position:fixed;_position:absolute;top:50%;left:20px;_top:300px;width:950px;height:490px;margin-top:-245px;background:#fff;border:1px solid #000;z-index:99999;}
+#theme_detail .thdt_img{padding:20px 0 20px 20px;float:left;}
+#theme_detail .thdt_img img{width:600px;height:450px;}
+#theme_detail .thdt_if{float:right;width:290px;padding:40px 20px 0 0;position:relative}
+#theme_detail .thdt_if h2{padding:0 ;margin:0}
+#theme_detail .thdt_if p{font-weight:normal;padding:10px;background:#f5f5f5;height:250px;overflow-y:auto;}
+#theme_detail .thdt_if a{vertical-align:middle;}
+#theme_detail .thdt_if .thdt_home{background:url(../img/link_icon.gif) no-repeat bottom right;padding-right:13px;}
+#theme_detail .close_btn{position:absolute;top:10px;right:10px;background:url(../img/close.gif) no-repeat 50% 50%;border:none;width:30px;height:30px;overflow:hidden;text-indent:-9999px;}
+#theme_detail table{border-collapse:collapse;margin:5px 0 10px}
+#theme_detail table th{padding: 5px 0;  border: 1px solid #d1dee2; background: #e5ecef;width:50px;padding:10px;text-align:left}
+#theme_detail table td{ border: 1px solid #ececec;padding:10px}
+.no_theme{text-align:center;padding:100px 0;color:#555}
@@ -0,0 +1,8 @@
+@charset "utf-8";
+#preview_item{height:50px}
+#preview_item ul{margin:0;padding:0;top:0;width:100%;border-bottom:1px solid #eee; margin:0 auto;text-align:center;background:#333;position:fixed;top:0;z-index:999999;width:100%;}
+#preview_item ul li{list-style:none;display:inline-block;height:50px;line-height:50px;padding:0 3px;*display:inline; zoom:1;}
+#preview_item ul li a{color:#555;padding:0 8px;height:24px;line-height:24px;background:#f2f2f2;border-radius:3px;display:inline-block;vertical-align:middle;border:1px solid #dcdcdc;}
+#preview_item ul li a:hover{background:#ccc;text-decoration:none;border:1px solid #ccc;}
+#preview_item ul li button{color:#fff;padding:0 8px;background:#FF5191;border-radius:3px;height:26px;line-height:24px;vertical-align:middle;border:none}
+#preview_item ul li button:hover{background:#e40d5c;color:#fff;text-decoration:none;}
@@ -8,7 +8,7 @@ auth_check($auth[$sub_menu], "w");
 $sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' ";
 $fm = sql_fetch($sql);

-$html_title = 'FAQ '.$fm['fm_subject'];;
+$html_title = 'FAQ '.$fm['fm_subject'];

 if ($w == "u")
 {
@@ -64,7 +64,7 @@ $result = sql_query($sql);
 ?>

 <div class="local_ov01 local_ov">
-    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['PHP_SELF']; ?>">처음으로</a><?php } ?>
+    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>">처음으로</a><?php } ?>
    <span>전체 FAQ <?php echo $total_count; ?>건</span>
 </div>

@@ -121,7 +121,7 @@ $result = sql_query($sql);
    </table>
 </div>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>

 <?php
 include_once (G5_ADMIN_PATH.'/admin.tail.php');
@@ -84,7 +84,7 @@ $colspan = 12;
            else
            {
                $s_mod = '<a href="./member_form.php?$qstr&amp;w=u&amp;mb_id='.$row['mb_id'].'">수정</a>';
-                $s_del = '<a href="javascript:del(\'./member_delete.php?'.$qstr.'&amp;w=d&amp;mb_id='.$row['mb_id'].'&amp;url='.$_SERVER['PHP_SELF'].'\');">삭제</a>';
+                $s_del = '<a href="javascript:del(\'./member_delete.php?'.$qstr.'&amp;w=d&amp;mb_id='.$row['mb_id'].'&amp;url='.$_SERVER['SCRIPT_NAME'].'\');">삭제</a>';
            }
            $s_grp = '<a href="./boardgroupmember_form.php?mb_id='.$row['mb_id'].'">그룹</a>';

@@ -214,11 +214,9 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
    <tr>
        <th scope="row"><label for="mb_zip1">주소</label></th>
        <td colspan="3" class="td_addr_line">
-            <label for="mb_zip1" class="sound_only">우편번호 앞자리</label>
-            <input type="text" name="mb_zip1" value="<?php echo $mb['mb_zip1'] ?>" id="mb_zip1" class="frm_input readonly" size="3" maxlength="3"> -
-            <label for="mb_zip2" class="sound_only">우편번호 뒷자리</label>
-            <input type="text" name="mb_zip2" value="<?php echo $mb['mb_zip2'] ?>" id="mb_zip2" class="frm_input readonly" size="3" maxlength="3">
-            <button type="button" class="btn_frmline" onclick="win_zip('fmember', 'mb_zip1', 'mb_zip2', 'mb_addr1', 'mb_addr2', 'mb_addr3', 'mb_addr_jibeon');">주소 검색</button><br>
+            <label for="mb_zip" class="sound_only">우편번호</label>
+            <input type="text" name="mb_zip" value="<?php echo $mb['mb_zip1'].$mb['mb_zip2']; ?>" id="mb_zip" class="frm_input readonly" size="5" maxlength="6">
+            <button type="button" class="btn_frmline" onclick="win_zip('fmember', 'mb_zip', 'mb_addr1', 'mb_addr2', 'mb_addr3', 'mb_addr_jibeon');">주소 검색</button><br>
            <input type="text" name="mb_addr1" value="<?php echo $mb['mb_addr1'] ?>" id="mb_addr1" class="frm_input readonly" size="60">
            <label for="mb_addr1">기본주소</label><br>
            <input type="text" name="mb_addr2" value="<?php echo $mb['mb_addr2'] ?>" id="mb_addr2" class="frm_input" size="60">
@@ -29,6 +29,9 @@ if($_POST['mb_certify_case'] && $_POST['mb_certify']) {
    $mb_adult = 0;
 }

+$mb_zip1 = substr($_POST['mb_zip'], 0, 3);
+$mb_zip2 = substr($_POST['mb_zip'], 3);
+
 $sql_common = "  mb_name = '{$_POST['mb_name']}',
                 mb_nick = '{$_POST['mb_nick']}',
                 mb_email = '{$_POST['mb_email']}',
@@ -37,8 +40,8 @@ $sql_common = "  mb_name = '{$_POST['mb_name']}',
                 mb_hp = '{$mb_hp}',
                 mb_certify = '{$mb_certify}',
                 mb_adult = '{$mb_adult}',
-                 mb_zip1 = '{$_POST['mb_zip1']}',
-                 mb_zip2 = '{$_POST['mb_zip2']}',
+                 mb_zip1 = '$mb_zip1',
+                 mb_zip2 = '$mb_zip2',
                 mb_addr1 = '{$_POST['mb_addr1']}',
                 mb_addr2 = '{$_POST['mb_addr2']}',
                 mb_addr3 = '{$_POST['mb_addr3']}',
@@ -56,7 +56,7 @@ $sql = " select count(*) as cnt {$sql_common} {$sql_search} and mb_intercept_dat
 $row = sql_fetch($sql);
 $intercept_count = $row['cnt'];

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = '회원관리';
 include_once('./admin.head.php');
@@ -52,14 +52,14 @@ $(function() {
        );
    });

-    $("#add_manual").live("click", function() {
+    $(document).on("click", "#add_manual", function() {
        var me_name = $.trim($("#me_name").val());
        var me_link = $.trim($("#me_link").val());

        add_menu_list(me_name, me_link, "<?php echo $code; ?>");
    });

-    $(".add_select").live("click", function() {
+    $(document).on("click", ".add_select", function() {
        var me_name = $.trim($(this).siblings("input[name='subject[]']").val());
        var me_link = $.trim($(this).siblings("input[name='link[]']").val());

@@ -136,12 +136,12 @@ $colspan = 7;

 <script>
 $(function() {
-    $(".btn_add_submenu").live("click", function() {
+    $(document).on("click", ".btn_add_submenu", function() {
        var code = $(this).closest("tr").find("input[name='code[]']").val().substr(0, 2);
        add_submenu(code);
    });

-    $(".btn_del_menu").live("click", function() {
+    $(document).on("click", ".btn_del_menu", function() {
        if(!confirm("메뉴를 삭제하시겠습니까?"))
            return false;

@@ -5,22 +5,22 @@ include_once('./_common.php');
 if ($w == "u" || $w == "d")
    check_demo();

-if ($W == 'd')
+if ($w == 'd')
    auth_check($auth[$sub_menu], "d");
 else
    auth_check($auth[$sub_menu], "w");

-$sql_common = " nw_device = '$nw_device',
-                nw_begin_time = '$nw_begin_time',
-                nw_end_time = '$nw_end_time',
-                nw_disable_hours = '$nw_disable_hours',
-                nw_left = '$nw_left',
-                nw_top = '$nw_top',
-                nw_height = '$nw_height',
-                nw_width = '$nw_width',
-                nw_subject = '$nw_subject',
-                nw_content = '$nw_content',
-                nw_content_html = '$nw_content_html' ";
+$sql_common = " nw_device = '{$_POST['nw_device']}',
+                nw_begin_time = '{$_POST['nw_begin_time']}',
+                nw_end_time = '{$_POST['nw_end_time']}',
+                nw_disable_hours = '{$_POST['nw_disable_hours']}',
+                nw_left = '{$_POST['nw_left']}',
+                nw_top = '{$_POST['nw_top']}',
+                nw_height = '{$_POST['nw_height']}',
+                nw_width = '{$_POST['nw_width']}',
+                nw_subject = '{$_POST['nw_subject']}',
+                nw_content = '{$_POST['nw_content']}',
+                nw_content_html = '{$_POST['nw_content_html']}' ";

 if($w == "")
 {
@@ -48,7 +48,7 @@ $sql = " select *
            limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $mb = array();
 if ($sfl == 'mb_id' && $stx)
@@ -181,7 +181,7 @@ else

 </form>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>

 <section id="point_mng">
    <h2 class="h2_frm">개별회원 포인트 증감 설정</h2>
@@ -44,7 +44,7 @@ $sql = " select *
            limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = '투표관리';
 include_once('./admin.head.php');
@@ -138,7 +138,7 @@ $colspan = 7;
 </div>
 </form>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>

 <script>
 $(function() {
@@ -57,7 +57,7 @@ $sql = " select *
            limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = '인기검색어관리';
 include_once('./admin.head.php');
@@ -123,7 +123,7 @@ var list_delete_php = 'popular_list.php';
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $word ?></label>
            <input type="checkbox" name="chk[]" value="<?php echo $row['pp_id'] ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td><a href="<?php echo $_SERVER['PHP_SELF'] ?>?sfl=pp_word&amp;stx=<?php echo $word ?>"><?php echo $word ?></a></td>
+        <td><a href="<?php echo $_SERVER['SCRIPT_NAME'] ?>?sfl=pp_word&amp;stx=<?php echo $word ?>"><?php echo $word ?></a></td>
        <td><?php echo $row['pp_date'] ?></td>
        <td><?php echo $row['pp_ip'] ?></td>
    </tr>
@@ -147,7 +147,7 @@ var list_delete_php = 'popular_list.php';

 </form>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>

 <script>
 $(function() {
@@ -26,7 +26,7 @@ $from_record = ($page - 1) * $rows; // 시작 열을 구함
 $sql = " select pp_word, count(*) as cnt {$sql_common} {$sql_search} {$sql_group} {$sql_order} limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['PHP_SELF'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';

 $g5['title'] = '인기검색어순위';
 include_once('./admin.head.php');
@@ -104,7 +104,7 @@ $(function(){
 </form>

 <?php
-echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&amp;page=");
+echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page=");
 ?>

 <?php
@@ -3,7 +3,7 @@ define('G5_IS_ADMIN', true);
 include_once ('../../common.php');
 include_once(G5_ADMIN_PATH.'/admin.lib.php');

-if (!strstr($_SERVER['PHP_SELF'], 'install.php')) {
+if (!strstr($_SERVER['SCRIPT_NAME'], 'install.php')) {
    if(!mysql_num_rows(mysql_query(" show tables like '{$g5['sms5_config_table']}' ")))
        goto_url('install.php');

@@ -131,7 +131,7 @@ while ($res = sql_fetch_array($qry)) array_push($group, $res);
    <span class="pg" id="person_pg"></span>
 </nav>

-<form name="search_form" id="sms_person_form" method="get" action="<?php echo $_SERVER['PHP_SELF']?>">
+<form name="search_form" id="sms_person_form" method="get" action="<?php echo $_SERVER['SCRIPT_NAME']?>">
 <input type="hidden" name="total_pg" value="<?php echo $total_page?>">
 <input type="hidden" name="page" value="<?php echo $page?>">

@@ -109,7 +109,7 @@ function multi_update(sel)
 <div class="local_sch01 local_sch sms_preset_sch">
    <form>
    <label for="fg_no" class="sound_only">그룹명</label>
-    <select name="fg_no" onchange="location.href='<?php echo $_SERVER['PHP_SELF']?>?fg_no='+this.value;">
+    <select name="fg_no" onchange="location.href='<?php echo $_SERVER['SCRIPT_NAME']?>?fg_no='+this.value;">
        <option value="" <?php echo $fg_no?'':'selected'?>> 전체 </option>
        <option value="0" <?php echo $fg_no=='0'?'selected':''?>> 미분류 (<?php echo number_format($no_count)?>) </option>
        <?php for($i=0; $i<count($group); $i++) {?>
@@ -118,7 +118,7 @@ function multi_update(sel)
    </select>
    </form>

-    <form name="search_form" method="get" action="<?php echo $_SERVER['PHP_SELF']?>">
+    <form name="search_form" method="get" action="<?php echo $_SERVER['SCRIPT_NAME']?>">
    <input type="hidden" name="fg_no" value="<?php echo $fg_no;?>">
    <label for="st" class="sound_only">검색대상</label>
    <select name="st" id="st">
@@ -231,7 +231,7 @@ function select_copy(sw, f) {
 }
 </script>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF']."?fg_no=$fg_no&amp;st=$st&amp;sv=$sv&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?fg_no=$fg_no&amp;st=$st&amp;sv=$sv&amp;page="); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -27,7 +27,7 @@ $vnum = $total_count - (($page-1) * $page_size);
 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>

-<form name="search_form" id="search_form" action=<?php echo $_SERVER['PHP_SELF'];?> class="local_sch01 local_sch" method="get">
+<form name="search_form" id="search_form" action=<?php echo $_SERVER['SCRIPT_NAME'];?> class="local_sch01 local_sch" method="get">

 <label for="st" class="sound_only">검색대상</label>
 <input type="hidden" name="st" id="st" value="wr_message" >
@@ -91,7 +91,7 @@ include_once(G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF']."?st=$st&amp;sv=$sv&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?st=$st&amp;sv=$sv&amp;page="); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -27,7 +27,7 @@ $vnum = $total_count - (($page-1) * $page_size);
 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>

-<form name="search_form" method="get" action="<?php echo $_SEVER['PHP_SELF']?>" class="local_sch01 local_sch">
+<form name="search_form" method="get" action="<?php echo $_SEVER['SCRIPT_NAME']?>" class="local_sch01 local_sch">
 <label for="st" class="sound_only">검색대상</label>
 <select name="st" id="st">
    <option value="mb_id"<?php echo get_selected('mh_name', $st); ?>>아이디</option>
@@ -83,7 +83,7 @@ include_once(G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF']."?st=$st&amp;sv=$sv&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?st=$st&amp;sv=$sv&amp;page="); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -27,7 +27,7 @@ $vnum = $total_count - (($page-1) * $page_size);
 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>

