Merge branch '54' of github.com:gnuboard/g5 into 54

인덱스 페이지에 코드 추가
버전 5.4.0.9 수정
2019-11-26 19:05:44 +09:00 · 2019-11-26 18:37:15 +09:00 · 2019-11-26 18:20:49 +09:00 · 2019-11-26 18:20:24 +09:00 · 2019-11-25 16:21:58 +09:00 · 2019-11-25 15:10:23 +09:00
218 changed files with 954 additions and 6539 deletions
@@ -101,7 +101,7 @@ function imageview(id, w, h)
    <h1><?php echo $config['cf_title'] ?></h1>
    <div id="hd_top">
        <button type="button" id="btn_gnb" class="btn_gnb_close <?php echo $adm_menu_cookie['btn_gnb'];?>">메뉴</button>
-       <div id="logo"><a href="<?php echo correct_goto_url(G5_ADMIN_URL); ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.png" alt="<?php echo get_text($config['cf_title']); ?> 관리자"></a></div>
+       <div id="logo"><a href="<?php echo correct_goto_url(G5_ADMIN_URL); ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.png" alt="<?php echo $config['cf_title'] ?> 관리자"></a></div>

        <div id="tnb">
            <ul>
@@ -108,7 +108,7 @@ function get_ajax_token()
 }

 $(function() {
-    $(document).on("click", "form input:submit, form button:submit", function() {
+    $(document).on("click", "form input:submit", function() {
        var f = this.form;
        var token = get_ajax_token();

@@ -477,8 +477,8 @@ function admin_check_xss_params($params){

        if( is_array($value) ){
            admin_check_xss_params($value);
-        } else if ( (preg_match('/<\s?[^\>]*\/?\s?>/i', $value) && (preg_match('/script.*?\/script/ius', $value) || preg_match('/[onload|onerror]=.*/ius', $value))) || preg_match('/^(?=.*token\()(?=.*xmlhttprequest\()(?=.*send\().*$/im', $value) || (preg_match('/[onload|onerror|focus]=.*/ius', $value) && preg_match('/(eval|expression|exec|prompt)(\s*)\((.*)\)/ius', $value)) ){
-            alert('요청 쿼리에 잘못된 스크립트문장이 있습니다.\\nXSS 공격일수도 있습니다.', G5_URL);
+        } else if ( preg_match('/<\s?[^\>]*\/?\s?>/i', $value) && (preg_match('/script.*?\/script/ius', $value) || preg_match('/[onload|onerror]=.*/ius', $value)) ){
+            alert('요청 쿼리에 잘못된 스크립트문장이 있습니다.\\nXSS 공격일수도 있습니다.');
            die();
        }
    }
@@ -160,7 +160,7 @@ $pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_w
 echo $pagelist;
 ?>

-<form name="fauthlist2" id="fauthlist2" action="./auth_update.php" method="post" autocomplete="off" onsubmit="return fauth_add_submit(this);">
+<form name="fauthlist2" id="fauthlist2" action="./auth_update.php" method="post" autocomplete="off">
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>">
 <input type="hidden" name="stx" value="<?php echo $stx ?>">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -218,17 +218,6 @@ echo $pagelist;
                <label for="d">d (삭제)</label>
            </td>
        </tr>
-        <tr>
-            <th scope="row">자동등록방지</th>
-            <td>
-                <?php
-                include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
-                $captcha_html = captcha_html();
-                $captcha_js   = chk_captcha_js();
-                echo $captcha_html;
-                ?>
-            </td>
-        </tr>
        </tbody>
        </table>
    </div>
@@ -241,13 +230,6 @@ echo $pagelist;
 </form>

 <script>
-function fauth_add_submit(f){
-    
-    <?php echo $captcha_js; // 캡챠 사용시 자바스크립트에서 입력된 캡챠를 검사함  ?>
-
-    return true;
-}
-
 function fauthlist_submit(f)
 {
    if (!is_checked("chk[]")) {
@@ -28,8 +28,6 @@ for ($i=0; $i<$count; $i++)

    $sql = " delete from {$g5['auth_table']} where mb_id = '".$mb_id."' and au_menu = '".$au_menu."' ";
    sql_query($sql);
-
-    run_event('adm_auth_delete_member', $mb_id, $au_menu);
 }

 goto_url('./auth_list.php?'.$qstr);
@@ -1,7 +1,6 @@
 <?php
 $sub_menu = "100200";
 include_once('./_common.php');
-include_once(G5_LIB_PATH.'/mailer.lib.php');

 if ($is_admin != 'super')
    alert('최고관리자만 접근 가능합니다.');
@@ -12,12 +11,6 @@ if (!$mb['mb_id'])

 check_admin_token();

-include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
-
-if (!chk_captcha()) {
-    alert('자동등록방지 숫자가 틀렸습니다.');
-}
-
 $sql = " insert into {$g5['auth_table']}
            set mb_id   = '{$_POST['mb_id']}',
                au_menu = '{$_POST['au_menu']}',
@@ -33,17 +26,5 @@ if (!$result) {

 //sql_query(" OPTIMIZE TABLE `$g5['auth_table']` ");

-// 세션을 체크하여 하루에 한번만 메일알림이 가게 합니다.
-if( str_replace('-', '', G5_TIME_YMD) !== get_session('adm_auth_update') ){
-    $site_url = preg_replace('/^www\./', '', strtolower($_SERVER['SERVER_NAME']));
-    $to_email = 'gnuboard@'.$site_url;
-
-    mailer($config['cf_admin_email_name'], $to_email, $config['cf_admin_email'], '['.$config['cf_title'].'] 관리권한설정 알림', '<p><b>['.$config['cf_title'].'] 관리권한설정 변경 안내</b></p><p style="padding-top:1em">회원 아이디 '.$mb['mb_id'].' 에 관리권한이 추가 되었습니다.</p><p style="padding-top:1em">'.G5_TIME_YMDHIS.'</p><p style="padding-top:1em"><a href="'.G5_URL.'" target="_blank">'.$config['cf_title'].'</a></p>', 1);
-
-    set_session('adm_auth_update', str_replace('-', '', G5_TIME_YMD));
-}
-
-run_event('adm_auth_update', $mb);
-
 goto_url('./auth_list.php?'.$qstr);
 ?>
@@ -31,7 +31,7 @@ include_once(G5_PATH.'/head.sub.php');
            </tr>
            <tr>
                <th scope="col"><label for="target_subject">게시판 제목<strong class="sound_only">필수</strong></label></th>
-                <td><input type="text" name="target_subject" value="[복사본] <?php echo get_sanitize_input($board['bo_subject']); ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
+                <td><input type="text" name="target_subject" value="[복사본] <?php echo $board['bo_subject'] ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
            </tr>
            <tr>
                <th scope="col">복사 유형</th>
@@ -11,8 +11,6 @@ check_admin_token();
 $target_table   = trim($_POST['target_table']);
 $target_subject = trim($_POST['target_subject']);

-$target_subject = strip_tags(clean_xss_attributes($target_subject));
-
 if (!preg_match('/[A-Za-z0-9_]{1,20}/', $target_table)) {
    alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)');
 }
@@ -26,9 +26,6 @@ sql_query(" delete from {$g5['board_file_table']} where bo_table = '{$tmp_bo_tab
 // 게시판 테이블 DROP
 sql_query(" drop table {$g5['write_prefix']}{$tmp_bo_table} ", FALSE);

-// 좋아요 테이블에서 기록 삭제
-sql_query(" delete from {$g5['board_good_table']} where bo_table = '{$tmp_bo_table}' ");
-
 delete_cache_latest($tmp_bo_table);

 // 게시판 폴더 전체 삭제
@@ -77,18 +77,11 @@ if (!isset($board['bo_mobile_subject'])) {
 }

 if (!isset($board['bo_use_captcha'])) {
-    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_use_captcha` TINYINT NOT NULL DEFAULT '0' AFTER `bo_use_sns` ", false);
+    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_use_captcha` TINYINT NOT NULL DEFAULT '0' AFTER `bo_use_sns` ");
 }

-if (!isset($board['bo_select_editor'])) {
-    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_select_editor` VARCHAR(50) NOT NULL DEFAULT '' AFTER `bo_use_dhtml_editor` ", false);
-}
-
-run_event('adm_board_form_before', $board, $w);
-
 $required = "";
 $readonly = "";
-$sound_only = "";
 if ($w == '') {

    $html_title .= ' 생성';
@@ -488,27 +481,6 @@ $pg_anchor = '<ul class="anchor">
                <label for="chk_all_use_dhtml_editor">전체적용</label>
            </td>
        </tr>
-        <tr>
-            <th scope="row"><label for="bo_select_editor">게시판 에디터 선택</label></th>
-            <td>
-                <?php echo help('게시판에 사용할 에디터를 설정합니다. 스킨에 따라 적용되지 않을 수 있습니다.') ?>
-                <select name="bo_select_editor" id="bo_select_editor">
-                <?php
-                $arr = get_skin_dir('', G5_EDITOR_PATH);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">기본환경설정의 에디터 사용</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($board['bo_select_editor'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
-            </td>
-            <td class="td_grpset">
-                <input type="checkbox" name="chk_grp_select_editor" value="1" id="chk_grp_select_editor">
-                <label for="chk_grp_select_editor">그룹적용</label>
-                <input type="checkbox" name="chk_all_select_editor" value="1" id="chk_all_select_editor">
-                <label for="chk_all_select_editor">전체적용</label>
-            </td>
-        </tr>
        <tr>
            <th scope="row"><label for="bo_use_rss_view">RSS 보이기 사용</label></th>
            <td>
@@ -60,11 +60,6 @@ if(!is_include_path_check($bo_include_tail, 1)) {
    alert('하단 파일 경로에 포함시킬수 없는 문자열이 있습니다.');
 }

-if( function_exists('filter_input_include_path') ){
-    $bo_include_head = filter_input_include_path($bo_include_head);
-    $bo_include_tail = filter_input_include_path($bo_include_tail);
-}
-
 $board_path = G5_DATA_PATH.'/file/'.$bo_table;

 // 게시판 디렉토리 생성
@@ -81,12 +76,12 @@ $f = @fopen($file, 'w');
 // 분류에 & 나 = 는 사용이 불가하므로 2바이트로 바꾼다.
 $src_char = array('&', '=');
 $dst_char = array('＆', '〓');
-$bo_category_list = isset($_POST['bo_category_list']) ? str_replace($src_char, $dst_char, $_POST['bo_category_list']) : '';
+$bo_category_list = str_replace($src_char, $dst_char, $bo_category_list);
 //https://github.com/gnuboard/gnuboard5/commit/f5f4925d4eb28ba1af728e1065fc2bdd9ce1da58 에 따른 조치
-$str_bo_category_list = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $bo_category_list);
+$str_bo_category_list = isset($_POST['bo_category_list']) ? preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $_POST['bo_category_list']) : '';

