Merge branch 'master' of github.com:gnuboard/g5

5.3.1.7 버전 수정
주소 입력시 포커스문에 setTimeout 시간 추가
2018-09-17 10:34:00 +09:00 · 2018-09-17 10:07:34 +09:00 · 2018-09-14 14:36:47 +09:00 · 2018-09-14 12:23:52 +09:00 · 2018-09-14 12:04:37 +09:00 · 2018-09-13 18:30:13 +09:00
784 changed files with 37653 additions and 11872 deletions
@@ -3,9 +3,23 @@ if (!defined('_GNUBOARD_')) exit;

 $begin_time = get_microtime();

+$files = glob(G5_ADMIN_PATH.'/css/admin_extend_*');
+if (is_array($files)) {
+    foreach ((array) $files as $k=>$css_file) {
+        
+        $fileinfo = pathinfo($css_file);
+        $ext = $fileinfo['extension'];
+        
+        if( $ext !== 'css' ) continue;
+        
+        $css_file = str_replace(G5_ADMIN_PATH, G5_ADMIN_URL, $css_file);
+        add_stylesheet('<link rel="stylesheet" href="'.$css_file.'">', $k);
+    }
+}
+
 include_once(G5_PATH.'/head.sub.php');

-function print_menu1($key, $no)
+function print_menu1($key, $no='')
 {
    global $menu;

@@ -14,11 +28,11 @@ function print_menu1($key, $no)
    return $str;
 }

-function print_menu2($key, $no)
+function print_menu2($key, $no='')
 {
-    global $menu, $auth_menu, $is_admin, $auth, $g5;
+    global $menu, $auth_menu, $is_admin, $auth, $g5, $sub_menu;

-    $str .= "<ul class=\"gnb_2dul\">";
+    $str .= "<ul>";
    for($i=1; $i<count($menu[$key]); $i++)
    {
        if ($is_admin != 'super' && (!array_key_exists($menu[$key][$i][0],$auth) || !strstr($auth[$menu[$key][$i][0]], 'r')))
@@ -30,7 +44,13 @@ function print_menu2($key, $no)
        if ($menu[$key][$i][4] == 1) $gnb_grp_style = 'gnb_grp_style';
        else $gnb_grp_style = '';

-        $str .= '<li class="gnb_2dli"><a href="'.$menu[$key][$i][2].'" class="gnb_2da '.$gnb_grp_style.' '.$gnb_grp_div.'">'.$menu[$key][$i][1].'</a></li>';
+        $current_class = '';
+
+        if ($menu[$key][$i][0] == $sub_menu){
+            $current_class = ' on';
+        }
+
+        $str .= '<li data-menu="'.$menu[$key][$i][0].'"><a href="'.$menu[$key][$i][2].'" class="gnb_2da '.$gnb_grp_style.' '.$gnb_grp_div.$current_class.'">'.$menu[$key][$i][1].'</a></li>';

        $auth_menu[$menu[$key][$i][0]] = $menu[$key][$i][1];
    }
@@ -38,6 +58,18 @@ function print_menu2($key, $no)

    return $str;
 }
+
+$adm_menu_cookie = array(
+'container' => '',
+'gnb'       => '',
+'btn_gnb'   => '',
+);
+
+if( ! empty($_COOKIE['g5_admin_btn_gnb']) ){
+    $adm_menu_cookie['container'] = 'container-small';
+    $adm_menu_cookie['gnb'] = 'gnb_small';
+    $adm_menu_cookie['btn_gnb'] = 'btn_gnb_open';
+}
 ?>

 <script>
@@ -66,81 +98,102 @@ function imageview(id, w, h)
 <div id="to_content"><a href="#container">본문 바로가기</a></div>

 <header id="hd">
-    <div id="hd_wrap">
-        <h1><?php echo $config['cf_title'] ?></h1>
+    <h1><?php echo $config['cf_title'] ?></h1>
+    <div id="hd_top">
+        <button type="button" id="btn_gnb" class="btn_gnb_close <?php echo $adm_menu_cookie['btn_gnb'];?>">메뉴</button>
+       <div id="logo"><a href="<?php echo G5_ADMIN_URL ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.png" alt="<?php echo $config['cf_title'] ?> 관리자"></a></div>

-        <div id="logo"><a href="<?php echo G5_ADMIN_URL ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.jpg" alt="<?php echo $config['cf_title'] ?> 관리자"></a></div>
-
-        <ul id="tnb">
-            <li><a href="<?php echo G5_ADMIN_URL ?>/member_form.php?w=u&amp;mb_id=<?php echo $member['mb_id'] ?>">관리자정보</a></li>
-            <li><a href="<?php echo G5_ADMIN_URL ?>/config_form.php">기본환경</a></li>
-            <li><a href="<?php echo G5_ADMIN_URL ?>/service.php">부가서비스</a></li>
-            <li><a href="<?php echo G5_URL ?>/">커뮤니티</a></li>
-            <?php if(defined('G5_USE_SHOP')) { ?>
-            <li><a href="<?php echo G5_ADMIN_URL ?>/shop_admin/configform.php">쇼핑몰환경</a></li>
-            <li><a href="<?php echo G5_SHOP_URL ?>/">쇼핑몰</a></li>
-            <?php } ?>
-            <li id="tnb_logout"><a href="<?php echo G5_BBS_URL ?>/logout.php">로그아웃</a></li>
-        </ul>
-
-        <nav id="gnb">
-            <h2>관리자 주메뉴</h2>
+        <div id="tnb">
+            <ul>
+                <li class="tnb_li"><a href="<?php echo G5_URL ?>/" class="tnb_community" target="_blank" title="커뮤니티 바로가기">커뮤니티 바로가기</a></li>
+                <li class="tnb_li"><a href="<?php echo G5_ADMIN_URL ?>/service.php" class="tnb_service">부가서비스</a></li>
+                <li class="tnb_li"><button type="button" class="tnb_mb_btn">관리자<span class="./img/btn_gnb.png">메뉴열기</span></button>
+                    <ul class="tnb_mb_area">
+                        <li><a href="<?php echo G5_ADMIN_URL ?>/member_form.php?w=u&amp;mb_id=<?php echo $member['mb_id'] ?>">관리자정보</a></li>
+                        <li id="tnb_logout"><a href="<?php echo G5_BBS_URL ?>/logout.php">로그아웃</a></li>
+                    </ul>
+                </li>
+            </ul>
+        </div>
+    </div>
+    <nav id="gnb" class="gnb_large <?php echo $adm_menu_cookie['gnb']; ?>">
+        <h2>관리자 주메뉴</h2>
+        <ul class="gnb_ul">
            <?php
-            $gnb_str = "<ul id=\"gnb_1dul\">";
+            $jj = 1;
            foreach($amenu as $key=>$value) {
                $href1 = $href2 = '';
+
                if ($menu['menu'.$key][0][2]) {
                    $href1 = '<a href="'.$menu['menu'.$key][0][2].'" class="gnb_1da">';
                    $href2 = '</a>';
                } else {
                    continue;
                }
+
                $current_class = "";
                if (isset($sub_menu) && (substr($sub_menu, 0, 3) == substr($menu['menu'.$key][0][0], 0, 3)))
-                    $current_class = " gnb_1dli_air";
-                $gnb_str .= '<li class="gnb_1dli'.$current_class.'">'.PHP_EOL;
-                $gnb_str .=  $href1 . $menu['menu'.$key][0][1] . $href2;
-                $gnb_str .=  print_menu1('menu'.$key, 1);
-                $gnb_str .=  "</li>";
-            }
-            $gnb_str .= "</ul>";
-            echo $gnb_str;
+                    $current_class = " on";
+
+                $button_title = $menu['menu'.$key][0][1];
            ?>
-        </nav>
+            <li class="gnb_li<?php echo $current_class;?>">
+                <button type="button" class="btn_op menu-<?php echo $key; ?> menu-order-<?php echo $jj; ?>" title="<?php echo $button_title; ?>"><?php echo $button_title;?></button>
+                <div class="gnb_oparea_wr">
+                    <div class="gnb_oparea">
+                        <h3><?php echo $menu['menu'.$key][0][1];?></h3>
+                        <?php echo print_menu1('menu'.$key, 1); ?>
+                    </div>
+                </div>
+            </li>
+            <?php
+            $jj++;
+            }     //end foreach
+            ?>
+        </ul>
+    </nav>

-    </div>
 </header>
+<script>
+jQuery(function($){

-<?php if($sub_menu) { ?>
-<ul id="lnb">
-<?php
-$menu_key = substr($sub_menu, 0, 3);
-$nl = '';
-foreach($menu['menu'.$menu_key] as $key=>$value) {
-    if($key > 0) {
-        if ($is_admin != 'super' && (!array_key_exists($value[0],$auth) || !strstr($auth[$value[0]], 'r')))
-            continue;
+    var menu_cookie_key = 'g5_admin_btn_gnb';

-        if($value[3] == 'cf_service')
-            $svc_class = ' class="lnb_svc"';
-        else
-            $svc_class = '';
+    $(".tnb_mb_btn").click(function(){
+        $(".tnb_mb_area").toggle();
+    });
+
+    $("#btn_gnb").click(function(){
+        
+        var $this = $(this);
+
+        try {
+            if( ! $this.hasClass("btn_gnb_open") ){
+                set_cookie(menu_cookie_key, 1, 60*60*24*365);
+            } else {
+                delete_cookie(menu_cookie_key);
+            }
+        }
+        catch(err) {
+        }
+
+        $("#container").toggleClass("container-small");
+        $("#gnb").toggleClass("gnb_small");
+        $this.toggleClass("btn_gnb_open");
+
+    });
+
+    $(".gnb_ul li .btn_op" ).click(function() {
+        $(this).parent().addClass("on").siblings().removeClass("on");
+    });
+
+});
+</script>

-        echo $nl.'<li><a href="'.$value[2].'"'.$svc_class.'>'.$value[1].'</a></li>';
-        $nl = PHP_EOL;
-    }
-}
-?>
-</ul>
-<?php } ?>

 <div id="wrapper">

-    <div id="container">
-        <div id="text_size">
-            <!-- font_resize('엘리먼트id', '제거할 class', '추가할 class'); -->
-            <button onclick="font_resize('container', 'ts_up ts_up2', '');"><img src="<?php echo G5_ADMIN_URL ?>/img/ts01.gif" alt="기본"></button>
-            <button onclick="font_resize('container', 'ts_up ts_up2', 'ts_up');"><img src="<?php echo G5_ADMIN_URL ?>/img/ts02.gif" alt="크게"></button>
-            <button onclick="font_resize('container', 'ts_up ts_up2', 'ts_up2');"><img src="<?php echo G5_ADMIN_URL ?>/img/ts03.gif" alt="더크게"></button>
-        </div>
-        <h1><?php echo $g5['title'] ?></h1>
+    <div id="container" class="<?php echo $adm_menu_cookie['container']; ?>">
+
+        <h1 id="container_title"><?php echo $g5['title'] ?></h1>
+        <div class="container_wr">
@@ -355,6 +355,29 @@ function get_admin_token()
    return $token;
 }

+// 관리자가 자동등록방지를 사용해야 할 경우
+function get_admin_captcha_by($type='get'){
+    
+    $captcha_name = 'ss_admin_use_captcha';
+
+    if($type === 'remove'){
+        set_session($captcha_name, '');
+    }
+
+    return get_session($captcha_name);
+}
+
+//input value 에서 xss 공격 filter 역할을 함 ( 반드시 input value='' 타입에만 사용할것 )
+function get_sanitize_input($s, $is_html=false){
+
+    if(!$is_html){
+        $s = strip_tags($s);
+    }
+
+    $s = htmlspecialchars($s, ENT_QUOTES, 'utf-8');
+
+    return $s;
+}

 // POST로 넘어온 토큰과 세션에 저장된 토큰 비교
 function check_admin_token()
@@ -425,7 +448,7 @@ else if ($is_admin != 'super')
 }

 // 관리자의 아이피, 브라우저와 다르다면 세션을 끊고 관리자에게 메일을 보낸다.
-$admin_key = md5($member['mb_datetime'] . $_SERVER['REMOTE_ADDR'] . $_SERVER['HTTP_USER_AGENT']);
+$admin_key = md5($member['mb_datetime'] . get_real_client_ip() . $_SERVER['HTTP_USER_AGENT']);
 if (get_session('ss_mb_key') !== $admin_key) {

    session_destroy();
@@ -444,12 +467,17 @@ unset($auth_menu);
 unset($menu);
 unset($amenu);
 $tmp = dir(G5_ADMIN_PATH);
+$menu_files = array();
 while ($entry = $tmp->read()) {
    if (!preg_match('/^admin.menu([0-9]{3}).*\.php$/', $entry, $m))
        continue;  // 파일명이 menu 으로 시작하지 않으면 무시한다.

    $amenu[$m[1]] = $entry;
-    include_once(G5_ADMIN_PATH.'/'.$entry);
+    $menu_files[] = G5_ADMIN_PATH.'/'.$entry;
+}
+@asort($menu_files);
+foreach($menu_files as $file){
+    include_once($file);
 }
@ksort($amenu);

@@ -1,10 +1,10 @@
 <?php
 $menu['menu100'] = array (
    array('100000', '환경설정', G5_ADMIN_URL.'/config_form.php',   'config'),
-    array('', '기본환경설정', G5_ADMIN_URL.'/config_form.php',   'cf_basic'),
-    array('', '관리권한설정', G5_ADMIN_URL.'/auth_list.php',     'cf_auth'),
-    array('', '테마설정', G5_ADMIN_URL.'/theme.php',     'cf_theme', 1),
-    array('', '메뉴설정', G5_ADMIN_URL.'/menu_list.php',     'cf_menu', 1),
+    array('100100', '기본환경설정', G5_ADMIN_URL.'/config_form.php',   'cf_basic'),
+    array('100200', '관리권한설정', G5_ADMIN_URL.'/auth_list.php',     'cf_auth'),
+    array('100280', '테마설정', G5_ADMIN_URL.'/theme.php',     'cf_theme', 1),
+    array('100290', '메뉴설정', G5_ADMIN_URL.'/menu_list.php',     'cf_menu', 1),
    array('100300', '메일 테스트', G5_ADMIN_URL.'/sendmail_test.php', 'cf_mailtest'),
    array('100310', '팝업레이어관리', G5_ADMIN_URL.'/newwinlist.php', 'scf_poplayer'),
    array('100800', '세션파일 일괄삭제',G5_ADMIN_URL.'/session_file_delete.php', 'cf_session', 1),
@@ -19,5 +19,6 @@ if(version_compare(phpversion(), '5.3.0', '>=') && defined('G5_BROWSCAP_USE') &&
    $menu['menu100'][] = array('100520', '접속로그 변환', G5_ADMIN_URL.'/browscap_convert.php', 'cf_visit_cnvrt');
 }

+$menu['menu100'][] = array('100410', 'DB업그레이드', G5_ADMIN_URL.'/dbupgrade.php', 'db_upgrade');
 $menu['menu100'][] = array('100400', '부가서비스', G5_ADMIN_URL.'/service.php', 'cf_service');
 ?>
@@ -11,21 +11,43 @@ $print_version = defined('G5_YOUNGCART_VER') ? 'YoungCart Version '.G5_YOUNGCART
            </p>
        </noscript>

+        </div>    
+        <footer id="ft">
+            <p>
+                Copyright &copy; <?php echo $_SERVER['HTTP_HOST']; ?>. All rights reserved. <?php echo $print_version; ?><br>
+               <button type="button" class="scroll_top"><span class="top_img"></span><span class="top_txt">TOP</span></button>
+           </p>
+        </footer>
    </div>
+
 </div>

-<footer id="ft">
-    <p>
-        Copyright &copy; <?php echo $_SERVER['HTTP_HOST']; ?>. All rights reserved. <?php echo $print_version; ?><br>
-        <a href="#">상단으로</a>
-    </p>
-</footer>
+<script>
+$(".scroll_top").click(function(){
+     $("body,html").animate({scrollTop:0},400);
+})
+</script>

 <!-- <p>실행시간 : <?php echo get_microtime() - $begin_time; ?> -->

 <script src="<?php echo G5_ADMIN_URL ?>/admin.js?ver=<?php echo G5_JS_VER; ?>"></script>
+<script src="<?php echo G5_JS_URL ?>/jquery.anchorScroll.js?ver=<?php echo G5_JS_VER; ?>"></script>
 <script>
 $(function(){
+
+    var admin_head_height = $("#hd_top").height() + $("#container_title").height() + 5;
+
+    $("a[href^='#']").anchorScroll({
+        scrollSpeed: 0, // scroll speed
+        offsetTop: admin_head_height, // offset for fixed top bars (defaults to 0)
+        onScroll: function () { 
+          // callback on scroll start
+        },
+        scrollEnd: function () { 
+          // callback on scroll end
+        }
+    });
+
    var hide_menu = false;
    var mouse_event = false;
    var oldX = oldY = 0;
@@ -0,0 +1,7 @@
+<?php
+include_once('./_common.php');
+
+if( isset($_POST['admin_use_captcha']) ){
+    set_session('ss_admin_use_captcha', true);
+}
+?>
@@ -43,7 +43,7 @@ $sql = " select *
            limit {$from_record}, {$rows} ";
 $result = sql_query($sql);

-$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall">전체목록</a>';
+$listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'" class="ov_listall btn_ov02">전체목록</a>';

 $g5['title'] = "관리권한설정";
 include_once('./admin.head.php');
@@ -53,7 +53,7 @@ $colspan = 5;

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    설정된 관리권한 <?php echo number_format($total_count) ?>건
+    <span class="btn_ov01"><span class="ov_txt">설정된 관리권한</span><span class="ov_num"><?php echo number_format($total_count) ?>건</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
@@ -141,7 +141,7 @@ $colspan = 5;
 </div>

 <div class="btn_list01 btn_list">
-    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value">
+    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value" class="btn btn_02">
 </div>

 <?php
@@ -223,7 +223,7 @@ echo $pagelist;
    </div>

    <div class="btn_confirm01 btn_confirm">
-        <input type="submit" value="추가" class="btn_submit">
+        <input type="submit" value="추가" class="btn_submit btn">
    </div>
 </section>

@@ -9,17 +9,24 @@ if ($is_admin != 'super')

 check_admin_token();

-$count = count($_POST['chk']);
+$count = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;

 if (!$count)
    alert($_POST['act_button']." 하실 항목을 하나 이상 체크하세요.");

+if ( (isset($_POST['mb_id']) && ! is_array($_POST['mb_id'])) || (isset($_POST['au_menu']) && ! is_array($_POST['au_menu'])) ){
+    alert("잘못된 요청입니다.");
+}
+
 for ($i=0; $i<$count; $i++)
 {
    // 실제 번호를 넘김
    $k = $chk[$i];
+    
+    $mb_id = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['mb_id'][$k]);
+    $au_menu = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['au_menu'][$k]);

-    $sql = " delete from {$g5['auth_table']} where mb_id = '{$_POST['mb_id'][$k]}' and au_menu = '{$_POST['au_menu'][$k]}' ";
+    $sql = " delete from {$g5['auth_table']} where mb_id = '".$mb_id."' and au_menu = '".$au_menu."' ";
    sql_query($sql);
 }

@@ -16,39 +16,39 @@ include_once(G5_PATH.'/head.sub.php');
    <form name="fboardcopy" id="fboardcopy" action="./board_copy_update.php" onsubmit="return fboardcopy_check(this);" method="post">
    <input type="hidden" name="bo_table" value="<?php echo $bo_table ?>" id="bo_table">
    <input type="hidden" name="token" value="">
-
-    <div class="tbl_frm01 tbl_wrap">
-        <table>
-        <caption><?php echo $g5['title']; ?></caption>
-        <tbody>
-        <tr>
-            <th scope="col">원본 테이블명</th>
-            <td><?php echo $bo_table ?></td>
-        </tr>
-        <tr>
-            <th scope="col"><label for="target_table">복사 테이블명<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="target_table" id="target_table" required class="required alnum_ frm_input" maxlength="20">영문자, 숫자, _ 만 가능 (공백없이)</td>
-        </tr>
-        <tr>
-            <th scope="col"><label for="target_subject">게시판 제목<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="target_subject" value="[복사본] <?php echo $board['bo_subject'] ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
-        </tr>
-        <tr>
-            <th scope="col">복사 유형</th>
-            <td>
-                <input type="radio" name="copy_case" value="schema_only" id="copy_case" checked>
-                <label for="copy_case">구조만</label>
-                <input type="radio" name="copy_case" value="schema_data_both" id="copy_case2">
-                <label for="copy_case2">구조와 데이터</label>
-            </td>
-        </tr>
-        </tbody>
-        </table>
+    <div class=" new_win_con">
+        <div class="tbl_frm01 tbl_wrap">
+            <table>
+            <caption><?php echo $g5['title']; ?></caption>
+            <tbody>
+            <tr>
+                <th scope="col">원본 테이블명</th>
+                <td><?php echo $bo_table ?></td>
+            </tr>
+            <tr>
+                <th scope="col"><label for="target_table">복사 테이블명<strong class="sound_only">필수</strong></label></th>
+                <td><input type="text" name="target_table" id="target_table" required class="required alnum_ frm_input" maxlength="20">영문자, 숫자, _ 만 가능 (공백없이)</td>
+            </tr>
+            <tr>
+                <th scope="col"><label for="target_subject">게시판 제목<strong class="sound_only">필수</strong></label></th>
+                <td><input type="text" name="target_subject" value="[복사본] <?php echo $board['bo_subject'] ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
+            </tr>
+            <tr>
+                <th scope="col">복사 유형</th>
+                <td>
+                    <input type="radio" name="copy_case" value="schema_only" id="copy_case" checked>
+                    <label for="copy_case">구조만</label>
+                    <input type="radio" name="copy_case" value="schema_data_both" id="copy_case2">
+                    <label for="copy_case2">구조와 데이터</label>
+                </td>
+            </tr>
+            </tbody>
+            </table>
+        </div>
    </div>
-
-    <div class="btn_confirm01 btn_confirm">
-        <input type="submit" class="btn_submit" value="복사">
-        <input type="button" class="btn_cancel" value="창닫기" onclick="window.close();">
+    <div class="win_btn ">
+        <input type="submit" class="btn_submit btn" value="복사">
+        <input type="button" class="btn_close btn" value="창닫기" onclick="window.close();">
    </div>

    </form>
@@ -76,6 +76,10 @@ if (!isset($board['bo_mobile_subject'])) {
    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_mobile_subject` VARCHAR(255) NOT NULL DEFAULT '' AFTER `bo_subject` ", false);
 }

+if (!isset($board['bo_use_captcha'])) {
+    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_use_captcha` TINYINT NOT NULL DEFAULT '0' AFTER `bo_use_sns` ");
+}
+
 $required = "";
 $readonly = "";
 if ($w == '') {
@@ -94,8 +98,8 @@ if ($w == '') {
    $board['bo_download_point'] = $config['cf_download_point'];

    $board['bo_gallery_cols'] = 4;
-    $board['bo_gallery_width'] = 174;
-    $board['bo_gallery_height'] = 124;
+    $board['bo_gallery_width'] = 202;
+    $board['bo_gallery_height'] = 150;
    $board['bo_mobile_gallery_width'] = 125;
    $board['bo_mobile_gallery_height'] = 100;
    $board['bo_table_width'] = 100;
@@ -150,13 +154,6 @@ $pg_anchor = '<ul class="anchor">
    <li><a href="#anc_bo_extra">여분필드</a></li>
 </ul>';