-<form name="search_form" method="get" action="<?echo $_SERVER['PHP_SELF']?>" class="local_sch01 local_sch" >
+<form name="search_form" method="get" action="<?echo $_SERVER['SCRIPT_NAME']?>" class="local_sch01 local_sch" >
 <label for="st" class="sound_only">검색대상</label>
 <select name="st" id="st">
    <option value="hs_name"<?php echo get_selected('hs_name', $st); ?>>이름</option>
@@ -100,7 +100,7 @@ include_once(G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF']."?st=$st&amp;sv=$sv&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?st=$st&amp;sv=$sv&amp;page="); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -116,7 +116,7 @@ if ($result)
            $row['bk_hp'] = get_hp($row['bk_hp'], 1);

            $log = array_shift($SMS->Log);
-            $log = @iconv('UTF-8', 'UTF-8//IGNORE', $log);
+            $log = @iconv('euc-kr', 'utf-8', $log);

            sql_query("insert into {$g5['sms5_history_table']} set wr_no='$wr_no', wr_renum='$new_wr_renum', bg_no='{$row['bg_no']}', mb_id='{$row['mb_id']}', bk_no='{$row['bk_no']}', hs_name='{$row['hs_name']}', hs_hp='{$row['hs_hp']}', hs_datetime='".G5_TIME_YMDHIS."', hs_flag='$hs_flag', hs_code='$hs_code', hs_memo='".addslashes($hs_memo)."', hs_log='".addslashes($log)."'", false);
        }
@@ -63,7 +63,7 @@ function all_send()
 }
 </script>

-<form name="search_form" method="get" action="<?php echo $_SERVER['PHP_SELF']?>" class="local_sch01 local_sch">
+<form name="search_form" method="get" action="<?php echo $_SERVER['SCRIPT_NAME']?>" class="local_sch01 local_sch">
 <input type="hidden" name="wr_no" value="<?php echo $wr_no?>">
 <input type="hidden" name="wr_renum" value="<?php echo $wr_renum?>">
 <input type="hidden" name="page" value="<?php echo $page?>">
@@ -244,7 +244,7 @@ function all_send()
    </div>
 </div>

-<?php echo sms5_sub_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $spage, $total_spage, $_SERVER['PHP_SELF']."?wr_no=$wr_no&amp;wr_renum=$wr_renum&amp;page=$page&amp;st=$st&amp;sv=$sv&amp;sst=$sst&amp;ssv=$ssv", "", "spage"); ?>
+<?php echo sms5_sub_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $spage, $total_spage, $_SERVER['SCRIPT_NAME']."?wr_no=$wr_no&amp;wr_renum=$wr_renum&amp;page=$page&amp;st=$st&amp;sv=$sv&amp;sst=$sst&amp;ssv=$ssv", "", "spage"); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -10,7 +10,7 @@ $setup = $_POST['setup'];

 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>
-<form name="hidden_form" method="post" action="<?php echo $_SERVER['PHP_SELF']?>">
+<form name="hidden_form" method="post" action="<?php echo $_SERVER['SCRIPT_NAME']?>">
 <input type="hidden" name="setup">
 </form>
 <?php
@@ -107,7 +107,7 @@ function no_hp_click(val)
    <span class="ov_listall">거부 <?php echo number_format($reject_count)?>명</span>
 </div>

-<form name="search_form" method="get" action="<?php echo $_SERVER['PHP_SELF']?>" class="local_sch01 local_sch">
+<form name="search_form" method="get" action="<?php echo $_SERVER['SCRIPT_NAME']?>" class="local_sch01 local_sch">
 <input type="hidden" name="bg_no" value="<?php echo $bg_no?>" >
 <label for="st" class="sound_only">검색대상</label>
 <select name="st" id="st">
@@ -122,7 +122,7 @@ function no_hp_click(val)

 <form name="search_form" class="local_sch01 local_sch">
 <label for="bg_no" class="sound_only">그룹명</label>
-<select name="bg_no" id="bg_no" onchange="location.href='<?php echo $_SERVER['PHP_SELF']?>?bg_no='+this.value;">
+<select name="bg_no" id="bg_no" onchange="location.href='<?php echo $_SERVER['SCRIPT_NAME']?>?bg_no='+this.value;">
    <option value=""<?php echo get_selected('', $bg_no); ?>> 전체 </option>
    <option value="<?php echo $no_group['bg_no']?>"<?php echo get_selected($bg_no, $no_group['bg_no']); ?>> <?php echo $no_group['bg_name']?> (<?php echo number_format($no_group['bg_count'])?> 명) </option>
    <?php for($i=0; $i<count($group); $i++) {?>
@@ -256,7 +256,7 @@ function select_copy(sw, f) {
 }
 </script>

-<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF']."?bg_no=$bg_no&amp;st=$st&amp;sv=$sv&amp;ap=$ap&amp;page="); ?>
+<?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME']."?bg_no=$bg_no&amp;st=$st&amp;sv=$sv&amp;ap=$ap&amp;page="); ?>

 <?php
 include_once(G5_ADMIN_PATH.'/admin.tail.php');
@@ -23,7 +23,7 @@ $no_count = $res['cnt'];
 <ul class="emo_list">
 </ul>

-<form name="emo_sch" id="emo_sch" method="get" action="<?php echo $_SERVER['PHP_SELF']?>">
+<form name="emo_sch" id="emo_sch" method="get" action="<?php echo $_SERVER['SCRIPT_NAME']?>">
 <input type="hidden" name="fg_no" value="<?php echo $fg_no?>">
 <input type="hidden" name="page" id="hidden_page" >
 <input type="hidden" name="fg_no" id="hidden_fg_no" >
@@ -202,7 +202,7 @@ if ($result)
            $row['bk_hp'] = get_hp($row['bk_hp'], 1);

            $log = array_shift($SMS->Log);
-            $log = @iconv('UTF-8', 'UTF-8//IGNORE', $log);
+            $log = @iconv('euc-kr', 'utf-8', $log);