-$_POST['bo_subject'] = strip_tags(clean_xss_attributes($_POST['bo_subject']));
-$_POST['bo_mobile_subject'] = strip_tags(clean_xss_attributes($_POST['bo_mobile_subject']));
+$_POST['bo_subject'] = strip_tags($_POST['bo_subject']);
+$_POST['bo_mobile_subject'] = strip_tags($_POST['bo_mobile_subject']);

 $sql_common = " gr_id               = '{$gr_id}',
                bo_subject          = '{$_POST['bo_subject']}',
@@ -114,7 +109,6 @@ $sql_common = " gr_id               = '{$gr_id}',
                bo_use_file_content = '{$_POST['bo_use_file_content']}',
                bo_use_secret       = '{$_POST['bo_use_secret']}',
                bo_use_dhtml_editor = '{$_POST['bo_use_dhtml_editor']}',
-                bo_select_editor    = '{$_POST['bo_select_editor']}',
                bo_use_rss_view     = '{$_POST['bo_use_rss_view']}',
                bo_use_good         = '{$_POST['bo_use_good']}',
                bo_use_nogood       = '{$_POST['bo_use_nogood']}',
@@ -205,7 +199,7 @@ if ($w == '') {
    $file = file('./sql_write.sql');
    $file = get_db_create_replace($file);

-    $sql = implode("\n", $file);
+    $sql = implode($file, "\n");

    $create_table = $g5['write_prefix'] . $bo_table;

@@ -295,14 +289,13 @@ if (is_checked('chk_grp_write_point'))          $grp_fields .= " , bo_write_poin
 if (is_checked('chk_grp_comment_point'))        $grp_fields .= " , bo_comment_point = '{$bo_comment_point}' ";
 if (is_checked('chk_grp_download_point'))       $grp_fields .= " , bo_download_point = '{$bo_download_point}' ";
 if (is_checked('chk_grp_category_list')) {
-    $grp_fields .= " , bo_category_list = '{$str_bo_category_list}' ";
+    $grp_fields .= " , bo_category_list = '{$bo_category_list}' ";
    $grp_fields .= " , bo_use_category = '{$bo_use_category}' ";
 }
 if (is_checked('chk_grp_use_sideview'))         $grp_fields .= " , bo_use_sideview = '{$bo_use_sideview}' ";
 if (is_checked('chk_grp_use_file_content'))     $grp_fields .= " , bo_use_file_content = '{$bo_use_file_content}' ";
 if (is_checked('chk_grp_use_secret'))           $grp_fields .= " , bo_use_secret = '{$bo_use_secret}' ";
 if (is_checked('chk_grp_use_dhtml_editor'))     $grp_fields .= " , bo_use_dhtml_editor = '{$bo_use_dhtml_editor}' ";
-if (is_checked('chk_grp_select_editor'))        $grp_fields .= " , bo_select_editor = '{$bo_select_editor}' ";
 if (is_checked('chk_grp_use_rss_view'))         $grp_fields .= " , bo_use_rss_view = '{$bo_use_rss_view}' ";
 if (is_checked('chk_grp_use_good'))             $grp_fields .= " , bo_use_good = '{$bo_use_good}' ";
 if (is_checked('chk_grp_use_nogood'))           $grp_fields .= " , bo_use_nogood = '{$bo_use_nogood}' ";
@@ -385,14 +378,13 @@ if (is_checked('chk_all_write_point'))          $all_fields .= " , bo_write_poin
 if (is_checked('chk_all_comment_point'))        $all_fields .= " , bo_comment_point = '{$bo_comment_point}' ";
 if (is_checked('chk_all_download_point'))       $all_fields .= " , bo_download_point = '{$bo_download_point}' ";
 if (is_checked('chk_all_category_list')) {
-    $all_fields .= " , bo_category_list = '{$str_bo_category_list}' ";
+    $all_fields .= " , bo_category_list = '{$bo_category_list}' ";
    $all_fields .= " , bo_use_category = '{$bo_use_category}' ";
 }
 if (is_checked('chk_all_use_sideview'))         $all_fields .= " , bo_use_sideview = '{$bo_use_sideview}' ";
 if (is_checked('chk_all_use_file_content'))     $all_fields .= " , bo_use_file_content = '{$bo_use_file_content}' ";
 if (is_checked('chk_all_use_secret'))           $all_fields .= " , bo_use_secret = '{$bo_use_secret}' ";
 if (is_checked('chk_all_use_dhtml_editor'))     $all_fields .= " , bo_use_dhtml_editor = '{$bo_use_dhtml_editor}' ";
-if (is_checked('chk_all_select_editor'))        $all_fields .= " , bo_select_editor = '{$bo_select_editor}' ";
 if (is_checked('chk_all_use_rss_view'))         $all_fields .= " , bo_use_rss_view = '{$bo_use_rss_view}' ";
 if (is_checked('chk_all_use_good'))             $all_fields .= " , bo_use_good = '{$bo_use_good}' ";
 if (is_checked('chk_all_use_nogood'))           $all_fields .= " , bo_use_nogood = '{$bo_use_nogood}' ";
@@ -33,7 +33,7 @@ if ($_POST['act_button'] == "선택수정") {
                alert('최고관리자가 아닌 경우 다른 관리자의 게시판('.$board_table[$k].')은 수정이 불가합니다.');
        }

-        $p_bo_subject = is_array($_POST['bo_subject']) ? strip_tags(clean_xss_attributes($_POST['bo_subject'][$k])) : '';
+        $p_bo_subject = is_array($_POST['bo_subject']) ? strip_tags($_POST['bo_subject'][$k]) : '';

        $sql = " update {$g5['board_table']}
                    set gr_id               = '".sql_real_escape_string(strip_tags($_POST['gr_id'][$k]))."',
@@ -16,7 +16,7 @@ if (!preg_match("/^([A-Za-z0-9_]{1,10})$/", $_POST['gr_id']))

 if (!$gr_subject) alert('그룹 제목을 입력하세요.');

-$gr_subject = isset($_POST['gr_subject']) ? strip_tags(clean_xss_attributes($_POST['gr_subject'])) : '';
+$gr_subject = isset($_POST['gr_subject']) ? strip_tags($_POST['gr_subject']) : '';

 $sql_common = " gr_subject = '{$gr_subject}',
                gr_device = '{$_POST['gr_device']}',
@@ -69,7 +69,5 @@ if ($w == '') {
    alert('제대로 된 값이 넘어오지 않았습니다.');
 }

-run_event('admin_boardgroup_form_update', $gr_id, $w);
-
 goto_url('./boardgroup_form.php?w=u&amp;gr_id='.$gr_id.'&amp;'.$qstr);
 ?>
@@ -124,10 +124,10 @@ $colspan = 10;
    <tr class="<?php echo $bg; ?>">
        <td class="td_chk">
            <input type="hidden" name="group_id[<?php echo $i ?>]" value="<?php echo $row['gr_id'] ?>">
-            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo get_text($row['gr_subject']); ?> 그룹</label>
+            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['gr_subject'] ?> 그룹</label>
            <input type="checkbox" name="chk[]" value="<?php echo $i ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td class="td_left"><a href="<?php echo G5_BBS_URL ?>/group.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row['gr_id'] ?></a></td>
+        <td class="td_left"><a href="<?php echo get_pretty_url(G5_GROUP_DIR, $row['gr_id']); ?>"><?php echo $row['gr_id'] ?></a></td>
        <td class="td_input">
            <label for="gr_subject_<?php echo $i; ?>" class="sound_only">그룹제목</label>
            <input type="text" name="gr_subject[<?php echo $i ?>]" value="<?php echo get_text($row['gr_subject']) ?>" id="gr_subject_<?php echo $i ?>" class="tbl_input">
@@ -135,9 +135,9 @@ $colspan = 10;
        <td class="td_mng td_input">
        <?php if ($is_admin == 'super'){ ?>
            <label for="gr_admin_<?php echo $i; ?>" class="sound_only">그룹관리자</label>
-            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo get_sanitize_input($row['gr_admin']); ?>" id="gr_admin_<?php echo $i ?>" class="tbl_input" size="10" maxlength="20">
+            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>" id="gr_admin_<?php echo $i ?>" class="tbl_input" size="10" maxlength="20">
        <?php }else{ ?>
-            <input type="hidden" name="gr_admin[<?php echo $i ?>]" value="<?php echo get_sanitize_input($row['gr_admin']); ?>"><?php echo get_text($row['gr_admin']); ?>
+            <input type="hidden" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>"><?php echo $row['gr_admin'] ?>
        <?php } ?>
        </td>
        <td class="td_num"><a href="./board_list.php?sfl=a.gr_id&amp;stx=<?php echo $row['gr_id'] ?>"><?php echo $row2['cnt'] ?></a></td>
@@ -10,23 +10,19 @@ auth_check($auth[$sub_menu], 'w');

 check_admin_token();

-$post_chk = isset($_POST['chk']) ? (array) $_POST['chk'] : array();
-$post_group_id = isset($_POST['group_id']) ? (array) $_POST['group_id'] : array();
-$act_button = isset($_POST['act_button']) ? $_POST['act_button'] : '';
-
-$count = count($post_chk);
+$count = count($_POST['chk']);

 if(!$count)
-    alert($act_button.'할 게시판그룹을 1개이상 선택해 주세요.');
+    alert($_POST['act_button'].'할 게시판그룹을 1개이상 선택해 주세요.');

 for ($i=0; $i<$count; $i++)
 {
-    $k     = $post_chk[$i];
-    $gr_id = preg_replace('/[^a-z0-9_]/i', '', $post_group_id[$k]);
-    $gr_subject = is_array($_POST['gr_subject']) ? strip_tags(clean_xss_attributes($_POST['gr_subject'][$k])) : '';
-    $gr_admin = is_array($_POST['gr_admin']) ? strip_tags(clean_xss_attributes($_POST['gr_admin'][$k])) : '';
+    $k     = $_POST['chk'][$i];
+    $gr_id = preg_replace('/[^a-z0-9_]/i', '', $_POST['group_id'][$k]);
+    $gr_subject = is_array($_POST['gr_subject']) ? strip_tags($_POST['gr_subject'][$k]) : '';
+    $gr_admin = is_array($_POST['gr_admin']) ? strip_tags($_POST['gr_admin'][$k]) : '';