-$frm_submit = '<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./board_list.php?'.$qstr.'">목록</a>'.PHP_EOL;
-if ($w == 'u') $frm_submit .= '<a href="./board_copy.php?bo_table='.$bo_table.'" id="board_copy" target="win_board_copy">게시판복사</a>
-    <a href="'.G5_BBS_URL.'/board.php?bo_table='.$board['bo_table'].'" class="btn_frmline">게시판 바로가기</a>
-    <a href="./board_thumbnail_delete.php?bo_table='.$board['bo_table'].'&amp;'.$qstr.'" onclick="return delete_confirm2(\'게시판 썸네일 파일을 삭제하시겠습니까?\');">게시판 썸네일 삭제</a>'.PHP_EOL;
-$frm_submit .= '</div>';
 ?>

 <form name="fboardform" id="fboardform" action="./board_form_update.php" onsubmit="return fboardform_submit(this)" method="post" enctype="multipart/form-data">
@@ -189,7 +186,7 @@ $frm_submit .= '</div>';
                    영문자, 숫자, _ 만 가능 (공백없이 20자 이내)
                <?php } else { ?>
                    <a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $board['bo_table'] ?>" class="btn_frmline">게시판 바로가기</a>
-                    <a href="./board_list.php" class="btn_frmline">목록으로</a>
+                    <a href="./board_list.php?<?php echo $qstr;?>" class="btn_frmline">목록으로</a>
                <?php } ?>
            </td>
        </tr>
@@ -197,7 +194,7 @@ $frm_submit .= '</div>';
            <th scope="row"><label for="gr_id">그룹<strong class="sound_only">필수</strong></label></th>
            <td colspan="2">
                <?php echo get_group_select('gr_id', $board['gr_id'], 'required'); ?>
-                <?php if ($w=='u') { ?><a href="javascript:document.location.href='./board_list.php?sfl=a.gr_id&stx='+document.fboardform.gr_id.value;" class="btn_frmline">동일그룹 게시판목록</a><?php } ?></td>
+                <?php if ($w=='u') { ?><a href="javascript:document.location.href='./board_list.php?sfl=a.gr_id&stx='+document.fboardform.gr_id.value;" class="btn_frmline">동일그룹 게시판목록</a><?php } ?>
            </td>
        </tr>
        <tr>
@@ -233,7 +230,7 @@ $frm_submit .= '</div>';
        <tr>
            <th scope="row"><label for="bo_category_list">분류</label></th>
            <td>
-                <?php echo help('분류와 분류 사이는 | 로 구분하세요. (예: 질문|답변) 첫자로 #은 입력하지 마세요. (예: #질문|#답변 [X])') ?>
+                <?php echo help('분류와 분류 사이는 | 로 구분하세요. (예: 질문|답변) 첫자로 #은 입력하지 마세요. (예: #질문|#답변 [X])'."\n".'분류명에 일부 특수문자 ()/ 는 사용할수 없습니다.'); ?>
                <input type="text" name="bo_category_list" value="<?php echo get_text($board['bo_category_list']) ?>" id="bo_category_list" class="frm_input" size="70">
                <input type="checkbox" name="bo_use_category" value="1" id="bo_use_category" <?php echo $board['bo_use_category']?'checked':''; ?>>
                <label for="bo_use_category">사용</label>
@@ -259,7 +256,7 @@ $frm_submit .= '</div>';
    </div>
 </section>

-<?php echo $frm_submit; ?>
+

 <section id="anc_bo_auth">
    <h2 class="h2_frm">게시판 권한 설정</h2>
@@ -400,7 +397,7 @@ $frm_submit .= '</div>';
    </div>
 </section>

-<?php echo $frm_submit; ?>
+

 <section id="anc_bo_function">
    <h2 class="h2_frm">게시판 기능 설정</h2>
@@ -771,12 +768,25 @@ $frm_submit .= '</div>';
                <label for="chk_all_order">전체적용</label>
            </td>
        </tr>
+        <tr>
+            <th scope="row"><label for="bo_use_captcha">캡챠 사용</label></th>
+            <td>
+                <?php echo help("체크하면 글 작성시 캡챠를 무조건 사용합니다.( 회원 + 비회원 모두 )<br>미 체크하면 비회원에게만 캡챠를 사용합니다.") ?>
+                <input type="checkbox" name="bo_use_captcha" value="1" <?php echo $board['bo_use_captcha']?'checked':''; ?> id="bo_use_captcha">
+                사용
+            </td>
+            <td class="td_grpset">
+                <input type="checkbox" name="chk_grp_use_captcha" value="1" id="chk_grp_use_captcha">
+                <label for="chk_grp_use_captcha">그룹적용</label>
+                <input type="checkbox" name="chk_all_use_captcha" value="1" id="chk_all_use_captcha">
+                <label for="chk_all_use_captcha">전체적용</label>
+            </td>
+        </tr>
        </tbody>
        </table>
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_bo_design">
    <h2 class="h2_frm">게시판 디자인/양식</h2>
@@ -815,6 +825,7 @@ $frm_submit .= '</div>';
                <label for="chk_all_mobile_skin">전체적용</label>
            </td>
        </tr>
+        <?php if ($is_admin === 'super'){   // 슈퍼관리자인 경우에만 수정 가능 ?>
        <tr>
            <th scope="row"><label for="bo_include_head">상단 파일 경로</label></th>
            <td>
@@ -839,6 +850,22 @@ $frm_submit .= '</div>';
                <label for="chk_all_include_tail">전체적용</label>
            </td>
        </tr>
+        <tr id="admin_captcha_box" style="display:none;">
+            <th scope="row">자동등록방지</th>
+            <td>
+                <?php
+                echo help("파일 경로를 입력 또는 수정시 캡챠를 반드시 입력해야 합니다.");
+
+                include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+                $captcha_html = captcha_html();
+                $captcha_js   = chk_captcha_js();
+                echo $captcha_html;
+                ?>
+                <script>
+                jQuery("#captcha_key").removeAttr("required").removeClass("required");
+                </script>
+            </td>
+        </tr>
        <tr>
            <th scope="row"><label for="bo_content_head">상단 내용</label></th>
            <td>
@@ -887,6 +914,7 @@ $frm_submit .= '</div>';
                <label for="chk_all_mobile_content_tail">전체적용</label>
            </td>
        </tr>
+        <?php }     //end if $is_admin === 'super' ?>
         <tr>
            <th scope="row"><label for="bo_insert_content">글쓰기 기본 내용</label></th>
            <td>
@@ -953,7 +981,7 @@ $frm_submit .= '</div>';
            <th scope="row"><label for="bo_gallery_cols">갤러리 이미지 수<strong class="sound_only">필수</strong></label></th>
            <td>
                <?php echo help('갤러리 형식의 게시판 목록에서 이미지를 한줄에 몇장씩 보여 줄 것인지를 설정하는 값') ?>
-                <input type="text" name="bo_gallery_cols" value="<?php echo $board['bo_gallery_cols'] ?>" id="bo_gallery_cols" required class="required numeric frm_input" size="4">
+                <?php echo get_member_level_select('bo_gallery_cols', 1, 10, $board['bo_gallery_cols']); ?>
            </td>
            <td class="td_grpset">
                <input type="checkbox" name="chk_grp_gallery_cols" value="1" id="chk_grp_gallery_cols">
@@ -1116,9 +1144,10 @@ $frm_submit .= '</div>';
        </tbody>
        </table>
    </div>
+    <button type="button" class="get_theme_galc btn btn_02" >테마 이미지설정 가져오기</button>
+
 </section>

-<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_galc">테마 이미지설정 가져오기</button></div>', $frm_submit); ?>

 <section id="anc_bo_point">
    <h2 class="h2_frm">게시판 포인트 설정</h2>
@@ -1193,8 +1222,6 @@ $frm_submit .= '</div>';
    </div>
 </section>

-<?php echo $frm_submit; ?>
-
 <section id="anc_bo_extra">
    <h2 class="h2_frm">게시판 여분필드 설정</h2>
    <?php echo $pg_anchor ?>
@@ -1230,7 +1257,15 @@ $frm_submit .= '</div>';
    </div>
 </section>

-<?php echo $frm_submit; ?>
+
+<div class="btn_fixed_top">
+    <?php if( $bo_table && $w ){ ?>
+        <a href="./board_copy.php?bo_table=<?php echo $board['bo_table']; ?>" id="board_copy" target="win_board_copy" class=" btn_02 btn">게시판복사</a>
+        <a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $board['bo_table']; ?>" class=" btn_02 btn">게시판 바로가기</a>
+        <a href="./board_thumbnail_delete.php?bo_table=<?php echo $board['bo_table'].'&amp;'.$qstr;?>" onclick="return delete_confirm2('게시판 썸네일 파일을 삭제하시겠습니까?');" class="btn_02 btn">게시판 썸네일 삭제</a>
+    <?php } ?>
+    <input type="submit" value="확인" class="btn_submi btn btn_01" accesskey="s">
+</div>

 </form>

@@ -1291,6 +1326,52 @@ function set_point(f) {
    }
 }

+var captcha_chk = false;
+
+function use_captcha_check(){
+    $.ajax({
+        type: "POST",
+        url: g5_admin_url+"/ajax.use_captcha.php",
+        data: { admin_use_captcha: "1" },
+        cache: false,
+        async: false,
+        dataType: "json",
+        success: function(data) {
+        }
+    });
+}
+
+function frm_check_file(){
+    var bo_include_head = "<?php echo $board['bo_include_head']; ?>";
+    var bo_include_tail = "<?php echo $board['bo_include_tail']; ?>";
+    var head = jQuery.trim(jQuery("#bo_include_head").val());
+    var tail = jQuery.trim(jQuery("#bo_include_tail").val());
+
+    if(bo_include_head !== head || bo_include_tail !== tail){
+        // 캡챠를 사용합니다.
+        jQuery("#admin_captcha_box").show();
+        captcha_chk = true;
+
+        use_captcha_check();
+
+        return false;
+    } else {
+        jQuery("#admin_captcha_box").hide();
+    }
+
+    return true;
+}
+
+jQuery(function($){
+    if( window.self !== window.top ){   // frame 또는 iframe을 사용할 경우 체크
+        $("#bo_include_head, #bo_include_tail").on("change paste keyup", function(e) {
+            frm_check_file();
+        });
+
+        use_captcha_check();
+    }
+});
+
 function fboardform_submit(f)
 {
    <?php echo get_editor_js("bo_content_head"); ?>
@@ -1310,6 +1391,10 @@ function fboardform_submit(f)
        return false;
    }

+    if( captcha_chk ) {
+        <?php echo isset($captcha_js) ? $captcha_js : ''; // 캡챠 사용시 자바스크립트에서 입력된 캡챠를 검사함  ?>
+    }
+
    return true;
 }
 </script>
@@ -14,33 +14,42 @@ if (!$bo_table) { alert('게시판 TABLE명은 반드시 입력하세요.'); }
 if (!preg_match("/^([A-Za-z0-9_]{1,20})$/", $bo_table)) { alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)'); }
 if (!$_POST['bo_subject']) { alert('게시판 제목을 입력하세요.'); }

-$_POST['bo_include_head'] = preg_replace("#[\\\]+$#", "", substr($_POST['bo_include_head'], 0, 255));
-$_POST['bo_include_tail'] = preg_replace("#[\\\]+$#", "", substr($_POST['bo_include_tail'], 0, 255));
+$bo_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($bo_include_head, 0, 255));
+$bo_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($bo_include_tail, 0, 255));

-if ($file = $_POST['bo_include_head']) {
-    $purl = parse_url($file);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('상단 파일 경로의 확장자는 php, html 만 허용합니다.');
+// 관리자가 자동등록방지를 사용해야 할 경우
+if ($board && ($board['bo_include_head'] !== $bo_include_head || $board['bo_include_tail'] !== $bo_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
+    include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+
+    if (!chk_captcha()) {
+        alert('자동등록방지 숫자가 틀렸습니다.');
+    }
+}
+
+if ($file = $bo_include_head) {
+    $file_ext = pathinfo($file, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $file) ) {
+        alert('상단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
    $_POST['bo_include_head'] = $file;
 }

-if ($file = $_POST['bo_include_tail']) {
-    $purl = parse_url($file);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('하단 파일 경로의 확장자는 php, html 만 허용합니다.');
+if ($file = $bo_include_tail) {
+    $file_ext = pathinfo($file, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $file) ) {
+        alert('하단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
    $_POST['bo_include_tail'] = $file;
 }

-if(!is_include_path_check($_POST['bo_include_head'], 1)) {
-    alert('/data/file/ 또는 /data/editor/ 포함된 문자를 상단 파일 경로에 포함시킬수 없습니다.');
+if(!is_include_path_check($bo_include_head, 1)) {
+    alert('상단 파일 경로에 포함시킬수 없는 문자열이 있습니다.');
 }

-if(!is_include_path_check($_POST['bo_include_tail'], 1)) {
-    alert('/data/file/ 또는 /data/editor/ 포함된 문자를 하단 파일 경로에 포함시킬수 없습니다.');
+if(!is_include_path_check($bo_include_tail, 1)) {
+    alert('하단 파일 경로에 포함시킬수 없는 문자열이 있습니다.');
 }

 $board_path = G5_DATA_PATH.'/file/'.$bo_table;
@@ -60,6 +69,8 @@ $f = @fopen($file, 'w');
 $src_char = array('&', '=');
 $dst_char = array('＆', '〓');
 $bo_category_list = str_replace($src_char, $dst_char, $bo_category_list);
+//https://github.com/gnuboard/gnuboard5/commit/f5f4925d4eb28ba1af728e1065fc2bdd9ce1da58 에 따른 조치
+$str_bo_category_list = isset($_POST['bo_category_list']) ? preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $_POST['bo_category_list']) : '';

 $sql_common = " gr_id               = '{$_POST['gr_id']}',
                bo_subject          = '{$_POST['bo_subject']}',
@@ -82,7 +93,7 @@ $sql_common = " gr_id               = '{$_POST['gr_id']}',
                bo_comment_point    = '{$_POST['bo_comment_point']}',
                bo_download_point   = '{$_POST['bo_download_point']}',
                bo_use_category     = '{$_POST['bo_use_category']}',
-                bo_category_list    = '{$_POST['bo_category_list']}',
+                bo_category_list    = '{$str_bo_category_list}',
                bo_use_sideview     = '{$_POST['bo_use_sideview']}',
                bo_use_file_content = '{$_POST['bo_use_file_content']}',
                bo_use_secret       = '{$_POST['bo_use_secret']}',
@@ -99,6 +110,7 @@ $sql_common = " gr_id               = '{$_POST['gr_id']}',
                bo_use_email        = '{$_POST['bo_use_email']}',
                bo_use_cert         = '{$_POST['bo_use_cert']}',
                bo_use_sns          = '{$_POST['bo_use_sns']}',
+                bo_use_captcha      = '{$_POST['bo_use_captcha']}',
                bo_table_width      = '{$_POST['bo_table_width']}',
                bo_subject_len      = '{$_POST['bo_subject_len']}',
                bo_mobile_subject_len      = '{$_POST['bo_mobile_subject_len']}',
@@ -109,13 +121,20 @@ $sql_common = " gr_id               = '{$_POST['gr_id']}',
                bo_image_width      = '{$_POST['bo_image_width']}',
                bo_skin             = '{$_POST['bo_skin']}',
                bo_mobile_skin      = '{$_POST['bo_mobile_skin']}',
-                bo_include_head     = '{$_POST['bo_include_head']}',
-                bo_include_tail     = '{$_POST['bo_include_tail']}',
+                ";
+
+// 최고 관리자인 경우에만 수정가능
+if ($is_admin === 'super'){
+$sql_common .= " bo_include_head     = '".$bo_include_head."',
+                bo_include_tail     = '".$bo_include_tail."',
                bo_content_head     = '{$_POST['bo_content_head']}',
                bo_content_tail     = '{$_POST['bo_content_tail']}',
                bo_mobile_content_head     = '{$_POST['bo_mobile_content_head']}',
                bo_mobile_content_tail     = '{$_POST['bo_mobile_content_tail']}',
-                bo_insert_content   = '{$_POST['bo_insert_content']}',
+                ";
+}
+
+$sql_common .= " bo_insert_content   = '{$_POST['bo_insert_content']}',
                bo_gallery_cols     = '{$_POST['bo_gallery_cols']}',
                bo_gallery_width    = '{$_POST['bo_gallery_width']}',
                bo_gallery_height   = '{$_POST['bo_gallery_height']}',
@@ -276,6 +295,7 @@ if (is_checked('chk_grp_use_list_content'))     $grp_fields .= " , bo_use_list_c
 if (is_checked('chk_grp_use_email'))            $grp_fields .= " , bo_use_email = '{$bo_use_email}' ";
 if (is_checked('chk_grp_use_cert'))             $grp_fields .= " , bo_use_cert = '{$bo_use_cert}' ";
 if (is_checked('chk_grp_use_sns'))              $grp_fields .= " , bo_use_sns = '{$bo_use_sns}' ";
+if (is_checked('chk_grp_use_captcha'))          $grp_fields .= " , bo_use_captcha = '{$bo_use_captcha}' ";
 if (is_checked('chk_grp_skin'))                 $grp_fields .= " , bo_skin = '{$bo_skin}' ";
 if (is_checked('chk_grp_mobile_skin'))          $grp_fields .= " , bo_mobile_skin = '{$bo_mobile_skin}' ";
 if (is_checked('chk_grp_gallery_cols'))         $grp_fields .= " , bo_gallery_cols = '{$bo_gallery_cols}' ";
@@ -299,12 +319,17 @@ if (is_checked('chk_grp_comment_min'))          $grp_fields .= " , bo_comment_mi
 if (is_checked('chk_grp_comment_max'))          $grp_fields .= " , bo_comment_max = '{$bo_comment_max}' ";
 if (is_checked('chk_grp_upload_count'))         $grp_fields .= " , bo_upload_count = '{$bo_upload_count}' ";
 if (is_checked('chk_grp_upload_size'))          $grp_fields .= " , bo_upload_size = '{$bo_upload_size}' ";
-if (is_checked('chk_grp_include_head'))         $grp_fields .= " , bo_include_head = '{$bo_include_head}' ";
-if (is_checked('chk_grp_include_tail'))         $grp_fields .= " , bo_include_tail = '{$bo_include_tail}' ";
-if (is_checked('chk_grp_content_head'))         $grp_fields .= " , bo_content_head = '{$bo_content_head}' ";
-if (is_checked('chk_grp_content_tail'))         $grp_fields .= " , bo_content_tail = '{$bo_content_tail}' ";
-if (is_checked('chk_grp_mobile_content_head'))         $grp_fields .= " , bo_mobile_content_head = '{$bo_mobile_content_head}' ";
-if (is_checked('chk_grp_mobile_content_tail'))         $grp_fields .= " , bo_mobile_content_tail = '{$bo_mobile_content_tail}' ";
+
+//최고관리자만 수정가능
+if ($is_admin === 'super'){
+    if (is_checked('chk_grp_include_head'))         $grp_fields .= " , bo_include_head = '{$bo_include_head}' ";
+    if (is_checked('chk_grp_include_tail'))         $grp_fields .= " , bo_include_tail = '{$bo_include_tail}' ";
+    if (is_checked('chk_grp_content_head'))         $grp_fields .= " , bo_content_head = '{$bo_content_head}' ";
+    if (is_checked('chk_grp_content_tail'))         $grp_fields .= " , bo_content_tail = '{$bo_content_tail}' ";
+    if (is_checked('chk_grp_mobile_content_head'))         $grp_fields .= " , bo_mobile_content_head = '{$bo_mobile_content_head}' ";
+    if (is_checked('chk_grp_mobile_content_tail'))         $grp_fields .= " , bo_mobile_content_tail = '{$bo_mobile_content_tail}' ";
+}
+
 if (is_checked('chk_grp_insert_content'))       $grp_fields .= " , bo_insert_content = '{$bo_insert_content}' ";
 if (is_checked('chk_grp_use_search'))           $grp_fields .= " , bo_use_search = '{$bo_use_search}' ";
 if (is_checked('chk_grp_order'))                $grp_fields .= " , bo_order = '{$bo_order}' ";
@@ -359,6 +384,7 @@ if (is_checked('chk_all_use_list_content'))     $all_fields .= " , bo_use_list_c
 if (is_checked('chk_all_use_email'))            $all_fields .= " , bo_use_email = '{$bo_use_email}' ";
 if (is_checked('chk_all_use_cert'))             $all_fields .= " , bo_use_cert = '{$bo_use_cert}' ";
 if (is_checked('chk_all_use_sns'))              $all_fields .= " , bo_use_sns = '{$bo_use_sns}' ";
+if (is_checked('chk_all_use_captcha'))          $all_fields .= " , bo_use_captcha = '{$bo_use_captcha}' ";
 if (is_checked('chk_all_skin'))                 $all_fields .= " , bo_skin = '{$bo_skin}' ";
 if (is_checked('chk_all_mobile_skin'))          $all_fields .= " , bo_mobile_skin = '{$bo_mobile_skin}' ";
 if (is_checked('chk_all_gallery_cols'))         $all_fields .= " , bo_gallery_cols = '{$bo_gallery_cols}' ";
@@ -382,12 +408,17 @@ if (is_checked('chk_all_comment_min'))          $all_fields .= " , bo_comment_mi
 if (is_checked('chk_all_comment_max'))          $all_fields .= " , bo_comment_max = '{$bo_comment_max}' ";
 if (is_checked('chk_all_upload_count'))         $all_fields .= " , bo_upload_count = '{$bo_upload_count}' ";
 if (is_checked('chk_all_upload_size'))          $all_fields .= " , bo_upload_size = '{$bo_upload_size}' ";
-if (is_checked('chk_all_include_head'))         $all_fields .= " , bo_include_head = '{$bo_include_head}' ";
-if (is_checked('chk_all_include_tail'))         $all_fields .= " , bo_include_tail = '{$bo_include_tail}' ";
-if (is_checked('chk_all_content_head'))         $all_fields .= " , bo_content_head = '{$bo_content_head}' ";
-if (is_checked('chk_all_content_tail'))         $all_fields .= " , bo_content_tail = '{$bo_content_tail}' ";
-if (is_checked('chk_all_mobile_content_head'))         $all_fields .= " , bo_mobile_content_head = '{$bo_mobile_content_head}' ";
-if (is_checked('chk_all_mobile_content_tail'))         $all_fields .= " , bo_mobile_content_tail = '{$bo_mobile_content_tail}' ";
+
+//최고관리자만 수정가능
+if ($is_admin === 'super'){
+    if (is_checked('chk_all_include_head'))         $all_fields .= " , bo_include_head = '{$bo_include_head}' ";
+    if (is_checked('chk_all_include_tail'))         $all_fields .= " , bo_include_tail = '{$bo_include_tail}' ";
+    if (is_checked('chk_all_content_head'))         $all_fields .= " , bo_content_head = '{$bo_content_head}' ";
+    if (is_checked('chk_all_content_tail'))         $all_fields .= " , bo_content_tail = '{$bo_content_tail}' ";
+    if (is_checked('chk_all_mobile_content_head'))         $all_fields .= " , bo_mobile_content_head = '{$bo_mobile_content_head}' ";
+    if (is_checked('chk_all_mobile_content_tail'))         $all_fields .= " , bo_mobile_content_tail = '{$bo_mobile_content_tail}' ";
+}
+
 if (is_checked('chk_all_insert_content'))       $all_fields .= " , bo_insert_content = '{$bo_insert_content}' ";
 if (is_checked('chk_all_use_search'))           $all_fields .= " , bo_use_search = '{$bo_use_search}' ";
 if (is_checked('chk_all_order'))                $all_fields .= " , bo_order = '{$bo_order}' ";
@@ -404,5 +435,8 @@ if ($all_fields) {

 delete_cache_latest($bo_table);

+if(function_exists('get_admin_captcha_by'))
+    get_admin_captcha_by('remove');
+
 goto_url("./board_form.php?w=u&bo_table={$bo_table}&amp;{$qstr}");
 ?>
@@ -56,7 +56,7 @@ $colspan = 15;