            sql_query("insert into {$g5['sms5_history_table']} set wr_no='$wr_no', wr_renum=0, bg_no='{$row['bg_no']}', mb_id='{$row['mb_id']}', bk_no='{$row['bk_no']}', hs_name='".addslashes($row['bk_name'])."', hs_hp='{$row['bk_hp']}', hs_datetime='".G5_TIME_YMDHIS."', hs_flag='$hs_flag', hs_code='$hs_code', hs_memo='".addslashes($hs_memo)."', hs_log='".addslashes($log)."'", false);
        }
@@ -0,0 +1,80 @@
+$(function() {
+    $(".theme_active").on("click", function() {
+        var theme = $(this).data("theme");
+        var name  = $(this).data("name");
+
+        if(!confirm(name+" 테마를 적용하시겠습니까?"))
+            return false;
+
+        var set_default_skin = 0;
+        if($(this).data("set_default_skin") == true) {
+            if(confirm("기본환경설정, 1:1문의 스킨을 테마에서 설정된 스킨으로 변경하시겠습니까?\n\n변경을 선택하시면 테마에서 지정된 스킨으로 회원스킨 등이 변경됩니다."))
+                set_default_skin = 1;
+        }
+
+        $.ajax({
+            type: "POST",
+            url: "./theme_update.php",
+            data: {
+                "theme": theme,
+                "set_default_skin": set_default_skin
+            },
+            cache: false,
+            async: false,
+            success: function(data) {
+                if(data) {
+                    alert(data);
+                    return false;
+                }
+
+                document.location.reload();
+            }
+        });
+    });
+
+    $(".theme_deactive").on("click", function() {
+        var theme = $(this).data("theme");
+        var name  = $(this).data("name");
+
+        if(!confirm(name+" 테마 사용설정을 해제하시겠습니까?\n\n테마 설정을 해제하셔도 게시판 등의 스킨은 변경되지 않으므로 개별 변경작업이 필요합니다."))
+            return false;
+
+        $.ajax({
+            type: "POST",
+            url: "./theme_update.php",
+            data: {
+                "theme": theme,
+                "type": "reset"
+            },
+            cache: false,
+            async: false,
+            success: function(data) {
+                if(data) {
+                    alert(data);
+                    return false;
+                }
+
+                document.location.reload();
+            }
+        });
+    });
+
+    $(".theme_preview").on("click", function() {
+        var theme = $(this).data("theme");
+
+        $("#theme_detail").remove();
+
+        $.ajax({
+            type: "POST",
+            url: "./theme_detail.php",
+            data: {
+                "theme": theme
+            },
+            cache: false,
+            async: false,
+            success: function(data) {
+                $("#theme_list").after(data);
+            }
+        });
+    });
+});
@@ -0,0 +1,77 @@
+<?php
+$sub_menu = "100280";
+include_once('./_common.php');
+
+if ($is_admin != 'super')
+    alert('최고관리자만 접근 가능합니다.');
+
+// 테마 필드 추가
+if(!isset($config['cf_theme'])) {
+    sql_query(" ALTER TABLE `{$g5['config_table']}`
+                    ADD `cf_theme` varchar(255) NOT NULL DEFAULT '' AFTER `cf_title` ", true);
+}
+
+$theme = get_theme_dir();
+if($config['cf_theme'] && in_array($config['cf_theme'], $theme))
+    array_unshift($theme, $config['cf_theme']);
+$theme = array_values(array_unique($theme));
+$total_count = count($theme);
+
+// 설정된 테마가 존재하지 않는다면 cf_theme 초기화
+if($config['cf_theme'] && !in_array($config['cf_theme'], $theme))
+    sql_query(" update {$g5['config_table']} set cf_theme = '' ");
+
+$g5['title'] = "테마설정";
+include_once('./admin.head.php');
+?>
+
+<script src="<?php echo G5_ADMIN_URL; ?>/theme.js"></script>
+
+<p class="theme_p">설치된 테마 : <?php echo number_format($total_count); ?></p>
+
+<?php if($total_count > 0) { ?>
+<ul id="theme_list">
+    <?php
+    for($i=0; $i<$total_count; $i++) {
+        $info = get_theme_info($theme[$i]);
+
+        $name = get_text($info['theme_name']);
+        if($info['screenshot'])
+            $screenshot = '<img src="'.$info['screenshot'].'" alt="'.$name.'">';
+        else
+            $screenshot = '<img src="'.G5_ADMIN_URL.'/img/theme_img.jpg" alt="">';
+
+        if($config['cf_theme'] == $theme[$i]) {
+            $btn_active = '<span class="theme_sl theme_sl_use">사용중</span><button type="button" class="theme_sl theme_deactive" data-theme="'.$theme[$i].'" '.'data-name="'.$name.'">사용안함</button>';
+        } else {
+            $tconfig = get_theme_config_value($theme[$i], 'set_default_skin');
+            if($tconfig['set_default_skin'])
+                $set_default_skin = 'true';
+            else
+                $set_default_skin = 'false';
+
+            $btn_active = '<button type="button" class="theme_sl theme_active" data-theme="'.$theme[$i].'" '.'data-name="'.$name.'" data-set_default_skin="'.$set_default_skin.'">테마적용</button>';
+        }
+    ?>
+    <li>
+        <div class="tmli_if">
+            <?php echo $screenshot; ?>
+            <div class="tmli_tit">
+                <p><?php echo get_text($info['theme_name']); ?></p>
+            </div>
+        </div>
+        <?php echo $btn_active; ?>
+        <a href="./theme_preview.php?theme=<?php echo $theme[$i]; ?>" class="theme_pr" target="theme_preview">미리보기</a>
+        <button type="button" class="tmli_dt theme_preview" data-theme="<?php echo $theme[$i]; ?>">상세보기</button>
+    </li>
+    <?php
+    }
+    ?>
+</ul>
+<?php } else { ?>
+<p class="no_theme">설치된 테마가 없습니다.</p>
+<?php } ?>
+
+<?php
+include_once ('./admin.tail.php');
+?>
@@ -0,0 +1,78 @@
+<?php
+$sub_menu = "300100";
+include_once('./_common.php');
+include_once(G5_LIB_PATH.'/json.lib.php');
+
+$data = array();
+$data['error'] = '';
+
+$data['error'] = auth_check($auth[$sub_menu], 'w', true);
+if($data['error'])
+    die(json_encode($data));
+
+if(!$config['cf_theme']) {
+    $data['error'] = '사용 중인 테마가 없습니다.';
+    die(json_encode($data));
+}
+
+$theme_dir = get_theme_dir();
+if(!in_array($config['cf_theme'], $theme_dir)) {
+    $data['error'] = $config['cf_theme'].' 테마는 설치된 테마가 아닙니다.';
+    die(json_encode($data));
+}
+
+$type = $_POST['type'];
+$arr_type = array('board', 'conf_skin', 'conf_member');
+if(!in_array($type, $arr_type)) {
+    $data['error'] = '올바른 방법으로 이용해 주십시오.';
+    die(json_encode($data));
+}
+
+if($type == 'board') {
+    $keys = array('bo_gallery_cols', 'bo_gallery_width', 'bo_gallery_height', 'bo_mobile_gallery_width', 'bo_mobile_gallery_height', 'bo_image_width');
+    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));
+
+    $i = 0;
+    foreach($keys as $val) {
+        if($tconfig[$val]) {
+            $data[$val] = (int)preg_replace('#[^0-9]#', '', $tconfig[$val]);
+            $i++;
+        }
+    }
+
+    if($i == 0)
+        $data['error'] = '적용할 게시판 이미지 설정이 없습니다.';
+} else if($type == 'conf_skin') {
+    $keys = array('cf_new_skin', 'cf_mobile_new_skin', 'cf_search_skin', 'cf_mobile_search_skin', 'cf_connect_skin', 'cf_mobile_connect_skin', 'cf_faq_skin', 'cf_mobile_faq_skin');
+
+    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));
+
+    $i = 0;
+    foreach($keys as $val) {
+        if($tconfig[$val]) {
+            $data[$val] = preg_match('#^theme/.+$#', $tconfig[$val]) ? $tconfig[$val] : 'theme/'.$tconfig[$val];
+            $i++;
+        }
+    }
+
+    if($i == 0)
+        $data['error'] = '적용할 기본환경 스킨 설정이 없습니다.';
+} else if($type == 'conf_member') {
+    $keys = array('cf_member_skin', 'cf_mobile_member_skin');
+
+    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));
+
+    $i = 0;
+    foreach($keys as $val) {
+        if($tconfig[$val]) {
+            $data[$val] = preg_match('#^theme/.+$#', $tconfig[$val]) ? $tconfig[$val] : 'theme/'.$tconfig[$val];
+            $i++;
+        }
+    }
+
+    if($i == 0)
+        $data['error'] = '적용할 기본환경 회원스킨 설정이 없습니다.';
+}
+
+die(json_encode($data));
+?>
@@ -0,0 +1,64 @@
+<?php
+$sub_menu = "100280";
+include_once('./_common.php');
+
+if ($is_admin != 'super')
+    die('최고관리자만 접근 가능합니다.');
+
+$theme = trim($_POST['theme']);
+$theme_dir = get_theme_dir();
+
+if(!in_array($theme, $theme_dir))
+    die('선택하신 테마가 설치되어 있지 않습니다.');
+
+$info = get_theme_info($theme);
+
+if($info['screenshot'])
+    $screenshot = '<img src="'.$info['screenshot'].'" alt="'.$name.'">';
+else
+    $screenshot = '<img src="'.G5_ADMIN_URL.'/img/theme_img.jpg" alt="">';
+
+$name = get_text($info['theme_name']);
+if($info['theme_uri']) {
+    $name = '<a href="'.set_http($info['theme_uri']).'" target="_blank" class="thdt_home">'.$name.'</a>';
+}
+
+$maker = get_text($info['maker']);
+if($info['maker_uri']) {
+    $maker = '<a href="'.set_http($info['maker_uri']).'" target="_blank" class="thdt_home">'.$maker.'</a>';
+}
+
+$license = get_text($info['license']);
+if($info['license_uri']) {
+    $license = '<a href="'.set_http($info['license_uri']).'" target="_blank" class="thdt_home">'.$license.'</a>';
+}
+?>
+
+<div id="theme_detail">
+    <div class="thdt_img"><?php echo $screenshot; ?></div>
+    <div class="thdt_if">
+        <h2><?php echo $name; ?></h2>
+        <table>
+            <tr>
+                <th scope="row">Version</th>
+                <td><?php echo get_text($info['version']); ?></td>
+            </tr>
+            <tr>
+                <th scope="row">Maker</th>
+                <td><?php echo $maker; ?></td>
+            </tr>
+            <tr>
+                <th scope="row">License</th>
+                <td><?php echo $license; ?></td>
+            </tr>
+        </table>
+        <p><?php echo get_text($info['detail']); ?></p>
+        <button type="button" class="close_btn">닫기</button>
+    </div>
+</div>
+
+<script>
+$(".close_btn").on("click", function() {
+    $("#theme_detail").remove();
+});
+</script>
@@ -0,0 +1,118 @@
+<?php
+$sub_menu = "100280";
+define('_THEME_PREVIEW_', true);
+include_once('./_common.php');
+
+$theme_dir = get_theme_dir();
+
+if(!$theme || !in_array($theme, $theme_dir))
+    alert_close('테마가 존재하지 않거나 올바르지 않습니다.');
+
+$info = get_theme_info($theme);
+
+$arr_mode = array('index', 'list', 'view');
+$mode = substr(strip_tags($_GET['mode']), 0, 20);
+if(!in_array($mode, $arr_mode))
+    $mode = 'index';
+
+$qstr_index  = '&amp;mode=index';
+$qstr_list   = '&amp;mode=list';
+$qstr_view   = '&amp;mode=view';
+$qstr_device = '&amp;mode='.$mode.'&amp;device='.(G5_IS_MOBILE ? 'pc' : 'mobile');
+
+$sql = " select bo_table, wr_parent from {$g5['board_new_table']} order by bn_id desc limit 1 ";
+$row = sql_fetch($sql);
+$bo_table = $row['bo_table'];
+$board = sql_fetch(" select * from {$g5['board_table']} where bo_table = '$bo_table' ");
+$write_table = $g5['write_prefix'] . $bo_table;
+
+// theme.config.php 미리보기 게시판 스킨이 설정돼 있다면
+$tconfig = get_theme_config_value($theme, 'set_default_skin, preview_board_skin, preview_mobile_board_skin');
+if($mode == 'list' || $mode == 'view') {
+    if($tconfig['preview_board_skin'])
+        $board['bo_skin'] = preg_match('#^theme/.+$#', $tconfig['preview_board_skin']) ? $tconfig['preview_board_skin'] : 'theme/'.$tconfig['preview_board_skin'];
+
+    if($tconfig['preview_mobile_board_skin'])
+        $board['bo_mobile_skin'] = preg_match('#^theme/.+$#', $tconfig['preview_mobile_board_skin']) ? $tconfig['preview_mobile_board_skin'] : 'theme/'.$tconfig['preview_mobile_board_skin'];
+}
+
+// 스킨경로
+if (G5_IS_MOBILE) {
+    $board_skin_path    = get_skin_path('board', $board['bo_mobile_skin']);
+    $board_skin_url     = get_skin_url('board', $board['bo_mobile_skin']);
+    $member_skin_path   = get_skin_path('member', $config['cf_mobile_member_skin']);
+    $member_skin_url    = get_skin_url('member', $config['cf_mobile_member_skin']);
+    $new_skin_path      = get_skin_path('new', $config['cf_mobile_new_skin']);
+    $new_skin_url       = get_skin_url('new', $config['cf_mobile_new_skin']);
+    $search_skin_path   = get_skin_path('search', $config['cf_mobile_search_skin']);
+    $search_skin_url    = get_skin_url('search', $config['cf_mobile_search_skin']);
+    $connect_skin_path  = get_skin_path('connect', $config['cf_mobile_connect_skin']);
+    $connect_skin_url   = get_skin_url('connect', $config['cf_mobile_connect_skin']);
+    $faq_skin_path      = get_skin_path('faq', $config['cf_mobile_faq_skin']);
+    $faq_skin_url       = get_skin_url('faq', $config['cf_mobile_faq_skin']);
+} else {
+    $board_skin_path    = get_skin_path('board', $board['bo_skin']);
+    $board_skin_url     = get_skin_url('board', $board['bo_skin']);
+    $member_skin_path   = get_skin_path('member', $config['cf_member_skin']);
+    $member_skin_url    = get_skin_url('member', $config['cf_member_skin']);
+    $new_skin_path      = get_skin_path('new', $config['cf_new_skin']);
+    $new_skin_url       = get_skin_url('new', $config['cf_new_skin']);
+    $search_skin_path   = get_skin_path('search', $config['cf_search_skin']);
+    $search_skin_url    = get_skin_url('search', $config['cf_search_skin']);
+    $connect_skin_path  = get_skin_path('connect', $config['cf_connect_skin']);
+    $connect_skin_url   = get_skin_url('connect', $config['cf_connect_skin']);
+    $faq_skin_path      = get_skin_path('faq', $config['cf_faq_skin']);
+    $faq_skin_url       = get_skin_url('faq', $config['cf_faq_skin']);
+}
+
+$conf = sql_fetch(" select cf_theme from {$g5['config_table']} ");
+$name = get_text($info['theme_name']);
+if($conf['cf_theme'] != $theme) {
+    if($tconfig['set_default_skin'])
+        $set_default_skin = 'true';
+    else
+        $set_default_skin = 'false';
+
+    $btn_active = '<li><button type="button" class="theme_sl theme_active" data-theme="'.$theme.'" '.'data-name="'.$name.'" data-set_default_skin="'.$set_default_skin.'">테마적용</button></li>';
+} else {
+    $btn_active = '';
+}
+
+$g5['title'] = get_text($info['theme_name']).' 테마 미리보기';
+require_once(G5_PATH.'/head.sub.php');
+?>
+
+<link rel="stylesheet" href="<?php echo G5_ADMIN_URL; ?>/css/theme.css">
+<script src="<?php echo G5_ADMIN_URL; ?>/theme.js"></script>
+
+<section id="preview_item">
+    <ul>
+        <li><a href="./theme_preview.php?theme=<?php echo $theme.$qstr_index; ?>">인덱스 화면</a></li>
+        <li><a href="./theme_preview.php?theme=<?php echo $theme.$qstr_list; ?>">게시글 리스트</a></li>
+        <li><a href="./theme_preview.php?theme=<?php echo $theme.$qstr_view; ?>">게시글 보기</a></li>
+        <li><a href="./theme_preview.php?theme=<?php echo $theme.$qstr_device; ?>"><?php echo (G5_IS_MOBILE ? 'PC 버전' : '모바일 버전'); ?></a></li>
+        <?php echo $btn_active; ?>
+    </ul>
+</section>
+
+<section id="preview_content">
+    <?php
+    switch($mode) {
+        case 'list':
+            include(G5_BBS_PATH.'/board.php');
+            break;
+        case 'view':
+            $wr_id = $row['wr_parent'];
+            $write = sql_fetch(" select * from $write_table where wr_id = '$wr_id' ");
+            include(G5_BBS_PATH.'/board.php');
+            break;
+        default:
+            include(G5_PATH.'/index.php');
+            break;
+    }
+    ?>
+</section>
+
+<?php
+require_once(G5_PATH.'/tail.sub.php');
+?>
@@ -0,0 +1,70 @@
+<?php
+$sub_menu = "100280";
+include_once('./_common.php');
+
+if ($is_admin != 'super')
+    die('최고관리자만 접근 가능합니다.');
+
+$theme = trim($_POST['theme']);
+$theme_dir = get_theme_dir();
+
+if($_POST['type'] == 'reset') {
+    $sql = " update {$g5['config_table']} set cf_theme = '' ";
+    sql_query($sql);
+    die('');
+}
+
+if(!in_array($theme, $theme_dir))
+    die('선택하신 테마가 설치되어 있지 않습니다.');
+
+// 테마적용
+$sql = " update {$g5['config_table']} set cf_theme = '$theme' ";
+sql_query($sql);
+
+// 테마 설정 스킨 적용
+if($_POST['set_default_skin'] == 1) {
+    $keys = 'set_default_skin, cf_member_skin, cf_mobile_member_skin, cf_new_skin, cf_mobile_new_skin, cf_search_skin, cf_mobile_search_skin, cf_connect_skin, cf_mobile_connect_skin, cf_faq_skin, cf_mobile_faq_skin, qa_skin, qa_mobile_skin';
+
+    $tconfig = get_theme_config_value($theme, $keys);
+
+    if($tconfig['set_default_skin']) {
+        $sql_common = array();
+        $qa_sql_common = array();
+
+        foreach($tconfig as $key => $val) {
+            if(preg_match('#^qa_.+$#', $key)) {
+                if($val) {
+                    if(!preg_match('#^theme/.+$#', $val))
+                        $val = 'theme/'.$val;
+
+                    $qa_sql_common[] = " $key = '$val' ";
+                }
+
+                continue;
+            }
+
+            if(!isset($config[$key]))
+                continue;
+
+            if($val) {
+                if(!preg_match('#^theme/.+$#', $val))
+                    $val = 'theme/'.$val;
+
+                $sql_common[] = " $key = '$val' ";
+            }
+        }
+
+        if(!empty($sql_common)) {
+            $sql = " update {$g5['config_table']} set " . implode(', ', $sql_common);
+            sql_query($sql);
+        }
+
+        if(!empty($qa_sql_common)) {
+            $sql = " update {$g5['qa_config_table']} set " . implode(', ', $qa_sql_common);
+            sql_query($sql);
+        }
+    }
+}
+
+die('');
+?>
@@ -102,7 +102,7 @@ if (isset($domain))
    $qstr .= "&amp;domain=$domain";
 $qstr .= "&amp;page=";

-$pagelist = get_paging($config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr");
+$pagelist = get_paging($config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr");
 echo $pagelist;

 include_once('./admin.tail.php');
@@ -10,7 +10,7 @@ include_once('./admin.head.php');
 include_once(G5_PLUGIN_PATH.'/jquery-ui/datepicker.php');

 $colspan = 5;
-$listall = '<a href="'.$_SERVER['PHP_SELF'].'">처음</a>'; //페이지 처음으로 (초기화용도)
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'">처음</a>'; //페이지 처음으로 (초기화용도)
 ?>

 <div class="local_sch local_sch01">
@@ -98,11 +98,11 @@ $listall = '<a href="'.$_SERVER['PHP_SELF'].'">처음</a>'; //페이지 처음
        $bg = 'bg'.($i%2);
    ?>
    <tr class="<?php echo $bg; ?>">
-        <td class="td_id"><a href="<?php echo $_SERVER['PHP_SELF']; ?>?sfl=vi_ip&amp;stx=<?php echo $ip; ?>"><?php echo $ip; ?></a></td>
+        <td class="td_id"><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>?sfl=vi_ip&amp;stx=<?php echo $ip; ?>"><?php echo $ip; ?></a></td>
        <td><?php echo $link.$title; ?></a></td>
        <td class="td_idsmall"><?php echo $brow; ?></td>
        <td class="td_idsmall"><?php echo $os; ?></td>
-        <td class="td_datetime"><a href="<?php echo $_SERVER['PHP_SELF']; ?>?sfl=vi_date&amp;stx=<?php echo $row['vi_date']; ?>"><?php echo $row['vi_date']; ?></a> <?php echo $row['vi_time']; ?></td>
+        <td class="td_datetime"><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>?sfl=vi_date&amp;stx=<?php echo $row['vi_date']; ?>"><?php echo $row['vi_date']; ?></a> <?php echo $row['vi_time']; ?></td>
    </tr>
    <?php } ?>
    <?php if ($i == 0) echo '<tr><td colspan="'.$colspan.'" class="empty_table">자료가 없습니다.</td></tr>'; ?>
@@ -111,7 +111,7 @@ $listall = '<a href="'.$_SERVER['PHP_SELF'].'">처음</a>'; //페이지 처음
 </div>

 <?php
-$pagelist = get_paging($config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF'].'?'.$qstr.'&amp;domain='.$domain.'&amp;page=');
+$pagelist = get_paging($config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$qstr.'&amp;domain='.$domain.'&amp;page=');
 if ($pagelist) {
    echo $pagelist;
 }
@@ -30,7 +30,8 @@ include_once(G5_PATH.'/head.sub.php');

 $msg2 = str_replace("\\n", "<br>", $msg);

-if (!$url) $url = $_SERVER['HTTP_REFERER'];
+$url = clean_xss_tags($url);
+if (!$url) $url = clean_xss_tags($_SERVER['HTTP_REFERER']);

 // url 체크
 check_url_host($url);
@@ -222,19 +222,19 @@ $admin_href = "";
 if ($member['mb_id'] && ($is_admin == 'super' || $group['gr_admin'] == $member['mb_id']))
    $admin_href = G5_ADMIN_URL.'/board_form.php?w=u&amp;bo_table='.$bo_table;

-include_once('./board_head.php');
+include_once(G5_BBS_PATH.'/board_head.php');

 // 게시물 아이디가 있다면 게시물 보기를 INCLUDE
 if (isset($wr_id) && $wr_id) {
-    include_once('./view.php');
+    include_once(G5_BBS_PATH.'/view.php');
 }

 // 전체목록보이기 사용이 "예" 또는 wr_id 값이 없다면 목록을 보임
 //if ($board['bo_use_list_view'] || empty($wr_id))
 if ($member['mb_level'] >= $board['bo_list_level'] && $board['bo_use_list_view'] || empty($wr_id))
-    include_once ('./list.php');
+    include_once (G5_BBS_PATH.'/list.php');

-include_once('./board_tail.php');
+include_once(G5_BBS_PATH.'/board_tail.php');

 echo "\n<!-- 사용스킨 : ".(G5_IS_MOBILE ? $board['bo_mobile_skin'] : $board['bo_skin'])." -->\n";

@@ -4,7 +4,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 // 게시판 관리의 상단 내용
 if (G5_IS_MOBILE) {
    // 모바일의 경우 설정을 따르지 않는다.
-    include_once('./_head.php');
+    include_once(G5_BBS_PATH.'/_head.php');
    echo stripslashes($board['bo_mobile_content_head']);
 } else {
    @include ($board['bo_include_head']);
@@ -5,7 +5,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 if (G5_IS_MOBILE) {
    echo stripslashes($board['bo_mobile_content_tail']);
    // 모바일의 경우 설정을 따르지 않는다.
-    include_once('./_tail.php');
+    include_once(G5_BBS_PATH.'/_tail.php');
 } else {
    echo stripslashes($board['bo_content_tail']);
    @include ($board['bo_include_tail']);
@@ -2,6 +2,10 @@
 include_once('./_common.php');
 include_once(G5_PATH.'/head.sub.php');

+$url1 = clean_xss_tags($url1);
+$url2 = clean_xss_tags($url2);
+$url3 = clean_xss_tags($url3);
+
 // url 체크
 check_url_host($url1);
 check_url_host($url2);
@@ -62,8 +62,8 @@ $str = preg_replace($src, $dst, $str);
 if(trim($co['co_skin']) == '')
    $co['co_skin'] = 'basic';