-    if($act_button == '선택수정') {
+    if($_POST['act_button'] == '선택수정') {
        $sql = " update {$g5['group_table']}
                    set gr_subject    = '{$gr_subject}',
                        gr_device     = '".sql_real_escape_string($_POST['gr_device'][$k])."',
@@ -37,7 +33,7 @@ for ($i=0; $i<$count; $i++)
        if ($is_admin != 'super')
            $sql .= " and gr_admin    = '{$gr_admin}' ";
        sql_query($sql);
-    } else if($act_button == '선택삭제') {
+    } else if($_POST['act_button'] == '선택삭제') {
        $row = sql_fetch(" select count(*) as cnt from {$g5['board_table']} where gr_id = '$gr_id' ");
        if ($row['cnt'])
            alert("이 그룹에 속한 게시판이 존재하여 게시판 그룹을 삭제할 수 없습니다.\\n\\n이 그룹에 속한 게시판을 먼저 삭제하여 주십시오.", './board_list.php?sfl=gr_id&amp;stx='.$gr_id);
@@ -50,7 +46,5 @@ for ($i=0; $i<$count; $i++)
    }
 }

-run_event('admin_boardgroup_list_update', $act_button, $chk, $post_group_id, $qstr);
-
 goto_url('./boardgroup_list.php?'.$qstr);
 ?>
@@ -85,7 +85,7 @@ $colspan = 4;
            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['gr_subject'] ?> 그룹</label>
            <input type="checkbox" name="chk[]" value="<?php echo $row['gm_id'] ?>" id="chk_<?php echo $i ?>">
        </td>
-        <td class="td_grid"><a href="<?php echo G5_BBS_URL; ?>/group.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row['gr_id'] ?></a></td>
+        <td class="td_grid"><a href="<?php echo get_pretty_url(G5_GROUP_DIR, $row['gr_id']); ?>"><?php echo $row['gr_id'] ?></a></td>
        <td class="td_category"><?php echo $row['gr_subject'] ?></td>
        <td class="td_datetime"><?php echo $row['gm_datetime'] ?></td>
    </tr>
@@ -271,13 +271,6 @@ if(!isset($member['mb_scrap_cnt'])) {
                ADD `mb_scrap_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_cnt`", true);
 }

-// 아이코드 토큰키 추가
-if( ! isset($config['cf_icode_token_key']) ){
-    $sql = "ALTER TABLE `{$g5['config_table']}` 
-            ADD COLUMN `cf_icode_token_key` VARCHAR(100) NOT NULL DEFAULT '' AFTER `cf_icode_server_port`; ";
-    sql_query($sql, false);
-}
-
 if(!$config['cf_faq_skin']) $config['cf_faq_skin'] = "basic";
 if(!$config['cf_mobile_faq_skin']) $config['cf_mobile_faq_skin'] = "basic";

@@ -328,7 +321,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
        <tbody>
        <tr>
            <th scope="row"><label for="cf_title">홈페이지 제목<strong class="sound_only">필수</strong></label></th>
-            <td colspan="3"><input type="text" name="cf_title" value="<?php echo get_sanitize_input($config['cf_title']); ?>" id="cf_title" required class="required frm_input" size="40"></td>
+            <td colspan="3"><input type="text" name="cf_title" value="<?php echo $config['cf_title'] ?>" id="cf_title" required class="required frm_input" size="40"></td>
        </tr>
        <tr>
            <th scope="row"><label for="cf_admin">최고관리자<strong class="sound_only">필수</strong></label></th>
@@ -1183,7 +1176,7 @@ include_once('_rewrite_config_form.php');
        <tr>
            <th scope="row"><label for="cf_kakao_rest_key">카카오 REST API 키</label></th>
            <td>
-                <input type="text" name="cf_kakao_rest_key" value="<?php echo $config['cf_kakao_rest_key'] ?>" id="cf_kakao_rest_key" class="frm_input" size="40"> <a href="https://developers.kakao.com/product/kakaoLogin" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_kakao_rest_key" value="<?php echo $config['cf_kakao_rest_key'] ?>" id="cf_kakao_rest_key" class="frm_input" size="40"> <a href="https://developers.kakao.com/apps/new" target="_blank" class="btn_frmline">앱 등록하기</a>
            </td>
            <th scope="row"><label for="cf_kakao_client_secret">카카오 Client Secret</label></th>
            <td>
@@ -1264,29 +1257,29 @@ include_once('_rewrite_config_form.php');
        <tr>
            <th scope="row"><label for="cf_sms_type">SMS 전송유형</label></th>
            <td>
-                <?php echo help("전송유형을 SMS로 선택하시면 최대 80바이트까지 전송하실 수 있으며<br>LMS로 선택하시면 90바이트 이하는 SMS로, 그 이상은 ".G5_ICODE_LMS_MAX_LENGTH."바이트까지 LMS로 전송됩니다.<br>요금은 건당 SMS는 16원, LMS는 48원입니다."); ?>
+                <?php echo help("전송유형을 SMS로 선택하시면 최대 80바이트까지 전송하실 수 있으며<br>LMS로 선택하시면 90바이트 이하는 SMS로, 그 이상은 1500바이트까지 LMS로 전송됩니다.<br>요금은 건당 SMS는 16원, LMS는 48원입니다."); ?>
                <select id="cf_sms_type" name="cf_sms_type">
                    <option value="" <?php echo get_selected($config['cf_sms_type'], ''); ?>>SMS</option>
                    <option value="LMS" <?php echo get_selected($config['cf_sms_type'], 'LMS'); ?>>LMS</option>
                </select>
            </td>
        </tr>
-        <tr class="icode_old_version">
-            <th scope="row"><label for="cf_icode_id">아이코드 회원아이디<br>(구버전)</label></th>
+        <tr>
+            <th scope="row"><label for="cf_icode_id">아이코드 회원아이디</label></th>
            <td>
                <?php echo help("아이코드에서 사용하시는 회원아이디를 입력합니다."); ?>
                <input type="text" name="cf_icode_id" value="<?php echo $config['cf_icode_id']; ?>" id="cf_icode_id" class="frm_input" size="20">
            </td>
        </tr>
-        <tr class="icode_old_version">
-            <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호<br>(구버전)</label></th>
+        <tr>
+            <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호</label></th>
            <td>
                <?php echo help("아이코드에서 사용하시는 비밀번호를 입력합니다."); ?>
                <input type="password" name="cf_icode_pw" value="<?php echo $config['cf_icode_pw']; ?>" id="cf_icode_pw" class="frm_input">
            </td>
        </tr>
-        <tr class="icode_old_version <?php if(!(isset($userinfo['payment']) && $userinfo['payment'])){ echo 'cf_tr_hide'; } ?>">
-            <th scope="row">요금제<br>(구버전)</th>
+        <tr>
+            <th scope="row">요금제</th>
            <td>
                <input type="hidden" name="cf_icode_server_ip" value="<?php echo $config['cf_icode_server_ip']; ?>">
                <?php
@@ -1303,31 +1296,21 @@ include_once('_rewrite_config_form.php');
                ?>
            </td>
        </tr>
-        <?php if ($userinfo['payment'] == 'A') { ?>
-        <tr class="icode_old_version">
-            <th scope="row">충전 잔액<br>(구버전)</th>
-            <td>
-                <?php echo number_format($userinfo['coin']); ?> 원.
-                <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo $config['cf_icode_id']; ?>&amp;icode_passwd=<?php echo $config['cf_icode_pw']; ?>" target="_blank" class="btn_frmline">충전하기</a>
-            </td>
-        </tr>
-        <?php } ?>
-        <tr class="icode_json_version">
-            <th scope="row"><label for="cf_icode_token_key">아이코드 토큰키<br>(JSON버전)</label></th>
-            <td>
-                <?php echo help("아이코드 JSON 버전의 경우 아이코드 토큰키를 입력시 실행됩니다.<br>SMS 전송유형을 LMS로 설정시 90바이트 이내는 SMS, 90 ~ 2000 바이트는 LMS 그 이상은 절삭 되어 LMS로 발송됩니다."); ?>
-                <input type="text" name="cf_icode_token_key" value="<?php echo $config['cf_icode_token_key']; ?>" id="cf_icode_token_key" class="frm_input" size="40">
-                <?php echo help("아이코드 사이트 -> 토큰키관리 메뉴에서 생성한 토큰키를 입력합니다."); ?>
-                <br>
-                서버아이피 : <?php echo $_SERVER['SERVER_ADDR']; ?>
-            </td>
-        </tr>
        <tr>
            <th scope="row">아이코드 SMS 신청<br>회원가입</th>
            <td>
                <a href="http://icodekorea.com/res/join_company_fix_a.php?sellid=sir2" target="_blank" class="btn_frmline">아이코드 회원가입</a>
            </td>
        </tr>
+         <?php if ($userinfo['payment'] == 'A') { ?>
+        <tr>
+            <th scope="row">충전 잔액</th>
+            <td>
+                <?php echo number_format($userinfo['coin']); ?> 원.
+                <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo $config['cf_icode_id']; ?>&amp;icode_passwd=<?php echo $config['cf_icode_pw']; ?>" target="_blank" class="btn_frmline">충전하기</a>
+            </td>
+        </tr>
+        <?php } ?>
        </tbody>
        </table>
    </div>
@@ -1466,14 +1449,10 @@ if($config['cf_cert_use']) {

    // kcp일 때
    if($config['cf_cert_hp'] == 'kcp') {
-        if(strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
-            if(PHP_INT_MAX == 2147483647) // 32-bit
-                $exe = G5_KCPCERT_PATH . '/bin/ct_cli';
-            else
-                $exe = G5_KCPCERT_PATH . '/bin/ct_cli_x64';
-        } else {
-            $exe = G5_KCPCERT_PATH . '/bin/ct_cli_exe.exe';
-        }
+        if(PHP_INT_MAX == 2147483647) // 32-bit
+            $exe = G5_KCPCERT_PATH . '/bin/ct_cli';
+        else
+            $exe = G5_KCPCERT_PATH . '/bin/ct_cli_x64';

        echo module_exec_check($exe, 'ct_cli');
    }
@@ -26,7 +26,7 @@ if(!$_POST['cf_cert_use']) {

 $cf_social_servicelist = !empty($_POST['cf_social_servicelist']) ? implode(',', $_POST['cf_social_servicelist']) : '';

-$_POST['cf_title'] = strip_tags(clean_xss_attributes($_POST['cf_title']));
+$_POST['cf_title'] = strip_tags($_POST['cf_title']);

 $check_keys = array('cf_lg_mid', 'cf_lg_mert_key', 'cf_cert_kcb_cd', 'cf_cert_kcp_cd', 'cf_editor', 'cf_recaptcha_site_key', 'cf_recaptcha_secret_key', 'cf_naver_clientid', 'cf_naver_secret', 'cf_facebook_appid', 'cf_facebook_secret', 'cf_twitter_key', 'cf_twitter_secret', 'cf_google_clientid', 'cf_google_secret', 'cf_googl_shorturl_apikey', 'cf_kakao_rest_key', 'cf_kakao_client_secret', 'cf_kakao_js_apikey', 'cf_payco_clientid', 'cf_payco_secret');