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    생성된 게시판수 <?php echo number_format($total_count) ?>개
+    <span class="btn_ov01"><span class="ov_txt">생성된 게시판수</span><span class="ov_num"> <?php echo number_format($total_count) ?>개</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
@@ -73,11 +73,7 @@ $colspan = 15;

 </form>

-<?php if ($is_admin == 'super') { ?>
-<div class="btn_add01 btn_add">
-    <a href="./board_form.php" id="bo_add">게시판 추가</a>
-</div>
-<?php } ?>
+

 <form name="fboardlist" id="fboardlist" action="./board_list_update.php" onsubmit="return fboardlist_submit(this);" method="post">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -99,7 +95,7 @@ $colspan = 15;
        <th scope="col"><?php echo subject_sort_link('a.gr_id') ?>그룹</a></th>
        <th scope="col"><?php echo subject_sort_link('bo_table') ?>TABLE</a></th>
        <th scope="col"><?php echo subject_sort_link('bo_skin', '', 'desc') ?>스킨</a></th>
-        <th scope="col"><?php echo subject_sort_link('bo_mobile_skin', '', 'desc') ?>모바일<br>스킨</span></a></th>
+        <th scope="col"><?php echo subject_sort_link('bo_mobile_skin', '', 'desc') ?>모바일<br>스킨</a></th>
        <th scope="col"><?php echo subject_sort_link('bo_subject') ?>제목</a></th>
        <th scope="col">읽기P<span class="sound_only">포인트</span></th>
        <th scope="col">쓰기P<span class="sound_only">포인트</span></th>
@@ -115,8 +111,8 @@ $colspan = 15;
    <tbody>
    <?php
    for ($i=0; $row=sql_fetch_array($result); $i++) {
-        $one_update = '<a href="./board_form.php?w=u&amp;bo_table='.$row['bo_table'].'&amp;'.$qstr.'">수정</a>';
-        $one_copy = '<a href="./board_copy.php?bo_table='.$row['bo_table'].'" class="board_copy" target="win_board_copy">복사</a>';
+        $one_update = '<a href="./board_form.php?w=u&amp;bo_table='.$row['bo_table'].'&amp;'.$qstr.'" class="btn btn_03">수정</a>';
+        $one_copy = '<a href="./board_copy.php?bo_table='.$row['bo_table'].'" class="board_copy btn btn_02" target="win_board_copy">복사</a>';

        $bg = 'bg'.($i%2);
    ?>
@@ -147,35 +143,35 @@ $colspan = 15;
        </td>
        <td>
            <label for="bo_subject_<?php echo $i; ?>" class="sound_only">게시판 제목<strong class="sound_only"> 필수</strong></label>
-            <input type="text" name="bo_subject[<?php echo $i ?>]" value="<?php echo get_text($row['bo_subject']) ?>" id="bo_subject_<?php echo $i ?>" required class="required frm_input bo_subject full_input" size="10">
+            <input type="text" name="bo_subject[<?php echo $i ?>]" value="<?php echo get_text($row['bo_subject']) ?>" id="bo_subject_<?php echo $i ?>" required class="required tbl_input bo_subject full_input" size="10">
        </td>
        <td class="td_numsmall">
            <label for="bo_read_point_<?php echo $i; ?>" class="sound_only">읽기 포인트</label>
-            <input type="text" name="bo_read_point[<?php echo $i ?>]" value="<?php echo $row['bo_read_point'] ?>" id="bo_read_point_<?php echo $i; ?>" class="frm_input" size="2">
+            <input type="text" name="bo_read_point[<?php echo $i ?>]" value="<?php echo $row['bo_read_point'] ?>" id="bo_read_point_<?php echo $i; ?>" class="tbl_input" size="2">
        </td>
        <td class="td_numsmall">
            <label for="bo_write_point_<?php echo $i; ?>" class="sound_only">쓰기 포인트</label>
-            <input type="text" name="bo_write_point[<?php echo $i ?>]" value="<?php echo $row['bo_write_point'] ?>" id="bo_write_point_<?php echo $i; ?>" class="frm_input" size="2">
+            <input type="text" name="bo_write_point[<?php echo $i ?>]" value="<?php echo $row['bo_write_point'] ?>" id="bo_write_point_<?php echo $i; ?>" class="tbl_input" size="2">
        </td>
        <td class="td_numsmall">
            <label for="bo_comment_point_<?php echo $i; ?>" class="sound_only">댓글 포인트</label>
-            <input type="text" name="bo_comment_point[<?php echo $i ?>]" value="<?php echo $row['bo_comment_point'] ?>" id="bo_comment_point_<?php echo $i; ?>" class="frm_input" size="2">
+            <input type="text" name="bo_comment_point[<?php echo $i ?>]" value="<?php echo $row['bo_comment_point'] ?>" id="bo_comment_point_<?php echo $i; ?>" class="tbl_input" size="2">
        </td>
        <td class="td_numsmall">
-            <label for="bo_download_point_<?php echo $i; ?>" class="sound_only">다운 포인트</label>
-            <input type="text" name="bo_download_point[<?php echo $i ?>]" value="<?php echo $row['bo_download_point'] ?>" id="bo_download_point_<?php echo $i; ?>" class="frm_input" size="2">
+            <label for="bo_download_point_<?php echo $i; ?>" class="sound_only">다운<br>포인트</label>
+            <input type="text" name="bo_download_point[<?php echo $i ?>]" value="<?php echo $row['bo_download_point'] ?>" id="bo_download_point_<?php echo $i; ?>" class="tbl_input" size="2">
        </td>
-        <td class="td_chk">
-            <label for="bo_use_sns_<?php echo $i; ?>" class="sound_only">SNS 사용</label>
+        <td class="td_numsmall">
+            <label for="bo_use_sns_<?php echo $i; ?>" class="sound_only">SNS<br>사용</label>
            <input type="checkbox" name="bo_use_sns[<?php echo $i ?>]" value="1" id="bo_use_sns_<?php echo $i ?>" <?php echo $row['bo_use_sns']?"checked":"" ?>>
        </td>
-        <td class="td_chk">
-            <label for="bo_use_search_<?php echo $i; ?>" class="sound_only">검색 사용</label>
+        <td class="td_numsmall">
+            <label for="bo_use_search_<?php echo $i; ?>" class="sound_only">검색<br>사용</label>
            <input type="checkbox" name="bo_use_search[<?php echo $i ?>]" value="1" id="bo_use_search_<?php echo $i ?>" <?php echo $row['bo_use_search']?"checked":"" ?>>
        </td>
-        <td class="td_chk">
-            <label for="bo_order_<?php echo $i; ?>" class="sound_only">출력 순서</label>
-            <input type="text" name="bo_order[<?php echo $i ?>]" value="<?php echo $row['bo_order'] ?>" id="bo_order_<?php echo $i ?>" class="frm_input" size="2">
+        <td class="td_numsmall">
+            <label for="bo_order_<?php echo $i; ?>" class="sound_only">출력<br>순서</label>
+            <input type="text" name="bo_order[<?php echo $i ?>]" value="<?php echo $row['bo_order'] ?>" id="bo_order_<?php echo $i ?>" class="tbl_input" size="2">
        </td>
        <td class="td_mngsmall">
            <label for="bo_device_<?php echo $i; ?>" class="sound_only">접속기기</label>
@@ -185,7 +181,7 @@ $colspan = 15;
                <option value="mobile"<?php echo get_selected($row['bo_device'], 'mobile'); ?>>모바일</option>
            </select>
        </td>
-        <td class="td_mngsmall">
+        <td class="td_mng td_mng_m">
            <?php echo $one_update ?>
            <?php echo $one_copy ?>
        </td>
@@ -199,10 +195,13 @@ $colspan = 15;
    </table>
 </div>

-<div class="btn_list01 btn_list">
-    <input type="submit" name="act_button" value="선택수정" onclick="document.pressed=this.value">
+<div class="btn_fixed_top">
+    <input type="submit" name="act_button" value="선택수정" onclick="document.pressed=this.value" class="btn_02 btn">
    <?php if ($is_admin == 'super') { ?>
-    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value">
+    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value" class="btn_02 btn">
+    <?php } ?>
+    <?php if ($is_admin == 'super') { ?>
+    <a href="./board_form.php" id="bo_add" class="btn_01 btn">게시판 추가</a>
    <?php } ?>
 </div>

@@ -8,6 +8,8 @@ if (!count($_POST['chk'])) {
    alert($_POST['act_button']." 하실 항목을 하나 이상 체크하세요.");
 }

+check_admin_token();
+
 if ($_POST['act_button'] == "선택수정") {

    auth_check($auth[$sub_menu], 'w');
@@ -19,7 +21,7 @@ if ($_POST['act_button'] == "선택수정") {

        if ($is_admin != 'super') {
            $sql = " select count(*) as cnt from {$g5['board_table']} a, {$g5['group_table']} b
-                      where a.gr_id = '{$_POST['gr_id'][$k]}'
+                      where a.gr_id = '".sql_real_escape_string($_POST['gr_id'][$k])."'
                        and a.gr_id = b.gr_id
                        and b.gr_admin = '{$member['mb_id']}' ";
            $row = sql_fetch($sql);
@@ -28,19 +30,20 @@ if ($_POST['act_button'] == "선택수정") {
        }

        $sql = " update {$g5['board_table']}
-                    set gr_id               = '{$_POST['gr_id'][$k]}',
-                        bo_subject          = '{$_POST['bo_subject'][$k]}',
-                        bo_device           = '{$_POST['bo_device'][$k]}',
-                        bo_skin             = '{$_POST['bo_skin'][$k]}',
-                        bo_mobile_skin      = '{$_POST['bo_mobile_skin'][$k]}',
-                        bo_read_point       = '{$_POST['bo_read_point'][$k]}',
-                        bo_write_point      = '{$_POST['bo_write_point'][$k]}',
-                        bo_comment_point    = '{$_POST['bo_comment_point'][$k]}',
-                        bo_download_point   = '{$_POST['bo_download_point'][$k]}',
-                        bo_use_search       = '{$_POST['bo_use_search'][$k]}',
-                        bo_use_sns          = '{$_POST['bo_use_sns'][$k]}',
-                        bo_order            = '{$_POST['bo_order'][$k]}'
-                  where bo_table            = '{$_POST['board_table'][$k]}' ";
+                    set gr_id               = '".sql_real_escape_string($_POST['gr_id'][$k])."',
+                        bo_subject          = '".sql_real_escape_string($_POST['bo_subject'][$k])."',
+                        bo_device           = '".sql_real_escape_string($_POST['bo_device'][$k])."',
+                        bo_skin             = '".sql_real_escape_string($_POST['bo_skin'][$k])."',
+                        bo_mobile_skin      = '".sql_real_escape_string($_POST['bo_mobile_skin'][$k])."',
+                        bo_read_point       = '".sql_real_escape_string($_POST['bo_read_point'][$k])."',
+                        bo_write_point      = '".sql_real_escape_string($_POST['bo_write_point'][$k])."',
+                        bo_comment_point    = '".sql_real_escape_string($_POST['bo_comment_point'][$k])."',
+                        bo_download_point   = '".sql_real_escape_string($_POST['bo_download_point'][$k])."',
+                        bo_use_search       = '".sql_real_escape_string($_POST['bo_use_search'][$k])."',
+                        bo_use_sns          = '".sql_real_escape_string($_POST['bo_use_sns'][$k])."',
+                        bo_order            = '".sql_real_escape_string($_POST['bo_order'][$k])."'
+                  where bo_table            = '".sql_real_escape_string($_POST['board_table'][$k])."' ";
+
        sql_query($sql);
    }

@@ -51,8 +54,6 @@ if ($_POST['act_button'] == "선택수정") {

    auth_check($auth[$sub_menu], 'd');

-    check_admin_token();
-
    // _BOARD_DELETE_ 상수를 선언해야 board_delete.inc.php 가 정상 작동함
    define('_BOARD_DELETE_', true);

@@ -12,7 +12,7 @@ $sound_only = '';
 if ($w == '') {
    $gr_id_attr = 'required';
    $sound_only = '<strong class="sound_only"> 필수</strong>';
-    $gr['gr_use_access'] = 0;
+    $gr = array('gr_use_access' => 0);
    $html_title .= ' 생성';
 } else if ($w == 'u') {
    $gr_id_attr = 'readonly';
@@ -125,9 +125,9 @@ include_once('./admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" class="btn_submit" accesskey="s" value="확인">
-    <a href="./boardgroup_list.php?<?php echo $qstr ?>">목록</a>
+<div class="btn_fixed_top">
+    <a href="./boardgroup_list.php?<?php echo $qstr ?>" class="btn btn_02">목록</a>
+    <input type="submit" class="btn_submit btn" accesskey="s" value="확인">
 </div>

 </form>
@@ -16,7 +16,9 @@ if (!preg_match("/^([A-Za-z0-9_]{1,10})$/", $_POST['gr_id']))

 if (!$gr_subject) alert('그룹 제목을 입력하세요.');

-$sql_common = " gr_subject = '{$_POST['gr_subject']}',
+$gr_subject = isset($_POST['gr_subject']) ? strip_tags($_POST['gr_subject']) : '';
+
+$sql_common = " gr_subject = '{$gr_subject}',
                gr_device = '{$_POST['gr_device']}',
                gr_admin  = '{$_POST['gr_admin']}',
                gr_1_subj = '{$_POST['gr_1_subj']}',
@@ -60,7 +60,7 @@ $colspan = 10;

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    전체그룹 <?php echo number_format($total_count) ?>개
+    <span class="btn_ov01"><span class="ov_txt">전체그룹</span><span class="ov_num">  <?php echo number_format($total_count) ?>개</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
@@ -71,16 +71,10 @@ $colspan = 10;
    <option value="gr_admin"<?php echo get_selected($_GET['sfl'], "gr_admin"); ?>>그룹관리자</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
-<input type="text" name="stx" value="<?php echo $stx ?>" required class="required frm_input">
+<input type="text" name="stx" id="stx" value="<?php echo $stx ?>" required class="required frm_input">
 <input type="submit" value="검색" class="btn_submit">
-</fieldset>
 </form>

-<?php if ($is_admin == 'super') { ?>
-<div class="btn_add01 btn_add sort_with">
-    <a href="./boardgroup_form.php" id="bo_gr_add">게시판그룹 추가</a>
-</div>
-<?php } ?>

 <form name="fboardgrouplist" id="fboardgrouplist" action="./boardgroup_list_update.php" onsubmit="return fboardgrouplist_submit(this);" method="post">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -122,7 +116,7 @@ $colspan = 10;
        $sql2 = " select count(*) as cnt from {$g5['board_table']} where gr_id = '{$row['gr_id']}' ";
        $row2 = sql_fetch($sql2);

-        $s_upd = '<a href="./boardgroup_form.php?'.$qstr.'&amp;w=u&amp;gr_id='.$row['gr_id'].'">수정</a>';
+        $s_upd = '<a href="./boardgroup_form.php?'.$qstr.'&amp;w=u&amp;gr_id='.$row['gr_id'].'" class="btn_03 btn">수정</a>';

        $bg = 'bg'.($i%2);
    ?>
@@ -133,28 +127,28 @@ $colspan = 10;
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['gr_subject'] ?> 그룹</label>
            <input type="checkbox" name="chk[]" value="<?php echo $i ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td class="td_grid"><a href="<?php echo G5_BBS_URL ?>/group.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row['gr_id'] ?></a></td>
+        <td class="td_left"><a href="<?php echo G5_BBS_URL ?>/group.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row['gr_id'] ?></a></td>
        <td class="td_input">
            <label for="gr_subject_<?php echo $i; ?>" class="sound_only">그룹제목</label>
-            <input type="text" name="gr_subject[<?php echo $i ?>]" value="<?php echo get_text($row['gr_subject']) ?>" id="gr_subject_<?php echo $i ?>" class="frm_input">
+            <input type="text" name="gr_subject[<?php echo $i ?>]" value="<?php echo get_text($row['gr_subject']) ?>" id="gr_subject_<?php echo $i ?>" class="tbl_input">
        </td>
        <td class="td_mng td_input">
        <?php if ($is_admin == 'super'){ ?>
            <label for="gr_admin_<?php echo $i; ?>" class="sound_only">그룹관리자</label>
-            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>" id="gr_admin_<?php echo $i ?>" class="frm_input" size="10" maxlength="20">
+            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>" id="gr_admin_<?php echo $i ?>" class="tbl_input" size="10" maxlength="20">
        <?php }else{ ?>
            <input type="hidden" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>"><?php echo $row['gr_admin'] ?>
        <?php } ?>
        </td>
-        <td class="td_numsmall"><a href="./board_list.php?sfl=a.gr_id&amp;stx=<?php echo $row['gr_id'] ?>"><?php echo $row2['cnt'] ?></a></td>
-        <td class="td_chk">
+        <td class="td_num"><a href="./board_list.php?sfl=a.gr_id&amp;stx=<?php echo $row['gr_id'] ?>"><?php echo $row2['cnt'] ?></a></td>
+        <td class="td_numsmall">
             <label for="gr_use_access_<?php echo $i; ?>" class="sound_only">접근회원 사용</label>
            <input type="checkbox" name="gr_use_access[<?php echo $i ?>]" <?php echo $row['gr_use_access']?'checked':'' ?> value="1" id="gr_use_access_<?php echo $i ?>">
        </td>
-        <td class="td_numsmall"><a href="./boardgroupmember_list.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row1['cnt'] ?></a></td>
-        <td class="td_chk">
+        <td class="td_num"><a href="./boardgroupmember_list.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row1['cnt'] ?></a></td>
+        <td class="td_numsmall">
            <label for="gr_order_<?php echo $i; ?>" class="sound_only">메인메뉴 출력순서</label>
-            <input type="text" name="gr_order[<?php echo $i ?>]" value="<?php echo $row['gr_order'] ?>" id="gr_order_<?php echo $i ?>" class="frm_input" size="2">
+            <input type="text" name="gr_order[<?php echo $i ?>]" value="<?php echo $row['gr_order'] ?>" id="gr_order_<?php echo $i ?>" class="tbl_input" size="2">
        </td>
        <td class="td_mng">
            <label for="gr_device_<?php echo $i; ?>" class="sound_only">접속기기</label>
@@ -164,7 +158,7 @@ $colspan = 10;
                <option value="mobile"<?php echo get_selected($row['gr_device'], 'mobile'); ?>>모바일</option>
            </select>
        </td>
-        <td class="td_mngsmall"><?php echo $s_upd ?></td>
+        <td class="td_mng td_mng_s"><?php echo $s_upd ?></td>
    </tr>

    <?php
@@ -175,10 +169,10 @@ $colspan = 10;
    </table>
 </div>

-<div class="btn_list01 btn_list">
-    <input type="submit" name="act_button" onclick="document.pressed=this.value" value="선택수정">
-    <input type="submit" name="act_button" onclick="document.pressed=this.value" value="선택삭제">
-    <a href="./boardgroup_form.php">게시판그룹 추가</a>
+<div class="btn_fixed_top">
+    <input type="submit" name="act_button" onclick="document.pressed=this.value" value="선택수정" class="btn btn_02">
+    <input type="submit" name="act_button" onclick="document.pressed=this.value" value="선택삭제" class="btn btn_02">
+    <a href="./boardgroup_form.php" class="btn btn_01">게시판그룹 추가</a>
 </div>
 </form>

@@ -19,10 +19,11 @@ for ($i=0; $i<$count; $i++)
 {
    $k     = $_POST['chk'][$i];
    $gr_id = $_POST['group_id'][$k];
+    $gr_subject = strip_tags($_POST['gr_subject'][$k]);

    if($_POST['act_button'] == '선택수정') {
        $sql = " update {$g5['group_table']}
-                    set gr_subject    = '{$_POST['gr_subject'][$k]}',
+                    set gr_subject    = '{$gr_subject}',
                        gr_device     = '{$_POST['gr_device'][$k]}',
                        gr_admin      = '{$_POST['gr_admin'][$k]}',
                        gr_use_access = '{$_POST['gr_use_access'][$k]}',
@@ -17,8 +17,13 @@ $colspan = 4;
 <form name="fboardgroupmember_form" id="fboardgroupmember_form" action="./boardgroupmember_update.php" onsubmit="return boardgroupmember_form_check(this)" method="post">
 <input type="hidden" name="mb_id" value="<?php echo $mb['mb_id'] ?>" id="mb_id">
 <input type="hidden" name="token" value="" id="token">
+<div class="local_ov01 local_ov">
+    <span class="btn_ov01"><span class="ov_txt"> 아이디</span><span class="ov_num"><?php echo $mb['mb_id'] ?></span></span>
+    <span class="btn_ov01"><span class="ov_txt"> 이름</span><span class="ov_num"><?php echo get_text($mb['mb_name']); ?></span></span>
+    <span class="btn_ov01"><span class="ov_txt"> 닉네임</span><span class="ov_num"><?php echo $mb['mb_nick'] ?></span></span>
+</div>    
 <div class="local_cmd01 local_cmd">
-    <p>아이디 <b><?php echo $mb['mb_id'] ?></b>, 이름 <b><?php echo get_text($mb['mb_name']); ?></b>, 닉네임 <b><?php echo $mb['mb_nick'] ?></b></p>
+
    <label for="gr_id">그룹지정</label>
    <select name="gr_id" id="gr_id">
        <option value="">접근가능 그룹을 선택하세요.</option>
@@ -36,7 +41,7 @@ $colspan = 4;
        }
        ?>
    </select>
-    <input type="submit" value="선택" class="btn_submit" accesskey="s">
+    <input type="submit" value="선택" class="btn_submit btn" accesskey="s">
 </div>
 </form>

@@ -96,7 +101,7 @@ $colspan = 4;
 </div>

 <div class="btn_list01 btn_list">
-    <input type="submit" name="" value="선택삭제">
+    <input type="submit" name="" value="선택삭제" class="btn btn_02">
 </div>
 </form>

@@ -5,6 +5,11 @@ include_once('./_common.php');
 if ($is_admin != 'super')
    alert('최고관리자만 접근 가능합니다.', G5_URL);

+@include_once('./safe_check.php');
+if(function_exists('social_log_file_delete')){
+    social_log_file_delete();
+}
+
 $g5['title'] = '캐시파일 일괄삭제';
 include_once('./admin.head.php');
 ?>
@@ -23,7 +28,7 @@ if (!$dir=@opendir(G5_DATA_PATH.'/cache')) {
 }

 $cnt=0;
-echo '<ul>'.PHP_EOL;
+echo '<ul class="session_del">'.PHP_EOL;

 $files = glob(G5_DATA_PATH.'/cache/latest-*');
 if (is_array($files)) {
@@ -23,7 +23,7 @@ if (!$dir=@opendir(G5_DATA_PATH.'/cache')) {
 }

 $cnt=0;
-echo '<ul>'.PHP_EOL;
+echo '<ul class="session_del">'.PHP_EOL;

 $files = glob(G5_DATA_PATH.'/cache/?captcha-*');
 if (is_array($files)) {
@@ -192,6 +192,67 @@ if(!sql_query(" select vi_browser from {$g5['visit_table']} limit 1 ")) {
                    ADD `vi_device` varchar(255) NOT NULL DEFAULT '' AFTER `vi_os` ", true);
 }