-$content_skin_path = G5_SKIN_PATH.'/content/'.$co['co_skin'];
-$content_skin_url  = G5_SKIN_URL.'/content/'.$co['co_skin'];
+$content_skin_path = get_skin_path('content', $co['co_skin']);
+$content_skin_url  = get_skin_url('content', $co['co_skin']);
 $skin_file = $content_skin_path.'/content.skin.php';

 if ($is_admin)
@@ -12,6 +12,7 @@ $sql = " select a.mb_id, b.mb_nick, b.mb_name, b.mb_email, b.mb_homepage, b.mb_o
            order by a.lo_datetime desc ";
 $result = sql_query($sql);
 for ($i=0; $row=sql_fetch_array($result); $i++) {
+    $row['lo_url'] = get_text($row['lo_url']);
    $list[$i] = $row;

    if ($row['mb_id']) {
@@ -41,7 +41,9 @@ if($config['cf_memo_del'] > 0) {

 // 탈퇴회원 자동 삭제
 if($config['cf_leave_day'] > 0) {
-    $sql = " select mb_id from {$g5['member_table']} where (TO_DAYS('".G5_TIME_YMDHIS."') - TO_DAYS(mb_leave_date)) > '{$config['cf_leave_day']}' ";
+    $sql = " select mb_id from {$g5['member_table']}
+                where (TO_DAYS('".G5_TIME_YMDHIS."') - TO_DAYS(mb_leave_date)) > '{$config['cf_leave_day']}'
+                  and mb_memo not regexp '^[0-9]{8}.*삭제함' ";
    $result = sql_query($sql);
    while ($row=sql_fetch_array($result))
    {
@@ -1,7 +1,14 @@
 <?php
 include_once('./_common.php');
-include_once(G5_LIB_PATH.'/latest.lib.php');
-$g5['title'] = $group['gr_subject'];
+
+if(defined('G5_THEME_PATH')) {
+    $group_file = G5_THEME_PATH.'/group.php';
+    if(is_file($group_file)) {
+        require_once($group_file);
+        return;
+    }
+    unset($group_file);
+}

 if (G5_IS_MOBILE) {
    include_once(G5_MOBILE_PATH.'/group.php');
@@ -11,7 +18,9 @@ if (G5_IS_MOBILE) {
 if(!$is_admin && $group['gr_device'] == 'mobile')
    alert($group['gr_subject'].' 그룹은 모바일에서만 접근할 수 있습니다.');

+$g5['title'] = $group['gr_subject'];
 include_once('./_head.php');
+include_once(G5_LIB_PATH.'/latest.lib.php');
 ?>


@@ -14,7 +14,7 @@ else
 $g5['title'] = '회원 비밀번호 확인';
 include_once('./_head.sub.php');

-$url = $_GET['url'];
+$url = clean_xss_tags($_GET['url']);

 // url 체크
 check_url_host($url);
@@ -55,7 +55,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++)
    <input type="hidden" name="sod" value="<?php echo $sod ?>">
    <input type="hidden" name="page" value="<?php echo $page ?>">
    <input type="hidden" name="act" value="<?php echo $act ?>">
-    <input type="hidden" name="url" value="<?php echo $_SERVER['HTTP_REFERER'] ?>">
+    <input type="hidden" name="url" value="<?php echo clean_xss_tags($_SERVER['HTTP_REFERER']); ?>">

    <div class="tbl_head01 tbl_wrap">
        <table>
@@ -17,8 +17,12 @@ if ($view == "w")
    $sql_common .= " and a.wr_id = a.wr_parent ";
 else if ($view == "c")
    $sql_common .= " and a.wr_id <> a.wr_parent ";
+else
+    $view = '';
+
+$mb_id = isset($_GET['mb_id']) ? ($_GET['mb_id']) : '';
+$mb_id = substr(preg_replace('#[^a-z0-9_]#i', '', $mb_id), 0, 20);

-$mb_id = isset($_GET['mb_id']) ? strip_tags($_GET['mb_id']) : "";
 if ($mb_id) {
    $sql_common .= " and a.mb_id = '{$mb_id}' ";
 }
@@ -28,9 +32,9 @@ $sql = " select count(*) as cnt {$sql_common} ";
 $row = sql_fetch($sql);
 $total_count = $row['cnt'];

-$rows = $config['cf_new_rows'];
+$rows = G5_IS_MOBILE ? $config['cf_mobile_page_rows'] : $config['cf_new_rows'];
 $total_page  = ceil($total_count / $rows);  // 전체 페이지 계산
-if (!$page) $page = 1; // 페이지가 없으면 첫 페이지 (1 페이지)
+if ($page < 1) $page = 1; // 페이지가 없으면 첫 페이지 (1 페이지)
 $from_record = ($page - 1) * $rows; // 시작 열을 구함

 $group_select = '<label for="gr_id" class="sound_only">그룹</label><select name="gr_id" id="gr_id"><option value="">전체그룹';
@@ -13,14 +13,11 @@ $result = sql_query($sql, false);
    <h2>팝업레이어 알림</h2>

 <?php
-for ($i=0; $row_nw=sql_fetch_array($result); $i++)
+for ($i=0; $nw=sql_fetch_array($result); $i++)
 {
    // 이미 체크 되었다면 Continue
-    if ($_COOKIE["hd_pops_{$row_nw['nw_id']}"])
+    if ($_COOKIE["hd_pops_{$nw['nw_id']}"])
        continue;
-
-    $sql = " select * from {$g5['new_win_table']} where nw_id = '{$row_nw['nw_id']}' ";
-    $nw = sql_fetch($sql);
 ?>

    <div id="hd_pops_<?php echo $nw['nw_id'] ?>" class="hd_pops" style="top:<?php echo $nw['nw_top']?>px;left:<?php echo $nw['nw_left']?>px">
@@ -51,7 +51,7 @@ $sql = " select wr_subject from {$write_table}
                      and wr_is_comment = 0 ";
 $row = sql_fetch($sql);

-$g5['title'] = $row['wr_subject'];
+$g5['title'] = get_text($row['wr_subject']);

 include_once($member_skin_path.'/password.skin.php');

@@ -4,8 +4,12 @@ include_once(G5_LIB_PATH.'/mailer.lib.php');

 if ($w == '')
 {
+    $po_id   = $_POST['po_id'];
+    $pc_name = $_POST['pc_name'];
+    $pc_idea = $_POST['pc_idea'];
+
    $po = sql_fetch(" select * from {$g5['poll_table']} where po_id = '{$po_id}' ");
-    if (!$po[po_id])
+    if (!$po['po_id'])
        alert('po_id 값이 제대로 넘어오지 않았습니다.');

    $tmp_row = sql_fetch(" select max(pc_id) as max_pc_id from {$g5['poll_etc_table']} ");
@@ -85,12 +85,25 @@ for ($i=0; $row2=sql_fetch_array($result); $i++) {
    $list3[$i]['subject'] = cut_str($row2['po_subject'],60,"…");
 }

-if (G5_IS_MOBILE) {
-    $poll_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
-    $poll_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
+if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+    if (G5_IS_MOBILE) {
+        $poll_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+        if(!is_dir($poll_skin_path))
+            $poll_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+        $poll_skin_url = str_replace(G5_PATH, G5_URL, $poll_skin_path);
+    } else {
+        $poll_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+        $poll_skin_url = str_replace(G5_PATH, G5_URL, $poll_skin_path);
+    }
+    //$skin_dir = $match[1];
 } else {
-    $poll_skin_path = G5_SKIN_PATH.'/poll/'.$skin_dir;
-    $poll_skin_url  = G5_SKIN_URL.'/poll/'.$skin_dir;
+    if (G5_IS_MOBILE) {
+        $poll_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
+        $poll_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
+    } else {
+        $poll_skin_path = G5_SKIN_PATH.'/poll/'.$skin_dir;
+        $poll_skin_url  = G5_SKIN_URL.'/poll/'.$skin_dir;
+    }
 }

 include_once(G5_PATH.'/head.sub.php');
@@ -1,8 +1,8 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

-$qa_skin_path = (G5_IS_MOBILE ? G5_MOBILE_PATH : G5_PATH).'/'.G5_SKIN_DIR.'/qa/'.(G5_IS_MOBILE ? $qaconfig['qa_mobile_skin'] : $qaconfig['qa_skin']);
-$qa_skin_url = (G5_IS_MOBILE ? G5_MOBILE_URL : G5_URL).'/'.G5_SKIN_DIR.'/qa/'.(G5_IS_MOBILE ? $qaconfig['qa_mobile_skin'] : $qaconfig['qa_skin']);
+$qa_skin_path = get_skin_path('qa', (G5_IS_MOBILE ? $qaconfig['qa_mobile_skin'] : $qaconfig['qa_skin']));
+$qa_skin_url  = get_skin_url('qa', (G5_IS_MOBILE ? $qaconfig['qa_mobile_skin'] : $qaconfig['qa_skin']));

 if (G5_IS_MOBILE) {
    // 모바일의 경우 설정을 따르지 않는다.
@@ -2,27 +2,28 @@
 include_once('./_common.php');
 include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');

+$g5['title'] = '메일인증 메일주소 변경';
+include_once('./_head.php');
+
+$mb_id = substr(clean_xss_tags($_GET['mb_id']), 0, 20);
 $sql = " select mb_email, mb_datetime, mb_email_certify from {$g5['member_table']} where mb_id = '{$mb_id}' ";
 $mb = sql_fetch($sql);
 if (substr($mb['mb_email_certify'],0,1)!=0) {
    alert("이미 메일인증 하신 회원입니다.", G5_URL);
 }
-
-$g5['title'] = '메일인증 메일주소 변경';
-include_once('./_head.php');
 ?>

-<p>메일인증을 받지 못한 경우 회원정보의 메일주소를 변경 할 수 있습니다.</p>
+<p class="rg_em_p">메일인증을 받지 못한 경우 회원정보의 메일주소를 변경 할 수 있습니다.</p>

 <form method="post" name="fregister_email" action="<?php echo G5_HTTPS_BBS_URL.'/register_email_update.php'; ?>" onsubmit="return fregister_email_submit(this);">
 <input type="hidden" name="mb_id" value="<?php echo $mb_id; ?>">

-<div class="tbl_frm01 tbl_frm">
+<div class="tbl_frm01 tbl_frm rg_em">
    <table>
    <caption>사이트 이용정보 입력</caption>
    <tr>
        <th scope="row"><label for="reg_mb_email">E-mail<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="mb_email" id="reg_mb_email" required class="frm_input email required" size="50" maxlength="100" value="<?php echo $mb['mb_email']; ?>"></td>
+        <td><input type="text" name="mb_email" id="reg_mb_email" required class="frm_input email required" size="30" maxlength="100" value="<?php echo $mb['mb_email']; ?>"></td>
    </tr>
    <tr>
        <th scope="row">자동등록방지</th>
@@ -46,6 +47,6 @@ function fregister_email_submit(f)
    return true;
 }
 </script>
-<?
+<?php
 include_once('./_tail.php');
 ?>
@@ -8,7 +8,7 @@ $mb_email = trim($_POST['mb_email']);

 $sql = " select mb_name, mb_datetime from {$g5['member_table']} where mb_id = '{$mb_id}' and mb_email_certify <> '' ";
 $mb = sql_fetch($sql);
-if (!$mb) {
+if ($mb) {
    alert("이미 메일인증 하신 회원입니다.", G5_URL);
 }

@@ -115,6 +115,9 @@ $req_nick = !isset($member['mb_nick_date']) || (isset($member['mb_nick_date']) &
 $required = ($w=='') ? 'required' : '';
 $readonly = ($w=='u') ? 'readonly' : '';

+$agree  = preg_replace('#[^0-9]#', '', $agree);
+$agree2 = preg_replace('#[^0-9]#', '', $agree2);
+
 // add_javascript('js 구문', 출력순서); 숫자가 작을 수록 먼저 출력됨
 if ($config['cf_use_addr'])
    add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
@@ -40,8 +40,8 @@ $mb_birth       = isset($_POST['mb_birth'])         ? trim($_POST['mb_birth'])
 $mb_homepage    = isset($_POST['mb_homepage'])      ? trim($_POST['mb_homepage'])    : "";
 $mb_tel         = isset($_POST['mb_tel'])           ? trim($_POST['mb_tel'])         : "";
 $mb_hp          = isset($_POST['mb_hp'])            ? trim($_POST['mb_hp'])          : "";
-$mb_zip1        = isset($_POST['mb_zip1'])          ? trim($_POST['mb_zip1'])        : "";
-$mb_zip2        = isset($_POST['mb_zip2'])          ? trim($_POST['mb_zip2'])        : "";
+$mb_zip1        = isset($_POST['mb_zip'])           ? substr(trim($_POST['mb_zip']), 0, 3) : "";
+$mb_zip2        = isset($_POST['mb_zip'])           ? substr(trim($_POST['mb_zip']), 3)    : "";
 $mb_addr1       = isset($_POST['mb_addr1'])         ? trim($_POST['mb_addr1'])       : "";
 $mb_addr2       = isset($_POST['mb_addr2'])         ? trim($_POST['mb_addr2'])       : "";
 $mb_addr3       = isset($_POST['mb_addr3'])         ? trim($_POST['mb_addr3'])       : "";
@@ -73,7 +73,7 @@ if ($w == '' || $w == 'u') {
    if($w == '' && $mb_password != $mb_password_re)
        alert('비밀번호가 일치하지 않습니다.');

-    if ($msg = empty_mb_name($mb_id))       alert($msg, "", true, true);
+    if ($msg = empty_mb_name($mb_name))       alert($msg, "", true, true);
    if ($msg = empty_mb_nick($mb_nick))     alert($msg, "", true, true);
    if ($msg = empty_mb_email($mb_email))   alert($msg, "", true, true);
    if ($msg = reserve_mb_id($mb_id))       alert($msg, "", true, true);
@@ -6,7 +6,7 @@ include_once(G5_PATH.'/head.sub.php');
 if (!$is_member)
 {
    $href = './login.php?'.$qstr.'&amp;url='.urlencode('./board.php?bo_table='.$bo_table.'&amp;wr_id='.$wr_id);
-    echo '<script> alert(\'회원만 접근 가능합니다.\'); top.location.href = \''.$href.'\'; </script>';
+    echo '<script> alert(\'회원만 접근 가능합니다.\'); top.location.href = \''.str_replace('&amp;', '&', $href).'\'; </script>';
    exit;
 }

@@ -32,6 +32,8 @@ if ($row['cnt'])
    exit;
 }

+$wr_content = trim($_POST['wr_content']);
+
 // 덧글이 넘어오고 코멘트를 쓸 권한이 있다면
 if ($wr_content && ($member['mb_level'] >= $board['bo_comment_level']))
 {
@@ -17,7 +17,7 @@ if ($stx) {
    $stx = preg_replace('/\//', '\/', trim($stx));
    $sop = strtolower($sop);
    if (!$sop || !($sop == 'and' || $sop == 'or')) $sop = 'and'; // 연산자 and , or
-    $srows = isset($_GET['srows']) ? $_GET['srows'] : 10;
+    $srows = isset($_GET['srows']) ? (int)preg_replace('#[^0-9]#', '', $_GET['srows']) : 10;
    if (!$srows) $srows = 10; // 한페이지에 출력하는 검색 행수

    $g5_search['tables'] = Array();
@@ -135,7 +135,7 @@ if ($stx) {
            $sch_all = "";
            if ($onetable == $g5_search['tables'][$i]) $sch_class = "class=sch_on";
            else $sch_all = "class=sch_on";
-            $str_board_list .= '<li><a href="'.$_SERVER['PHP_SELF'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;onetable='.$g5_search['tables'][$i].'" '.$sch_class.'><strong>'.$row2['bo_subject'].'</strong><span class="cnt_cmt">'.$row['cnt'].'</span></a></li>';
+            $str_board_list .= '<li><a href="'.$_SERVER['SCRIPT_NAME'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;onetable='.$g5_search['tables'][$i].'" '.$sch_class.'><strong>'.$row2['bo_subject'].'</strong><span class="cnt_cmt">'.$row['cnt'].'</span></a></li>';
        }
    }