@@ -36,8 +36,6 @@ foreach( $check_keys as $key ){
    }
 }

-$_POST['cf_icode_server_port'] = isset($_POST['cf_icode_server_port']) ? preg_replace('/[^0-9]/', '', $_POST['cf_icode_server_port']) : '7295';
-
 $sql = " update {$g5['config_table']}
            set cf_title = '{$_POST['cf_title']}',
                cf_admin = '{$_POST['cf_admin']}',
@@ -145,7 +143,6 @@ $sql = " update {$g5['config_table']}
                cf_sms_type = '{$_POST['cf_sms_type']}',
                cf_icode_id = '{$_POST['cf_icode_id']}',
                cf_icode_pw = '{$_POST['cf_icode_pw']}',
-                cf_icode_token_key = '{$_POST['cf_icode_token_key']}',
                cf_icode_server_ip = '{$_POST['cf_icode_server_ip']}',
                cf_icode_server_port = '{$_POST['cf_icode_server_port']}',
                cf_googl_shorturl_apikey = '{$_POST['cf_googl_shorturl_apikey']}',
@@ -21,7 +21,7 @@ if ($w == "" || $w == "u")
 }

 $co_id = preg_replace('/[^a-z0-9_]/i', '', $co_id);
-$co_subject = strip_tags(clean_xss_attributes($co_subject));
+$co_subject = strip_tags($co_subject);
 $co_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_head, 0, 255));
 $co_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_tail, 0, 255));
 $co_tag_filter_use = isset($_POST['co_tag_filter_use']) ? (int) $_POST['co_tag_filter_use'] : 1;
@@ -71,11 +71,6 @@ if( $co_include_tail && ! is_include_path_check($co_include_tail, 1) ){
    $error_msg = '/data/file/ 또는 /data/editor/ 포함된 문자를 하단 파일 경로에 포함시킬수 없습니다.';
 }

-if( function_exists('filter_input_include_path') ){
-    $co_include_head = filter_input_include_path($co_include_head);
-    $co_include_tail = filter_input_include_path($co_include_tail);
-}
-
 $co_seo_title = exist_seo_title_recursive('content', generate_seo_title($co_subject), $g5['content_table'], $co_id);

 $sql_common = " co_include_head     = '$co_include_head',
@@ -13,16 +13,16 @@ legend {position:absolute;margin:0;padding:0;font-size:0;line-height:0;text-inde
 label, input, button, select, img {vertical-align:middle}
 input, button {margin:0;padding:0;font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;font-size:1em}
 button,input[type="submit"] {cursor:pointer}
-textarea, select {font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;font-size:1em}
+textarea, select {font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;;font-size:1em}
 select {margin:0}
 p {margin:0;padding:0;word-break:break-all}
 pre {overflow-x:scroll;font-size:1.1em}
 a:link, a:visited {color:#000;text-decoration:none}

 * {
-webkit-box-sizing: border-box;
-moz-box-sizing: border-box;
-box-sizing: border-box;
+  -webkit-box-sizing: border-box;
+     -moz-box-sizing: border-box;
+          box-sizing: border-box;
 }

 h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
@@ -39,12 +39,12 @@ h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
 #tnb{float:right;padding:10px}
 #tnb ul:after{display:block;visibility:hidden;clear:both;content:""}
 #tnb li{float:left;position:relative;margin-left:3px}
-#tnb a{color:#fff;padding:0 10px;display:block;line-height:30px;}
+#tnb a{color:#fff;;padding:0 10px;display:block;line-height:30px;}
 #tnb .tnb_service{border-radius:3px;background:#4e5eb7;color:#fff;padding:0 10px;text-align:left;height:30px;line-height:30px;}
 #tnb .tnb_service:hover{background:#5969c3}
-#tnb button{width:100px;border:0;border-radius:3px;background:#4e5eb7;color:#fff;padding:0 30px 0 10px;text-align:left;height:30px;position:relative;text-overflow: ellipsis;overflow: hidden;white-space: nowrap;}
-#tnb button span{display:block;text-indent:-999px;overflow:hidden;width:30px;border-radius:3px;height:30px;position:absolute;top:0;right:0;background:url(../img/op_btn.png) 50% 50% no-repeat #5969c3}
-#tnb button:hover {background:#5969c3}
+#tnb  button{width:100px;;border:0;border-radius:3px;background:#4e5eb7;color:#fff;padding:0 30px 0 10px;text-align:left;height:30px;position:relative;text-overflow: ellipsis;overflow: hidden;white-space: nowrap;}
+#tnb  button span{display:block;text-indent:-999px;overflow:hidden;width:30px;border-radius:3px;height:30px;position:absolute;top:0;right:0;background:url(../img/op_btn.png) 50% 50% no-repeat #5969c3}
+#tnb  button:hover {background:#5969c3}
 #tnb .tnb_mb_area{display:none;background:#5e6dc2;width:100px;position:absolute;padding:5px;margin-top:1px;}
 #tnb .tnb_mb_area a{padding:0}
 #tnb .tnb_mb_area li{float:none;}
@@ -75,9 +75,9 @@ h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
 #gnb .on .btn_op.menu-900{background:url(../img/menu-4.png) 50% 50% no-repeat #fff}
 #gnb .gnb_li button:hover{background-color:#f3f3f3}
 #gnb .gnb_oparea{display:none;position:absolute;top:0;left:50px;background:#fff;height:100%;width:170px;padding:20px;border-right:1px solid #dbdbdb;
-webkit-box-shadow: 2px 0 2px rgba(150,150,150,100.1);
-moz-box-shadow: 2px 0 2px rgba(150,150,150,0.1);
-box-shadow: 2px 0 2px rgba(150,150,150,0.1);}
+-webkit-box-shadow: 2px 0 2px  rgba(150,150,150,100.1);
+   -moz-box-shadow: 2px 0 2px  rgba(150,150,150,0.1);
+        box-shadow: 2px 0 2px  rgba(150,150,150,0.1);}
 #gnb .on .gnb_oparea{display:block}
 #gnb .gnb_oparea h3{margin-bottom:10px;line-height:18px;font-size:1.17em}
 #gnb .gnb_oparea li{line-height:28px}
@@ -181,10 +181,10 @@ a.btn_submit{background:#ff4081;color:#fff}
 .btn_add01 button {margin:0}


-.td_mng a.btn, .td_mng a{display:inline-block;height:26px;line-height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
-.td_mng button, .td_mng button.btn{height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
-.btn{height:30px;border:0;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
-a.btn{display:inline-block;height:30px;line-height:30px;border:0;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
+.td_mng a.btn,.td_mng a{display:inline-block;height:26px;line-height:26px;border:0;;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
+.td_mng button,.td_mng button.btn{height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;border:0;;font-weight:normal}
+.btn{height:30px;border:0;;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
+a.btn{display:inline-block;height:30px;line-height:30px;border:0;;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;;vertical-align:middle}
 .btn_submit{background:#ff4081;color:#fff}
 a.btn_submit{background:#ff4081;color:#fff}
 .btn_submit:hover{background:#ff1464}
@@ -195,21 +195,19 @@ a.btn_submit{background:#ff4081;color:#fff}
 .btn_03,a.btn_03{background:#3f51b5;color:#fff;}

 .btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;border:0;border-radius:5px;padding:0 10px}
-a.btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;line-height:33px;border-radius:5px;padding:0 10px;text-decoration:none !important}
+a.btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;line-height:33px;border-radius:5px;padding:0 10px;text-decoration:none  !important}
 .btn_ov01{display:inline-block;line-height:30px;height:30px;font-size:0.92em;vertical-align:top}
+.btn_ov01:after{display:block;visibility:hidden;clear :both;content:""}
 .btn_ov01 .ov_txt{float:left;background:#9eacc6;color:#fff;border-radius:5px 0 0 5px;padding:0 5px}
 .btn_ov01 .ov_num{float:left;background:#ededed;color:#666;border-radius:0 5px 5px 0;padding:0 5px}
 a.btn_ov02,a.ov_listall{display:inline-block;line-height:30px;height:30px;font-size:0.92em;background:#565e8c;color:#fff;vertical-align:top;border-radius:5px;padding:0 7px }
 a.btn_ov02:hover,a.ov_listall:hover{background:#3f51b5}

-.local_ov01.local_ov [data-tooltip-text]:hover {position:relative}
-.local_ov01.local_ov [data-tooltip-text]:hover:after{line-height:20px;background-color:#000;background-color:rgba(0,0,0,0.8);-webkit-box-shadow:0 0 3px 1px rgba(50,50,50,0.4);-moz-box-shadow:0 0 3px 1px rgba(50,50,50,0.4);box-shadow:0 0 3px 1px rgba(50,50,50,0.4);-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;color:#FFF;font-size:11px;content:attr(data-tooltip-text);white-space: pre;margin-bottom:10px;top:130%;left:0;padding:7px 12px;position:absolute;max-width:500px;word-wrap:break-word;z-index:9999}
-
 /*form*/
 .sound_only {display:inline-block !important;position:absolute;top:0;left:0;margin:0 !important;padding:0 !important;width:1px !important;height:1px !important;font-size:0;line-height:0;border:0 !important;overflow:hidden !important}
 .frm_input{height:35px;line-height:32px;border:1px solid #d5d5d5;}
 .frm_input_full{width:100%}
-.required{background:url('../img/wrest.gif') top right no-repeat #fff !important}
+.required{background:url('../img/wrest.gif')  top right no-repeat #fff !important}
 select{height:35px;line-height:32px;border:1px solid #d5d5d5;}
 textarea{width:100%;border:1px solid #d5d5d5;min-height:80px}
 legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent:-9999em;border:0;overflow:hidden}
@@ -234,7 +232,7 @@ legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent
 .color_st03{background:#b668d0;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
 .color_st04{background:#ffa700;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
 .color_st05{background:#688fef;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
-.color_st06{color:#ff0000;border:1px solid #ff0000;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
+.color_st06{;color:#ff0000;border:1px solid #ff0000;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}

 /* 폼 안내글 */
 .frm_info {display:block;padding:0 0 5px;color:#5b747e}
@@ -244,7 +242,7 @@ legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent
 .anchor:after {display:block;visibility:hidden;clear:both;content:""}
 .anchor li{float:left;margin-left:-1px;list-style:none}
 .anchor a {display:inline-block;padding:5px 10px;border:1px solid #c8ced1;background:#d6dde1;text-decoration:none}
-.anchor .selected{background:#3f51b5}
+.anchor  .selected{background:#3f51b5}