+//소셜 로그인 관련 필드 및 구글 리챕챠 필드 추가
+if(!isset($config['cf_social_login_use'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_social_login_use` tinyint(4) NOT NULL DEFAULT '0' AFTER `cf_googl_shorturl_apikey`,
+                ADD `cf_google_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_twitter_secret`,
+                ADD `cf_google_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_google_clientid`,
+                ADD `cf_naver_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_google_secret`,
+                ADD `cf_naver_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_naver_clientid`,
+                ADD `cf_kakao_rest_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_naver_secret`,
+                ADD `cf_social_servicelist` varchar(255) NOT NULL DEFAULT '' AFTER `cf_social_login_use`,
+                ADD `cf_payco_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_social_servicelist`,
+                ADD `cf_payco_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_payco_clientid`,
+                ADD `cf_captcha` varchar(100) NOT NULL DEFAULT '' AFTER `cf_kakao_js_apikey`,
+                ADD `cf_recaptcha_site_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_captcha`,
+                ADD `cf_recaptcha_secret_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_recaptcha_site_key`
+    ", true);
+}
+
+//소셜 로그인 관련 필드 카카오 클라이언트 시크릿 추가
+if(!isset($config['cf_kakao_client_secret'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_kakao_client_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_kakao_rest_key`
+    ", true);
+}
+
+// 회원 이미지 관련 필드 추가
+if(!isset($config['cf_member_img_size'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_member_img_size` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_icon_height`,
+                ADD `cf_member_img_width` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_img_size`,
+                ADD `cf_member_img_height` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_img_width`
+    ", true);
+
+    $sql = " update {$g5['config_table']} set cf_member_img_size = 50000, cf_member_img_width = 60, cf_member_img_height = 60 ";
+    sql_query($sql, false);
+
+    $config['cf_member_img_size'] = 50000;
+    $config['cf_member_img_width'] = 60;
+    $config['cf_member_img_height'] = 60;
+}
+
+// 소셜 로그인 관리 테이블 없을 경우 생성
+if(!sql_query(" DESC {$g5['social_profile_table']} ", false)) {
+    sql_query(" CREATE TABLE IF NOT EXISTS `{$g5['social_profile_table']}` (
+                  `mp_no` int(11) NOT NULL AUTO_INCREMENT,
+                  `mb_id` varchar(255) NOT NULL DEFAULT '',
+                  `provider` varchar(50) NOT NULL DEFAULT '',
+                  `object_sha` varchar(45) NOT NULL DEFAULT '',
+                  `identifier` varchar(255) NOT NULL DEFAULT '',
+                  `profileurl` varchar(255) NOT NULL DEFAULT '',
+                  `photourl` varchar(255) NOT NULL DEFAULT '',
+                  `displayname` varchar(150) NOT NULL DEFAULT '',
+                  `description` varchar(255) NOT NULL DEFAULT '',
+                  `mp_register_day` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
+                  `mp_latest_day` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
+                  UNIQUE KEY `mp_no` (`mp_no`),
+                  KEY `mb_id` (`mb_id`),
+                  KEY `provider` (`provider`)
+                ) ", true);
+}
+
 if(!$config['cf_faq_skin']) $config['cf_faq_skin'] = "basic";
 if(!$config['cf_mobile_faq_skin']) $config['cf_mobile_faq_skin'] = "basic";

@@ -213,10 +274,6 @@ $pg_anchor = '<ul class="anchor">
    <li><a href="#anc_cf_extra">여분필드</a></li>
 </ul>';

-$frm_submit = '<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="'.G5_URL.'/">메인으로</a>
-</div>';

 if (!$config['cf_icode_server_ip'])   $config['cf_icode_server_ip'] = '211.172.232.124';
 if (!$config['cf_icode_server_port']) $config['cf_icode_server_port'] = '7295';
@@ -403,12 +460,23 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
            </td>
        </tr>
        <tr>
+            <th scope="row"><label for="cf_captcha">캡챠 선택<strong class="sound_only">필수</strong></label></th>
+            <td colspan="3">
+                <?php echo help('사용할 캡챠를 선택합니다.<br>1) Kcaptcha 는 그누보드5의 기본캡챠입니다. ( 문자입력 )<br>2) reCAPTCHA V2 는 구글에서 서비스하는 원클릭 형식의 간편한 캡챠입니다. ( 모바일 친화적 UI )<br>3) Invisible reCAPTCHA 는 구글에서 서비스하는 안보이는 형식의 캡챠입니다. ( 간혹 퀴즈를 풀어야 합니다. )<br>') ?>
+                <select name="cf_captcha" id="cf_captcha" required class="required">
+                <option value="kcaptcha" <?php echo get_selected($config['cf_captcha'], 'kcaptcha') ; ?>>Kcaptcha</option>
+                <option value="recaptcha" <?php echo get_selected($config['cf_captcha'], 'recaptcha') ; ?>>reCAPTCHA V2</option>
+                <option value="recaptcha_inv" <?php echo get_selected($config['cf_captcha'], 'recaptcha_inv') ; ?>>Invisible reCAPTCHA</option>
+                </select>
+            </td>
+        </tr>
+        <tr class="kcaptcha_mp3">
            <th scope="row"><label for="cf_captcha_mp3">음성캡챠 선택<strong class="sound_only">필수</strong></label></th>
            <td colspan="3">
-                <?php echo help(G5_CAPTCHA_URL.'/mp3 밑의 음성 폴더를 선택합니다.') ?>
+                <?php echo help('kcaptcha 사용시 '.str_replace(array('recaptcha_inv', 'recaptcha'), 'kcaptcha', G5_CAPTCHA_URL).'/mp3 밑의 음성 폴더를 선택합니다.') ?>
                <select name="cf_captcha_mp3" id="cf_captcha_mp3" required class="required">
                <?php
-                $arr = get_skin_dir('mp3', G5_CAPTCHA_PATH);
+                $arr = get_skin_dir('mp3', str_replace(array('recaptcha_inv', 'recaptcha'), 'kcaptcha', G5_CAPTCHA_PATH));
                for ($i=0; $i<count($arr); $i++) {
                    if ($i == 0) echo "<option value=\"\">선택</option>";
                    echo "<option value=\"".$arr[$i]."\"".get_selected($config['cf_captcha_mp3'], $arr[$i]).">".$arr[$i]."</option>\n";
@@ -417,6 +485,19 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
                </select>
            </td>
        </tr>
+		<tr>
+			<th scope="row"><label for="cf_recaptcha_site_key">구글 reCAPTCHA Site key</label></th>
+			<td colspan="3">
+            <?php echo help('reCAPTCHA V2와 Invisible reCAPTCHA 캡챠의 sitekey 와 secret 키는 동일하지 않고, 서로 발급받는 키가 다릅니다.') ?>
+            <input type="text" name="cf_recaptcha_site_key" value="<?php echo $config['cf_recaptcha_site_key']; ?>" id="cf_recaptcha_site_key" class="frm_input" size="52"> <a href="https://www.google.com/recaptcha/admin" target="_blank" class="btn_frmline">reCAPTCHA 등록하기</a>
+            </td>
+		</tr>
+		<tr>
+            <th scope="row"><label for="cf_recaptcha_secret_key">구글 reCAPTCHA Secret key</label></th>
+            <td colspan="3">
+                <input type="text" name="cf_recaptcha_secret_key" value="<?php echo $config['cf_recaptcha_secret_key']; ?>" id="cf_recaptcha_secret_key" class="frm_input" size="52">
+            </td>
+		</tr>
        <tr>
            <th scope="row"><label for="cf_use_copy_log">복사, 이동시 로그</label></th>
            <td colspan="3">
@@ -476,8 +557,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
        </table>
    </div>
 </section>
-
-<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_confc" data-type="conf_skin">테마 스킨설정 가져오기</button></div>', $frm_submit); ?>
+<button type="button" class="get_theme_confc btn_02 btn" data-type="conf_skin" >테마 스킨설정 가져오기</button>

 <section id="anc_cf_board">
    <h2 class="h2_frm">게시판 기본 설정</h2>
@@ -559,8 +639,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>
-
 <section id="anc_cf_join">
    <h2 class="h2_frm">회원가입 설정</h2>
    <?php echo $pg_anchor ?>
@@ -644,7 +722,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
                    <option value="2"<?php echo get_selected($config['cf_use_member_icon'], '2') ?>>아이콘+이름 표시
                </select>
            </td>
-            <th scope="row"><label for="cf_icon_level">아이콘 업로드 권한</label></th>
+            <th scope="row"><label for="cf_icon_level">회원 아이콘, 이미지 업로드 권한</label></th>
            <td><?php echo get_member_level_select('cf_icon_level', 1, 9, $config['cf_icon_level']) ?> 이상</td>
        </tr>
        <tr>
@@ -659,6 +737,18 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
                픽셀 이하
            </td>
        </tr>
+        <tr>
+            <th scope="row"><label for="cf_member_img_size">회원이미지 용량</label></th>
+            <td><input type="text" name="cf_member_img_size" value="<?php echo $config['cf_member_img_size'] ?>" id="cf_member_img_size" class="frm_input" size="10"> 바이트 이하</td>
+            <th scope="row">회원이미지 사이즈</th>
+            <td>
+                <label for="cf_member_img_width">가로</label>
+                <input type="text" name="cf_member_img_width" value="<?php echo $config['cf_member_img_width'] ?>" id="cf_member_img_width" class="frm_input" size="2">
+                <label for="cf_member_img_height">세로</label>
+                <input type="text" name="cf_member_img_height" value="<?php echo $config['cf_member_img_height'] ?>" id="cf_member_img_height" class="frm_input" size="2">
+                픽셀 이하
+            </td>
+        </tr>
        <tr>
            <th scope="row"><label for="cf_use_recommend">추천인제도 사용</label></th>
            <td><input type="checkbox" name="cf_use_recommend" value="1" id="cf_use_recommend" <?php echo $config['cf_use_recommend']?'checked':''; ?>> 사용</td>
@@ -688,9 +778,9 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
        </tbody>
        </table>
    </div>
+    <button type="button" class="get_theme_confc btn btn_02" data-type="conf_member">테마 회원스킨설정 가져오기</button>
 </section>

-<?php echo preg_replace('#</div>$#i', '<button type="button" class="get_theme_confc" data-type="conf_member">테마 회원스킨설정 가져오기</button></div>', $frm_submit); ?>

 <section id="anc_cf_cert">
    <h2 class="h2_frm">본인확인 설정</h2>
@@ -791,7 +881,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_mail">
    <h2 class="h2_frm">기본 메일 환경 설정</h2>
@@ -815,7 +904,8 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
        <tr>
            <th scope="row"><label for="cf_use_email_certify">메일인증 사용</label></th>
            <td>
-                <?php echo help('메일에 배달된 인증 주소를 클릭하여야 회원으로 인정합니다.'); ?>
+                <?php $tmp = !(defined('G5_SOCIAL_CERTIFY_MAIL') && G5_SOCIAL_CERTIFY_MAIL) ? '<br>( SNS를 이용한 소셜로그인 한 회원은 회원메일인증을 하지 않습니다. 일반회원에게만 해당됩니다. )' : ''; ?>
+                <?php echo help('메일에 배달된 인증 주소를 클릭하여야 회원으로 인정합니다.'.$tmp); ?>
                <input type="checkbox" name="cf_use_email_certify" value="1" id="cf_use_email_certify" <?php echo $config['cf_use_email_certify']?'checked':''; ?>> 사용
            </td>
        </tr>
@@ -830,7 +920,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_article_mail">
    <h2 class="h2_frm">게시판 글 작성 시 메일 설정</h2>
@@ -884,7 +973,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_join_mail">
    <h2 class="h2_frm">회원가입 시 메일 설정</h2>
@@ -917,7 +1005,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_vote_mail">
    <h2 class="h2_frm">투표 기타의견 작성 시 메일 설정</h2>
@@ -943,7 +1030,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_sns">
    <h2 class="h2_frm">소셜네트워크서비스(SNS : Social Network Service)</h2>
@@ -959,34 +1045,136 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
            <col>
        </colgroup>
        <tbody>
+        <tr>
+            <th scope="row"><label for="cf_social_login_use">소셜로그인설정</label></th>
+            <td colspan="3">
+                <?php echo help('소셜로그인을 사용합니다. <a href="https://sir.kr/manual/g5/276" class="btn btn_03" target="_blank" style="margin-left:10px" >설정 관련 메뉴얼 보기</a> ') ?>
+                <input type="checkbox" name="cf_social_login_use" value="1" id="cf_social_login_use" <?php echo (!empty($config['cf_social_login_use']))?'checked':''; ?>> 사용
+            </td>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_social_servicelist">소셜로그인설정</label></th>
+            <td colspan="3" class="social_config_explain">
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_naver" value="naver" <?php echo option_array_checked('naver', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_naver">네이버 로그인을 사용합니다</label>
+                    <div>
+                    <h3>네이버 CallbackURL</h3>
+                    <p><?php echo get_social_callbackurl('naver'); ?></p>
+                    </div>
+                </div>
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_kakao" value="kakao" <?php echo option_array_checked('kakao', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_kakao">카카오 로그인을 사용합니다</label>
+                    <div>
+                    <h3>카카오 웹 Redirect Path</h3>
+                    <p><?php echo get_social_callbackurl('kakao', true); ?></p>
+                    </div>
+                </div>
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_facebook" value="facebook" <?php echo option_array_checked('facebook', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_facebook">페이스북 로그인을 사용합니다</label>
+                    <div>
+                    <h3>페이스북 유효한 OAuth 리디렉션 URI</h3>
+                    <p><?php echo get_social_callbackurl('facebook'); ?></p>
+                    </div>
+                </div>
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_google" value="google" <?php echo option_array_checked('google', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_google">구글 로그인을 사용합니다</label>
+                    <div>
+                    <h3>구글 승인된 리디렉션 URI</h3>
+                    <p><?php echo get_social_callbackurl('google'); ?></p>
+                    </div>
+                </div>
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_twitter" value="twitter" <?php echo option_array_checked('twitter', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_twitter">트위터 로그인을 사용합니다</label>
+                    <div>
+                    <h3>트위터 CallbackURL</h3>
+                    <p><?php echo get_social_callbackurl('twitter'); ?></p>
+                    </div>
+                </div>
+                <div class="explain_box">
+                    <input type="checkbox" name="cf_social_servicelist[]" id="check_social_payco" value="payco" <?php echo option_array_checked('payco', $config['cf_social_servicelist']); ?> >
+                    <label for="check_social_payco">페이코 로그인을 사용합니다</label>
+                    <div>
+                    <h3>페이코 CallbackURL</h3>
+                    <p><?php echo get_social_callbackurl('payco'); ?></p>
+                    </div>
+                </div>
+            </td>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_naver_clientid">네이버 Client ID</label></th>
+            <td>
+                <input type="text" name="cf_naver_clientid" value="<?php echo $config['cf_naver_clientid'] ?>" id="cf_naver_clientid" class="frm_input" size="40"> <a href="https://developers.naver.com/apps/#/register" target="_blank" class="btn_frmline">앱 등록하기</a>
+            </td>
+            <th scope="row"><label for="cf_naver_secret">네이버 Client Secret</label></th>
+            <td>
+                <input type="text" name="cf_naver_secret" value="<?php echo $config['cf_naver_secret'] ?>" id="cf_naver_secret" class="frm_input" size="45">
+            </td>
+        </tr>
        <tr>
            <th scope="row"><label for="cf_facebook_appid">페이스북 앱 ID</label></th>
            <td>
-                <input type="text" name="cf_facebook_appid" value="<?php echo $config['cf_facebook_appid'] ?>" id="cf_facebook_appid" class="frm_input"> <a href="https://developers.facebook.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_facebook_appid" value="<?php echo $config['cf_facebook_appid'] ?>" id="cf_facebook_appid" class="frm_input" size="40"> <a href="https://developers.facebook.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
            </td>
            <th scope="row"><label for="cf_facebook_secret">페이스북 앱 Secret</label></th>
            <td>
-                <input type="text" name="cf_facebook_secret" value="<?php echo $config['cf_facebook_secret'] ?>" id="cf_facebook_secret" class="frm_input" size="35">
+                <input type="text" name="cf_facebook_secret" value="<?php echo $config['cf_facebook_secret'] ?>" id="cf_facebook_secret" class="frm_input" size="45">
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_twitter_key">트위터 컨슈머 Key</label></th>
            <td>
-                <input type="text" name="cf_twitter_key" value="<?php echo $config['cf_twitter_key'] ?>" id="cf_twitter_key" class="frm_input"> <a href="https://dev.twitter.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_twitter_key" value="<?php echo $config['cf_twitter_key'] ?>" id="cf_twitter_key" class="frm_input" size="40"> <a href="https://dev.twitter.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
            </td>
            <th scope="row"><label for="cf_twitter_secret">트위터 컨슈머 Secret</label></th>
            <td>
-                <input type="text" name="cf_twitter_secret" value="<?php echo $config['cf_twitter_secret'] ?>" id="cf_twitter_secret" class="frm_input" size="35">
+                <input type="text" name="cf_twitter_secret" value="<?php echo $config['cf_twitter_secret'] ?>" id="cf_twitter_secret" class="frm_input" size="45">
+            </td>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_google_clientid">구글 Client ID</label></th>
+            <td>
+                <input type="text" name="cf_google_clientid" value="<?php echo $config['cf_google_clientid'] ?>" id="cf_google_clientid" class="frm_input" size="40"> <a href="https://console.developers.google.com" target="_blank" class="btn_frmline">앱 등록하기</a>
+            </td>
+            <th scope="row"><label for="cf_google_secret">구글 Client Secret</label></th>
+            <td>
+                <input type="text" name="cf_google_secret" value="<?php echo $config['cf_google_secret'] ?>" id="cf_google_secret" class="frm_input" size="45">
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_googl_shorturl_apikey">구글 짧은주소 API Key</label></th>
-            <td>
-                <input type="text" name="cf_googl_shorturl_apikey" value="<?php echo $config['cf_googl_shorturl_apikey'] ?>" id="cf_googl_shorturl_apikey" class="frm_input"> <a href="http://code.google.com/apis/console/" target="_blank" class="btn_frmline">API Key 등록하기</a>
+            <td colspan="3">
+                <input type="text" name="cf_googl_shorturl_apikey" value="<?php echo $config['cf_googl_shorturl_apikey'] ?>" id="cf_googl_shorturl_apikey" class="frm_input" size="40"> <a href="http://code.google.com/apis/console/" target="_blank" class="btn_frmline">API Key 등록하기</a>
            </td>
-            <th scope="row"><label for="cf_kakao_js_apikey">카카오 Javascript API Key</label></th>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_kakao_rest_key">카카오 REST API 키</label></th>
            <td>
-                <input type="text" name="cf_kakao_js_apikey" value="<?php echo $config['cf_kakao_js_apikey'] ?>" id="cf_kakao_js_apikey" class="frm_input"> <a href="http://developers.kakao.com/" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_kakao_rest_key" value="<?php echo $config['cf_kakao_rest_key'] ?>" id="cf_kakao_rest_key" class="frm_input" size="40"> <a href="https://developers.kakao.com/apps/new" target="_blank" class="btn_frmline">앱 등록하기</a>
+            </td>
+            <th scope="row"><label for="cf_kakao_client_secret">카카오 Client Secret</label></th>
+            <td>
+                <input type="text" name="cf_kakao_client_secret" value="<?php echo $config['cf_kakao_client_secret'] ?>" id="cf_kakao_client_secret" class="frm_input" size="45">
+            </td>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_kakao_js_apikey">카카오 JavaScript 키</label></th>
+            <td colspan="3">
+                <input type="text" name="cf_kakao_js_apikey" value="<?php echo $config['cf_kakao_js_apikey'] ?>" id="cf_kakao_js_apikey" class="frm_input" size="45">
+            </td>
+        </tr>
+        <tr>
+            <th scope="row"><label for="cf_payco_clientid">페이코 Client ID</label></th>
+            <td>
+                <input type="text" name="cf_payco_clientid" value="<?php echo $config['cf_payco_clientid']; ?>" id="cf_payco_clientid" class="frm_input" size="40"> <a href="https://developers.payco.com/guide" target="_blank" class="btn_frmline">앱 등록하기</a>
+            </td>
+            <th scope="row"><label for="cf_payco_secret">페이코 Secret</label></th>
+            <td>
+                <input type="text" name="cf_payco_secret" value="<?php echo $config['cf_payco_secret']; ?>" id="cf_payco_secret" class="frm_input" size="45">
            </td>
        </tr>
        </tbody>
@@ -994,7 +1182,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_lay">
    <h2 class="h2_frm">레이아웃 추가설정</h2>
@@ -1023,7 +1210,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_sms">
    <h2 class="h2_frm">SMS</h2>
@@ -1097,7 +1283,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
         <?php if ($userinfo['payment'] == 'A') { ?>
        <tr>
            <th scope="row">충전 잔액</th>
-            <td colspan="3">
+            <td>
                <?php echo number_format($userinfo['coin']); ?> 원.
                <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo $config['cf_icode_id']; ?>&amp;icode_passwd=<?php echo $config['cf_icode_pw']; ?>" target="_blank" class="btn_frmline">충전하기</a>
            </td>
@@ -1108,7 +1294,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>

 <section id="anc_cf_extra">
    <h2 class="h2_frm">여분필드 기본 설정</h2>
@@ -1141,7 +1326,9 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
    </div>
 </section>

-<?php echo $frm_submit; ?>
+<div class="btn_fixed_top btn_confirm">
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
+</div>

 </form>

@@ -1161,6 +1348,13 @@ $(function(){
                break;
        }
    });
+    $("#cf_captcha").on("change", function(){
+        if ($(this).val() == 'recaptcha' || $(this).val() == 'recaptcha_inv') {
+            $("[class^='kcaptcha_']").hide();
+        } else {
+            $("[class^='kcaptcha_']").show();
+        }
+    }).trigger("change");

    $(".get_theme_confc").on("click", function() {
        var type = $(this).data("type");
@@ -24,6 +24,8 @@ if(!$_POST['cf_cert_use']) {
    $_POST['cf_cert_hp'] = '';
 }

+$cf_social_servicelist = !empty($_POST['cf_social_servicelist']) ? implode(',', $_POST['cf_social_servicelist']) : '';
+
 $sql = " update {$g5['config_table']}
            set cf_title = '{$_POST['cf_title']}',
                cf_admin = '{$_POST['cf_admin']}',
@@ -96,6 +98,9 @@ $sql = " update {$g5['config_table']}
                cf_member_icon_size = '{$_POST['cf_member_icon_size']}',
                cf_member_icon_width = '{$_POST['cf_member_icon_width']}',
                cf_member_icon_height = '{$_POST['cf_member_icon_height']}',
+                cf_member_img_size = '{$_POST['cf_member_img_size']}',
+                cf_member_img_width = '{$_POST['cf_member_img_width']}',
+                cf_member_img_height = '{$_POST['cf_member_img_height']}',
                cf_login_minutes = '{$_POST['cf_login_minutes']}',
                cf_image_extension = '{$_POST['cf_image_extension']}',
                cf_flash_extension = '{$_POST['cf_flash_extension']}',
@@ -135,6 +140,19 @@ $sql = " update {$g5['config_table']}
                cf_facebook_secret = '{$_POST['cf_facebook_secret']}',
                cf_twitter_key = '{$_POST['cf_twitter_key']}',
                cf_twitter_secret = '{$_POST['cf_twitter_secret']}',
+                cf_social_login_use = '{$_POST['cf_social_login_use']}',
+                cf_naver_clientid = '{$_POST['cf_naver_clientid']}',
+                cf_naver_secret = '{$_POST['cf_naver_secret']}',
+                cf_google_clientid = '{$_POST['cf_google_clientid']}',
+                cf_google_secret = '{$_POST['cf_google_secret']}',
+                cf_kakao_rest_key = '{$_POST['cf_kakao_rest_key']}',
+                cf_kakao_client_secret = '{$_POST['cf_kakao_client_secret']}',
+                cf_social_servicelist   =   '{$cf_social_servicelist}',
+                cf_captcha = '{$_POST['cf_captcha']}',
+                cf_recaptcha_site_key = '{$_POST['cf_recaptcha_site_key']}',
+                cf_recaptcha_secret_key   =   '{$_POST['cf_recaptcha_secret_key']}',
+                cf_payco_clientid = '{$_POST['cf_payco_clientid']}',
+                cf_payco_secret = '{$_POST['cf_payco_secret']}',
                cf_1_subj = '{$_POST['cf_1_subj']}',
                cf_2_subj = '{$_POST['cf_2_subj']}',
                cf_3_subj = '{$_POST['cf_3_subj']}',
@@ -49,9 +49,11 @@ if ($w == "u")
 else
 {
    $html_title .= ' 입력';
-    $co['co_html'] = 2;
-    $co['co_skin'] = 'basic';
-    $co['co_mobile_skin'] = 'basic';
+    $co = array(
+        'co_html' => 2,
+        'co_skin' => 'basic',
+        'co_mobile_skin' => 'basic'
+        );
 }

 include_once (G5_ADMIN_PATH.'/admin.head.php');
@@ -126,6 +128,22 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
            <input type="text" name="co_include_tail" value="<?php echo $co['co_include_tail']; ?>" id="co_include_tail" class="frm_input" size="60">
        </td>
    </tr>
+    <tr id="admin_captcha_box" style="display:none;">
+        <th scope="row">자동등록방지</th>
+        <td>
+            <?php
+            echo help("파일 경로를 입력 또는 수정시 캡챠를 반드시 입력해야 합니다.");
+
+            include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+            $captcha_html = captcha_html();
+            $captcha_js   = chk_captcha_js();
+            echo $captcha_html;
+            ?>
+            <script>
+            jQuery("#captcha_key").removeAttr("required").removeClass("required");
+            </script>
+        </td>
+    </tr>
    <tr>
        <th scope="row"><label for="co_himg">상단이미지</label></th>
        <td>
@@ -178,14 +196,63 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./contentlist.php">목록</a>
+<div class="btn_fixed_top">
+    <a href="./contentlist.php" class="btn btn_02">목록</a>
+    <input type="submit" value="확인" class="btn btn_submit" accesskey="s">
 </div>