@@ -217,7 +217,7 @@ if ($stx) {
        $from_record = 0;
    }

-    $write_pages = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['PHP_SELF'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;srows='.$srows.'&amp;onetable='.$onetable.'&amp;page=');
+    $write_pages = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;srows='.$srows.'&amp;onetable='.$onetable.'&amp;page=');
 }

 $group_select = '<label for="gr_id" class="sound_only">게시판 그룹선택</label><select name="gr_id" id="gr_id" class="select"><option value="">전체 분류';
@@ -40,7 +40,7 @@ if ($w == '') {
        if ($member['mb_id']) {
            alert('글을 쓸 권한이 없습니다.');
        } else {
-            alert("글을 쓸 권한이 없습니다.\\n회원이시라면 로그인 후 이용해 보십시오.", './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['PHP_SELF'].'?bo_table='.$bo_table));
+            alert("글을 쓸 권한이 없습니다.\\n회원이시라면 로그인 후 이용해 보십시오.", './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['SCRIPT_NAME'].'?bo_table='.$bo_table));
        }
    }

@@ -62,7 +62,7 @@ if ($w == '') {
        if ($member['mb_id']) {
            alert('글을 수정할 권한이 없습니다.');
        } else {
-            alert('글을 수정할 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['PHP_SELF'].'?bo_table='.$bo_table));
+            alert('글을 수정할 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['SCRIPT_NAME'].'?bo_table='.$bo_table));
        }
    }

@@ -95,7 +95,7 @@ if ($w == '') {
        if ($member['mb_id'])
            alert('글을 답변할 권한이 없습니다.');
        else
-            alert('답변글을 작성할 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['PHP_SELF'].'?bo_table='.$bo_table));
+            alert('답변글을 작성할 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', './login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['SCRIPT_NAME'].'?bo_table='.$bo_table));
    }

    $tmp_point = isset($member['mb_point']) ? $member['mb_point'] : 0;
@@ -165,7 +165,7 @@ if ($w == '') {
 // 그룹접근 가능
 if (!empty($group['gr_use_access'])) {
    if ($is_guest) {
-        alert("접근 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.", 'login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['PHP_SELF'].'?bo_table='.$bo_table));
+        alert("접근 권한이 없습니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.", 'login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['SCRIPT_NAME'].'?bo_table='.$bo_table));
    }

    if ($is_admin == 'super' || $group['gr_admin'] == $member['mb_id'] || $board['bo_admin'] == $member['mb_id']) {
@@ -183,7 +183,7 @@ if (!empty($group['gr_use_access'])) {
 if ($config['cf_cert_use'] && !$is_admin) {
    // 인증된 회원만 가능
    if ($board['bo_use_cert'] != '' && $is_guest) {
-        alert('이 게시판은 본인확인 하신 회원님만 글쓰기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', 'login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['PHP_SELF'].'?bo_table='.$bo_table));
+        alert('이 게시판은 본인확인 하신 회원님만 글쓰기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', 'login.php?'.$qstr.'&amp;url='.urlencode($_SERVER['SCRIPT_NAME'].'?bo_table='.$bo_table));
    }

    if ($board['bo_use_cert'] == 'cert' && !$member['mb_certify']) {
@@ -218,58 +218,6 @@ if ($config['cf_editor'])
 else
    define('G5_EDITOR_LIB', G5_LIB_PATH."/editor.lib.php");

-//==============================================================================
-// 사용기기 설정
-// config.php G5_SET_DEVICE 설정에 따라 사용자 화면 제한됨
-// pc 설정 시 모바일 기기에서도 PC화면 보여짐
-// mobile 설정 시 PC에서도 모바일화면 보여짐
-// both 설정 시 접속 기기에 따른 화면 보여짐
-//------------------------------------------------------------------------------
-$is_mobile = false;
-$set_device = true;
-if(defined('G5_SET_DEVICE')) {
-    switch(G5_SET_DEVICE) {
-        case 'pc':
-            $is_mobile  = false;
-            $set_device = false;
-            break;
-        case 'mobile':
-            $is_mobile  = true;
-            $set_device = false;
-            break;
-        default:
-            break;
-    }
-}
-//==============================================================================
-
-//==============================================================================
-// Mobile 모바일 설정
-// 쿠키에 저장된 값이 모바일이라면 브라우저 상관없이 모바일로 실행
-// 그렇지 않다면 브라우저의 HTTP_USER_AGENT 에 따라 모바일 결정
-// G5_MOBILE_AGENT : config.php 에서 선언
-//------------------------------------------------------------------------------
-if (G5_USE_MOBILE && $set_device) {
-    if ($_REQUEST['device']=='pc')
-        $is_mobile = false;
-    else if ($_REQUEST['device']=='mobile')
-        $is_mobile = true;
-    else if (isset($_SESSION['ss_is_mobile']))
-        $is_mobile = $_SESSION['ss_is_mobile'];
-    else if (is_mobile())
-        $is_mobile = true;
-} else {
-    $set_device = false;
-}
-
-$_SESSION['ss_is_mobile'] = $is_mobile;
-define('G5_IS_MOBILE', $is_mobile);
-define('G5_DEVICE_BUTTON_DISPLAY', $set_device);
-if (G5_IS_MOBILE) {
-    $g5['mobile_path'] = G5_PATH.'/'.$g5['mobile_dir'];
-}
-//==============================================================================
-
 // 4.00.03 : [보안관련] PHPSESSID 가 틀리면 로그아웃한다.
 if (isset($_REQUEST['PHPSESSID']) && $_REQUEST['PHPSESSID'] != session_id())
    goto_url(G5_BBS_URL.'/logout.php');
@@ -513,35 +461,128 @@ if ($is_admin != 'super') {
 }


+// 테마경로
+if(defined('_THEME_PREVIEW_') && _THEME_PREVIEW_ === true)
+    $config['cf_theme'] = trim($_GET['theme']);
+
+if(isset($config['cf_theme']) && trim($config['cf_theme'])) {
+    $theme_path = G5_PATH.'/'.G5_THEME_DIR.'/'.$config['cf_theme'];
+    if(is_dir($theme_path)) {
+        define('G5_THEME_PATH',        $theme_path);
+        define('G5_THEME_URL',         G5_URL.'/'.G5_THEME_DIR.'/'.$config['cf_theme']);
+        define('G5_THEME_MOBILE_PATH', $theme_path.'/'.G5_MOBILE_DIR);
+        define('G5_THEME_LIB_PATH',    $theme_path.'/'.G5_LIB_DIR);
+        define('G5_THEME_CSS_URL',     G5_THEME_URL.'/'.G5_CSS_DIR);
+        define('G5_THEME_IMG_URL',     G5_THEME_URL.'/'.G5_IMG_DIR);
+        define('G5_THEME_JS_URL',      G5_THEME_URL.'/'.G5_JS_DIR);
+    }
+    unset($theme_path);
+}
+
+
+// 테마 설정 로드
+if(is_file(G5_THEME_PATH.'/theme.config.php'))
+    include_once(G5_THEME_PATH.'/theme.config.php');
+
+//=====================================================================================
+// 사용기기 설정
+// 테마의 G5_THEME_DEVICE 설정에 따라 사용자 화면 제한됨
+// 테마에 별도 설정이 없는 경우 config.php G5_SET_DEVICE 설정에 따라 사용자 화면 제한됨
+// pc 설정 시 모바일 기기에서도 PC화면 보여짐
+// mobile 설정 시 PC에서도 모바일화면 보여짐
+// both 설정 시 접속 기기에 따른 화면 보여짐
+//-------------------------------------------------------------------------------------
+$is_mobile = false;
+$set_device = true;
+
+if(defined('G5_THEME_DEVICE') && G5_THEME_DEVICE != '') {
+    switch(G5_THEME_DEVICE) {
+        case 'pc':
+            $is_mobile  = false;
+            $set_device = false;
+            break;
+        case 'mobile':
+            $is_mobile  = true;
+            $set_device = false;
+            break;
+        default:
+            break;
+    }
+}
+
+if(defined('G5_SET_DEVICE') && $set_device) {
+    switch(G5_SET_DEVICE) {
+        case 'pc':
+            $is_mobile  = false;
+            $set_device = false;
+            break;
+        case 'mobile':
+            $is_mobile  = true;
+            $set_device = false;
+            break;
+        default:
+            break;
+    }
+}
+//==============================================================================
+
+//==============================================================================
+// Mobile 모바일 설정
+// 쿠키에 저장된 값이 모바일이라면 브라우저 상관없이 모바일로 실행
+// 그렇지 않다면 브라우저의 HTTP_USER_AGENT 에 따라 모바일 결정
+// G5_MOBILE_AGENT : config.php 에서 선언
+//------------------------------------------------------------------------------
+if (G5_USE_MOBILE && $set_device) {
+    if ($_REQUEST['device']=='pc')
+        $is_mobile = false;
+    else if ($_REQUEST['device']=='mobile')
+        $is_mobile = true;
+    else if (isset($_SESSION['ss_is_mobile']))
+        $is_mobile = $_SESSION['ss_is_mobile'];
+    else if (is_mobile())
+        $is_mobile = true;
+} else {
+    $set_device = false;
+}
+
+$_SESSION['ss_is_mobile'] = $is_mobile;
+define('G5_IS_MOBILE', $is_mobile);
+define('G5_DEVICE_BUTTON_DISPLAY', $set_device);
+if (G5_IS_MOBILE) {
+    $g5['mobile_path'] = G5_PATH.'/'.$g5['mobile_dir'];
+}
+//==============================================================================
+
+
 //==============================================================================
 // 스킨경로
 //------------------------------------------------------------------------------
 if (G5_IS_MOBILE) {
-    $board_skin_path    = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/board/'.$board['bo_mobile_skin'];
-    $board_skin_url     = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/board/'.$board['bo_mobile_skin'];
-    $member_skin_path   = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/member/'.$config['cf_mobile_member_skin'];
-    $member_skin_url    = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/member/'.$config['cf_mobile_member_skin'];
-    $new_skin_path      = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/new/'.$config['cf_mobile_new_skin'];
-    $new_skin_url       = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/new/'.$config['cf_mobile_new_skin'];
-    $search_skin_path   = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/search/'.$config['cf_mobile_search_skin'];
-    $search_skin_url    = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/search/'.$config['cf_mobile_search_skin'];
-    $connect_skin_path  = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/connect/'.$config['cf_mobile_connect_skin'];
-    $connect_skin_url   = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/connect/'.$config['cf_mobile_connect_skin'];
-    $faq_skin_path      = G5_MOBILE_PATH .'/'.G5_SKIN_DIR.'/faq/'.$config['cf_mobile_faq_skin'];
-    $faq_skin_url       = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/faq/'.$config['cf_mobile_faq_skin'];
+    $board_skin_path    = get_skin_path('board', $board['bo_mobile_skin']);
+    $board_skin_url     = get_skin_url('board', $board['bo_mobile_skin']);
+    $member_skin_path   = get_skin_path('member', $config['cf_mobile_member_skin']);
+    $member_skin_url    = get_skin_url('member', $config['cf_mobile_member_skin']);
+    $new_skin_path      = get_skin_path('new', $config['cf_mobile_new_skin']);
+    $new_skin_url       = get_skin_url('new', $config['cf_mobile_new_skin']);
+    $search_skin_path   = get_skin_path('search', $config['cf_mobile_search_skin']);
+    $search_skin_url    = get_skin_url('search', $config['cf_mobile_search_skin']);
+    $connect_skin_path  = get_skin_path('connect', $config['cf_mobile_connect_skin']);
+    $connect_skin_url   = get_skin_url('connect', $config['cf_mobile_connect_skin']);
+    $faq_skin_path      = get_skin_path('faq', $config['cf_mobile_faq_skin']);
+    $faq_skin_url       = get_skin_url('faq', $config['cf_mobile_faq_skin']);
 } else {
-    $board_skin_path    = G5_SKIN_PATH.'/board/'.$board['bo_skin'];
-    $board_skin_url     = G5_SKIN_URL .'/board/'.$board['bo_skin'];
-    $member_skin_path   = G5_SKIN_PATH.'/member/'.$config['cf_member_skin'];
-    $member_skin_url    = G5_SKIN_URL .'/member/'.$config['cf_member_skin'];
-    $new_skin_path      = G5_SKIN_PATH.'/new/'.$config['cf_new_skin'];
-    $new_skin_url       = G5_SKIN_URL .'/new/'.$config['cf_new_skin'];
-    $search_skin_path   = G5_SKIN_PATH.'/search/'.$config['cf_search_skin'];
-    $search_skin_url    = G5_SKIN_URL .'/search/'.$config['cf_search_skin'];
-    $connect_skin_path  = G5_SKIN_PATH.'/connect/'.$config['cf_connect_skin'];
-    $connect_skin_url   = G5_SKIN_URL .'/connect/'.$config['cf_connect_skin'];
-    $faq_skin_path      = G5_SKIN_PATH.'/faq/'.$config['cf_faq_skin'];
-    $faq_skin_url       = G5_SKIN_URL.'/faq/'.$config['cf_faq_skin'];
+    $board_skin_path    = get_skin_path('board', $board['bo_skin']);
+    $board_skin_url     = get_skin_url('board', $board['bo_skin']);
+    $member_skin_path   = get_skin_path('member', $config['cf_member_skin']);
+    $member_skin_url    = get_skin_url('member', $config['cf_member_skin']);
+    $new_skin_path      = get_skin_path('new', $config['cf_new_skin']);
+    $new_skin_url       = get_skin_url('new', $config['cf_new_skin']);
+    $search_skin_path   = get_skin_path('search', $config['cf_search_skin']);
+    $search_skin_url    = get_skin_url('search', $config['cf_search_skin']);
+    $connect_skin_path  = get_skin_path('connect', $config['cf_connect_skin']);
+    $connect_skin_url   = get_skin_url('connect', $config['cf_connect_skin']);
+    $faq_skin_path      = get_skin_path('faq', $config['cf_faq_skin']);
+    $faq_skin_url       = get_skin_url('faq', $config['cf_faq_skin']);
 }
 //==============================================================================

@@ -5,7 +5,7 @@
 ********************/

 define('G5_VERSION', '그누보드5');
-define('G5_GNUBOARD_VER', '5.0.36');
+define('G5_GNUBOARD_VER', '5.1.0');

 // 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음
 define('_GNUBOARD_', true);
@@ -59,6 +59,7 @@ define('G5_SNS_DIR',        'sns');
 define('G5_SYNDI_DIR',      'syndi');
 define('G5_PHPMAILER_DIR',  'PHPMailer_v2.0.4');
 define('G5_SESSION_DIR',    'session');
+define('G5_THEME_DIR',      'theme');

 // URL 은 브라우저상에서의 경로 (도메인으로 부터의)
 if (G5_DOMAIN) {
@@ -279,4 +279,8 @@ a.btn_admin:focus, a.btn_admin:hover {text-decoration:none}
 .pg_current {display:inline-block;margin:0 4px 0 0;background:#333;color:#fff;font-weight:normal}

 /* Mobile화면으로 */
-#device_change {display:block;margin:0.3em;padding:0.5em 0;border:1px solid #eee;border-radius:2em;background:#fff;color:#000;font-size:2em;text-decoration:none;text-align:center}
+#device_change {display:block;margin:0.3em;padding:0.5em 0;border:1px solid #eee;border-radius:2em;background:#fff;color:#000;font-size:2em;text-decoration:none;text-align:center}
+
+/*메일인증*/
+.rg_em{margin-top:5px}
+.rg_em caption{padding:0;font-size:0;line-height:0;overflow:hidden}
@@ -247,4 +247,10 @@ a.btn_admin:focus, a.btn_admin:hover {text-decoration:none}
 .pg_current {display:inline-block;margin:0 4px 0 0;background:#333;color:#fff;font-weight:normal}