@@ -263,22 +261,22 @@ border-bottom: 5px solid black;}

 /* 페이지 내 검색 */
 .local_sch{}
-.local_sch:after, .local_sch div:after{display:block;visibility:hidden;clear:both;content:""}
-.local_sch .btn_sch{width:30px;height:30px;border:1px solid #dcdcdc;border-left:0;padding:0;float:left;background:url(../img/sch_btn.png) no-repeat 50% 50%;text-indent:-999px;overflow:hidden}
-.local_sch .btn_sch2{width:35px;height:35px;border:1px solid #dcdcdc;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;text-indent:-999px;overflow:hidden}
+.local_sch:after ,.local_sch div:after{display:block;visibility:hidden;clear:both;content:""}
+.local_sch .btn_sch{width:30px;height:30px;border:0;padding:0;float:left;background:url(../img/sch_btn.png) no-repeat 50% 50%;border:1px solid #dcdcdc;border-left:0;text-indent:-999px;overflow:hidden}
+.local_sch .btn_sch2{width:35px;height:35px;border:0;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;border:1px solid #dcdcdc;text-indent:-999px;overflow:hidden}

-.local_sch .sch_input{height:30px;border:1px solid #dcdcdc;border-right:0;padding:0 5px;float:left;}
+.local_sch .sch_input{height:30px;border:1px solid #dcdcdc;border-right:0;;padding:0 5px;float:left;}
 .local_sch select{height:30px;margin-right:3px;border:1px solid #dcdcdc}
 .local_sch01{margin: 10px 0;}
 .local_sch02{}
 .local_sch01 .frm_input{height:30px;border:1px solid #dcdcdc;padding:0 5px;}
-.local_sch01 .btn_submit{width:30px;height:30px;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;border:1px solid #dcdcdc;text-indent:-999px;overflow:hidden}
-.local_sch03{padding:5px 15px;background:#e9ebf9;margin:10px 0}
+.local_sch01 .btn_submit{width:30px;height:30px;border:0;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;border:1px solid #dcdcdc;text-indent:-999px;overflow:hidden}
+.local_sch03{;padding:5px 15px;background:#e9ebf9;margin:10px 0}
 .local_sch div{margin:5px 0;}
 .local_sch03 strong{display:inline-block;width:70px;}
-.local_sch03 label{margin-right:5px;display:inline-block}
+.local_sch03  label{margin-right:5px;display:inline-block}
 .local_sch03 button{height:30px;padding:0 5px;border:0;background:#9eacc6;color:#fff;}
-.local_sch03 .btn_submit{height:30px;padding:0 5px;border:0;color:#fff;}
+.local_sch03 .btn_submit{height:30px;padding:0 5px;border:0;;color:#fff;}
 .local_sch03 .frm_input{height:30px;border:1px solid #dcdcdc;padding:0 5px;}
 /* 페이지 내 실행 */
 .local_cmd {min-width:960px}
@@ -305,7 +303,7 @@ border-bottom: 5px solid black;}
 /* 페이지 내 카운트 */
 .local_ov {min-width:960px}

-.local_ov01 {position:relative;margin: 10px 0;}
+.local_ov01 {position:relative;;margin: 10px 0;}
 .local_ov01 .ov_a {display:inline-block;margin:0 0 0 5px;padding:0 0 0 10px;border-left:1px solid #ccc;color:#ff3061}


@@ -530,10 +528,6 @@ td.td_grpset {width:160px;border-left:1px solid #e9ecee;text-align:center}
 .is_rewrite .info-success{color:#155724}
 .is_rewrite .info-warning{color:#856404}

-.icode_old_version th{background-color:#FFFCED}
-.icode_json_version th{background-color:#F6F1FF}
-.cf_tr_hide {display:none}
-
 /* 관리권한설정 */
 #add_admin fieldset {margin-top:20px;overflow:auto;padding:2px 6px;line-height:1.4;resize:vertical}

@@ -626,7 +620,7 @@ td.td_grpset {width:160px;border-left:1px solid #e9ecee;text-align:center}
 -moz-box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);
 box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);}
 .sv_wrap .sv:before{content: "";position: absolute;top: -6px;left: 15px;width: 0;height: 0;border-style: solid;border-width: 0 6px 6px 6px;border-color: transparent transparent #333 transparent;}
-.sv_wrap .sv a {display:inline-block;margin:0;padding:0 10px;line-height:30px;width:100px;font-weight:normal;color:#bbb }
+.sv_wrap .sv a {display:inline-block;margin:0;padding:0  10px;line-height:30px;width:100px;font-weight:normal;color:#bbb }
 .sv_wrap .sv a:hover{background:#000;color:#fff}
 .sv_member{color:#333}
 .sv_on {display:block !important;position:absolute;top:23px;left:0px;width:auto;height:auto}
@@ -710,15 +704,15 @@ box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);}
 /* 캡챠 */
 #captcha {display:inline-block;position:relative}
 #captcha legend {position:absolute;margin:0;padding:0;font-size:0;line-height:0;text-indent:-9999em;overflow:hidden;}
-#captcha #captcha_img {height:40px;border:1px solid #898989;vertical-align:top;padding:0;margin:0}
-#captcha #captcha_mp3 {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat;text-indent:-999px;border-radius:3px}
-#captcha #captcha_reload {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat 0 -40px;text-indent:-999px;border-radius:3px}
+#captcha #captcha_img {;height:40px;border:1px solid #898989;vertical-align:top;padding:0;margin:0}
+#captcha #captcha_mp3 {;margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat;text-indent:-999px;border-radius:3px}
+#captcha #captcha_reload {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat  0 -40px;text-indent:-999px;border-radius:3px}
 #captcha #captcha_key {margin:0 0 0 3px;padding:0 5px;width:90px;height:40px;border:1px solid #ccc;background:#fff;font-size:1.333em;font-weight:bold;text-align:center;border-radius:3px;vertical-align:top}
 #captcha #captcha_info {display:block;margin:5px 0 0;font-size:0.95em;letter-spacing:-0.1em}

 /*테마*/
 .theme_p{margin:0 0 10px }
-#theme_list{padding:0;margin:0;list-style:none; width: 1000px;position:relative}
+#theme_list{padding:0;margin:0;list-style:none;  width: 1000px;position:relative}
 #theme_list:after{display:block;visibility:hidden;clear:both;content:""}
 #theme_list li{margin:10px 10px 10px 0;float:left}
 #theme_list li:after{display:block;visibility:hidden;clear:both;content:""}
@@ -726,34 +720,34 @@ box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);}
 #theme_list li .tmli_if>img{width:300px;height:225px;}
 #theme_list li .tmli_if:hover>img{-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=50)";filter: alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;}
 #theme_list li .tmli_tit{position:relative; border-top: 1px solid #d1dee2; background: #e5ecef;}
-#theme_list li .tmli_tit p{height:40px;line-height:40px;padding:0 10px 0;font-weight:bold;text-overflow: ellipsis; overflow: hidden; white-space: nowrap;}
+#theme_list li .tmli_tit p{height:40px;line-height:40px;padding:0 10px 0;font-weight:bold;text-overflow: ellipsis;  overflow: hidden;  white-space: nowrap;}
 #theme_list li .tmli_tit button.tmli_dt{position:absolute;top:8px;right:10px;padding:5px;background:#111;color:#fff;display:none;border:none}
 #theme_list li .tmli_if:hover button.tmli_dt{display:block}
 #theme_list li .theme_sl{float:left;border:none;margin-top:5px;padding:0 5px;height:26px;background:#999;color:#fff}
 #theme_list li .theme_sl:hover{background:#ff3061}
 #theme_list li .theme_deactive{margin-left:4px}
 #theme_list li .theme_sl_use{background:#ff3061;line-height:26px}
-#theme_list li .theme_pr{float:right;margin-top:5px;padding:0 5px;height:26px;line-height:24px; border: 1px solid #ccc; background: #fafafa; }
-#theme_list li .theme_preview{ float: right; margin-top: 5px; padding:0 5px;height:26px; border: 1px solid #ccc; background: #fafafa; margin-right:3px}
+#theme_list li .theme_pr{float:right;margin-top:5px;padding:0 5px;height:26px;line-height:24px;  border: 1px solid #ccc;  background: #fafafa; }
+#theme_list li .theme_preview{  float: right;  margin-top: 5px; padding:0 5px;height:26px; border: 1px solid #ccc;  background: #fafafa; margin-right:3px}


 #theme_detail{position:fixed;top:50%;height:540px;width:900px;margin-top:-271px;background:#fff;background:#f3f3f3;border:1px solid #000;
-webkit-box-shadow: 1px 2px 5px rgba(150,150,150,100.5);
-moz-box-shadow: 1px 2px 5px rgba(150,150,150,0.5);
-box-shadow: 1px 2px 5px rgba(150,150,150,0.5);z-index:1000}
+-webkit-box-shadow: 1px 2px 5px  rgba(150,150,150,100.5);
+   -moz-box-shadow: 1px 2px 5px  rgba(150,150,150,0.5);
+        box-shadow: 1px 2px 5px  rgba(150,150,150,0.5);z-index:1000}
 #theme_detail:after{display:block;visibility:hidden;clear:both;content:""}
 #theme_detail h2{font-size:1.25em;background:#fff;padding:0 15px;line-height:40px;border-bottom:1px solid #d8d8d8;margin:0}
 .theme_dt_img{float:left;padding:20px}
 .theme_dt_img img{border:1px solid #aaa;}
 .theme_dt_if{float:left;width:235px;padding:20px 0}
-.theme_dt_if table{width:100%;border-collapse:collapse;margin:15px 0 0 ;font-size:0.92em}
+.theme_dt_if table{width:100%;border-collapse:collapse;;margin:15px 0 0 ;font-size:0.92em}
 .theme_dt_if table th{padding:5px;background:#fff;border-bottom:1px solid #f3f3f3;vertical-align:top;color:#3f51b5}
 .theme_dt_if table td{padding:5px;background:#fff;border-bottom:1px solid #f3f3f3;line-height:1.56em}
 .theme_dt_if table td a{text-decoration:underline}
 .theme_dt_if p{line-height:1.5em}
 .if_p_bg{display:inline-block;width:20px;height:1px ;background:#000;margin:30px 0 10px}
 #theme_detail .theme_dt_btn{position:absolute;top:0px;right:0px;background:#fff;}
-#theme_detail .theme_dt_btn .close_btn{border:0;border-left:1px solid #d8d8d8;background:url('../img/close.png') 50% 50% no-repeat;width:40px;height:40px;overflow:hidden;text-indent:-99999px}
+#theme_detail .theme_dt_btn .close_btn{background:url('../img/close.png') 50% 50% no-repeat;width:40px;height:40px;overflow:hidden;border:0;text-indent:-99999px;border-left:1px solid #d8d8d8}

 #theme_detail .theme_dt_btn .close_btn:hover{background-color:#eceffc}
 #theme_detail .theme_dt_btn .btn_03{line-height:28px;display:inline-block;vertical-align:top;margin-top:6px;padding:0 6px;border-radius:5px}
@@ -147,22 +147,6 @@ if(!isset($member['mb_memo_cnt'])) {
    $is_check = true;
 }