 </form>

+<?php
+// [KVE-2018-2089] 취약점 으로 인해 파일 경로 수정시에만 자동등록방지 코드 사용
+?>
 <script>
+var captcha_chk = false;
+
+function use_captcha_check(){
+    $.ajax({
+        type: "POST",
+        url: g5_admin_url+"/ajax.use_captcha.php",
+        data: { admin_use_captcha: "1" },
+        cache: false,
+        async: false,
+        dataType: "json",
+        success: function(data) {
+        }
+    });
+}
+
+function frm_check_file(){
+    var co_include_head = "<?php echo $co['co_include_head']; ?>";
+    var co_include_tail = "<?php echo $co['co_include_tail']; ?>";
+    var head = jQuery.trim(jQuery("#co_include_head").val());
+    var tail = jQuery.trim(jQuery("#co_include_tail").val());
+
+    if(co_include_head !== head || co_include_tail !== tail){
+        // 캡챠를 사용합니다.
+        jQuery("#admin_captcha_box").show();
+        captcha_chk = true;
+
+        use_captcha_check();
+
+        return false;
+    } else {
+        jQuery("#admin_captcha_box").hide();
+    }
+
+    return true;
+}
+
+jQuery(function($){
+    if( window.self !== window.top ){   // frame 또는 iframe을 사용할 경우 체크
+        $("#co_include_head, #co_include_tail").on("change paste keyup", function(e) {
+            frm_check_file();
+        });
+
+        use_captcha_check();
+    }
+});
+
 function frmcontentform_check(f)
 {
    errmsg = "";
@@ -204,6 +271,11 @@ function frmcontentform_check(f)
        errfld.focus();
        return false;
    }
+    
+    if( captcha_chk ) {
+        <?php echo $captcha_js; // 캡챠 사용시 자바스크립트에서 입력된 캡챠를 검사함  ?>
+    }
+
    return true;
 }
 </script>
@@ -12,6 +12,27 @@ else

 check_admin_token();

+if ($w == "" || $w == "u")
+{
+    if(preg_match("/[^a-z0-9_]/i", $co_id)) alert("ID 는 영문자, 숫자, _ 만 가능합니다.");
+
+    $sql = " select * from {$g5['content_table']} where co_id = '$co_id' ";
+    $co_row = sql_fetch($sql);
+}
+
+$co_subject = strip_tags($co_subject);
+$co_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_head, 0, 255));
+$co_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_tail, 0, 255));
+
+// 관리자가 자동등록방지를 사용해야 할 경우
+if (($co_row['co_include_head'] !== $co_include_head || $co_row['co_include_tail'] !== $co_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
+    include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+
+    if (!chk_captcha()) {
+        alert('자동등록방지 숫자가 틀렸습니다.');
+    }
+}
+
@mkdir(G5_DATA_PATH."/content", G5_DIR_PERMISSION);
@chmod(G5_DATA_PATH."/content", G5_DIR_PERMISSION);

@@ -21,18 +42,20 @@ if ($co_timg_del)  @unlink(G5_DATA_PATH."/content/{$co_id}_t");
 $error_msg = '';

 if( $co_include_head ){
-    $purl = parse_url($co_include_head);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('상단 파일 경로의 확장자는 php, html 만 허용합니다.');
+
+    $file_ext = pathinfo($co_include_head, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $co_include_head) ) {
+        alert('상단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
 }

 if( $co_include_tail ){
-    $purl = parse_url($co_include_tail);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('하단 파일 경로의 확장자는 php, html 만 허용합니다.');
+
+    $file_ext = pathinfo($co_include_tail, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $co_include_tail) ) {
+        alert('하단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
 }

@@ -58,11 +81,7 @@ $sql_common = " co_include_head     = '$co_include_head',

 if ($w == "")
 {
-    //if(eregi("[^a-z0-9_]", $co_id)) alert("ID 는 영문자, 숫자, _ 만 가능합니다.");
-    if(preg_match("/[^a-z0-9_]/i", $co_id)) alert("ID 는 영문자, 숫자, _ 만 가능합니다.");
-
-    $sql = " select co_id from {$g5['content_table']} where co_id = '$co_id' ";
-    $row = sql_fetch($sql);
+    $row = $co_row;
    if ($row['co_id'])
        alert("이미 같은 ID로 등록된 내용이 있습니다.");

@@ -87,6 +106,9 @@ else if ($w == "d")
    sql_query($sql);
 }

+if(function_exists('get_admin_captcha_by'))
+    get_admin_captcha_by('remove');
+
 if ($w == "" || $w == "u")
 {
    if ($_FILES['co_himg']['name'])
@@ -51,11 +51,11 @@ $result = sql_query($sql);

 <div class="local_ov01 local_ov">
    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>">처음으로</a><?php } ?>
-    <span>전체 내용 <?php echo $total_count; ?>건</span>
+    <span class="btn_ov01"><span class="ov_txt">전체 내용</span><span class="ov_num"> <?php echo $total_count; ?>건</span></span>
 </div>

-<div class="btn_add01 btn_add">
-    <a href="./contentform.php">내용 추가</a>
+<div class="btn_fixed_top">
+    <a href="./contentform.php" class="btn btn_01">내용 추가</a>
 </div>

 <div class="tbl_head01 tbl_wrap">
@@ -74,11 +74,11 @@ $result = sql_query($sql);
    ?>
    <tr class="<?php echo $bg; ?>">
        <td class="td_id"><?php echo $row['co_id']; ?></td>
-        <td><?php echo htmlspecialchars2($row['co_subject']); ?></td>
-        <td class="td_mng">
-            <a href="./contentform.php?w=u&amp;co_id=<?php echo $row['co_id']; ?>"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>수정</a>
-            <a href="<?php echo G5_BBS_URL; ?>/content.php?co_id=<?php echo $row['co_id']; ?>"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span> 보기</a>
-            <a href="./contentformupdate.php?w=d&amp;co_id=<?php echo $row['co_id']; ?>" onclick="return delete_confirm(this);"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>삭제</a>
+        <td class="td_left"><?php echo htmlspecialchars2($row['co_subject']); ?></td>
+        <td class="td_mng td_mng_l">
+            <a href="./contentform.php?w=u&amp;co_id=<?php echo $row['co_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>수정</a>
+            <a href="<?php echo G5_BBS_URL; ?>/content.php?co_id=<?php echo $row['co_id']; ?>" class="btn btn_02"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span> 보기</a>
+            <a href="./contentformupdate.php?w=d&amp;co_id=<?php echo $row['co_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>삭제</a>
        </td>
    </tr>
    <?php
@@ -1,8 +1,8 @@
@charset "utf-8";
 #preview_item{height:50px}
-#preview_item ul{margin:0;padding:0;top:0;width:100%;border-bottom:1px solid #eee; margin:0 auto;text-align:center;background:#333;position:fixed;top:0;z-index:999999;width:100%;}
-#preview_item ul li{list-style:none;display:inline-block;height:50px;line-height:50px;padding:0 3px;*display:inline; zoom:1;}
-#preview_item ul li a{color:#555;padding:0 8px;height:24px;line-height:24px;background:#f2f2f2;border-radius:3px;display:inline-block;vertical-align:middle;border:1px solid #dcdcdc;}
-#preview_item ul li a:hover{background:#ccc;text-decoration:none;border:1px solid #ccc;}
+#preview_item ul{margin:0;padding:0;top:0;width:100%;margin:0 auto;text-align:center;background:#000;position:fixed;top:0;z-index:999999}
+#preview_item ul li{list-style:none;display:inline-block;height:50px;line-height:50px;padding:0 2px;*display:inline; zoom:1;}
+#preview_item ul li a{color:#ccc;padding:0 8px;height:32px;line-height:30px;background:none;font-weight:bold;border-radius:5px;display:inline-block;vertical-align:middle;border:1px solid #aaa;}
+#preview_item ul li a:hover{background:#fff;text-decoration:none;border:1px solid #ccc;color:#333}
 #preview_item ul li button{color:#fff;padding:0 8px;background:#FF5191;border-radius:3px;height:26px;line-height:24px;vertical-align:middle;border:none}
 #preview_item ul li button:hover{background:#e40d5c;color:#fff;text-decoration:none;}
@@ -0,0 +1,88 @@
+<?php
+$sub_menu = '100410';
+include_once('./_common.php');
+
+auth_check($auth[$sub_menu], 'r');
+
+$g5['title'] = 'DB 업그레이드';
+include_once('./admin.head.php');
+
+$is_check = false;
+
+//소셜 로그인 관련 필드 및 구글 리챕챠 필드 추가
+if(!isset($config['cf_social_login_use'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_social_login_use` tinyint(4) NOT NULL DEFAULT '0' AFTER `cf_googl_shorturl_apikey`,
+                ADD `cf_google_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_twitter_secret`,
+                ADD `cf_google_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_google_clientid`,
+                ADD `cf_naver_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_google_secret`,
+                ADD `cf_naver_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_naver_clientid`,
+                ADD `cf_kakao_rest_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_naver_secret`,
+                ADD `cf_social_servicelist` varchar(255) NOT NULL DEFAULT '' AFTER `cf_social_login_use`,
+                ADD `cf_payco_clientid` varchar(100) NOT NULL DEFAULT '' AFTER `cf_social_servicelist`,
+                ADD `cf_payco_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_payco_clientid`,
+                ADD `cf_captcha` varchar(100) NOT NULL DEFAULT '' AFTER `cf_kakao_js_apikey`,
+                ADD `cf_recaptcha_site_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_captcha`,
+                ADD `cf_recaptcha_secret_key` varchar(100) NOT NULL DEFAULT '' AFTER `cf_recaptcha_site_key`
+    ", true);
+
+    $is_check = true;
+}
+
+//소셜 로그인 관련 필드 카카오 클라이언트 시크릿 추가
+if(!isset($config['cf_kakao_client_secret'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_kakao_client_secret` varchar(100) NOT NULL DEFAULT '' AFTER `cf_kakao_rest_key`
+    ", true);
+
+    $is_check = true;
+}
+
+// 회원 이미지 관련 필드 추가
+if(!isset($config['cf_member_img_size'])) {
+    sql_query("ALTER TABLE `{$g5['config_table']}`
+                ADD `cf_member_img_size` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_icon_height`,
+                ADD `cf_member_img_width` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_img_size`,
+                ADD `cf_member_img_height` int(11) NOT NULL DEFAULT '0' AFTER `cf_member_img_width`
+    ", true);
+
+    $sql = " update {$g5['config_table']} set cf_member_img_size = 50000, cf_member_img_width = 60, cf_member_img_height = 60 ";
+    sql_query($sql, false);
+
+    $is_check = true;
+}
+
+// 소셜 로그인 관리 테이블 없을 경우 생성
+if( isset($g5['social_profile_table']) && !sql_query(" DESC {$g5['social_profile_table']} ", false)) {
+    sql_query(" CREATE TABLE IF NOT EXISTS `{$g5['social_profile_table']}` (
+                  `mp_no` int(11) NOT NULL AUTO_INCREMENT,
+                  `mb_id` varchar(255) NOT NULL DEFAULT '',
+                  `provider` varchar(50) NOT NULL DEFAULT '',
+                  `object_sha` varchar(45) NOT NULL DEFAULT '',
+                  `identifier` varchar(255) NOT NULL DEFAULT '',
+                  `profileurl` varchar(255) NOT NULL DEFAULT '',
+                  `photourl` varchar(255) NOT NULL DEFAULT '',
+                  `displayname` varchar(150) NOT NULL DEFAULT '',
+                  `description` varchar(255) NOT NULL DEFAULT '',
+                  `mp_register_day` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
+                  `mp_latest_day` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
+                  UNIQUE KEY `mp_no` (`mp_no`),
+                  KEY `mb_id` (`mb_id`),
+                  KEY `provider` (`provider`)
+                ) ", true);
+
+    $is_check = true;
+}
+
+$db_upgrade_msg = $is_check ? 'DB 업그레이드가 완료되었습니다.' : '더 이상 업그레이드 할 내용이 없습니다.<br>현재 DB 업그레이드가 완료된 상태입니다.';
+?>
+
+<div class="local_desc01 local_desc">
+    <p>
+        <?php echo $db_upgrade_msg; ?>
+    </p>
+</div>
+
+<?php
+include_once ('./admin.tail.php');
+?>
@@ -5,6 +5,9 @@ include_once(G5_EDITOR_LIB);

 auth_check($auth[$sub_menu], "w");

+$fm_id = (int) $fm_id;
+$fa_id = isset($fa_id) ? (int) $fa_id : 0;
+
 $sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' ";
 $fm = sql_fetch($sql);

@@ -61,9 +64,9 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./faqlist.php?fm_id=<?php echo $fm_id; ?>">목록</a>
+<div class="btn_fixed_top">
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
+    <a href="./faqlist.php?fm_id=<?php echo $fm_id; ?>" class="btn btn_02">목록</a>
 </div>

 </form>
@@ -5,7 +5,7 @@ include_once('./_common.php');
 if ($w == "u" || $w == "d")
    check_demo();

-if ($W == 'd')
+if ($w == 'd')
    auth_check($auth[$sub_menu], "d");
 else
    auth_check($auth[$sub_menu], "w");
@@ -5,7 +5,13 @@ include_once('./_common.php');
 auth_check($auth[$sub_menu], "r");

 $g5['title'] = 'FAQ 상세관리';
-if ($fm_subject) $g5['title'] .= ' : '.$fm_subject;
+if ($fm_subject){
+    $fm_subject = clean_xss_tags(strip_tags($fm_subject));
+    $g5['title'] .= ' : '.$fm_subject;
+}
+
+$fm_id = (int) $fm_id;
+
 include_once (G5_ADMIN_PATH.'/admin.head.php');

 $sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' ";
@@ -23,7 +29,7 @@ $result = sql_query($sql);
 ?>

 <div class="local_ov01 local_ov">
-    등록된 FAQ 상세내용 <?php echo $total_count; ?>건
+   <span class="btn_ov01"><span class="ov_txt"> 등록된 FAQ 상세내용</span><span class="ov_num"> <?php echo $total_count; ?>건</span></span>
 </div>

 <div class="local_desc01 local_desc">
@@ -33,8 +39,9 @@ $result = sql_query($sql);
    </ol>
 </div>

-<div class="btn_add01 btn_add">
-    <a href="./faqform.php?fm_id=<?php echo $fm['fm_id']; ?>">FAQ 상세내용 추가</a>
+<div class="btn_fixed_top">
+    <a href="./faqmasterlist.php" class="btn btn_02">FAQ 관리</a>
+    <a href="./faqform.php?fm_id=<?php echo $fm['fm_id']; ?>" class="btn btn_01">FAQ 상세내용 추가</a>
 </div>

 <div class="tbl_head01 tbl_wrap">
@@ -65,11 +72,11 @@ $result = sql_query($sql);

    <tr class="<?php echo $bg; ?>">
        <td class="td_num"><?php echo $num; ?></td>
-        <td><?php echo stripslashes($row['fa_subject']); ?></td>
+        <td class="td_left"><?php echo stripslashes($row['fa_subject']); ?></td>
        <td class="td_num"><?php echo $row['fa_order']; ?></td>
-        <td class="td_mngsmall">
-            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>수정</a>
-            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>삭제</a>
+        <td class="td_mng td_mng_m">
+            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>수정</a>
+            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>삭제</a>
        </td>
    </tr>

@@ -85,10 +92,6 @@ $result = sql_query($sql);

 </div>

-<div class="btn_confirm01 btn_confirm">
-    <a href="./faqmasterlist.php">FAQ 관리</a>
-</div>
-

 <?php
 include_once (G5_ADMIN_PATH.'/admin.tail.php');
@@ -21,6 +21,7 @@ if ($w == "u")
 else
 {
    $html_title .= ' 입력';
+    $fm = array();
 }

 $g5['title'] = $html_title.' 관리';
@@ -141,9 +142,9 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./faqmasterlist.php">목록</a>
+<div class="btn_fixed_top">
+    <a href="./faqmasterlist.php" class="btn btn_02">목록</a>
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
 </div>

 </form>
@@ -18,6 +18,8 @@ check_admin_token();
 if ($fm_himg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_h");
 if ($fm_timg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_t");

+$fm_subject = strip_tags($fm_subject);
+
 $sql_common = " set fm_subject = '$fm_subject',
                    fm_head_html = '$fm_head_html',
                    fm_tail_html = '$fm_tail_html',
@@ -65,7 +65,7 @@ $result = sql_query($sql);

 <div class="local_ov01 local_ov">
    <?php if ($page > 1) {?><a href="<?php echo $_SERVER['SCRIPT_NAME']; ?>">처음으로</a><?php } ?>
-    <span>전체 FAQ <?php echo $total_count; ?>건</span>
+    <span class="btn_ov01"><span class="ov_txt"> 전체 FAQ </span><span class="ov_num"> <?php echo $total_count; ?>건</span></span>
 </div>

 <div class="local_desc01 local_desc">
@@ -76,8 +76,8 @@ $result = sql_query($sql);
    </ol>
 </div>

-<div class="btn_add01 btn_add">
-    <a href="./faqmasterform.php">FAQ추가</a>
+<div class="btn_fixed_top">
+    <a href="./faqmasterform.php" class="btn_01 btn">FAQ추가</a>
 </div>

 <div class="tbl_head01 tbl_wrap">
@@ -101,13 +101,13 @@ $result = sql_query($sql);
    ?>
    <tr class="<?php echo $bg; ?>">
        <td class="td_num"><?php echo $row['fm_id']; ?></td>
-        <td><a href="./faqlist.php?fm_id=<?php echo $row['fm_id']; ?>&amp;fm_subject=<?php echo $row['fm_subject']; ?>"><?php echo stripslashes($row['fm_subject']); ?></a></td>
+        <td class="td_left"><a href="./faqlist.php?fm_id=<?php echo $row['fm_id']; ?>&amp;fm_subject=<?php echo $row['fm_subject']; ?>"><?php echo stripslashes($row['fm_subject']); ?></a></td>
        <td class="td_num"><?php echo $cnt; ?></td>
        <td class="td_num"><?php echo $row['fm_order']?></td>
-        <td class="td_mng">
-            <a href="./faqmasterform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>수정</a>
-            <a href="<?php echo G5_BBS_URL; ?>/faq.php?fm_id=<?php echo $row['fm_id']; ?>"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>보기</a>
-            <a href="./faqmasterformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>" onclick="return delete_confirm(this);"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>삭제</a>
+        <td class="td_mng td_mng_l">
+            <a href="./faqmasterform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>수정</a>
+            <a href="<?php echo G5_BBS_URL; ?>/faq.php?fm_id=<?php echo $row['fm_id']; ?>" class="btn btn_02"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>보기</a>
+            <a href="./faqmasterformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo stripslashes($row['fm_subject']); ?> </span>삭제</a>
        </td>
    </tr>
    <?php
@@ -1,6 +1,12 @@
 <?php
+$sub_menu = '100000';
 include_once('./_common.php');

+@include_once('./safe_check.php');
+if(function_exists('social_log_file_delete')){
+    social_log_file_delete(86400);      //소셜로그인 디버그 파일 24시간 지난것은 삭제
+}
+
 $g5['title'] = '관리자메인';
 include_once ('./admin.head.php');

@@ -23,7 +23,7 @@ $g5['title'] = $html_title;
 include_once('./admin.head.php');
 ?>

-<p>메일 내용에 {이름} , {닉네임} , {회원아이디} , {이메일} 처럼 내용에 삽입하면 해당 내용에 맞게 변환하여 메일을 발송합니다.</p>
+<div class="local_desc"><p>메일 내용에 {이름} , {닉네임} , {회원아이디} , {이메일} 처럼 내용에 삽입하면 해당 내용에 맞게 변환하여 메일을 발송합니다.</p></div>

 <form name="fmailform" id="fmailform" action="./mail_update.php" onsubmit="return fmailform_check(this);" method="post">
 <input type="hidden" name="w" value="<?php echo $w ?>" id="w">
@@ -50,8 +50,8 @@ include_once('./admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" class="btn_submit" accesskey="s" value="확인">
+<div class="btn_fixed_top ">
+    <input type="submit" class="btn_submit btn" accesskey="s" value="확인">
 </div>
 </form>

@@ -30,9 +30,6 @@ $colspan = 7;
    </p>
 </div>

-<div class="btn_add01 btn_add">
-    <a href="./mail_form.php" id="mail_add">메일내용추가</a>
-</div>

 <form name="fmaillist" id="fmaillist" action="./mail_delete.php" method="post">
 <div class="tbl_head01 tbl_wrap">
@@ -52,7 +49,7 @@ $colspan = 7;
    <tbody>
    <?php
    for ($i=0; $row=sql_fetch_array($result); $i++) {
-        $s_vie = '<a href="./mail_preview.php?ma_id='.$row['ma_id'].'" target="_blank">미리보기</a>';
+        $s_vie = '<a href="./mail_preview.php?ma_id='.$row['ma_id'].'" target="_blank" class="btn btn_03">미리보기</a>';

        $num = number_format($total_count - ($page - 1) * $config['cf_page_rows'] - $i);

@@ -64,12 +61,12 @@ $colspan = 7;
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['ma_subject']; ?> 메일</label>
            <input type="checkbox" id="chk_<?php echo $i ?>" name="chk[]" value="<?php echo $row['ma_id'] ?>">
        </td>
-        <td class="td_num"><?php echo $num ?></td>
-        <td><a href="./mail_form.php?w=u&amp;ma_id=<?php echo $row['ma_id'] ?>"><?php echo $row['ma_subject'] ?></a></td>
+        <td class="td_num_c"><?php echo $num ?></td>
+        <td class="td_left"><a href="./mail_form.php?w=u&amp;ma_id=<?php echo $row['ma_id'] ?>"><?php echo $row['ma_subject'] ?></a></td>
        <td class="td_datetime"><?php echo $row['ma_time'] ?></td>
        <td class="td_test"><a href="./mail_test.php?ma_id=<?php echo $row['ma_id'] ?>">테스트</a></td>
        <td class="td_send"><a href="./mail_select_form.php?ma_id=<?php echo $row['ma_id'] ?>">보내기</a></td>
-        <td class="td_mngsmall"><?php echo $s_vie ?></td>
+        <td class="td_mng"><?php echo $s_vie ?></td>
    </tr>