 /* PC화면으로 */
-#device_change {display:block;margin:5px;padding:5px 0;border:1px solid #eee;border-radius:2em;color:#000;font-size:1em;text-decoration:none;text-align:center}
+#device_change {display:block;margin:5px;padding:5px 0;border:1px solid #eee;border-radius:2em;color:#000;font-size:1em;text-decoration:none;text-align:center}
+
+/*메일인증*/
+.rg_em_p{padding:0 5px}
+.rg_em{margin:5px 5px 10px;}
+.rg_em table{width:100%;border-collapse:collapse}
+.rg_em caption{padding:0;font-size:0;line-height:0;overflow:hidden}
@@ -1,8 +1,3 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
-
-// head.sub.php, tail.sub.php 파일의 이름을 지정할 수 있습니다.
-// 지정된 파일은 head.sub.php, tail.sub.php 파일과 동일한 위치에 존재해야 합니다.
-//define('G5_HEAD_SUB_FILE', 'user.head.sub.php');
-//define('G5_TAIL_SUB_FILE', 'user.tail.sub.php');
 ?>
@@ -4,7 +4,7 @@ include_once(G5_LIB_PATH.'/connect.lib.php');
 include_once(G5_LIB_PATH.'/outlogin.lib.php');

 $g5['title'] = '그누보드4 DB 데이터 이전';
-include_once(G5_PATH.'/head.sub.php');
+include_once(G5_PATH.'/'.G5_THEME_DIR.'/basic/head.sub.php');

 if(get_session('tables_copied') == 'done')
    alert('DB 데이터 변환을 이미 실행하였습니다. 중복 실행시 오류가 발생할 수 있습니다.', G5_URL);
@@ -172,5 +172,5 @@ $(function() {
 </script>

 <?php
-include_once(G5_PATH.'/tail.sub.php');
+include_once(G5_PATH.'/'.G5_THEME_DIR.'/basic/tail.sub.php');
 ?>
@@ -10,7 +10,7 @@ set_time_limit ( 0 );
 ini_set('memory_limit', '50M');

 $g5['title'] = '그누보드4 DB 데이터 이전';
-include_once(G5_PATH.'/head.sub.php');
+include_once(G5_PATH.'/'.G5_THEME_DIR.'/basic/head.sub.php');

 echo '<link rel="stylesheet" href="'.G5_URL.'/g4_import.css">';

@@ -536,5 +536,5 @@ $(function() {
 </script>

 <?php
-include_once(G5_PATH.'/tail.sub.php');
+include_once(G5_PATH.'/'.G5_THEME_DIR.'/basic/tail.sub.php');
 ?>
@@ -1,6 +1,16 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

+if(defined('G5_THEME_PATH')) {
+    require_once(G5_THEME_PATH.'/head.php');
+    return;
+}
+
+if (G5_IS_MOBILE) {
+    include_once(G5_MOBILE_PATH.'/head.php');
+    return;
+}
+
 include_once(G5_PATH.'/head.sub.php');
 include_once(G5_LIB_PATH.'/latest.lib.php');
 include_once(G5_LIB_PATH.'/outlogin.lib.php');
@@ -8,17 +18,6 @@ include_once(G5_LIB_PATH.'/poll.lib.php');
 include_once(G5_LIB_PATH.'/visit.lib.php');
 include_once(G5_LIB_PATH.'/connect.lib.php');
 include_once(G5_LIB_PATH.'/popular.lib.php');
-
-// 상단 파일 경로 지정 : 이 코드는 가능한 삭제하지 마십시오.
-if ($config['cf_include_head'] && is_file(G5_PATH.'/'.$config['cf_include_head'])) {
-    include_once(G5_PATH.'/'.$config['cf_include_head']);
-    return; // 이 코드의 아래는 실행을 하지 않습니다.
-}
-
-if (G5_IS_MOBILE) {
-    include_once(G5_MOBILE_PATH.'/head.php');
-    return;
-}
 ?>

 <!-- 상단 시작 { -->
@@ -98,7 +97,7 @@ if (G5_IS_MOBILE) {
            <?php }  ?>
            <li><a href="<?php echo G5_BBS_URL ?>/faq.php">FAQ</a></li>
            <li><a href="<?php echo G5_BBS_URL ?>/qalist.php">1:1문의</a></li>
-            <li><a href="<?php echo G5_BBS_URL ?>/current_connect.php">접속자 <?php echo connect(); // 현재 접속자수  ?></a></li>
+            <li><a href="<?php echo G5_BBS_URL ?>/current_connect.php">접속자 <?php echo connect(); // 현재 접속자수, 테마의 스킨을 사용하려면 스킨을 theme/basic 과 같이 지정  ?></a></li>
            <li><a href="<?php echo G5_BBS_URL ?>/new.php">새글</a></li>
        </ul>
    </div>
@@ -158,8 +157,8 @@ if (G5_IS_MOBILE) {
 <!-- 콘텐츠 시작 { -->
 <div id="wrapper">
    <div id="aside">
-        <?php echo outlogin('basic'); // 외부 로그인  ?>
-        <?php echo poll('basic'); // 설문조사  ?>
+        <?php echo outlogin('basic'); // 외부 로그인, 테마의 스킨을 사용하려면 스킨을 theme/basic 과 같이 지정 ?>
+        <?php echo poll('basic'); // 설문조사, 테마의 스킨을 사용하려면 스킨을 theme/basic 과 같이 지정 ?>
    </div>
    <div id="container">
-        <?php if ((!$bo_table || $w == 's' ) && !defined("_INDEX_")) { ?><div id="container_title"><?php echo $g5['title'] ?></div><?php } ?>
+        <?php if ((!$bo_table || $w == 's' ) && !defined("_INDEX_")) { ?><div id="container_title"><?php echo $g5['title'] ?></div><?php } ?>
@@ -2,14 +2,14 @@
 // 이 파일은 새로운 파일 생성시 반드시 포함되어야 함
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

-$begin_time = get_microtime();
-
-// 사용자가 지정한 head.sub.php 파일이 있다면 include
-if(defined('G5_HEAD_SUB_FILE') && is_file(G5_PATH.'/'.G5_HEAD_SUB_FILE)) {
-    include_once(G5_PATH.'/'.G5_HEAD_SUB_FILE);
+// 테마 head.sub.php 파일
+if(!defined('G5_IS_ADMIN') && defined('G5_THEME_PATH') && is_file(G5_THEME_PATH.'/head.sub.php')) {
+    require_once(G5_THEME_PATH.'/head.sub.php');
    return;
 }

+$begin_time = get_microtime();
+
 if (!isset($g5['title'])) {
    $g5['title'] = $config['cf_title'];
    $g5_head_title = $g5['title'];
@@ -23,8 +23,8 @@ else {
 // 게시판 제목에 ' 포함되면 오류 발생
 $g5['lo_location'] = addslashes($g5['title']);
 if (!$g5['lo_location'])
-    $g5['lo_location'] = addslashes($_SERVER['REQUEST_URI']);
-$g5['lo_url'] = addslashes($_SERVER['REQUEST_URI']);
+    $g5['lo_location'] = addslashes(clean_xss_tags($_SERVER['REQUEST_URI']));
+$g5['lo_url'] = addslashes(clean_xss_tags($_SERVER['REQUEST_URI']));
 if (strstr($g5['lo_url'], '/'.G5_ADMIN_DIR.'/') || $is_admin == 'super') $g5['lo_url'] = '';

 /*
@@ -54,7 +54,8 @@ if($config['cf_add_meta'])
 <title><?php echo $g5_head_title; ?></title>
 <?php
 if (defined('G5_IS_ADMIN')) {
-    echo '<link rel="stylesheet" href="'.G5_ADMIN_URL.'/css/admin.css">'.PHP_EOL;
+    if(!defined('_THEME_PREVIEW_'))
+        echo '<link rel="stylesheet" href="'.G5_ADMIN_URL.'/css/admin.css">'.PHP_EOL;
 } else {
    echo '<link rel="stylesheet" href="'.G5_CSS_URL.'/'.(G5_IS_MOBILE?'mobile':'default').'.css">'.PHP_EOL;
 }
@@ -1,11 +1,12 @@
 <?php
-define('_INDEX_', true);
 include_once('./_common.php');

-// 초기화면 파일 경로 지정 : 이 코드는 가능한 삭제하지 마십시오.
-if ($config['cf_include_index'] && is_file(G5_PATH.'/'.$config['cf_include_index'])) {
-    include_once(G5_PATH.'/'.$config['cf_include_index']);
-    return; // 이 코드의 아래는 실행을 하지 않습니다.
+define('_INDEX_', true);
+if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
+
+if(defined('G5_THEME_PATH')) {
+    require_once(G5_THEME_PATH.'/index.php');
+    return;
 }

 if (G5_IS_MOBILE) {
@@ -13,7 +14,7 @@ if (G5_IS_MOBILE) {
    return;
 }

-include_once('./_head.php');
+include_once(G5_PATH.'/head.php');
 ?>

 <h2 class="sound_only">최신글</h2>
@@ -35,6 +36,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) {
        <?php
        // 이 함수가 바로 최신글을 추출하는 역할을 합니다.
        // 사용방법 : latest(스킨, 게시판아이디, 출력라인, 글자수);
+        // 테마의 스킨을 사용하려면 theme/basic 과 같이 지정
        echo latest("basic", $row['bo_table'], 5, 25);
        ?>
    </div>
@@ -44,5 +46,5 @@ for ($i=0; $row=sql_fetch_array($result); $i++) {
 <!-- } 최신글 끝 -->

 <?php
-include_once('./_tail.php');
-?>
+include_once(G5_PATH.'/tail.php');
+?>
@@ -185,12 +185,10 @@ CREATE TABLE IF NOT EXISTS `g5_board_new` (
 DROP TABLE IF EXISTS `g5_config`;
 CREATE TABLE IF NOT EXISTS `g5_config` (
  `cf_title` varchar(255) NOT NULL DEFAULT '',
+  `cf_theme` varchar(255) NOT NULL DEFAULT '',
  `cf_admin` varchar(255) NOT NULL DEFAULT '',
  `cf_admin_email` varchar(255) NOT NULL DEFAULT '',
  `cf_admin_email_name` varchar(255) NOT NULL DEFAULT '',
-  `cf_include_index` varchar(255) NOT NULL DEFAULT '',
-  `cf_include_head` varchar(255) NOT NULL DEFAULT '',
-  `cf_include_tail` varchar(255) NOT NULL DEFAULT '',
  `cf_add_script` text NOT NULL,
  `cf_use_point` tinyint(4) NOT NULL DEFAULT '0',
  `cf_point_term` int(11) NOT NULL DEFAULT '0',
@@ -90,6 +90,7 @@ $download_point = 0;
 // config 테이블 설정
 $sql = " insert into `{$table_prefix}config`
            set cf_title = '".G5_VERSION."',
+                cf_theme = 'basic',
                cf_admin = '$admin_id',
                cf_admin_email = '$admin_email',
                cf_admin_email_name = '".G5_VERSION."',
@@ -69,7 +69,7 @@ $(function(){
    });

    // 임시저장된 글 제목과 내용을 가져와서 제목과 내용 입력박스에 노출해 줌
-    $(".autosave_load").live("click", function(){
+    $(document).on( "click", ".autosave_load", function(){
        var $li = $(this).parents("li");
        var as_id = $li.data("as_id");
        var as_uid = $li.data("uid");
@@ -93,7 +93,7 @@ $(function(){
        $("#autosave_pop").hide();
    });

-    $(".autosave_del").live("click", function(){
+    $(document).on( "click", ".autosave_del", function(){
        var $li = $(this).parents("li");
        var as_id = $li.data("as_id");
        $.get(g5_bbs_url+"/ajax.autosavedel.php", {"as_id":as_id}, function(data){
@@ -376,7 +376,7 @@ var win_homepage = function(href) {
 /**
 * 우편번호 창
 **/
-var win_zip = function(frm_name, frm_zip1, frm_zip2, frm_addr1, frm_addr2, frm_addr3, frm_jibeon) {
+var win_zip = function(frm_name, frm_zip, frm_addr1, frm_addr2, frm_addr3, frm_jibeon) {
    if(typeof daum === 'undefined'){
        alert("다음 우편번호 postcode.v2.js 파일이 로드되지 않았습니다.");
        return false;
@@ -386,7 +386,7 @@ var win_zip = function(frm_name, frm_zip1, frm_zip2, frm_addr1, frm_addr2, frm_a

    var complete_fn = function(data){
        // 팝업에서 검색결과 항목을 클릭했을때 실행할 코드를 작성하는 부분.
-        
+
        // 각 주소의 노출 규칙에 따라 주소를 조합한다.
        // 내려오는 변수가 값이 없는 경우엔 공백('')값을 가지므로, 이를 참고하여 분기 한다.
        var fullAddr = ''; // 최종 주소 변수
@@ -417,8 +417,7 @@ var win_zip = function(frm_name, frm_zip1, frm_zip2, frm_addr1, frm_addr2, frm_a
        // 우편번호와 주소 정보를 해당 필드에 넣고, 커서를 상세주소 필드로 이동한다.
        var of = document[frm_name];

-        of[frm_zip1].value = data.postcode1;
-        of[frm_zip2].value = data.postcode2;
+        of[frm_zip].value = data.zonecode;

        of[frm_addr1].value = fullAddr;
        of[frm_addr3].value = extraAddr;
@@ -432,7 +431,7 @@ var win_zip = function(frm_name, frm_zip1, frm_zip2, frm_addr1, frm_addr2, frm_a

    switch(zip_case) {
        case 1 :    //iframe을 이용하여 페이지에 끼워 넣기
-            var daum_pape_id = 'daum_juso_page'+frm_zip1,
+            var daum_pape_id = 'daum_juso_page'+frm_zip,
                element_wrap = document.getElementById(daum_pape_id),
                currentScroll = Math.max(document.body.scrollTop, document.documentElement.scrollTop);
            if (element_wrap == null) {
@@ -475,7 +474,7 @@ var win_zip = function(frm_name, frm_zip1, frm_zip2, frm_addr1, frm_addr2, frm_a
            }).open();
            break;
        default :   //iframe을 이용하여 레이어 띄우기
-            var rayer_id = 'daum_juso_rayer'+frm_zip1,
+            var rayer_id = 'daum_juso_rayer'+frm_zip,
                element_layer = document.getElementById(rayer_id);
            if (element_layer == null) {
                element_layer = document.createElement("div");
@@ -675,7 +674,7 @@ $(function(){
        }
    });

-    $("textarea#wr_content[maxlength]").live("keyup change", function() {
+    $(document).on( "keyup change", "textarea#wr_content[maxlength]", function(){
        var str = $(this).val();
        var mx = parseInt($(this).attr("maxlength"));
        if (str.length > mx) {
@@ -192,7 +192,7 @@ function confirm($msg, $url1='', $url2='', $url3='')
        alert($msg);
    }

-    if (!$url3) $url3 = $_SERVER['HTTP_REFERER'];
+    if (!$url3) $url3 = clean_xss_tags($_SERVER['HTTP_REFERER']);

    $msg = str_replace("\\n", "<br>", $msg);

@@ -745,7 +745,7 @@ function subject_sort_link($col, $query_string='', $flag='asc')
    $arr_query[] = 'page='.$page;
    $qstr = implode("&amp;", $arr_query);

-    return "<a href=\"{$_SERVER['PHP_SELF']}?{$qstr}\">";
+    return "<a href=\"{$_SERVER['SCRIPT_NAME']}?{$qstr}\">";
 }