-// 스크랩 읽은 수 추가
-if(!isset($member['mb_scrap_cnt'])) {
-    sql_query(" ALTER TABLE `{$g5['member_table']}`
-                ADD `mb_scrap_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_cnt`", true);
-
-	$is_check = true;
-}
-
-// 짧은 URL 주소를 사용 여부 필드 추가
-if (!isset($config['cf_bbs_rewrite'])) {
-    sql_query(" ALTER TABLE `{$g5['config_table']}`
-                    ADD `cf_bbs_rewrite` tinyint(4) NOT NULL DEFAULT '0' AFTER `cf_link_target` ", true);
-
-	$is_check = true;
-}
-
 // 파일테이블에 추가 칼럼

 $sql = " SHOW COLUMNS FROM `{$g5['board_file_table']}` LIKE 'bf_fileurl' ";
@@ -68,17 +68,15 @@ $result = sql_query($sql);
        $num = $i + 1;

        $bg = 'bg'.($i%2);
-
-        $fa_subject = conv_content($row['fa_subject'], 1);
    ?>

    <tr class="<?php echo $bg; ?>">
        <td class="td_num"><?php echo $num; ?></td>
-        <td class="td_left"><?php echo $fa_subject; ?></td>
+        <td class="td_left"><?php echo stripslashes($row['fa_subject']); ?></td>
        <td class="td_num"><?php echo $row['fa_order']; ?></td>
        <td class="td_mng td_mng_m">
-            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo $fa_subject; ?> </span>수정</a>
-            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo $fa_subject; ?> </span>삭제</a>
+            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>수정</a>
+            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>삭제</a>
        </td>
    </tr>

@@ -18,7 +18,7 @@ check_admin_token();
 if ($fm_himg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_h");
 if ($fm_timg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_t");

-$fm_subject = strip_tags(clean_xss_attributes($fm_subject));
+$fm_subject = strip_tags($fm_subject);

 $sql_common = " set fm_subject = '$fm_subject',
                    fm_head_html = '$fm_head_html',
@@ -42,7 +42,7 @@ include_once('./admin.head.php');
    <tbody>
    <tr>
        <th scope="row"><label for="ma_subject">메일 제목<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="ma_subject" value="<?php echo get_sanitize_input($ma['ma_subject']); ?>" id="ma_subject" required class="required frm_input" size="100"></td>
+        <td><input type="text" name="ma_subject" value="<?php echo $ma['ma_subject'] ?>" id="ma_subject" required class="required frm_input" size="100"></td>
    </tr>
    <tr>
        <th scope="row"><label for="ma_content">메일 내용<strong class="sound_only">필수</strong></label></th>
@@ -10,7 +10,7 @@ auth_check($auth[$sub_menu], 'w');
 check_admin_token();

 $ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0;
-$ma_subject = isset($_POST['ma_subject']) ? strip_tags(clean_xss_attributes($_POST['ma_subject'])) : '';
+$ma_subject = isset($_POST['ma_subject']) ? strip_tags($_POST['ma_subject']) : '';

 if ($w == '')
 {
@@ -70,8 +70,8 @@ $colspan = 16;
 <div class="local_ov01 local_ov">
    <?php echo $listall ?>
    <span class="btn_ov01"><span class="ov_txt">총회원수 </span><span class="ov_num"> <?php echo number_format($total_count) ?>명 </span></span>
-    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01" data-tooltip-text="차단된 순으로 정렬합니다.&#xa;전체 데이터를 출력합니다."> <span class="ov_txt">차단 </span><span class="ov_num"><?php echo number_format($intercept_count) ?>명</span></a>
-    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01" data-tooltip-text="탈퇴된 순으로 정렬합니다.&#xa;전체 데이터를 출력합니다."> <span class="ov_txt">탈퇴  </span><span class="ov_num"><?php echo number_format($leave_count) ?>명</span></a>
+    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">차단 </span><span class="ov_num"><?php echo number_format($intercept_count) ?>명</span></a>
+    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">탈퇴  </span><span class="ov_num"><?php echo number_format($leave_count) ?>명</span></a>
 </div>

 <form id="fsearch" name="fsearch" class="local_sch01 local_sch" method="get">
@@ -159,11 +159,11 @@ function add_menu_list(name, link, code)
    list += "<option value=\"0\">사용안함</option>";
    list += "</select>";
    list += "</td>";
-    list += "<td class=\"td_mng\">";
+    list += "<td class=\"td_mngsmall\">";
    <?php if($new == 'new') { ?>
-    list += "<button type=\"button\" class=\"btn_add_submenu btn_03\">추가</button>\n";
+    list += "<button type=\"button\" class=\"btn_add_submenu btn\">추가</button>";
    <?php } ?>
-    list += "<button type=\"button\" class=\"btn_del_menu btn_02\">삭제</button>";
+    list += "<button type=\"button\" class=\"btn_del_menu btn\">삭제</button>";
    list += "</td>";
    list += "</tr>";

@@ -52,7 +52,7 @@ if($sql) {
 <?php }
        switch($type) {
            case 'group':
-                $link = G5_BBS_URL.'/group.php?gr_id='.$row['id'];
+                $link = get_pretty_url(G5_GROUP_DIR, $row['id']);
                break;
            case 'board':
                $link = get_pretty_url($row['id']);
@@ -21,11 +21,11 @@ for ($i=0; $i<$count; $i++)
 {
    $_POST = array_map_deep('trim', $_POST);
    
-    $_POST['me_link'][$i] = is_array($_POST['me_link']) ? clean_xss_tags(clean_xss_attributes($_POST['me_link'][$i], 1)) : '';
+    $_POST['me_link'][$i] = is_array($_POST['me_link']) ? clean_xss_tags($_POST['me_link'][$i], 1) : '';

    $code    = is_array($_POST['code']) ? strip_tags($_POST['code'][$i]) : '';
    $me_name = is_array($_POST['me_name']) ? strip_tags($_POST['me_name'][$i]) : '';
-    $me_link = (preg_match('/^javascript/i', $_POST['me_link'][$i]) || preg_match('/script:/i', $_POST['me_link'][$i])) ? G5_URL : strip_tags(clean_xss_attributes($_POST['me_link'][$i]));
+    $me_link = (preg_match('/^javascript/i', $_POST['me_link'][$i]) || preg_match('/script:/i', $_POST['me_link'][$i])) ? G5_URL : strip_tags($_POST['me_link'][$i]);
    
    if(!$code || !$me_name || !$me_link)
        continue;
@@ -68,7 +68,5 @@ for ($i=0; $i<$count; $i++)
    sql_query($sql);
 }

-run_event('admin_menu_list_update');
-
 goto_url('./menu_list.php');
 ?>
@@ -12,7 +12,7 @@ else

 check_admin_token();

-$nw_subject = isset($_POST['nw_subject']) ? strip_tags(clean_xss_attributes($_POST['nw_subject'])) : '';
+$nw_subject = isset($_POST['nw_subject']) ? strip_tags($_POST['nw_subject']) : '';

 $sql_common = " nw_device = '{$_POST['nw_device']}',
                nw_begin_time = '{$_POST['nw_begin_time']}',
@@ -6,9 +6,9 @@ auth_check($auth[$sub_menu], 'w');

 check_admin_token();

-$mb_id = strip_tags(clean_xss_attributes($_POST['mb_id']));
-$po_point = strip_tags(clean_xss_attributes($_POST['po_point']));
-$po_content = strip_tags(clean_xss_attributes($_POST['po_content']));
+$mb_id = strip_tags($_POST['mb_id']);
+$po_point = strip_tags($_POST['po_point']);
+$po_content = strip_tags($_POST['po_content']);
 $expire = preg_replace('/[^0-9]/', '', $_POST['po_expire_term']);

 $mb = get_member($mb_id);
@@ -37,7 +37,7 @@ include_once('./admin.head.php');
    <tbody>
    <tr>
        <th scope="row"><label for="po_subject">투표 제목<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="po_subject" value="<?php echo get_sanitize_input($po['po_subject']); ?>" id="po_subject" required class="required frm_input" size="80" maxlength="125"></td>
+        <td><input type="text" name="po_subject" value="<?php echo $po['po_subject'] ?>" id="po_subject" required class="required frm_input" size="80" maxlength="125"></td>
    </tr>

    <?php
@@ -40,7 +40,7 @@ foreach( $_POST as $key=>$value ){
    if( empty($value) ) continue;

    if( in_array($key, $check_keys) ) {
-        $_POST[$key] = strip_tags(clean_xss_attributes($value));
+        $_POST[$key] = strip_tags($value);
    }
 }

@@ -133,7 +133,7 @@ if(!isset($qaconfig['qa_include_head'])) {
        <tr>
            <th scope="row"><label for="qa_title">타이틀<strong class="sound_only">필수</strong></label></th>
            <td>
-                <input type="text" name="qa_title" value="<?php echo get_sanitize_input($qaconfig['qa_title']); ?>" id="qa_title" required class="required frm_input" size="40">
+                <input type="text" name="qa_title" value="<?php echo $qaconfig['qa_title'] ?>" id="qa_title" required class="required frm_input" size="40">
                <a href="<?php echo G5_BBS_URL; ?>/qalist.php" class="btn_frmline">1:1문의 바로가기</a>
            </td>
        </tr>
@@ -141,7 +141,7 @@ if(!isset($qaconfig['qa_include_head'])) {
            <th scope="row"><label for="qa_category">분류<strong class="sound_only">필수</strong></label></th>
            <td>
                <?php echo help('분류와 분류 사이는 | 로 구분하세요. (예: 질문|답변) 첫자로 #은 입력하지 마세요. (예: #질문|#답변 [X])') ?>
-                <input type="text" name="qa_category" value="<?php echo get_sanitize_input($qaconfig['qa_category']); ?>" id="qa_category" required class="required frm_input" size="70">
+                <input type="text" name="qa_category" value="<?php echo $qaconfig['qa_category'] ?>" id="qa_category" required class="required frm_input" size="70">
            </td>
        </tr>
        <tr>
@@ -184,21 +184,21 @@ if(!isset($qaconfig['qa_include_head'])) {
            <th scope="row"><label for="qa_send_number">SMS 발신번호</label></th>
            <td>
                <?php echo help('SMS 알림 전송시 발신번호로 사용됩니다.'); ?>
-                <input type="text" name="qa_send_number" value="<?php echo get_sanitize_input($qaconfig['qa_send_number']); ?>" id="qa_send_number" class="frm_input"  size="30">
+                <input type="text" name="qa_send_number" value="<?php echo $qaconfig['qa_send_number'] ?>" id="qa_send_number" class="frm_input"  size="30">
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="qa_admin_hp">관리자 휴대폰번호</label></th>
            <td>
                <?php echo help('관리자 휴대폰번호를 입력하시면 문의글 등록시 등록하신 번호로 SMS 알림이 전송됩니다.<br>SMS 알림을 사용하지 않으시면 알림이 전송되지 않습니다.'); ?>
-                <input type="text" name="qa_admin_hp" value="<?php echo get_sanitize_input($qaconfig['qa_admin_hp']); ?>" id="qa_admin_hp" class="frm_input"  size="30">
+                <input type="text" name="qa_admin_hp" value="<?php echo $qaconfig['qa_admin_hp'] ?>" id="qa_admin_hp" class="frm_input"  size="30">
            </td>
        </tr>
        <tr>
            <th scope="row"><label for="qa_admin_email">관리자 이메일</label></th>
            <td>
                <?php echo help('관리자 이메일을 입력하시면 문의글 등록시 등록하신 이메일로 알림이 전송됩니다.'); ?>
-                <input type="text" name="qa_admin_email" value="<?php echo get_sanitize_input($qaconfig['qa_admin_email']); ?>" id="qa_admin_email" class="frm_input"  size="50">
+                <input type="text" name="qa_admin_email" value="<?php echo $qaconfig['qa_admin_email'] ?>" id="qa_admin_email" class="frm_input"  size="50">
            </td>
        </tr>
        <tr>
@@ -12,12 +12,6 @@ $error_msg = '';