    <?php
@@ -80,9 +77,9 @@ $colspan = 7;
    </tbody>
    </table>
 </div>
-
-<div class="btn_list01 btn_list">
-    <input type="submit" value="선택삭제">
+<div class="btn_fixed_top">
+    <input type="submit" value="선택삭제" class="btn btn_02">
+    <a href="./mail_form.php" id="mail_add" class="btn btn_01">메일내용추가</a>
 </div>
 </form>

@@ -162,17 +162,17 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
    <tr>
        <th scope="row"><label for="mb_id">아이디<?php echo $sound_only ?></label></th>
        <td>
-            <input type="text" name="mb_id" value="<?php echo $mb['mb_id'] ?>" id="mb_id" <?php echo $required_mb_id ?> class="frm_input <?php echo $required_mb_id_class ?>" size="15" minlength="3" maxlength="20">
-            <?php if ($w=='u'){ ?><a href="./boardgroupmember_form.php?mb_id=<?php echo $mb['mb_id'] ?>">접근가능그룹보기</a><?php } ?>
+            <input type="text" name="mb_id" value="<?php echo $mb['mb_id'] ?>" id="mb_id" <?php echo $required_mb_id ?> class="frm_input <?php echo $required_mb_id_class ?>" size="15"  maxlength="20">
+            <?php if ($w=='u'){ ?><a href="./boardgroupmember_form.php?mb_id=<?php echo $mb['mb_id'] ?>" class="btn_frmline">접근가능그룹보기</a><?php } ?>
        </td>
        <th scope="row"><label for="mb_password">비밀번호<?php echo $sound_only ?></label></th>
        <td><input type="password" name="mb_password" id="mb_password" <?php echo $required_mb_password ?> class="frm_input <?php echo $required_mb_password ?>" size="15" maxlength="20"></td>
    </tr>
    <tr>
        <th scope="row"><label for="mb_name">이름(실명)<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="mb_name" value="<?php echo $mb['mb_name'] ?>" id="mb_name" required class="required frm_input" size="15" minlength="2" maxlength="20"></td>
+        <td><input type="text" name="mb_name" value="<?php echo $mb['mb_name'] ?>" id="mb_name" required class="required frm_input" size="15"  maxlength="20"></td>
        <th scope="row"><label for="mb_nick">닉네임<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="mb_nick" value="<?php echo $mb['mb_nick'] ?>" id="mb_nick" required class="required frm_input" size="15" minlength="2" maxlength="20"></td>
+        <td><input type="text" name="mb_nick" value="<?php echo $mb['mb_nick'] ?>" id="mb_nick" required class="required frm_input" size="15"  maxlength="20"></td>
    </tr>
    <tr>
        <th scope="row"><label for="mb_level">회원 권한</label></th>
@@ -209,7 +209,7 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
            <input type="radio" name="mb_certify" value="" id="mb_certify_no" <?php echo $mb_certify_no; ?>>
            <label for="mb_certify_no">아니오</label>
        </td>
-        <th scope="row"><label for="mb_adult">성인인증</label></th>
+        <th scope="row">성인인증</th>
        <td>
            <input type="radio" name="mb_adult" value="1" id="mb_adult_yes" <?php echo $mb_adult_yes; ?>>
            <label for="mb_adult_yes">예</label>
@@ -249,6 +249,22 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
            ?>
        </td>
    </tr>
+    <tr>
+        <th scope="row"><label for="mb_img">회원이미지</label></th>
+        <td colspan="3">
+            <?php echo help('이미지 크기는 <strong>넓이 '.$config['cf_member_img_width'].'픽셀 높이 '.$config['cf_member_img_height'].'픽셀</strong>로 해주세요.') ?>
+            <input type="file" name="mb_img" id="mb_img">
+            <?php
+            $mb_dir = substr($mb['mb_id'],0,2);
+            $icon_file = G5_DATA_PATH.'/member_image/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
+            if (file_exists($icon_file)) {
+                $icon_url = G5_DATA_URL.'/member_image/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
+                echo '<img src="'.$icon_url.'" alt="">';
+                echo '<input type="checkbox" id="del_mb_img" name="del_mb_img" value="1">삭제';
+            }
+            ?>
+        </td>
+    </tr>
    <tr>
        <th scope="row">메일 수신</th>
        <td>
@@ -266,7 +282,7 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
        </td>
    </tr>
    <tr>
-        <th scope="row"><label for="mb_open">정보 공개</label></th>
+        <th scope="row">정보 공개</th>
        <td colspan="3">
            <input type="radio" name="mb_open" value="1" id="mb_open_yes" <?php echo $mb_open_yes; ?>>
            <label for="mb_open_yes">예</label>
@@ -339,6 +355,94 @@ this.form.mb_intercept_date.value=this.form.mb_intercept_date.defaultValue; }">
        </td>
    </tr>

+    <?php
+    //소셜계정이 있다면
+    if(function_exists('social_login_link_account') && $mb['mb_id'] ){
+        if( $my_social_accounts = social_login_link_account($mb['mb_id'], false, 'get_data') ){ ?>
+
+    <tr>
+    <th>소셜계정목록</th>
+    <td colspan="3">
+        <ul class="social_link_box">
+            <li class="social_login_container">
+                <h4>연결된 소셜 계정 목록</h4>
+                <?php foreach($my_social_accounts as $account){     //반복문
+                    if( empty($account) ) continue;
+
+                    $provider = strtolower($account['provider']);
+                    $provider_name = social_get_provider_service_name($provider);
+                ?>
+                <div class="account_provider" data-mpno="social_<?php echo $account['mp_no'];?>" >
+                    <div class="sns-wrap-32 sns-wrap-over">
+                        <span class="sns-icon sns-<?php echo $provider; ?>" title="<?php echo $provider_name; ?>">
+                            <span class="ico"></span>
+                            <span class="txt"><?php echo $provider_name; ?></span>
+                        </span>
+
+                        <span class="provider_name"><?php echo $provider_name;   //서비스이름?> ( <?php echo $account['displayname']; ?> )</span>
+                        <span class="account_hidden" style="display:none"><?php echo $account['mb_id']; ?></span>
+                    </div>
+                    <div class="btn_info"><a href="<?php echo G5_SOCIAL_LOGIN_URL.'/unlink.php?mp_no='.$account['mp_no'] ?>" class="social_unlink" data-provider="<?php echo $account['mp_no'];?>" >연동해제</a> <span class="sound_only"><?php echo substr($account['mp_register_day'], 2, 14); ?></span></div>
+                </div>
+                <?php } //end foreach ?>
+            </li>
+        </ul>
+        <script>
+        jQuery(function($){
+            $(".account_provider").on("click", ".social_unlink", function(e){
+                e.preventDefault();
+
+                if (!confirm('정말 이 계정 연결을 삭제하시겠습니까?')) {
+                    return false;
+                }
+
+                var ajax_url = "<?php echo G5_SOCIAL_LOGIN_URL.'/unlink.php' ?>";
+                var mb_id = '',
+                    mp_no = $(this).attr("data-provider"),
+                    $mp_el = $(this).parents(".account_provider");
+
+                    mb_id = $mp_el.find(".account_hidden").text();
+
+                if( ! mp_no ){
+                    alert('잘못된 요청! mp_no 값이 없습니다.');
+                    return;
+                }
+
+                $.ajax({
+                    url: ajax_url,
+                    type: 'POST',
+                    data: {
+                        'mp_no': mp_no,
+                        'mb_id': mb_id
+                    },
+                    dataType: 'json',
+                    async: false,
+                    success: function(data, textStatus) {
+                        if (data.error) {
+                            alert(data.error);
+                            return false;
+                        } else {
+                            alert("연결이 해제 되었습니다.");
+                            $mp_el.fadeOut("normal", function() {
+                                $(this).remove();
+                            });
+                        }
+                    }
+                });
+
+                return;
+            });
+        });
+        </script>
+
+    </td>
+    </tr>
+
+    <?php
+        }   //end if
+    }   //end if
+    ?>
+
    <?php for ($i=1; $i<=10; $i++) { ?>
    <tr>
        <th scope="row"><label for="mb_<?php echo $i ?>">여분 필드 <?php echo $i ?></label></th>
@@ -350,17 +454,22 @@ this.form.mb_intercept_date.value=this.form.mb_intercept_date.defaultValue; }">
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey='s'>
-    <a href="./member_list.php?<?php echo $qstr ?>">목록</a>
+<div class="btn_fixed_top">
+    <a href="./member_list.php?<?php echo $qstr ?>" class="btn btn_02">목록</a>
+    <input type="submit" value="확인" class="btn_submit btn" accesskey='s'>
 </div>
 </form>

 <script>
 function fmember_submit(f)
 {
-    if (!f.mb_icon.value.match(/\.gif$/i) && f.mb_icon.value) {
-        alert('아이콘은 gif 파일만 가능합니다.');
+    if (!f.mb_icon.value.match(/\.(gif|jpe?g|png)$/i) && f.mb_icon.value) {
+        alert('아이콘은 이미지 파일만 가능합니다.');
+        return false;
+    }
+
+    if (!f.mb_img.value.match(/\.(gif|jpe?g|png)$/i) && f.mb_img.value) {
+        alert('회원이미지는 이미지 파일만 가능합니다.');
        return false;
    }

@@ -2,6 +2,7 @@
 $sub_menu = "200100";
 include_once("./_common.php");
 include_once(G5_LIB_PATH."/register.lib.php");
+include_once(G5_LIB_PATH.'/thumbnail.lib.php');

 if ($w == 'u')
    check_demo();
@@ -120,26 +121,88 @@ else if ($w == 'u')
    if ($del_mb_icon)
        @unlink(G5_DATA_PATH.'/member/'.$mb_dir.'/'.$mb_id.'.gif');

+    $image_regex = "/(\.(gif|jpe?g|png))$/i";
+    $mb_icon_img = $mb_id.'.gif';
+
    // 아이콘 업로드
-    if (is_uploaded_file($_FILES['mb_icon']['tmp_name'])) {
-        if (!preg_match("/(\.gif)$/i", $_FILES['mb_icon']['name'])) {
-            alert($_FILES['mb_icon']['name'] . '은(는) gif 파일이 아닙니다.');
+    if (isset($_FILES['mb_icon']) && is_uploaded_file($_FILES['mb_icon']['tmp_name'])) {
+        if (!preg_match($image_regex, $_FILES['mb_icon']['name'])) {
+            alert($_FILES['mb_icon']['name'] . '은(는) 이미지 파일이 아닙니다.');
        }

-        if (preg_match("/(\.gif)$/i", $_FILES['mb_icon']['name'])) {
-            @mkdir(G5_DATA_PATH.'/member/'.$mb_dir, G5_DIR_PERMISSION);
-            @chmod(G5_DATA_PATH.'/member/'.$mb_dir, G5_DIR_PERMISSION);
+        if (preg_match($image_regex, $_FILES['mb_icon']['name'])) {
+            $mb_icon_dir = G5_DATA_PATH.'/member/'.$mb_dir;
+            @mkdir($mb_icon_dir, G5_DIR_PERMISSION);
+            @chmod($mb_icon_dir, G5_DIR_PERMISSION);

-            $dest_path = G5_DATA_PATH.'/member/'.$mb_dir.'/'.$mb_id.'.gif';
+            $dest_path = $mb_icon_dir.'/'.$mb_icon_img;

            move_uploaded_file($_FILES['mb_icon']['tmp_name'], $dest_path);
            chmod($dest_path, G5_FILE_PERMISSION);
+            
+            if (file_exists($dest_path)) {
+                $size = @getimagesize($dest_path);
+                if ($size[0] > $config['cf_member_icon_width'] || $size[1] > $config['cf_member_icon_height']) {
+                    $thumb = null;
+                    if($size[2] === 2 || $size[2] === 3) {
+                        //jpg 또는 png 파일 적용
+                        $thumb = thumbnail($mb_icon_img, $mb_icon_dir, $mb_icon_dir, $config['cf_member_icon_width'], $config['cf_member_icon_height'], true, true);
+                        if($thumb) {
+                            @unlink($dest_path);
+                            rename($mb_icon_dir.'/'.$thumb, $dest_path);
+                        }
+                    }
+                    if( !$thumb ){
+                        // 아이콘의 폭 또는 높이가 설정값 보다 크다면 이미 업로드 된 아이콘 삭제
+                        @unlink($dest_path);
+                    }
+                }
+            }
+        }
+    }
+    
+    $mb_img_dir = G5_DATA_PATH.'/member_image/';
+    if( !is_dir($mb_img_dir) ){
+        @mkdir($mb_img_dir, G5_DIR_PERMISSION);
+        @chmod($mb_img_dir, G5_DIR_PERMISSION);
+    }
+    $mb_img_dir .= substr($mb_id,0,2);
+
+    // 회원 이미지 삭제
+    if ($del_mb_img)
+        @unlink($mb_img_dir.'/'.$mb_icon_img);
+
+    // 아이콘 업로드
+    if (isset($_FILES['mb_img']) && is_uploaded_file($_FILES['mb_img']['tmp_name'])) {
+        if (!preg_match($image_regex, $_FILES['mb_img']['name'])) {
+            alert($_FILES['mb_img']['name'] . '은(는) 이미지 파일이 아닙니다.');
+        }
+        
+        if (preg_match($image_regex, $_FILES['mb_img']['name'])) {
+            @mkdir($mb_img_dir, G5_DIR_PERMISSION);
+            @chmod($mb_img_dir, G5_DIR_PERMISSION);
+            
+            $dest_path = $mb_img_dir.'/'.$mb_icon_img;
+            
+            move_uploaded_file($_FILES['mb_img']['tmp_name'], $dest_path);
+            chmod($dest_path, G5_FILE_PERMISSION);

            if (file_exists($dest_path)) {
-                $size = getimagesize($dest_path);
-                // 아이콘의 폭 또는 높이가 설정값 보다 크다면 이미 업로드 된 아이콘 삭제
-                if ($size[0] > $config['cf_member_icon_width'] || $size[1] > $config['cf_member_icon_height']) {
-                    @unlink($dest_path);
+                $size = @getimagesize($dest_path);
+                if ($size[0] > $config['cf_member_img_width'] || $size[1] > $config['cf_member_img_height']) {
+                    $thumb = null;
+                    if($size[2] === 2 || $size[2] === 3) {
+                        //jpg 또는 png 파일 적용
+                        $thumb = thumbnail($mb_icon_img, $mb_img_dir, $mb_img_dir, $config['cf_member_img_width'], $config['cf_member_img_height'], true, true);
+                        if($thumb) {
+                            @unlink($dest_path);
+                            rename($mb_img_dir.'/'.$thumb, $dest_path);
+                        }
+                    }
+                    if( !$thumb ){
+                        // 아이콘의 폭 또는 높이가 설정값 보다 크다면 이미 업로드 된 아이콘 삭제
+                        @unlink($dest_path);
+                    }
                }
            }
        }
@@ -69,9 +69,9 @@ $colspan = 16;

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    총회원수 <?php echo number_format($total_count) ?>명 중,
-    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>">차단 <?php echo number_format($intercept_count) ?></a>명,
-    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>">탈퇴 <?php echo number_format($leave_count) ?></a>명
+    <span class="btn_ov01"><span class="ov_txt">총회원수 </span><span class="ov_num"> <?php echo number_format($total_count) ?>명 </span></span>
+    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">차단 </span><span class="ov_num"><?php echo number_format($intercept_count) ?>명</span></a>
+    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">탈퇴  </span><span class="ov_num"><?php echo number_format($leave_count) ?>명</span></a>
 </div>

 <form id="fsearch" name="fsearch" class="local_sch01 local_sch" method="get">
@@ -102,11 +102,6 @@ $colspan = 16;
    </p>
 </div>

-<?php if ($is_admin == 'super') { ?>
-<div class="btn_add01 btn_add">
-    <a href="./member_form.php" id="member_add">회원추가</a>
-</div>
-<?php } ?>

 <form name="fmemberlist" id="fmemberlist" action="./member_list_update.php" onsubmit="return fmemberlist_submit(this);" method="post">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -116,35 +111,36 @@ $colspan = 16;
 <input type="hidden" name="page" value="<?php echo $page ?>">
 <input type="hidden" name="token" value="">

-<div class="tbl_head02 tbl_wrap">
+<div class="tbl_head01 tbl_wrap">
    <table>
    <caption><?php echo $g5['title']; ?> 목록</caption>
    <thead>
    <tr>
-        <th scope="col" rowspan="2" id="mb_list_chk">
+        <th scope="col" id="mb_list_chk" rowspan="2" >
            <label for="chkall" class="sound_only">회원 전체</label>
            <input type="checkbox" name="chkall" value="1" id="chkall" onclick="check_all(this.form)">
        </th>
-        <th scope="col" rowspan="2" id="mb_list_id"><?php echo subject_sort_link('mb_id') ?>아이디</a></th>
-        <th scope="col" id="mb_list_name"><?php echo subject_sort_link('mb_name') ?>이름</a></th>
-        <th scope="col" colspan="6" id="mb_list_cert"><?php echo subject_sort_link('mb_certify', '', 'desc') ?>본인확인</a></th>
+        <th scope="col" id="mb_list_id" colspan="2"><?php echo subject_sort_link('mb_id') ?>아이디</a></th>
+        <th scope="col" rowspan="2" id="mb_list_cert"><?php echo subject_sort_link('mb_certify', '', 'desc') ?>본인확인</a></th>
+        <th scope="col" id="mb_list_mailc"><?php echo subject_sort_link('mb_email_certify', '', 'desc') ?>메일인증</a></th>
+        <th scope="col" id="mb_list_open"><?php echo subject_sort_link('mb_open', '', 'desc') ?>정보공개</a></th>
+        <th scope="col" id="mb_list_mailr"><?php echo subject_sort_link('mb_mailling', '', 'desc') ?>메일수신</a></th>
+        <th scope="col" id="mb_list_auth">상태</th>
        <th scope="col" id="mb_list_mobile">휴대폰</th>
-        <th scope="col" id="mb_list_auth">상태/<?php echo subject_sort_link('mb_level', '', 'desc') ?>권한</a></th>
        <th scope="col" id="mb_list_lastcall"><?php echo subject_sort_link('mb_today_login', '', 'desc') ?>최종접속</a></th>
-        <th scope="col" rowspan="2" id="mb_list_grp">접근<br>그룹</th>
+        <th scope="col" id="mb_list_grp">접근그룹</th>
        <th scope="col" rowspan="2" id="mb_list_mng">관리</th>
    </tr>
    <tr>
+        <th scope="col" id="mb_list_name"><?php echo subject_sort_link('mb_name') ?>이름</a></th>
        <th scope="col" id="mb_list_nick"><?php echo subject_sort_link('mb_nick') ?>닉네임</a></th>
-        <th scope="col" id="mb_list_mailc"><?php echo subject_sort_link('mb_email_certify', '', 'desc') ?>메일<br>인증</a></th>
-        <th scope="col" id="mb_list_open"><?php echo subject_sort_link('mb_open', '', 'desc') ?>정보<br>공개</a></th>
-        <th scope="col" id="mb_list_mailr"><?php echo subject_sort_link('mb_mailling', '', 'desc') ?>메일<br>수신</a></th>
-        <th scope="col" id="mb_list_sms"><?php echo subject_sort_link('mb_sms', '', 'desc') ?>SMS<br>수신</a></th>
-        <th scope="col" id="mb_list_adultc"><?php echo subject_sort_link('mb_adult', '', 'desc') ?>성인<br>인증</a></th>
-        <th scope="col" id="mb_list_deny"><?php echo subject_sort_link('mb_intercept_date', '', 'desc') ?>접근<br>차단</a></th>
+        <th scope="col" id="mb_list_sms"><?php echo subject_sort_link('mb_sms', '', 'desc') ?>SMS수신</a></th>
+        <th scope="col" id="mb_list_adultc"><?php echo subject_sort_link('mb_adult', '', 'desc') ?>성인인증</a></th>
+        <th scope="col" id="mb_list_auth"><?php echo subject_sort_link('mb_intercept_date', '', 'desc') ?>접근차단</a></th>
+        <th scope="col" id="mb_list_deny"><?php echo subject_sort_link('mb_level', '', 'desc') ?>권한</a></th>
        <th scope="col" id="mb_list_tel">전화번호</th>
-        <th scope="col" id="mb_list_point"><?php echo subject_sort_link('mb_point', '', 'desc') ?> 포인트</a></th>
        <th scope="col" id="mb_list_join"><?php echo subject_sort_link('mb_datetime', '', 'desc') ?>가입일</a></th>
+        <th scope="col" id="mb_list_point"><?php echo subject_sort_link('mb_point', '', 'desc') ?> 포인트</a></th>
    </tr>
    </thead>
    <tbody>
@@ -160,9 +156,9 @@ $colspan = 16;
        if ($is_admin == 'group') {
            $s_mod = '';
        } else {
-            $s_mod = '<a href="./member_form.php?'.$qstr.'&amp;w=u&amp;mb_id='.$row['mb_id'].'">수정</a>';
+            $s_mod = '<a href="./member_form.php?'.$qstr.'&amp;w=u&amp;mb_id='.$row['mb_id'].'" class="btn btn_03">수정</a>';
        }
-        $s_grp = '<a href="./boardgroupmember_form.php?mb_id='.$row['mb_id'].'">그룹</a>';
+        $s_grp = '<a href="./boardgroupmember_form.php?mb_id='.$row['mb_id'].'" class="btn btn_02">그룹</a>';