@@ -1309,7 +1309,7 @@ function view_file_link($file, $width, $height, $content='')

    if (preg_match("/\.({$config['cf_image_extension']})$/i", $file)) {
        $img = '<a href="'.G5_BBS_URL.'/view_image.php?bo_table='.$board['bo_table'].'&amp;fn='.urlencode($file).'" target="_blank" class="view_image">';
-        $img .= '<img src="'.G5_DATA_URL.'/file/'.$board['bo_table'].'/'.urlencode($file).'" alt="'.$content.'">';
+        $img .= '<img src="'.G5_DATA_URL.'/file/'.$board['bo_table'].'/'.urlencode($file).'" alt="'.$content.'" '.$attr.'>';
        $img .= '</a>';

        return $img;
@@ -1454,7 +1454,7 @@ function sql_query($sql, $error=G5_DISPLAY_SQL_ERROR)
    $sql = preg_replace("#^select.*from.*where.*`?information_schema`?.*#i", "select 1", $sql);

    if ($error)
-        $result = @mysql_query($sql, $g5['connect_db']) or die("<p>$sql<p>" . mysql_errno() . " : " .  mysql_error() . "<p>error file : {$_SERVER['PHP_SELF']}");
+        $result = @mysql_query($sql, $g5['connect_db']) or die("<p>$sql<p>" . mysql_errno() . " : " .  mysql_error() . "<p>error file : {$_SERVER['SCRIPT_NAME']}");
    else
        $result = @mysql_query($sql, $g5['connect_db']);

@@ -1466,7 +1466,7 @@ function sql_query($sql, $error=G5_DISPLAY_SQL_ERROR)
 function sql_fetch($sql, $error=G5_DISPLAY_SQL_ERROR)
 {
    $result = sql_query($sql, $error);
-    //$row = @sql_fetch_array($result) or die("<p>$sql<p>" . mysql_errno() . " : " .  mysql_error() . "<p>error file : $_SERVER['PHP_SELF']");
+    //$row = @sql_fetch_array($result) or die("<p>$sql<p>" . mysql_errno() . " : " .  mysql_error() . "<p>error file : $_SERVER['SCRIPT_NAME']");
    $row = sql_fetch_array($result);
    return $row;
 }
@@ -2367,12 +2367,8 @@ function hyphen_hp_number($hp)
 function login_url($url='')
 {
    if (!$url) $url = G5_URL;
-    /*
-    $p = parse_url($url);
-    echo urlencode($_SERVER['REQUEST_URI']);
-    return $url.urldecode(preg_replace("/^".urlencode($p['path'])."/", "", urlencode($_SERVER['REQUEST_URI'])));
-    */
-    return $url;
+
+    return urlencode(clean_xss_tags(urldecode($url)));
 }


@@ -2727,6 +2723,11 @@ function clean_xss_tags($str)
 {
    $str = preg_replace('#</*(?:applet|b(?:ase|gsound|link)|embed|frame(?:set)?|i(?:frame|layer)|l(?:ayer|ink)|meta|object|s(?:cript|tyle)|title|xml)[^>]*+>#i', '', $str);

+    $search  = array('"', "'");
+    $replace = array('&#34;', '&#39;');
+
+    $str = str_replace($search, $replace, $str);
+
    return $str;
 }

@@ -2747,6 +2748,11 @@ function member_delete($mb_id)

    $sql = " select mb_name, mb_nick, mb_ip, mb_recommend, mb_memo, mb_level from {$g5['member_table']} where mb_id= '".$mb_id."' ";
    $mb = sql_fetch($sql);
+
+    // 이미 삭제된 회원은 제외
+    if(preg_match('#^[0-9]{8}.*삭제함#', $mb['mb_memo']))
+        return;
+
    if ($mb['mb_recommend']) {
        $row = sql_fetch(" select count(*) as cnt from {$g5['member_table']} where mb_id = '".addslashes($mb['mb_recommend'])."' ");
        if ($row['cnt'])
@@ -2754,7 +2760,7 @@ function member_delete($mb_id)
    }

    // 회원자료는 정보만 없앤 후 아이디는 보관하여 다른 사람이 사용하지 못하도록 함 : 061025
-    $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n{$mb['mb_memo']}', mb_leave_date = '".date('Ymd', G5_SERVER_TIME)."' where mb_id = '{$mb_id}' ";
+    $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n{$mb['mb_memo']}' where mb_id = '{$mb_id}' ";
    sql_query($sql);

    // 포인트 테이블에서 삭제
@@ -2881,7 +2887,7 @@ function clean_query_string($query, $amp=true)
        $q = array();

        foreach($out as $key=>$val) {
-            $key = trim($key);
+            $key = strip_tags(trim($key));
            $val = trim($val);

            switch($key) {
@@ -2953,4 +2959,73 @@ function clean_query_string($query, $amp=true)

    return $str;
 }
+
+function get_device_change_url()
+{
+    $p = parse_url(G5_URL);
+    $href = $p['scheme'].'://'.$p['host'];
+    if(isset($p['port']) && $p['port'])
+        $href .= ':'.$p['port'];
+    $href .= $_SERVER['SCRIPT_NAME'];
+
+    $q = array();
+    $device = 'device='.(G5_IS_MOBILE ? 'pc' : 'mobile');
+
+    if($_SERVER['QUERY_STRING']) {
+        foreach($_GET as $key=>$val) {
+            if($key == 'device')
+                continue;
+
+            $key = strip_tags($key);
+            $val = strip_tags($val);
+
+            if($key && $val)
+                $q[$key] = $val;
+        }
+    }
+
+    if(!empty($q)) {
+        $query = http_build_query($q, '', '&amp;');
+        $href .= '?'.$query.'&amp;'.$device;
+    } else {
+        $href .= '?'.$device;
+    }
+
+    return $href;
+}
+
+// 스킨 path
+function get_skin_path($dir, $skin)
+{
+    global $config;
+
+    if(preg_match('#^theme/(.+)$#', $skin, $match)) { // 테마에 포함된 스킨이라면
+        $theme_path = '';
+        $cf_theme = trim($config['cf_theme']);
+
+        $theme_path = G5_PATH.'/'.G5_THEME_DIR.'/'.$cf_theme;
+        if(G5_IS_MOBILE) {
+            $skin_path = $theme_path.'/'.G5_MOBILE_DIR.'/'.G5_SKIN_DIR.'/'.$dir.'/'.$match[1];
+            if(!is_dir($skin_path))
+                $skin_path = $theme_path.'/'.G5_SKIN_DIR.'/'.$dir.'/'.$match[1];
+        } else {
+            $skin_path = $theme_path.'/'.G5_SKIN_DIR.'/'.$dir.'/'.$match[1];
+        }
+    } else {
+        if(G5_IS_MOBILE)
+            $skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/'.$dir.'/'.$skin;
+        else
+            $skin_path = G5_SKIN_PATH.'/'.$dir.'/'.$skin;
+    }
+
+    return $skin_path;
+}
+
+// 스킨 url
+function get_skin_url($dir, $skin)
+{
+    $skin_path = get_skin_path($dir, $skin);
+
+    return str_replace(G5_PATH, G5_URL, $skin_path);
+}
 ?>
@@ -10,12 +10,25 @@ function connect($skin_dir='basic')
    $sql = " select sum(IF(mb_id<>'',1,0)) as mb_cnt, count(*) as total_cnt from {$g5['login_table']}  where mb_id <> '{$config['cf_admin']}' ";
    $row = sql_fetch($sql);

-    if(G5_IS_MOBILE) {
-        $connect_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/connect/'.$skin_dir;
-        $connect_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/connect/'.$skin_dir;
+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $connect_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/connect/'.$match[1];
+            if(!is_dir($connect_skin_path))
+                $connect_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/connect/'.$match[1];
+            $connect_skin_url = str_replace(G5_PATH, G5_URL, $connect_skin_path);
+        } else {
+            $connect_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/connect/'.$match[1];
+            $connect_skin_url = str_replace(G5_PATH, G5_URL, $connect_skin_path);
+        }
+        $skin_dir = $match[1];
    } else {
-        $connect_skin_path = G5_SKIN_PATH.'/connect/'.$skin_dir;
-        $connect_skin_url  = G5_SKIN_URL.'/connect/'.$skin_dir;
+        if(G5_IS_MOBILE) {
+            $connect_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/connect/'.$skin_dir;
+            $connect_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/connect/'.$skin_dir;
+        } else {
+            $connect_skin_path = G5_SKIN_PATH.'/connect/'.$skin_dir;
+            $connect_skin_url  = G5_SKIN_URL.'/connect/'.$skin_dir;
+        }
    }

    ob_start();
@@ -0,0 +1,79 @@
+<?php
+if (!defined('_GNUBOARD_')) exit;
+
+// http://tinsology.net/2011/04/php-json_encode-and-json_decode-alternatives/
+
+if(!function_exists('json_encode'))
+{
+    function json_encode($a=false)
+    {
+        // Some basic debugging to ensure we have something returned
+        if (is_null($a)) return 'null';
+        if ($a === false) return 'false';
+        if ($a === true) return 'true';
+        if (is_scalar($a))
+        {
+            if (is_float($a))
+            {
+                // Always use '.' for floats.
+                return floatval(str_replace(',', '.', strval($a)));
+            }
+            if (is_string($a))
+            {
+                static $jsonReplaces = array(array('\\', '/', "\n", "\t", "\r", "\b", "\f", '"'), array('\\\\', '\\/', '\\n', '\\t', '\\r', '\\b', '\\f', '\"'));
+                return '"' . str_replace($jsonReplaces[0], $jsonReplaces[1], $a) . '"';
+            }
+            else
+                return $a;
+        }
+        $isList = true;
+        for ($i = 0, reset($a); true; $i++) {
+            if (key($a) !== $i)
+            {
+                $isList = false;
+                break;
+            }
+        }
+        $result = array();
+        if ($isList)
+        {
+            foreach ($a as $v) $result[] = json_encode($v);
+            return '[' . join(',', $result) . ']';
+        }
+        else
+        {
+            foreach ($a as $k => $v) $result[] = json_encode($k).':'.json_encode($v);
+            return '{' . join(',', $result) . '}';
+        }
+    }
+}
+
+if(!function_exists('json_decode'))
+{
+    function json_decode($json)
+    {
+        $comment = false;
+        $out = '$x=';
+        for ($i=0; $i<strlen($json); $i++)
+        {
+            if (!$comment)
+            {
+                if (($json[$i] == '{') || ($json[$i] == '['))
+                    $out .= ' array(';
+                else if (($json[$i] == '}') || ($json[$i] == ']'))
+                    $out .= ')';
+                else if ($json[$i] == ':')
+                    $out .= '=>';
+                else
+                    $out .= $json[$i];
+            }
+            else
+                $out .= $json[$i];
+            if ($json[$i] == '"' && $json[($i-1)]!="\\")
+                $comment = !$comment;
+        }
+        eval($out . ';');
+        return $x;
+    }
+}
+?>
@@ -6,16 +6,28 @@ if (!defined('_GNUBOARD_')) exit;
 function latest($skin_dir='', $bo_table, $rows=10, $subject_len=40, $cache_time=1, $options='')
 {
    global $g5;
-    //static $css = array();

    if (!$skin_dir) $skin_dir = 'basic';

-    if(G5_IS_MOBILE) {
-        $latest_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/latest/'.$skin_dir;
-        $latest_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/latest/'.$skin_dir;
+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $latest_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/latest/'.$match[1];
+            if(!is_dir($latest_skin_path))
+                $latest_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/latest/'.$match[1];
+            $latest_skin_url = str_replace(G5_PATH, G5_URL, $latest_skin_path);
+        } else {
+            $latest_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/latest/'.$match[1];
+            $latest_skin_url = str_replace(G5_PATH, G5_URL, $latest_skin_path);
+        }
+        $skin_dir = $match[1];
    } else {
-        $latest_skin_path = G5_SKIN_PATH.'/latest/'.$skin_dir;
-        $latest_skin_url  = G5_SKIN_URL.'/latest/'.$skin_dir;
+        if(G5_IS_MOBILE) {
+            $latest_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/latest/'.$skin_dir;
+            $latest_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/latest/'.$skin_dir;
+        } else {
+            $latest_skin_path = G5_SKIN_PATH.'/latest/'.$skin_dir;
+            $latest_skin_url  = G5_SKIN_URL.'/latest/'.$skin_dir;
+        }
    }

    $cache_fwrite = false;
@@ -60,14 +72,6 @@ function latest($skin_dir='', $bo_table, $rows=10, $subject_len=40, $cache_time=
        }
    }

-    /*
-    // 같은 스킨은 .css 를 한번만 호출한다.
-    if (!in_array($skin_dir, $css) && is_file($latest_skin_path.'/style.css')) {
-        echo '<link rel="stylesheet" href="'.$latest_skin_url.'/style.css">';
-        $css[] = $skin_dir;
-    }
-    */
-
    ob_start();
    include $latest_skin_path.'/latest.skin.php';
    $content = ob_get_contents();
@@ -5,16 +5,16 @@ include_once(G5_PHPMAILER_PATH.'/class.phpmailer.php');

 // 메일 보내기 (파일 여러개 첨부 가능)
 // type : text=0, html=1, text+html=2
-function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc="", $bcc="") 
-{ 
-    global $config; 
-    global $g5; 
+function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc="", $bcc="")
+{
+    global $config;
+    global $g5;

-    // 메일발송 사용을 하지 않는다면 
-    if (!$config['cf_email_use']) return; 
+    // 메일발송 사용을 하지 않는다면
+    if (!$config['cf_email_use']) return;

-    if ($type != 1) 
-        $content = nl2br($content); 
+    if ($type != 1)
+        $content = nl2br($content);

    $mail = new PHPMailer(); // defaults to using php "mail()"
    if (defined('G5_SMTP') && G5_SMTP) {
@@ -27,13 +27,13 @@ function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc=
    $mail->AltBody = ""; // optional, comment out and test
    $mail->MsgHTML($content);
    $mail->AddAddress($to);
-    if ($cc) 
+    if ($cc)
        $mail->AddCC($cc);
-    if ($bcc) 
+    if ($bcc)
        $mail->AddBCC($bcc);
    //print_r2($file); exit;
-    if ($file != "") { 
-        foreach ($file as $f) { 
+    if ($file != "") {
+        foreach ($file as $f) {
            $mail->AddAttachment($f['path'], $f['name']);
        }
    }
@@ -61,27 +61,27 @@ function attach_file($filename, $tmp_name)
 /*
 // 메일 보내기 (파일 여러개 첨부 가능)
 // type : text=0, html=1, text+html=2
-function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc="", $bcc="") 
-{ 
-    global $config; 
-    global $g5; 
+function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc="", $bcc="")
+{
+    global $config;
+    global $g5;

-    // 메일발송 사용을 하지 않는다면 
-    if (!$config['cf_email_use']) return; 
+    // 메일발송 사용을 하지 않는다면
+    if (!$config['cf_email_use']) return;

-    $boundary = uniqid(time()); 
+    $boundary = uniqid(time());

    $header = "Message-ID: <".generate_mail_id(preg_replace("/@.+$/i","",$to)).">\r\n".
              "From:=?utf-8?B?".base64_encode($fname)."?=<$fmail>\r\n";
-    if ($cc)  $header .= "Cc: $cc\n"; 
-    if ($bcc) $header .= "Bcc: $bcc\n"; 
-    $header .= "MIME-Version: 1.0\n"; 
-    $header .= "X-Mailer: SIR Mailer 0.94 : {$_SERVER['SERVER_ADDR']} : {$_SERVER['REMOTE_ADDR']} : ".G5_URL." : {$_SERVER['PHP_SELF']} : {$_SERVER['HTTP_REFERER']} \n"; 
+    if ($cc)  $header .= "Cc: $cc\n";
+    if ($bcc) $header .= "Bcc: $bcc\n";
+    $header .= "MIME-Version: 1.0\n";
+    $header .= "X-Mailer: SIR Mailer 0.94 : {$_SERVER['SERVER_ADDR']} : {$_SERVER['REMOTE_ADDR']} : ".G5_URL." : {$_SERVER['SCRIPT_NAME']} : {$_SERVER['HTTP_REFERER']} \n";
    $header .= "Date: ".date ("D, j M Y H:i:s T",time())."\r\n".
               "To: $to\r\n".
               "Subject: =?utf-8?B?".base64_encode($subject)."?=\r\n";