 $qaconfig = get_qa_config();

-$check_keys = array('qa_title', 'qa_category', 'qa_skin', 'qa_mobile_skin', 'qa_use_email', 'qa_req_email', 'qa_use_hp', 'qa_req_hp', 'qa_use_sms', 'qa_send_number', 'qa_admin_hp', 'qa_admin_email', 'qa_subject_len', 'qa_mobile_subject_len', 'qa_page_rows', 'qa_mobile_page_rows', 'qa_image_width', 'qa_upload_size');
-
-foreach($check_keys as $key){
-	$$key = $_POST[$key] = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : '';
-}
-
 $qa_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_head, 0, 255));
 $qa_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_tail, 0, 255));

@@ -56,10 +50,7 @@ if( $qa_include_tail && ! is_include_path_check($qa_include_tail, 1) ){
    $error_msg = '/data/file/ 또는 /data/editor/ 포함된 문자를 하단 파일 경로에 포함시킬수 없습니다.';
 }

-if( function_exists('filter_input_include_path') ){
-    $qa_include_head = filter_input_include_path($qa_include_head);
-    $qa_include_tail = filter_input_include_path($qa_include_tail);
-}
+$_POST['qa_title'] = strip_tags($_POST['qa_title']);

 $sql = " update {$g5['qa_config_table']}
            set qa_title                = '{$_POST['qa_title']}',
@@ -9,14 +9,6 @@ $g5['title'] = "SMS 기본설정";
 if (!$config['cf_icode_server_ip'])   $config['cf_icode_server_ip'] = '211.172.232.124';
 if (!$config['cf_icode_server_port']) $config['cf_icode_server_port'] = '7295';

-// 아이코드 토큰키 추가
-if( ! isset($config['cf_icode_token_key']) ){
-    $sql = "ALTER TABLE `{$g5['config_table']}` 
-            ADD COLUMN `cf_icode_token_key` VARCHAR(100) NOT NULL DEFAULT '' AFTER `cf_icode_server_port`; ";
-    sql_query($sql, false);
-    $config['cf_icode_token_key'] = '';
-}
-
 if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw'])
 {
    $userinfo = get_icode_userinfo($config['cf_icode_id'], $config['cf_icode_pw']);
@@ -31,7 +23,7 @@ if (!$sms5['cf_skin'])
 include_once(G5_ADMIN_PATH.'/admin.head.php');

 ?>
-<?php if (!($config['cf_icode_pw'] || $config['cf_icode_token_key'])) { ?>
+<?php if (!$config['cf_icode_pw']) { ?>
 <div class="local_desc01 local_desc">
    <p>
        SMS 기능을 사용하시려면 먼저 아이코드에 서비스 신청을 하셔야 합니다.<br>
@@ -55,31 +47,22 @@ if ($config['cf_sms_use'] == 'icode') { // 아이코드 사용
    </colgroup>
    <tbody>
    <tr>
-        <th scope="row"><label for="cf_sms_type">SMS 전송유형</label></th>
-        <td>
-            <?php echo help("전송유형을 SMS로 선택하시면 최대 80바이트까지 전송하실 수 있으며<br>LMS로 선택하시면 90바이트 이하는 SMS로, 그 이상은 ".G5_ICODE_LMS_MAX_LENGTH."바이트까지 LMS로 전송됩니다.<br>요금은 건당 SMS는 16원, LMS는 48원입니다."); ?>
-            <select id="cf_sms_type" name="cf_sms_type">
-                <option value="" <?php echo get_selected($config['cf_sms_type'], ''); ?>>SMS</option>
-                <option value="LMS" <?php echo get_selected($config['cf_sms_type'], 'LMS'); ?>>LMS</option>
-            </select>
-        </td>
-    </tr>
-    <tr class="icode_old_version">
-        <th scope="row"><label for="cf_icode_id">아이코드 회원아이디<br>(구버전)<strong class="sound_only"> 필수</strong></label></th>
+        <th scope="row"><label for="cf_icode_id">아이코드 회원아이디<strong class="sound_only"> 필수</strong></label></th>
        <td>
            <?php echo help("아이코드에서 사용하시는 회원아이디를 입력합니다."); ?>
-            <input type="text" name="cf_icode_id" value="<?php echo $config['cf_icode_id']; ?>" id="cf_icode_id" class="frm_input">
+            <input type="text" name="cf_icode_id" value="<?php echo $config['cf_icode_id']; ?>" id="cf_icode_id" required class="frm_input required">
        </td>
    </tr>
-    <tr class="icode_old_version">
-        <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호<br>(구버전)<strong class="sound_only"> 필수</strong></label></th>
+    <tr>
+        <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호<strong class="sound_only"> 필수</strong></label></th>
        <td>
            <?php echo help("아이코드에서 사용하시는 비밀번호를 입력합니다."); ?>
-            <input type="password" name="cf_icode_pw" value="<?php echo $config['cf_icode_pw']; ?>" id="cf_icode_pw" class="frm_input">
+            <input type="password" name="cf_icode_pw" value="<?php echo $config['cf_icode_pw']; ?>" id="cf_icode_pw" required class="frm_input required">
+            <?php if (!$config['cf_icode_pw']) { ?>현재 비밀번호가 입력되어 있지 않습니다.<?php } ?>
        </td>
    </tr>
-    <tr class="icode_old_version <?php if(!(isset($userinfo['payment']) && $userinfo['payment'])){ echo 'cf_tr_hide'; } ?>">
-        <th scope="row">요금제<br>(구버전)</th>
+    <tr>
+        <th scope="row">요금제</th>
        <td>
            <?php
                if ($userinfo['payment'] == 'A') {
@@ -89,30 +72,21 @@ if ($config['cf_sms_use'] == 'icode') { // 아이코드 사용
                    echo '정액제';
                    echo '<input type="hidden" name="cf_icode_server_port" value="7296">';
                } else {
+                    echo '가입해주세요.';
                    echo '<input type="hidden" name="cf_icode_server_port" value="7295">';
                }
            ?>
        </td>
    </tr>
    <?php if ($userinfo['payment'] == 'A') { ?>
-    <tr class="icode_old_version">
-        <th scope="row">충전 잔액<br>(구버전)</th>
+    <tr>
+        <th scope="row">충전 잔액</th>
        <td>
            <?php echo number_format($userinfo['coin'])?> 원
            <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo $config['cf_icode_id']; ?>&amp;icode_passwd=<?php echo $config['cf_icode_pw']; ?>" target="_blank" class="btn_frmline">충전하기</a>
        </td>
    </tr>
    <?php } ?>
-    <tr class="icode_json_version">
-        <th scope="row"><label for="cf_icode_token_key">아이코드 토큰키<br>(JSON버전)</label></th>
-        <td>
-            <?php echo help("아이코드 JSON 버전의 경우 아이코드 토큰키를 입력시 실행됩니다.<br>SMS 전송유형을 LMS로 설정시 90바이트 이내는 SMS, 90 ~ 2000 바이트는 LMS 그 이상은 절삭 되어 LMS로 발송됩니다."); ?>
-            <input type="text" name="cf_icode_token_key" value="<?php echo $config['cf_icode_token_key']; ?>" id="cf_icode_token_key" class="frm_input" size="40">
-            <?php echo help("아이코드 사이트 -> 토큰키관리 메뉴에서 생성한 토큰키를 입력합니다."); ?>
-            <br>
-            서버아이피 : <?php echo $_SERVER['SERVER_ADDR']; ?>
-        </td>
-    </tr>
    <tr>
        <th scope="row"><label for="cf_phone">회신번호<strong class="sound_only"> 필수</strong></label></th>
        <td>
@@ -15,7 +15,6 @@ if(!check_vaild_callback($cf_phone))
    alert('회신번호가 올바르지 않습니다.');

 $userinfo = get_icode_userinfo($cf_icode_id, $cf_icode_pw);
-$cf_icode_server_port = isset($cf_icode_server_port) ? preg_replace('/[^0-9]/', '', $cf_icode_server_port) : '7295';

 if ($userinfo['code'] == '202')
    alert('아이코드 아이디와 패스워드가 맞지 않습니다.');
@@ -34,12 +33,10 @@ sql_query($sql);
 // 아이코드 설정
 $sql = " update {$g5['config_table']}
            set cf_sms_use              = '$cf_sms_use',
-                cf_sms_type             = '$cf_sms_type',
                cf_icode_id             = '$cf_icode_id',
                cf_icode_pw             = '$cf_icode_pw',
                cf_icode_server_ip      = '$cf_icode_server_ip',
-                cf_icode_server_port    = '$cf_icode_server_port',
-                cf_icode_token_key      = '$cf_icode_token_key'";
+                cf_icode_server_port    = '$cf_icode_server_port' ";
 sql_query($sql);

 goto_url("./config.php");
@@ -22,7 +22,6 @@
 .sms5_box {position:relative;padding:10px;border-radius:5px;background:#fbec99}
 .sms5_box .box_ico {position:absolute;top:20px;left:-7px;width:7px;height:13px;background:url('../img/box_ico.gif') no-repeat}
 .sms5_box .box_txt {border:0;background:transparent;word-break:break-all;resize:none;overflow:hidden}
-.sms5_box textarea.box_txt.is_overview{overflow:visible;min-height:130px}
 .sms5_box .box_square {width:100px;height:90px}