        $leave_date = $row['mb_leave_date'] ? $row['mb_leave_date'] : date('Ymd', G5_SERVER_TIME);
        $intercept_date = $row['mb_intercept_date'] ? $row['mb_intercept_date'] : date('Ymd', G5_SERVER_TIME);
@@ -215,54 +211,81 @@ $colspan = 16;
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo get_text($row['mb_name']); ?> <?php echo get_text($row['mb_nick']); ?>님</label>
            <input type="checkbox" name="chk[]" value="<?php echo $i ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td headers="mb_list_id" rowspan="2" class="td_name sv_use"><?php echo $mb_id ?></td>
-        <td headers="mb_list_name" class="td_mbname"><?php echo get_text($row['mb_name']); ?></td>
-        <td headers="mb_list_cert" colspan="6" class="td_mbcert">
+        <td headers="mb_list_id" colspan="2" class="td_name sv_use">
+            <?php echo $mb_id ?>
+            <?php
+            //소셜계정이 있다면
+            if(function_exists('social_login_link_account')){
+                if( $my_social_accounts = social_login_link_account($row['mb_id'], false, 'get_data') ){
+                    
+                    echo '<div class="member_social_provider sns-wrap-over sns-wrap-32">';
+                    foreach( (array) $my_social_accounts as $account){     //반복문
+                        if( empty($account) || empty($account['provider']) ) continue;
+                        
+                        $provider = strtolower($account['provider']);
+                        $provider_name = social_get_provider_service_name($provider);
+                        
+                        echo '<span class="sns-icon sns-'.$provider.'" title="'.$provider_name.'">';
+                        echo '<span class="ico"></span>';
+                        echo '<span class="txt">'.$provider_name.'</span>';
+                        echo '</span>';
+                    }
+                    echo '</div>';
+                }
+            }
+            ?>
+        </td>
+        <td headers="mb_list_cert"  rowspan="2" class="td_mbcert">
            <input type="radio" name="mb_certify[<?php echo $i; ?>]" value="ipin" id="mb_certify_ipin_<?php echo $i; ?>" <?php echo $row['mb_certify']=='ipin'?'checked':''; ?>>
-            <label for="mb_certify_ipin_<?php echo $i; ?>">아이핀</label>
+            <label for="mb_certify_ipin_<?php echo $i; ?>">아이핀</label><br>
            <input type="radio" name="mb_certify[<?php echo $i; ?>]" value="hp" id="mb_certify_hp_<?php echo $i; ?>" <?php echo $row['mb_certify']=='hp'?'checked':''; ?>>
            <label for="mb_certify_hp_<?php echo $i; ?>">휴대폰</label>
        </td>
-        <td headers="mb_list_mobile" class="td_tel"><?php echo get_text($row['mb_hp']); ?></td>
+        <td headers="mb_list_mailc"><?php echo preg_match('/[1-9]/', $row['mb_email_certify'])?'<span class="txt_true">Yes</span>':'<span class="txt_false">No</span>'; ?></td>
+        <td headers="mb_list_open">
+            <label for="mb_open_<?php echo $i; ?>" class="sound_only">정보공개</label>
+            <input type="checkbox" name="mb_open[<?php echo $i; ?>]" <?php echo $row['mb_open']?'checked':''; ?> value="1" id="mb_open_<?php echo $i; ?>">
+        </td>
+        <td headers="mb_list_mailr">
+            <label for="mb_mailling_<?php echo $i; ?>" class="sound_only">메일수신</label>
+            <input type="checkbox" name="mb_mailling[<?php echo $i; ?>]" <?php echo $row['mb_mailling']?'checked':''; ?> value="1" id="mb_mailling_<?php echo $i; ?>">
+        </td>
        <td headers="mb_list_auth" class="td_mbstat">
            <?php
            if ($leave_msg || $intercept_msg) echo $leave_msg.' '.$intercept_msg;
            else echo "정상";
            ?>
-            <?php echo get_member_level_select("mb_level[$i]", 1, $member['mb_level'], $row['mb_level']) ?>
        </td>
+        <td headers="mb_list_mobile" class="td_tel"><?php echo get_text($row['mb_hp']); ?></td>
        <td headers="mb_list_lastcall" class="td_date"><?php echo substr($row['mb_today_login'],2,8); ?></td>
-        <td headers="mb_list_grp" rowspan="2" class="td_numsmall"><?php echo $group ?></td>
-        <td headers="mb_list_mng" rowspan="2" class="td_mngsmall"><?php echo $s_mod ?> <?php echo $s_grp ?></td>
+        <td headers="mb_list_grp" class="td_numsmall"><?php echo $group ?></td>
+        <td headers="mb_list_mng" rowspan="2" class="td_mng td_mng_s"><?php echo $s_mod ?><?php echo $s_grp ?></td>
    </tr>
    <tr class="<?php echo $bg; ?>">
+        <td headers="mb_list_name" class="td_mbname"><?php echo get_text($row['mb_name']); ?></td>
        <td headers="mb_list_nick" class="td_name sv_use"><div><?php echo $mb_nick ?></div></td>
-        <td headers="mb_list_mailc" class="td_chk"><?php echo preg_match('/[1-9]/', $row['mb_email_certify'])?'<span class="txt_true">Yes</span>':'<span class="txt_false">No</span>'; ?></td>
-        <td headers="mb_list_open" class="td_chk">
-            <label for="mb_open_<?php echo $i; ?>" class="sound_only">정보공개</label>
-            <input type="checkbox" name="mb_open[<?php echo $i; ?>]" <?php echo $row['mb_open']?'checked':''; ?> value="1" id="mb_open_<?php echo $i; ?>">
-        </td>
-        <td headers="mb_list_mailr" class="td_chk">
-            <label for="mb_mailling_<?php echo $i; ?>" class="sound_only">메일수신</label>
-            <input type="checkbox" name="mb_mailling[<?php echo $i; ?>]" <?php echo $row['mb_mailling']?'checked':''; ?> value="1" id="mb_mailling_<?php echo $i; ?>">
-        </td>
-        <td headers="mb_list_sms" class="td_chk">
+        
+        <td headers="mb_list_sms">
            <label for="mb_sms_<?php echo $i; ?>" class="sound_only">SMS수신</label>
            <input type="checkbox" name="mb_sms[<?php echo $i; ?>]" <?php echo $row['mb_sms']?'checked':''; ?> value="1" id="mb_sms_<?php echo $i; ?>">
        </td>
-        <td headers="mb_list_adultc" class="td_chk">
+        <td headers="mb_list_adultc">
            <label for="mb_adult_<?php echo $i; ?>" class="sound_only">성인인증</label>
            <input type="checkbox" name="mb_adult[<?php echo $i; ?>]" <?php echo $row['mb_adult']?'checked':''; ?> value="1" id="mb_adult_<?php echo $i; ?>">
        </td>
-        <td headers="mb_list_deny" class="td_chk">
+        <td headers="mb_list_deny">
            <?php if(empty($row['mb_leave_date'])){ ?>
            <input type="checkbox" name="mb_intercept_date[<?php echo $i; ?>]" <?php echo $row['mb_intercept_date']?'checked':''; ?> value="<?php echo $intercept_date ?>" id="mb_intercept_date_<?php echo $i ?>" title="<?php echo $intercept_title ?>">
            <label for="mb_intercept_date_<?php echo $i; ?>" class="sound_only">접근차단</label>
            <?php } ?>
        </td>
+        <td headers="mb_list_auth" class="td_mbstat">
+            <?php echo get_member_level_select("mb_level[$i]", 1, $member['mb_level'], $row['mb_level']) ?>
+        </td>
        <td headers="mb_list_tel" class="td_tel"><?php echo get_text($row['mb_tel']); ?></td>
-        <td headers="mb_list_point" class="td_num"><a href="point_list.php?sfl=mb_id&amp;stx=<?php echo $row['mb_id'] ?>"><?php echo number_format($row['mb_point']) ?></a></td>
        <td headers="mb_list_join" class="td_date"><?php echo substr($row['mb_datetime'],2,8); ?></td>
+        <td headers="mb_list_point" class="td_num"><a href="point_list.php?sfl=mb_id&amp;stx=<?php echo $row['mb_id'] ?>"><?php echo number_format($row['mb_point']) ?></a></td>
+
    </tr>

    <?php
@@ -274,11 +297,16 @@ $colspan = 16;
    </table>
 </div>

-<div class="btn_list01 btn_list">
-    <input type="submit" name="act_button" value="선택수정" onclick="document.pressed=this.value">
-    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value">
+<div class="btn_fixed_top">
+    <input type="submit" name="act_button" value="선택수정" onclick="document.pressed=this.value" class="btn btn_02">
+    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value" class="btn btn_02">
+    <?php if ($is_admin == 'super') { ?>
+    <a href="./member_form.php" id="member_add" class="btn btn_01">회원추가</a>
+    <?php } ?>
+
 </div>

+
 </form>

 <?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, '?'.$qstr.'&amp;page='); ?>
@@ -10,6 +10,8 @@ if (!count($_POST['chk'])) {

 auth_check($auth[$sub_menu], 'w');

+check_admin_token();
+
 if ($_POST['act_button'] == "선택수정") {

    for ($i=0; $i<count($_POST['chk']); $i++)
@@ -21,7 +21,7 @@ if($new == 'new' || !$code) {
 <div id="menu_frm" class="new_win">
    <h1><?php echo $g5['title']; ?></h1>

-    <form name="fmenuform" id="fmenuform">
+    <form name="fmenuform" id="fmenuform" class="new_win_con">

    <div class="new_win_desc">
        <label for="me_type">대상선택</label>
@@ -161,9 +161,9 @@ function add_menu_list(name, link, code)
    list += "</td>";
    list += "<td class=\"td_mngsmall\">";
    <?php if($new == 'new') { ?>
-    list += "<button type=\"button\" class=\"btn_add_submenu\">추가</button>";
+    list += "<button type=\"button\" class=\"btn_add_submenu btn\">추가</button>";
    <?php } ?>
-    list += "<button type=\"button\" class=\"btn_del_menu\">삭제</button>";
+    list += "<button type=\"button\" class=\"btn_del_menu btn\">삭제</button>";
    list += "</td>";
    list += "</tr>";

@@ -77,7 +77,7 @@ if($sql) {
        <td class="td_mngsmall">
            <input type="hidden" name="subject[]" value="<?php echo preg_replace('/[\'\"]/', '', $row['subject']); ?>">
            <input type="hidden" name="link[]" value="<?php echo $link; ?>">
-            <button type="button" class="add_select"><span class="sound_only"><?php echo $row['subject']; ?> </span>선택</button>
+            <button type="button" class="add_select btn btn_03"><span class="sound_only"><?php echo $row['subject']; ?> </span>선택</button>
        </td>
    </tr>

@@ -92,7 +92,7 @@ if($sql) {
 </div>

 <div class="btn_win02 btn_win">
-    <button type="button" class="btn_cancel" onclick="window.close();">창닫기</button>
+    <button type="button" class="btn_02 btn" onclick="window.close();">창닫기</button>
 </div>

 <?php } else { ?>
@@ -120,7 +120,7 @@ if($sql) {
 </div>

 <div class="btn_win02 btn_win">
-    <button type="button" id="add_manual" class="btn_submit">추가</button>
-    <button type="button" class="btn_cancel" onclick="window.close();">창닫기</button>
+    <button type="button" id="add_manual" class="btn_submit btn">추가</button>
+    <button type="button" class="btn_02 btn" onclick="window.close();">창닫기</button>
 </div>
 <?php } ?>
@@ -40,9 +40,7 @@ $colspan = 7;
 <form name="fmenulist" id="fmenulist" method="post" action="./menu_list_update.php" onsubmit="return fmenulist_submit(this);">
 <input type="hidden" name="token" value="">

-<div class="btn_add01 btn_add">
-    <button type="button" onclick="return add_menu();">메뉴추가<span class="sound_only"> 새창</span></button>
-</div>
+

 <div id="menulist" class="tbl_head01 tbl_wrap">
    <table>
@@ -78,11 +76,11 @@ $colspan = 7;
        <td class="td_category<?php echo $sub_menu_class; ?>">
            <input type="hidden" name="code[]" value="<?php echo substr($row['me_code'], 0, 2) ?>">
            <label for="me_name_<?php echo $i; ?>" class="sound_only"><?php echo $sub_menu_info; ?> 메뉴<strong class="sound_only"> 필수</strong></label>
-            <input type="text" name="me_name[]" value="<?php echo $me_name; ?>" id="me_name_<?php echo $i; ?>" required class="required frm_input full_input">
+            <input type="text" name="me_name[]" value="<?php echo $me_name; ?>" id="me_name_<?php echo $i; ?>" required class="required tbl_input full_input">
        </td>
        <td>
            <label for="me_link_<?php echo $i; ?>" class="sound_only">링크<strong class="sound_only"> 필수</strong></label>
-            <input type="text" name="me_link[]" value="<?php echo $row['me_link'] ?>" id="me_link_<?php echo $i; ?>" required class="required frm_input full_input">
+            <input type="text" name="me_link[]" value="<?php echo $row['me_link'] ?>" id="me_link_<?php echo $i; ?>" required class="required tbl_input full_input">
        </td>
        <td class="td_mng">
            <label for="me_target_<?php echo $i; ?>" class="sound_only">새창</label>
@@ -93,7 +91,7 @@ $colspan = 7;
        </td>
        <td class="td_num">
            <label for="me_order_<?php echo $i; ?>" class="sound_only">순서</label>
-            <input type="text" name="me_order[]" value="<?php echo $row['me_order'] ?>" id="me_order_<?php echo $i; ?>" class="frm_input" size="5">
+            <input type="text" name="me_order[]" value="<?php echo $row['me_order'] ?>" id="me_order_<?php echo $i; ?>" class="tbl_input" size="5">
        </td>
        <td class="td_mng">
            <label for="me_use_<?php echo $i; ?>" class="sound_only">PC사용</label>
@@ -111,9 +109,9 @@ $colspan = 7;
        </td>
        <td class="td_mng">
            <?php if(strlen($row['me_code']) == 2) { ?>
-            <button type="button" class="btn_add_submenu">추가</button>
+            <button type="button" class="btn_add_submenu btn_03 ">추가</button>
            <?php } ?>
-            <button type="button" class="btn_del_menu">삭제</button>
+            <button type="button" class="btn_del_menu btn_02">삭제</button>
        </td>
    </tr>
    <?php
@@ -126,8 +124,9 @@ $colspan = 7;
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" name="act_button" value="확인" class="btn_submit">
+<div class="btn_fixed_top">
+    <button type="button" onclick="return add_menu();" class="btn btn_02">메뉴추가<span class="sound_only"> 새창</span></button>
+    <input type="submit" name="act_button" value="확인" class="btn_submit btn ">
 </div>

 </form>
@@ -109,7 +109,7 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    <tr>
        <th scope="row"><label for="nw_subject">팝업 제목<strong class="sound_only"> 필수</strong></label></th>
        <td>
-            <input type="text" name="nw_subject" value="<?php echo stripslashes($nw['nw_subject']) ?>" id="nw_subject" required class="frm_input required" size="80">
+            <input type="text" name="nw_subject" value="<?php echo get_sanitize_input($nw['nw_subject']); ?>" id="nw_subject" required class="frm_input required" size="80">
        </td>
    </tr>
    <tr>
@@ -120,9 +120,9 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    </table>
 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./newwinlist.php">목록</a>
+<div class="btn_fixed_top">
+    <a href="./newwinlist.php" class=" btn btn_02">목록</a>
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
 </div>
 </form>

@@ -12,6 +12,8 @@ else

 check_admin_token();

+$nw_subject = isset($_POST['nw_subject']) ? strip_tags($_POST['nw_subject']) : '';
+
 $sql_common = " nw_device = '{$_POST['nw_device']}',
                nw_begin_time = '{$_POST['nw_begin_time']}',
                nw_end_time = '{$_POST['nw_end_time']}',
@@ -20,7 +22,7 @@ $sql_common = " nw_device = '{$_POST['nw_device']}',
                nw_top = '{$_POST['nw_top']}',
                nw_height = '{$_POST['nw_height']}',
                nw_width = '{$_POST['nw_width']}',
-                nw_subject = '{$_POST['nw_subject']}',
+                nw_subject = '{$nw_subject}',
                nw_content = '{$_POST['nw_content']}',
                nw_content_html = '{$_POST['nw_content_html']}' ";

@@ -44,10 +44,10 @@ $sql = "select * $sql_common order by nw_id desc ";
 $result = sql_query($sql);
 ?>

-<div class="local_ov01 local_ov">전체 <?php echo $total_count; ?>건</div>
+<div class="local_ov01 local_ov"><span class="btn_ov01"><span class="ov_txt">전체 </span><span class="ov_num">  <?php echo $total_count; ?>건</span></span></div>

-<div class="btn_add01 btn_add">
-    <a href="./newwinform.php">새창관리추가</a>
+<div class="btn_fixed_top ">
+    <a href="./newwinform.php" class="btn btn_01">새창관리추가</a>
 </div>

 <div class="tbl_head01 tbl_wrap">
@@ -87,7 +87,7 @@ $result = sql_query($sql);
    ?>
    <tr class="<?php echo $bg; ?>">
        <td class="td_num"><?php echo $row['nw_id']; ?></td>
-        <td><?php echo $row['nw_subject']; ?></td>
+        <td class="td_left"><?php echo $row['nw_subject']; ?></td>
        <td class="td_device"><?php echo $nw_device; ?></td>
        <td class="td_datetime"><?php echo substr($row['nw_begin_time'],2,14); ?></td>
        <td class="td_datetime"><?php echo substr($row['nw_end_time'],2,14); ?></td>
@@ -96,9 +96,9 @@ $result = sql_query($sql);
        <td class="td_num"><?php echo $row['nw_top']; ?>px</td>
        <td class="td_num"><?php echo $row['nw_width']; ?>px</td>
        <td class="td_num"><?php echo $row['nw_height']; ?>px</td>
-        <td class="td_mngsmall">
-            <a href="./newwinform.php?w=u&amp;nw_id=<?php echo $row['nw_id']; ?>"><span class="sound_only"><?php echo $row['nw_subject']; ?> </span>수정</a>
-            <a href="./newwinformupdate.php?w=d&amp;nw_id=<?php echo $row['nw_id']; ?>" onclick="return delete_confirm(this);"><span class="sound_only"><?php echo $row['nw_subject']; ?> </span>삭제</a>
+        <td class="td_mng td_mng_m">
+            <a href="./newwinform.php?w=u&amp;nw_id=<?php echo $row['nw_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo $row['nw_subject']; ?> </span>수정</a>
+            <a href="./newwinformupdate.php?w=d&amp;nw_id=<?php echo $row['nw_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo $row['nw_subject']; ?> </span>삭제</a>
        </td>
    </tr>
    <?php
@@ -70,13 +70,13 @@ else

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    전체 <?php echo number_format($total_count) ?> 건
+    <span class="btn_ov01"><span class="ov_txt">전체 </span><span class="ov_num"> <?php echo number_format($total_count) ?> 건 </span></span>
    <?php
    if (isset($mb['mb_id']) && $mb['mb_id']) {
-        echo '&nbsp;(' . $mb['mb_id'] .' 님 포인트 합계 : ' . number_format($mb['mb_point']) . '점)';
+        echo '&nbsp;<span class="btn_ov01"><span class="ov_txt">' . $mb['mb_id'] .' 님 포인트 합계 </span><span class="ov_num"> ' . number_format($mb['mb_point']) . '점</span></span>';
    } else {
        $row2 = sql_fetch(" select sum(po_point) as sum_point from {$g5['point_table']} ");
-        echo '&nbsp;(전체 합계 '.number_format($row2['sum_point']).'점)';
+        echo '&nbsp;<span class="btn_ov01"><span class="ov_txt">전체 합계</span><span class="ov_num">'.number_format($row2['sum_point']).'점 </span></span>';
    }
    ?>
 </div>
@@ -149,13 +149,13 @@ else
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['po_content'] ?> 내역</label>
            <input type="checkbox" name="chk[]" value="<?php echo $i ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td class="td_mbid"><a href="?sfl=mb_id&amp;stx=<?php echo $row['mb_id'] ?>"><?php echo $row['mb_id'] ?></a></td>
-        <td class="td_mbname"><?php echo get_text($row2['mb_name']); ?></td>
-        <td class="td_name sv_use"><div><?php echo $mb_nick ?></div></td>
-        <td class="td_pt_log"><?php echo $link1 ?><?php echo $row['po_content'] ?><?php echo $link2 ?></td>
+        <td class="td_left"><a href="?sfl=mb_id&amp;stx=<?php echo $row['mb_id'] ?>"><?php echo $row['mb_id'] ?></a></td>
+        <td class="td_left"><?php echo get_text($row2['mb_name']); ?></td>
+        <td class="td_left sv_use"><div><?php echo $mb_nick ?></div></td>
+        <td class="td_left"><?php echo $link1 ?><?php echo $row['po_content'] ?><?php echo $link2 ?></td>
        <td class="td_num td_pt"><?php echo number_format($row['po_point']) ?></td>
        <td class="td_datetime"><?php echo $row['po_datetime'] ?></td>
-        <td class="td_date<?php echo $expr; ?>">
+        <td class="td_datetime2<?php echo $expr; ?>">
            <?php if ($row['po_expired'] == 1) { ?>
            만료<?php echo substr(str_replace('-', '', $row['po_expire_date']), 2); ?>
            <?php } else echo $row['po_expire_date'] == '9999-12-31' ? '&nbsp;' : $row['po_expire_date']; ?>
@@ -173,8 +173,8 @@ else
    </table>
 </div>

-<div class="btn_list01 btn_list">
-    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value">
+<div class="btn_fixed_top">
+    <input type="submit" name="act_button" value="선택삭제" onclick="document.pressed=this.value" class="btn btn_02">
 </div>

 </form>
@@ -222,7 +222,7 @@ else
    </div>

    <div class="btn_confirm01 btn_confirm">
-        <input type="submit" value="확인" class="btn_submit">
+        <input type="submit" value="확인" class="btn_submit btn">
    </div>

    </form>
@@ -6,9 +6,9 @@ auth_check($auth[$sub_menu], 'w');

 check_admin_token();

-$mb_id = $_POST['mb_id'];
-$po_point = $_POST['po_point'];
-$po_content = $_POST['po_content'];
+$mb_id = strip_tags($_POST['mb_id']);
+$po_point = strip_tags($_POST['po_point']);
+$po_content = strip_tags($_POST['po_content']);
 $expire = preg_replace('/[^0-9]/', '', $_POST['po_expire_term']);

 $mb = get_member($mb_id);
@@ -4,6 +4,8 @@ include_once('./_common.php');

 auth_check($auth[$sub_menu], 'w');

+$po_id = isset($po_id) ? (int) $po_id : 0;
+
 $html_title = '투표';
 if ($w == '')
    $html_title .= ' 생성';
@@ -101,9 +103,9 @@ include_once('./admin.head.php');

 </div>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
-    <a href="./poll_list.php?<?php echo $qstr ?>">목록</a>
+<div class="btn_fixed_top ">
+    <a href="./poll_list.php?<?php echo $qstr ?>" class="btn_02 btn">목록</a>
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
 </div>

 </form>
@@ -10,6 +10,40 @@ auth_check($auth[$sub_menu], 'w');

 check_admin_token();

+$check_keys = array(
+'po_subject',
+'po_poll1',
+'po_poll2',
+'po_poll3',
+'po_poll4',
+'po_poll5',
+'po_poll6',
+'po_poll7',
+'po_poll8',
+'po_poll9',
+'po_cnt1',
+'po_cnt2',
+'po_cnt3',
+'po_cnt4',
+'po_cnt5',
+'po_cnt6',
+'po_cnt7',
+'po_cnt8',
+'po_cnt9',
+'po_etc',
+'po_level',
+'po_point',
+'po_id'
+);
+
+foreach( $_POST as $key=>$value ){
+    if( empty($value) ) continue;
+
+    if( in_array($key, $check_keys) ) {
+        $_POST[$key] = strip_tags($value);
+    }
+}
+
 if ($w == '')
 {
    $sql = " insert {$g5['poll_table']}
@@ -52,7 +52,7 @@ $colspan = 7;

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    투표수 <?php echo number_format($total_count) ?>개
+    <span class="btn_ov01"><span class="ov_txt">투표수</span><span class="ov_num"> <?php echo number_format($total_count) ?>개</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
@@ -67,9 +67,6 @@ $colspan = 7;
 </div>
 </form>

-<div class="btn_add01 btn_add">
-    <a href="./poll_form.php" id="poll_add">투표 추가</a>
-</div>

 <form name="fpolllist" id="fpolllist" action="./poll_delete.php" method="post">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -103,7 +100,7 @@ $colspan = 7;
        $row2 = sql_fetch($sql2);
        $po_etc = ($row['po_etc']) ? "사용" : "미사용";

-        $s_mod = '<a href="./poll_form.php?'.$qstr.'&amp;w=u&amp;po_id='.$row['po_id'].'">수정</a>';
+        $s_mod = '<a href="./poll_form.php?'.$qstr.'&amp;w=u&amp;po_id='.$row['po_id'].'" class="btn btn_03">수정</a>';

        $bg = 'bg'.($i%2);
    ?>
@@ -114,11 +111,11 @@ $colspan = 7;
            <input type="checkbox" name="chk[]" value="<?php echo $row['po_id'] ?>" id="chk_<?php echo $i ?>">
        </td>
        <td class="td_num"><?php echo $row['po_id'] ?></td>
-        <td><?php echo cut_str(get_text($row['po_subject']),70) ?></td>
+        <td class="td_left"><?php echo cut_str(get_text($row['po_subject']),70) ?></td>
        <td class="td_num"><?php echo $row['po_level'] ?></td>
        <td class="td_num"><?php echo $row2['sum_po_cnt'] ?></td>
        <td class="td_etc"><?php echo $po_etc ?></td>
-        <td class="td_mngsmall"><?php echo $s_mod ?></td>
+        <td class="td_mng td_mng_s"><?php echo $s_mod ?></td>
    </tr>

    <?php
@@ -131,8 +128,9 @@ $colspan = 7;
    </table>
 </div>

-<div class="btn_list01 btn_list">
-    <input type="submit" value="선택삭제">
+<div class="btn_fixed_top">
+    <input type="submit" value="선택삭제" class="btn btn_02">
+    <a href="./poll_form.php" id="poll_add" class="btn btn_01">투표 추가</a>
 </div>
 </form>