-    if ($file == "") { 
+    if ($file == "") {
        $header .= "Content-Type: MULTIPART/ALTERNATIVE;\n".
                   "              BOUNDARY=\"$boundary\"\n\n";
    } else {
@@ -89,39 +89,39 @@ function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc=
                   "              BOUNDARY=\"$boundary\"\n\n";
    }

-    if ($type == 2) 
-        $content = nl2br($content); 
+    if ($type == 2)
+        $content = nl2br($content);

    $strip_content  = stripslashes(trim($content));
    $encode_content = chunk_split(base64_encode($strip_content));

    $body = "";
    $body .= "\n--$boundary\n";
-    $body .= "Content-Type: TEXT/PLAIN; charset=utf-8\n"; 
-    $body .= "Content-Transfer-Encoding: BASE64\n\n"; 
-    $body .= $encode_content; 
+    $body .= "Content-Type: TEXT/PLAIN; charset=utf-8\n";
+    $body .= "Content-Transfer-Encoding: BASE64\n\n";
+    $body .= $encode_content;
    $body .= "\n--$boundary\n";

-    if ($type) { 
-        $body .= "Content-Type: TEXT/HTML; charset=utf-8\n"; 
-        $body .= "Content-Transfer-Encoding: BASE64\n\n"; 
-        $body .= $encode_content; 
+    if ($type) {
+        $body .= "Content-Type: TEXT/HTML; charset=utf-8\n";
+        $body .= "Content-Transfer-Encoding: BASE64\n\n";
+        $body .= $encode_content;
        $body .= "\n--$boundary\n";
    }

-    if ($file != "") { 
-        foreach ($file as $f) { 
-            $body .= "n--$boundary\n"; 
-            $body .= "Content-Type: APPLICATION/OCTET-STREAM; name=$fname\n"; 
-            $body .= "Content-Transfer-Encoding: BASE64\n"; 
-            $body .= "Content-Disposition: inline; filename=$fname\n"; 
+    if ($file != "") {
+        foreach ($file as $f) {
+            $body .= "n--$boundary\n";
+            $body .= "Content-Type: APPLICATION/OCTET-STREAM; name=$fname\n";
+            $body .= "Content-Transfer-Encoding: BASE64\n";
+            $body .= "Content-Disposition: inline; filename=$fname\n";

-            $body .= "\n"; 
-            $body .= chunk_split(base64_encode($f['data'])); 
-            $body .= "\n"; 
-        } 
-        $body .= "--$boundary--\n"; 
-    } 
+            $body .= "\n";
+            $body .= chunk_split(base64_encode($f['data']));
+            $body .= "\n";
+        }
+        $body .= "--$boundary--\n";
+    }

    $mails['to'] = $to;
    $mails['from'] = $fmail;
@@ -129,7 +129,7 @@ function mailer($fname, $fmail, $to, $subject, $content, $type=0, $file="", $cc=

    if (defined(G5_SMTP)) {
        ini_set('SMTP', G5_SMTP);
-        @mail($to, $subject, $body, $header, "-f $fmail"); 
+        @mail($to, $subject, $body, $header, "-f $fmail");
    } else {
        new maildaemon($mails);
    }
@@ -306,7 +306,7 @@ class maildaemon {
  #  $t -> 1 (debug of socket open,close)
  #        0 (regular smtp message)
  #  $p -> 1 (print detail debug)
-  # 
+  #
  # return 1 -> success
  # return 0 -> failed
  #
@@ -381,7 +381,7 @@ function generate_mail_id($uid) {
 function mail_header($to,$from,$title,$mta=0) {
  global $langs,$boundary;

-  # mail header 를 작성 
+  # mail header 를 작성
  $boundary = get_boundary_msg();
  $header = "Message-ID: <".generate_mail_id(preg_replace("/@.+$/i","",$to)).">\r\n".
            "From:=?utf-8?B?".base64_encode('보내는사람')."?=<$from>\r\n".
@@ -13,12 +13,25 @@ function outlogin($skin_dir='basic')
        $point = number_format($member['mb_point']);
    }

-    if (G5_IS_MOBILE) {
-        $outlogin_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/outlogin/'.$skin_dir;
-        $outlogin_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/outlogin/'.$skin_dir;
+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $outlogin_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/outlogin/'.$match[1];
+            if(!is_dir($outlogin_skin_path))
+                $outlogin_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/outlogin/'.$match[1];
+            $outlogin_skin_url = str_replace(G5_PATH, G5_URL, $outlogin_skin_path);
+        } else {
+            $outlogin_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/outlogin/'.$match[1];
+            $outlogin_skin_url = str_replace(G5_PATH, G5_URL, $outlogin_skin_path);
+        }
+        $skin_dir = $match[1];
    } else {
-        $outlogin_skin_path = G5_SKIN_PATH.'/outlogin/'.$skin_dir;
-        $outlogin_skin_url = G5_SKIN_URL.'/outlogin/'.$skin_dir;
+        if (G5_IS_MOBILE) {
+            $outlogin_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/outlogin/'.$skin_dir;
+            $outlogin_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/outlogin/'.$skin_dir;
+        } else {
+            $outlogin_skin_path = G5_SKIN_PATH.'/outlogin/'.$skin_dir;
+            $outlogin_skin_url = G5_SKIN_URL.'/outlogin/'.$skin_dir;
+        }
    }

    // 읽지 않은 쪽지가 있다면
@@ -15,16 +15,30 @@ function poll($skin_dir='basic', $po_id=false)
    if(!$po_id)
        return;

+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $poll_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+            if(!is_dir($poll_skin_path))
+                $poll_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+            $poll_skin_url = str_replace(G5_PATH, G5_URL, $poll_skin_path);
+        } else {
+            $poll_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/poll/'.$match[1];
+            $poll_skin_url = str_replace(G5_PATH, G5_URL, $poll_skin_path);
+        }
+        //$skin_dir = $match[1];
+    } else {
+        if (G5_IS_MOBILE) {
+            $poll_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
+            $poll_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
+        } else {
+            $poll_skin_path = G5_SKIN_PATH.'/poll/'.$skin_dir;
+            $poll_skin_url  = G5_SKIN_URL.'/poll/'.$skin_dir;
+        }
+    }
+
    $po = sql_fetch(" select * from {$g5['poll_table']} where po_id = '$po_id' ");

    ob_start();
-    if (G5_IS_MOBILE) {
-        $poll_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
-        $poll_skin_url  = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/poll/'.$skin_dir;
-    } else {
-        $poll_skin_path = G5_SKIN_PATH.'/poll/'.$skin_dir;
-        $poll_skin_url  = G5_SKIN_URL.'/poll/'.$skin_dir;
-    }
    include_once ($poll_skin_path.'/poll.skin.php');
    $content = ob_get_contents();
    ob_end_clean();
@@ -20,14 +20,28 @@ function popular($skin_dir='basic', $pop_cnt=7, $date_cnt=3)
        $list[$i]['pp_word'] = get_text($list[$i]['pp_word']);
    }

-    ob_start();
-    if(G5_IS_MOBILE) {
-        $popular_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/popular/'.$skin_dir;
-        $popular_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/popular/'.$skin_dir;
+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $popular_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/popular/'.$match[1];
+            if(!is_dir($popular_skin_path))
+                $popular_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/popular/'.$match[1];
+            $popular_skin_url = str_replace(G5_PATH, G5_URL, $popular_skin_path);
+        } else {
+            $popular_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/popular/'.$match[1];
+            $popular_skin_url = str_replace(G5_PATH, G5_URL,$popular_skin_path);
+        }
+        $skin_dir = $match[1];
    } else {
-        $popular_skin_path = G5_SKIN_PATH.'/popular/'.$skin_dir;
-        $popular_skin_url = G5_SKIN_URL.'/popular/'.$skin_dir;
+        if(G5_IS_MOBILE) {
+            $popular_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/popular/'.$skin_dir;
+            $popular_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/popular/'.$skin_dir;
+        } else {
+            $popular_skin_path = G5_SKIN_PATH.'/popular/'.$skin_dir;
+            $popular_skin_url = G5_SKIN_URL.'/popular/'.$skin_dir;
+        }
    }
+
+    ob_start();
    include_once ($popular_skin_path.'/popular.skin.php');
    $content = ob_get_contents();
    ob_end_clean();
@@ -18,14 +18,28 @@ function visit($skin_dir='basic')
    settype($visit[3], "integer");
    settype($visit[4], "integer");

-    ob_start();
-    if(G5_IS_MOBILE) {
-        $visit_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/visit/'.$skin_dir;
-        $visit_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/visit/'.$skin_dir;
+    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
+        if (G5_IS_MOBILE) {
+            $visit_skin_path = G5_THEME_MOBILE_PATH.'/'.G5_SKIN_DIR.'/visit/'.$match[1];
+            if(!is_dir($visit_skin_path))
+                $visit_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/visit/'.$match[1];
+            $visit_skin_url = str_replace(G5_PATH, G5_URL, $visit_skin_path);
+        } else {
+            $visit_skin_path = G5_THEME_PATH.'/'.G5_SKIN_DIR.'/visit/'.$match[1];
+            $visit_skin_url = str_replace(G5_PATH, G5_URL, $visit_skin_path);
+        }
+        $skin_dir = $match[1];
    } else {
-        $visit_skin_path = G5_SKIN_PATH.'/visit/'.$skin_dir;
-        $visit_skin_url = G5_SKIN_URL.'/visit/'.$skin_dir;
+        if(G5_IS_MOBILE) {
+            $visit_skin_path = G5_MOBILE_PATH.'/'.G5_SKIN_DIR.'/visit/'.$skin_dir;
+            $visit_skin_url = G5_MOBILE_URL.'/'.G5_SKIN_DIR.'/visit/'.$skin_dir;
+        } else {
+            $visit_skin_path = G5_SKIN_PATH.'/visit/'.$skin_dir;
+            $visit_skin_url = G5_SKIN_URL.'/visit/'.$skin_dir;
+        }
    }
+
+    ob_start();
    include_once ($visit_skin_path.'/visit.skin.php');
    $content = ob_get_contents();
    ob_end_clean();
@@ -49,8 +49,8 @@ $str = preg_replace($src, $dst, $str);
 if(trim($co['co_mobile_skin']) == '')
    $co['co_mobile_skin'] = 'basic';

-$content_skin_path = G5_MOBILE_PATH .'/'.G5_SKIN_DIR.'/content/'.$co['co_mobile_skin'];
-$content_skin_url  = G5_MOBILE_URL .'/'.G5_SKIN_DIR.'/content/'.$co['co_mobile_skin'];
+$content_skin_path = get_skin_path('content', $co['co_mobile_skin']);
+$content_skin_url  = get_skin_url('content', $co['co_mobile_skin']);
 $skin_file = $content_skin_path.'/content.skin.php';

 if(is_file($skin_file)) {
@@ -1,6 +1,11 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

+if(defined('G5_THEME_PATH')) {
+    require_once(G5_THEME_PATH.'/head.php');
+    return;
+}
+
 include_once(G5_PATH.'/head.sub.php');
 include_once(G5_LIB_PATH.'/latest.lib.php');
 include_once(G5_LIB_PATH.'/outlogin.lib.php');
@@ -1,7 +1,12 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

-include_once(G5_MOBILE_PATH.'/_head.php');
+if(defined('G5_THEME_PATH')) {
+    require_once(G5_THEME_PATH.'/index.php');
+    return;
+}
+
+include_once(G5_MOBILE_PATH.'/head.php');
 ?>

 <!-- 메인화면 최신글 시작 -->
@@ -26,5 +31,5 @@ for ($i=0; $row=sql_fetch_array($result); $i++) {
 <!-- 메인화면 최신글 끝 -->

 <?php
-include_once(G5_MOBILE_PATH.'/_tail.php');
+include_once(G5_MOBILE_PATH.'/tail.php');
 ?>
@@ -13,14 +13,11 @@ $result = sql_query($sql, false);
    <h2>팝업레이어 알림</h2>

 <?php
-for ($i=0; $row_nw=sql_fetch_array($result); $i++)
+for ($i=0; $nw=sql_fetch_array($result); $i++)
 {
    // 이미 체크 되었다면 Continue
-    if ($_COOKIE["hd_pops_{$row_nw['nw_id']}"])
+    if ($_COOKIE["hd_pops_{$nw['nw_id']}"])
        continue;
-
-    $sql = " select * from {$g5['new_win_table']} where nw_id = '{$row_nw['nw_id']}' ";
-    $nw = sql_fetch($sql);
 ?>

    <div id="hd_pops_<?php echo $nw['nw_id'] ?>" class="hd_pops" style="top:<?php echo $nw['nw_top']?>px;left:<?php echo $nw['nw_left']?>px;">
@@ -65,8 +65,8 @@ add_stylesheet('<link rel="stylesheet" href="'.$board_skin_url.'/style.css">', 0
    <?php } ?>

    <?php
-    if (implode('', $view['link'])) {
-     ?>
+    if ($view['link']) {
+    ?>
    <section id="bo_v_link">
        <h2>관련링크</h2>
        <ul>
@@ -179,7 +179,7 @@ add_stylesheet('<link rel="stylesheet" href="'.$board_skin_url.'/style.css">', 0

    <?php
    // 코멘트 입출력
-    include_once('./view_comment.php');
+    include_once(G5_BBS_PATH.'/view_comment.php');
     ?>

    <div id="bo_v_bot">
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
chicpro	82c12f6d98	투표 결과 테마스킨 적용 오류 수정	2015-08-04 09:05:41 +09:00
chicpro	6beff3a333	그누보드 5.1.0 테마 지원버전	2015-08-03 15:44:15 +09:00
chicpro	d49200c99e	XSS 취약점 및 기타 오류 수정	2015-07-27 14:08:23 +09:00
sungkyuchunandchicpro	faed6ac09a	empty_mb_name checks mb_id, not mb_name empty_mb_name is a function checking name from user input form. But it was not checked by empty_mb_name function. So I fix it.	2015-07-21 09:48:45 +09:00
chicpro	9256a5618b	버전변경	2015-07-20 11:52:21 +09:00
chicpro	a52858fc6d	XSS 취약점, 새 우편번호, 기타 오류 수정	2015-07-20 11:40:09 +09:00
iz4blueandchicpro	2ccc407397	이미지 width 계산 이후 빠진 attributes 추가	2015-07-14 14:10:00 +09:00
chicpro	d5bd57cdfa	그누보드 5.0.40 수정내역 적용 및 XSS 취약점 수정	2015-07-13 13:43:46 +09:00
chicpro	3bbbe96319	XSS 및 Blind SQL Injection 취약점 수정	2015-07-07 13:50:38 +09:00
chicpro	78169b372c	Merge branch 'merge-patch'	2015-07-03 17:08:55 +09:00
chicpro	a79a926221	Merge https://github.com/iz4blue/gnuboard5 into merge-patch	2015-07-03 17:08:21 +09:00
chicpro	f72ea8774e	Merge branch 'master' into merge-patch	2015-07-03 17:05:45 +09:00
iz4admin	3c9b72d17a	PHP short_open_tag=0 에러 방지	2015-07-03 16:53:04 +09:00
chicpro	8821583e8f	그누보드 5.0.38 수정내역 적용 및 CSRF 취약점 수정	2015-06-29 10:36:44 +09:00
chicpro	6e90622328	그누보드 5.0.37 수정내역 적용 및 XSS 취약점 수정	2015-06-23 11:12:23 +09:00
Mabin	4b9369599c	RSS 헤더 오류 수정 (phpxml -> xml)	2015-03-04 16:05:18 +09:00