@@ -7,7 +7,7 @@ auth_check($auth[$sub_menu], 'r');
 // 체크된 자료 삭제
 if (isset($_POST['chk']) && is_array($_POST['chk'])) {
    for ($i=0; $i<count($_POST['chk']); $i++) {
-        $pp_id = $_POST['chk'][$i];
+        $pp_id = (int) $_POST['chk'][$i];

        sql_query(" delete from {$g5['popular_table']} where pp_id = '$pp_id' ", true);
    }
@@ -72,7 +72,7 @@ var list_delete_php = 'popular_list.php';

 <div class="local_ov01 local_ov">
        <?php echo $listall ?>
-        건수 : <?php echo number_format($total_count) ?>개
+        <span class="btn_ov01"><span class="ov_txt">건수</span><span class="ov_num">  <?php echo number_format($total_count) ?>개</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
@@ -123,7 +123,7 @@ var list_delete_php = 'popular_list.php';
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $word ?></label>
            <input type="checkbox" name="chk[]" value="<?php echo $row['pp_id'] ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td><a href="<?php echo $_SERVER['SCRIPT_NAME'] ?>?sfl=pp_word&amp;stx=<?php echo $word ?>"><?php echo $word ?></a></td>
+        <td class="td_left"><a href="<?php echo $_SERVER['SCRIPT_NAME'] ?>?sfl=pp_word&amp;stx=<?php echo $word ?>"><?php echo $word ?></a></td>
        <td><?php echo $row['pp_date'] ?></td>
        <td><?php echo $row['pp_ip'] ?></td>
    </tr>
@@ -140,8 +140,8 @@ var list_delete_php = 'popular_list.php';
 </div>

 <?php if ($is_admin == 'super'){ ?>
-<div class="btn_list01 btn_list">
-    <button type="submit">선택삭제</button>
+<div class=" btn_fixed_top">
+    <button type="submit" class="btn btn_02">선택삭제</button>
 </div>
 <?php } ?>

@@ -43,7 +43,7 @@ $(function(){

 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
-    건수 <?php echo number_format($total_count) ?>개
+    <span class="btn_ov01"><span class="ov_txt">건수</span><span class="ov_num">  <?php echo number_format($total_count) ?>개</span></span>
 </div>

 <form name="fsearch" id="fsearch" class="local_sch02 local_sch" method="get">
@@ -54,7 +54,7 @@ $(function(){
    ~
    <input type="text" name="to_date" value="<?php echo $to_date ?>" id="to_date" class="frm_input" size="11" maxlength="10">
    <label for="to_date" class="sound_only">종료일</label>
-    <input type="submit" class="btn_submit" value="검색">
+    <input type="submit" class="btn_sch2" value="검색">
 </div>
 </form>

@@ -87,8 +87,8 @@ $(function(){

    <tr>
        <td class="td_num"><?php echo $rank ?></td>
-        <td><?php echo $word ?></td>
-        <td class="td_numbig"><?php echo $row['cnt'] ?></td>
+        <td class="td_left"><?php echo $word ?></td>
+        <td class="td_num"><?php echo $row['cnt'] ?></td>
    </tr>

    <?php
@@ -263,6 +263,22 @@ if(!isset($qaconfig['qa_include_head'])) {
                <input type="text" name="qa_include_tail" value="<?php echo $qaconfig['qa_include_tail'] ?>" id="qa_include_tail" class="frm_input" size="50">
            </td>
        </tr>
+        <tr id="admin_captcha_box" style="display:none;">
+            <th scope="row">자동등록방지</th>
+            <td>
+                <?php
+                echo help("파일 경로를 입력 또는 수정시 캡챠를 반드시 입력해야 합니다.");
+
+                include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+                $captcha_html = captcha_html();
+                $captcha_js   = chk_captcha_js();
+                echo $captcha_html;
+                ?>
+                <script>
+                jQuery("#captcha_key").removeAttr("required").removeClass("required");
+                </script>
+            </td>
+        </tr>
        <tr>
            <th scope="row"><label for="qa_content_head">상단 내용</label></th>
            <td>
@@ -309,13 +325,60 @@ if(!isset($qaconfig['qa_include_head'])) {
    </div>
 </section>

-<div class="btn_confirm01 btn_confirm">
-    <input type="submit" value="확인" class="btn_submit" accesskey="s">
+<div class="btn_fixed_top">
+    <input type="submit" value="확인" class="btn_submit btn" accesskey="s">
 </div>

 </form>

 <script>
+
+var captcha_chk = false;
+
+function use_captcha_check(){
+    $.ajax({
+        type: "POST",
+        url: g5_admin_url+"/ajax.use_captcha.php",
+        data: { admin_use_captcha: "1" },
+        cache: false,
+        async: false,
+        dataType: "json",
+        success: function(data) {
+        }
+    });
+}
+
+function frm_check_file(){
+    var qa_include_head = "<?php echo $qaconfig['qa_include_head']; ?>";
+    var qa_include_tail = "<?php echo $qaconfig['qa_include_tail']; ?>";
+    var head = jQuery.trim(jQuery("#qa_include_head").val());
+    var tail = jQuery.trim(jQuery("#qa_include_tail").val());
+
+    if(qa_include_head !== head || qa_include_tail !== tail){
+        // 캡챠를 사용합니다.
+        jQuery("#admin_captcha_box").show();
+        captcha_chk = true;
+
+        use_captcha_check();
+
+        return false;
+    } else {
+        jQuery("#admin_captcha_box").hide();
+    }
+
+    return true;
+}
+
+jQuery(function($){
+    if( window.self !== window.top ){   // frame 또는 iframe을 사용할 경우 체크
+        $("#qa_include_head, #qa_include_tail").on("change paste keyup", function(e) {
+            frm_check_file();
+        });
+
+        use_captcha_check();
+    }
+});
+
 function fqaconfigform_submit(f)
 {
    <?php echo get_editor_js("qa_content_head"); ?>
@@ -323,6 +386,10 @@ function fqaconfigform_submit(f)
    <?php echo get_editor_js("qa_mobile_content_head"); ?>
    <?php echo get_editor_js("qa_mobile_content_tail"); ?>

+    if( captcha_chk ) {
+        <?php echo isset($captcha_js) ? $captcha_js : ''; // 캡챠 사용시 자바스크립트에서 입력된 캡챠를 검사함  ?>
+    }
+
    f.action = "./qa_config_update.php";
    return true;
 }
@@ -10,19 +10,33 @@ check_admin_token();

 $error_msg = '';

+$qaconfig = get_qa_config();
+
+$qa_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_head, 0, 255));
+$qa_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_tail, 0, 255));
+
+// 관리자가 자동등록방지를 사용해야 할 경우
+if ($board && ($qaconfig['qa_include_head'] !== $qa_include_head || $qaconfig['qa_include_tail'] !== $qa_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
+    include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
+
+    if (!chk_captcha()) {
+        alert('자동등록방지 숫자가 틀렸습니다.');
+    }
+}
+
 if( $qa_include_head ){
-    $purl = parse_url($qa_include_head);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('상단 파일 경로의 확장자는 php, html 만 허용합니다.');
+    $file_ext = pathinfo($qa_include_head, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $qa_include_head) ) {
+        alert('상단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
 }

 if( $qa_include_tail ){
-    $purl = parse_url($qa_include_tail);
-    $file = $purl['path'];
-    if (!preg_match("/\.(php|htm['l']?)$/i", $file)) {
-        alert('하단 파일 경로의 확장자는 php, html 만 허용합니다.');
+    $file_ext = pathinfo($qa_include_tail, PATHINFO_EXTENSION);
+
+    if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $qa_include_tail) ) {
+        alert('하단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
    }
 }

@@ -75,6 +89,9 @@ $sql = " update {$g5['qa_config_table']}
                qa_5                    = '{$_POST['qa_5']}' ";
 sql_query($sql);

+if(function_exists('get_admin_captcha_by'))
+    get_admin_captcha_by('remove');
+
 if($error_msg){
    alert($error_msg, './qa_config.php');
 } else {
@@ -0,0 +1,17 @@
+<?php
+if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
+
+function social_log_file_delete($second=0){
+    $files = glob(G5_DATA_PATH.'/tmp/social_*');
+    if (is_array($files)) {
+        $before_time  = $second ? G5_SERVER_TIME - $second : 0;
+        foreach ($files as $social_log_file) {
+            $modification_time = filemtime($log_file); // 파일접근시간
+
+            if ($before_time && $modification_time > $before_time) continue;
+
+            unlink($social_log_file);
+        }
+    }
+}
+?>
@@ -23,7 +23,7 @@ include_once("./admin.head.php");
    if (!$dir=@opendir(G5_DATA_PATH.'/session')) {
      echo "<p>세션 디렉토리를 열지못했습니다.</p>";
    } else {
-        $list_tag_st = "<ul>\n<li>완료됨</li>\n";
+        $list_tag_st = "<ul class=\"session_del\">\n<li>완료됨</li>\n";
        $list_tag_end = "</ul>\n";
    }

@@ -43,7 +43,7 @@ $tmp_str .= '
        $tmp_str .= '
        <tr class="'.$bg.'">
            <td>'.$i.' 레벨</td>
-            <td class="td_numbig">'.number_format($lev[$i]).'</td>
+            <td class="td_num">'.number_format($lev[$i]).'</td>
            <td class="td_mng"><button type="button" class="btn_frmline" onclick="sms_obj.level_add('.$i.', \''.number_format($lev[$i]).'\')">추가</button></td>
        </tr>';
    }
@@ -123,8 +123,8 @@ while ($res = sql_fetch_array($qry)) array_push($group, $res);
 </div>

 <div class="btn_list01 btn_list">
-    <button type="button" onclick="sms_obj.person_multi_add()">선택추가</button>
-    <button type="button" onclick="sms_obj.triggerclick('#book_group')" >그룹목록</button>
+    <button type="button" onclick="sms_obj.person_multi_add()" class="btn btn02">선택추가</button>
+    <button type="button" onclick="sms_obj.triggerclick('#book_group')"  class="btn btn02">그룹목록</button>
 </div>

 <nav class="pg_wrap">
@@ -153,7 +153,7 @@ while ($res = sql_fetch_array($qry)) array_push($group, $res);

 <label for="svv" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" size="15" name="sv" value="<?php echo $sv?>" id="svv" required class="required frm_input">
-<input type="submit" value="검색" class="btn_submit">
+<input type="submit" value="검색" class="btn_submit btn">
 </form>

 <!--
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
thisgun	a82f61ae2a	Merge branch 'master' of github.com:gnuboard/g5	2018-09-17 10:34:00 +09:00
thisgun	6025f10116	5.3.1.7 버전 수정	2018-09-17 10:07:34 +09:00
thisgun	d7b209e93c	주소 입력시 포커스문에 setTimeout 시간 추가	2018-09-14 14:36:47 +09:00
thisgun	37b72f36d6	소셜 로그인 스킨 잘못 표기된 태그 수정	2018-09-14 12:23:52 +09:00
thisgun	333c1e1af4	인스톨시 기존 데이터베이스가 존재하는지 체크과정 추가	2018-09-14 12:04:37 +09:00
thisgun	c0a4d9776b	소셜 팝업창 옵션에 스크롤 옵션 추가	2018-09-13 18:30:13 +09:00
thisgun	4833ff388b	아이코드 SMS 응답 없을시 지연 시간 수정	2018-09-13 18:25:15 +09:00
thisgun	64f02142b8	카카오톡 공유를 PC 에서 할수 있게 수정	2018-09-13 15:19:27 +09:00
thisgun	2b79194f72	clean_xss_attributes 함수 추가	2018-09-06 10:38:14 +09:00
thisgun	6dd55f3256	get_uniqid 함수 영카트 함수 내용과 동일하도록 수정	2018-09-05 14:53:10 +09:00
thisgun	5be739934b	Merge branch 'master' of github.com:gnuboard/g5	2018-08-24 09:35:49 +09:00
thisgun	917b12c2c2	5.3.1.6 버전 수정	2018-08-24 09:25:00 +09:00
thisgun	b0c2c9cea6	자동로그인 코드 수정	2018-08-24 09:16:22 +09:00
thisgun	b1fc952c76	XSS 취약점 수정	2018-08-22 14:02:14 +09:00
thisgun	ac5d6a4be7	Merge branch 'include' of github.com:gnuboard/g5 into include	2018-08-21 18:00:44 +09:00
thisgun	a4d3de3227	잘못된 주석 코드 삭제	2018-08-21 17:57:09 +09:00
thisgun	9834a0962e	str_encrypt 클래스 코드 수정	2018-08-21 17:57:04 +09:00
thisgun	c03fec73b9	KVE-2018-0441,0449,0510 그누보드 영카트 다중 취약점 수정	2018-08-17 14:45:04 +09:00
thisgun	a7a8f45301	링크 보기 제대로 출력 안되는 오류 수정	2018-07-30 11:05:17 +09:00
thisgun	3c9f4e05fb	iframe 허용 도메인 추가	2018-07-24 09:58:00 +09:00
thisgun	6d7ac7a6be	카카오링크 버전 소스 수정	2018-07-10 17:20:42 +09:00
thisgun	02d816154b	Merge branch 'master' of github.com:gnuboard/g5	2018-07-03 16:02:20 +09:00
thisgun	733bca04c8	5.3.1.5 버전 수정	2018-07-03 15:57:21 +09:00
thisgun	244a496490	회원 사이드뷰 전체게시물 클릭시 새창으로 수정	2018-07-03 15:51:43 +09:00
thisgun	c6f28c120c	취약점 [KVE-18-339] 수정	2018-07-03 15:29:06 +09:00
thisgun	12ad5e9cb5	방문자 스킨 css 수정	2018-06-08 11:18:28 +09:00
thisgun	0bae2cf182	Merge branch 'master' of github.com:gnuboard/g5	2018-06-05 11:42:10 +09:00
thisgun	85762d4ed6	5.3.1.4 버전 수정	2018-06-05 11:38:30 +09:00
thisgun	d7cf0ce39d	KVE-2018-366, 379, 397 취약점 수정	2018-06-05 11:33:12 +09:00
thisgun	a196c91ed5	Merge branch 'master' of github.com:gnuboard/g5	2018-06-05 09:39:56 +09:00
thisgun	a069ec6c93	네이버 소셜 아이디로 가입시 이름을 가져오도록 수정	2018-06-05 09:39:15 +09:00
thisgun	2a4300b4b2	새게시물 페이지에서 게시물 삭제시 게시판 카운트가 제대로 되지 않는 오류 수정	2018-06-04 12:04:34 +09:00
thisgun	5048ac79d2	쪽지 보기에서 사이드뷰 전체게시물 링크를 opener 로 보내게금 수정	2018-06-04 10:55:34 +09:00
thisgun	43cafe7753	잘못된 css 수정	2018-06-04 10:42:58 +09:00
thisgun	c24f37421b	Merge branch 'master' of github.com:gnuboard/g5	2018-05-23 14:09:13 +09:00
thisgun	0d9ecfda21	5.3.1.3 버전 수정	2018-05-23 13:34:05 +09:00
thisgun	980e65361c	KVE-2018-0300,0331,0356,0358,0370 취약점 수정	2018-05-21 20:32:09 +09:00
thisgun	c0fcd3a1ed	KVE-2018-0289, 0290, 0291, 0292, 0293 영카트, 그누보드 취약점 수정	2018-05-14 16:54:05 +09:00
thisgun	da26d2d020	다운로드 카운트 코드 수정	2018-04-25 09:54:57 +09:00
thisgun	74a8e668e5	Merge branch 'master' of github.com:gnuboard/g5	2018-04-23 10:45:56 +09:00
thisgun	215ea45b1f	오타 수정	2018-04-23 10:35:40 +09:00
thisgun	f6a8b1bacf	Merge branch 'master' of github.com:gnuboard/g5	2018-04-20 16:01:37 +09:00
thisgun	0abf00d793	크롬 모바일 데이터 절약 모드 관리자 페이지 접속 오류 수정	2018-04-20 16:00:54 +09:00
thisgun	8958f138f4	Merge branch 'master' of github.com:gnuboard/g5	2018-04-20 14:27:21 +09:00
thisgun	850145bf36	5.3.1.2 버전 수정	2018-04-20 14:04:56 +09:00
thisgun	0b8ac2f8bb	쪽지 내용 보기의 이전쪽지 다음쪽지 링크 문제 수정 및 스타일 수정	2018-04-20 12:05:57 +09:00
thisgun	00495f4bdb	모바일 구분 AGENT에 블랙베리 모델 BB01 추가	2018-04-20 10:38:51 +09:00
thisgun	4252ba73db	1:1 문의 게시판 스킨 수정	2018-04-20 09:08:08 +09:00
thisgun	177cffc9df	테마 css 수정 및 스킨 파일 css 개선	2018-04-19 14:21:47 +09:00
thisgun	8ce9da7684	스킨파일 오류 구문 수정	2018-04-18 12:30:32 +09:00
thisgun	33451baa46	오타 수정	2018-04-10 16:44:29 +09:00
thisgun	af8494e18f	Merge branch 'master' of github.com:gnuboard/g5	2018-04-04 12:13:10 +09:00
thisgun	e5fd02516f	소셜 로그인 디버그 기능 추가	2018-04-03 18:05:07 +09:00
thisgun	4acf2a5686	잘못된 태그 수정	2018-04-03 11:07:51 +09:00
thisgun	b0fd1e7486	Merge branch 'master' of github.com:gnuboard/g5	2018-03-30 19:15:40 +09:00
thisgun	ebc35a9c33	5.3.1 버전 수정	2018-03-30 17:41:34 +09:00
thisgun	f7ac06d7d4	5.3 버전 내용 적용	2018-03-30 17:40:37 +09:00
thisgun	bf8efdf2ab	Merge branch 'master' of github.com:gnuboard/g5	2018-03-26 09:52:13 +09:00
thisgun	87fdbc7882	5.2.9.8.4 버전 수정	2018-03-26 09:39:47 +09:00
thisgun	78a6943ed8	타도메인 리다이렉트 체크 오류 코드 수정	2018-03-26 09:15:10 +09:00
thisgun	0055690e54	alert.php 코드 수정	2018-03-23 15:40:35 +09:00
thisgun	632ca4c79a	Merge branch 'master' of github.com:gnuboard/g5	2018-03-20 15:58:37 +09:00
thisgun	52f6b39edc	공지가 풀리는 경우 코드 오류 수정 및 메모 카운트 코드 오류 수정	2018-03-20 15:56:24 +09:00
thisgun	fddd29388b	취약점 (2018-0085, 0132) 이전 잘못된 코드 수정	2018-03-19 16:55:42 +09:00
thisgun	ea9825be61	Merge branch 'master' of github.com:gnuboard/g5	2018-03-19 14:31:06 +09:00
thisgun	af6d060fa0	5.2.9.8.3 버전 수정	2018-03-19 14:16:10 +09:00
thisgun	134e504134	최신글 캐시 파일 생성 코드 수정	2018-03-19 12:30:24 +09:00
thisgun	2a70b016f6	게시판 상단 하단 파일 경로 내용 등은 슈퍼관리자만 입력할수 있게 수정	2018-03-19 11:03:25 +09:00
thisgun	c665cc0557	그누보드 관리자 페이지 SQL Injection 취약점 수정	2018-03-19 10:24:24 +09:00
thisgun	cfc85a327b	분류명 패치 `f5f4925d4e` 에 따른 추가코드	2018-03-19 09:40:21 +09:00
thisgun	a47002d71f	1:1 문의 리스트에서 삭제 토큰 오류 수정	2018-03-16 17:10:54 +09:00
thisgun	6c867f02b4	그누보드 SQL Injection 취약점 (18-0075) 수정	2018-03-16 16:39:07 +09:00
thisgun	108651c46d	그누보드 Reflected XSS 취약점(18-0085, 0132) 수정	2018-03-16 12:17:00 +09:00
thisgun	b95db6a4a7	미가입 계정 세션 획득 취약점 (18-0013) 수정	2018-03-15 15:41:20 +09:00
thisgun	b79a46b857	그누보드5 Open Redirect+Password Hijack 취약점(2018-0109) 수정	2018-03-14 17:57:34 +09:00
thisgun	06ad4e534a	그누보드 영카트 다중 취약점(17-1029, 17-1047) 수정	2018-03-13 16:11:52 +09:00
thisgun	d7b5c9a4bd	그누보드, 영카트 다중 취약점 (18-062, 092, 101, 102) 수정	2018-03-12 18:14:19 +09:00
thisgun	81b39b59c3	그누보드 Reflected XSS 취약점(KVE-2018-0086) 수정	2018-03-12 15:00:58 +09:00
thisgun	4aeae4915a	오타 수정	2018-03-12 09:17:05 +09:00
thisgun	a4c3a4b5e9	그누보드 URL Redirect 취약점(KVE-2017-1052) 수정	2018-03-09 10:56:30 +09:00
thisgun	c032ed6647	첨부파일명이 외국어일시 다운로드 이슈 수정	2018-02-26 16:37:16 +09:00
thisgun	5b9b29fdfe	게시판 검색시 0 문자열로 검색할수 있도록 수정	2018-02-26 11:50:17 +09:00
thisgun	9e8f75e8fa	회원이 쓴 공지글을 수정할 경우 공지가 풀리는 오류 수정	2018-02-26 09:04:15 +09:00
thisgun	f50b4d419f	스크랩 댓글 삭제시 포인트내역이 사라지지 않는 오류 수정	2018-02-20 18:36:00 +09:00
thisgun	58aaef8261	TEXTAREA 로 작성된 글을 에디터로 글 수정시 생기는 문제 수정	2018-02-14 11:50:40 +09:00
thisgun	f9b82cfbfb	잘못된 주석 수정	2018-02-05 17:05:11 +09:00
thisgun	80d47facff	문법 오류 수정	2018-01-19 18:23:57 +09:00
thisgun	18749864c0	메모에 페이징 적용	2018-01-19 16:05:33 +09:00
thisgun	fc976f2bed	관리자 설문조사 페이지 필터구문 추가	2018-01-05 10:19:47 +09:00
thisgun	fbe2021a38	Merge branch 'master' of github.com:gnuboard/g5	2017-12-27 18:16:32 +09:00
thisgun	b34f577fbd	iframe 허용 목록의 잘못된 정규식 수정	2017-12-27 18:10:40 +09:00
thisgun	5ba5836ecb	Merge branch 'master' of github.com:gnuboard/g5	2017-12-27 09:59:37 +09:00
thisgun	c1e1f64580	5.2.9.8.1 버전 수정	2017-12-27 09:56:10 +09:00
thisgun	5ab91fa0ab	Open Redirect 취약점 수정	2017-12-27 09:45:22 +09:00
thisgun	5abc41cdb9	게시판 글쓰기 iframe 허용 코드 수정	2017-12-27 09:14:48 +09:00
thisgun	a90a38f096	Merge branch 'master' of github.com:gnuboard/g5	2017-12-20 12:05:17 +09:00
thisgun	68f8836cfb	5.2.9.8 버전 수정	2017-12-20 11:59:10 +09:00
thisgun	1e41f6a8ff	파일 업로드 취약점 수정	2017-12-18 12:21:23 +09:00
thisgun	875a326344	그누보드 CSRF 취약점(KVE-2017-0883,0884,0923) 수정	2017-12-12 11:59:10 +09:00
thisgun	7f9664af0a	그누보드 Reflected XSS 취약점 (891, 906, 908, 910) 수정	2017-12-11 17:52:20 +09:00
thisgun	8755c8ece7	Open Redirect 취약점 수정	2017-12-11 14:34:01 +09:00
thisgun	66358414f2	pht 파일 업로드 취약점 수정 adm1nkyj(김용진, http://adm1nkyj.kr ) 님 제보	2017-12-08 11:27:37 +09:00