 #write_wrap {z-index:9}
@@ -4,8 +4,8 @@ include_once("./_common.php");

 auth_check($auth[$sub_menu], "w");

-$fo_name = isset($fo_name) ? strip_tags(clean_xss_attributes($fo_name)) : '';
-$fo_content = isset($fo_content) ? strip_tags(clean_xss_attributes($fo_content)) : '';
+$fo_name = isset($fo_name) ? strip_tags($fo_name) : '';
+$fo_content = isset($fo_content) ? strip_tags($fo_content) : '';

 $g5['title'] = "이모티콘 업데이트";

@@ -6,8 +6,6 @@ auth_check($auth[$sub_menu], "w");

 $g5['title'] = "이모티콘 ";

-$fg_no = isset($fg_no) ? (int) $fg_no : '';
-
 if ($w == 'u' && is_numeric($fo_no)) {
    $write = sql_fetch("select * from {$g5['sms5_form_table']} where fo_no='$fo_no'");
    $g5['title'] .= '수정';
@@ -50,7 +48,7 @@ include_once(G5_ADMIN_PATH.'/admin.head.php');
    </tr>
    <tr>
        <th scope="row"><label for="fo_name">제목<strong class="sound_only"> 필수</strong></label></th>
-        <td><input type="text" name="fo_name" id="fo_name" required value="<?php echo get_sanitize_input($write['fo_name']); ?>" class="frm_input required" size="70"></td>
+        <td><input type="text" name="fo_name" id="fo_name" required value="<?php echo $write['fo_name']?>" class="frm_input required" size="70"></td>
    </tr>
    <tr>
        <th scope="row">메세지</th>
@@ -224,8 +224,8 @@ if($config['cf_sms_type'] == 'LMS') {

 ?>
 <script>
-//act = window.open('sms_ing.php', 'act', 'width=300, height=200');
-//act.close();
+act = window.open('sms_ing.php', 'act', 'width=300, height=200');
+act.close();
 location.href = 'history_view.php?wr_no=<?php echo $wr_no?>&wr_renum=<?php echo $new_wr_renum?>';
 </script>
 <?php
@@ -4,7 +4,6 @@ include_once("./_common.php");

 $spage_size = 20;
 $colspan = 10;
-$re_text = '';

 $st = isset($st) ? strip_tags($st) : '';
 $ssv = isset($ssv) ? strip_tags($ssv) : '';
@@ -61,8 +60,8 @@ function re_send()
    if (!confirm('전송에 실패한 SMS 를 재전송 하시겠습니까?'))
        return;

-    //act = window.open('sms_ing.php', 'act', 'width=300, height=200');
-    //act.focus();
+    act = window.open('sms_ing.php', 'act', 'width=300, height=200');
+    act.focus();

    location.href = './history_send.php?w=f&page=<?php echo $page?>&st=<?php echo  $st?>&sv=<?php echo $sv?>&wr_no=<?php echo $wr_no?>&wr_renum=<?php echo $wr_renum?>';
    <?php } ?>
@@ -105,7 +104,7 @@ function all_send()

    <div id="con_sms" class="sms5_box">
        <span class="box_ico"></span>
-        <textarea class="box_txt is_overview" readonly><?php echo $write['wr_message'];?></textarea>
+        <textarea class="box_txt" readonly><?php echo $write['wr_message'];?></textarea>
    </div>

    <?php if ($write['wr_re_total'] && !$wr_renum) { ?>
@@ -53,7 +53,6 @@ eval("\$file = \"$file\";");
 $f = explode(";", $file);
 for ($i=0; $i<count($f); $i++) {
    if (trim($f[$i]) == "") continue;
-	$f[$i] = get_db_create_replace($f[$i]);
    sql_query($f[$i]) or die(mysqli_error());
 }
 // 테이블 생성 ------------------------------------
@@ -13,12 +13,10 @@ $g5['title'] = "휴대폰번호 관리";

 if ($page < 1) $page = 1;

-$bg_no = isset($bg_no) ? preg_replace('/[^0-9]/i', '', $bg_no) : '';
+$bg_no = isset($bg_no) ? (int) $bg_no : 0;
 $st = isset($st) ? preg_replace('/[^a-z0-9]/i', '', $st) : '';

-$sql_korean = $sql_group = $sql_search = $sql_no_hp = '';
-
-if (is_numeric($bg_no) && $bg_no)
+if (is_numeric($bg_no))
    $sql_group = " and bg_no='$bg_no' ";
 else
    $sql_group = "";
@@ -129,9 +127,9 @@ function no_hp_click(val)
 <label for="bg_no" class="sound_only">그룹명</label>
 <select name="bg_no" id="bg_no" onchange="location.href='<?php echo $_SERVER['SCRIPT_NAME']?>?bg_no='+this.value;">
    <option value=""<?php echo get_selected('', $bg_no); ?>> 전체 </option>
-    <option value="<?php echo $no_group['bg_no']?>"<?php echo get_selected($no_group['bg_no'], $bg_no); ?>> <?php echo $no_group['bg_name']?> (<?php echo number_format($no_group['bg_count'])?> 명) </option>
+    <option value="<?php echo $no_group['bg_no']?>"<?php echo get_selected($bg_no, $no_group['bg_no']); ?>> <?php echo $no_group['bg_name']?> (<?php echo number_format($no_group['bg_count'])?> 명) </option>
    <?php for($i=0; $i<count($group); $i++) {?>
-    <option value="<?php echo $group[$i]['bg_no']?>"<?php echo get_selected($group[$i]['bg_no'], $bg_no);?>> <?php echo $group[$i]['bg_name']?> (<?php echo number_format($group[$i]['bg_count'])?> 명) </option>
+    <option value="<?php echo $group[$i]['bg_no']?>"<?php echo get_selected($bg_no, $group[$i]['bg_no']);?>> <?php echo $group[$i]['bg_name']?> (<?php echo number_format($group[$i]['bg_count'])?> 명) </option>
    <?php } ?>
 </select>
 <input type="checkbox" name="no_hp" id="no_hp" <?php echo $no_hp_checked?> onclick="no_hp_click(this.checked)">
@@ -129,7 +129,7 @@ function num_group_submit(f)
            <select name="select_bg_no_999" id="select_bg_no_999" onchange="move(<?php echo $no_group['bg_no']?>, '<?php echo $no_group['bg_name']?>', this);" >
                <option value=""></option>
                <?php for ($i=0; $i<count($group); $i++) { ?>
-                <option value="<?php echo $group[$i]['bg_no']?>"> <?php echo get_sanitize_input($group[$i]['bg_name']); ?> </option>
+                <option value="<?php echo $group[$i]['bg_no']?>"> <?php echo $group[$i]['bg_name']?> </option>
                <?php } ?>
            </select>
        </td>
@@ -150,7 +150,7 @@ function num_group_submit(f)
        </td>
        <td>
            <label for="bg_name_<?php echo $i; ?>" class="sound_only">그룹명</label>
-            <input type="text" name="bg_name[<?php echo $i; ?>]" value="<?php echo get_sanitize_input($group[$i]['bg_name']); ?>" id="bg_name_<?php echo $i; ?>" class="frm_input">
+            <input type="text" name="bg_name[<?php echo $i; ?>]" value="<?php echo $group[$i]['bg_name']?>" id="bg_name_<?php echo $i; ?>" class="frm_input">
        </td>
        <td class="td_num"><?php echo number_format($group[$i]['bg_count'])?></td>
        <td class="td_num"><?php echo number_format($group[$i]['bg_member'])?></td>
@@ -11,7 +11,7 @@ if ($w == 'u') // 업데이트
        // 실제 번호를 넘김
        $k = $_POST['chk'][$i];
        $bg_no = (int) $_POST['bg_no'][$k];
-        $bg_name = strip_tags(clean_xss_attributes($_POST['bg_name'][$k]));
+        $bg_name = strip_tags($_POST['bg_name'][$k]);

        if (!is_numeric($bg_no))
            alert('그룹 고유번호가 없습니다.');
@@ -23,11 +23,11 @@ if ($w == 'u') // 업데이트
        if (!strlen(trim($bg_name)))
            alert('그룹명을 입력해주세요');

-        $res = sql_fetch("select bg_name from {$g5['sms5_book_group_table']} where bg_no<>'$bg_no' and bg_name='".sql_real_escape_string($bg_name)."'");
+        $res = sql_fetch("select bg_name from {$g5['sms5_book_group_table']} where bg_no<>'$bg_no' and bg_name='$bg_name'");
        if ($res)
            alert('같은 그룹명이 존재합니다.');

-        sql_query("update {$g5['sms5_book_group_table']} set bg_name='".sql_real_escape_string($bg_name)."' where bg_no='$bg_no'");
+        sql_query("update {$g5['sms5_book_group_table']} set bg_name='".addslashes($bg_name)."' where bg_no='$bg_no'");
    }
 }
 else if ($w == 'de') // 그룹삭제
@@ -63,7 +63,7 @@ else if ($w == 'em') // 비우기
 }
 else // 등록
 {
-    $bg_name = strip_tags(clean_xss_attributes($bg_name));
+    $bg_name = strip_tags($bg_name);

    if (!strlen(trim($bg_name)))
        alert('그룹명을 입력해주세요');
@@ -72,7 +72,7 @@ else // 등록
    if ($res)
        alert('같은 그룹명이 존재합니다.');

-    sql_query("insert into {$g5['sms5_book_group_table']} set bg_name='$bg_name'");
+    sql_query("insert into {$g5['sms5_book_group_table']} set bg_name='".addslashes($bg_name)."'");
 }

 goto_url('./num_group.php');
@@ -149,7 +149,7 @@ CREATE TABLE `{$g5['sms5_write_table']}` (
  `wr_no` int(11) NOT NULL default '1',
  `wr_renum` int(11) NOT NULL default '0',
  `wr_reply` varchar(255) NOT NULL default '',
-  `wr_message` text NOT NULL,
+  `wr_message` varchar(255) NOT NULL default '',
  `wr_booking` datetime NOT NULL default '0000-00-00 00:00:00',
  `wr_total` int(11) NOT NULL default '0',
  `wr_re_total` int(11) NOT NULL default '0',
@@ -266,8 +266,8 @@ function sms5_chk_send(f)

        w = document.body.clientWidth/2 - 200;
        h = document.body.clientHeight/2 - 100;
-        //act = window.open('sms_ing.php', 'act', 'width=300, height=200, left=' + w + ', top=' + h);
-        //act.focus();
+        act = window.open('sms_ing.php', 'act', 'width=300, height=200, left=' + w + ', top=' + h);
+        act.focus();

        f.send_list.value = list;
        return true;
@@ -407,7 +407,6 @@ function byte_check(wr_message, sms_bytes)
    var conts = document.getElementById(wr_message);
    var bytes = document.getElementById(sms_bytes);
    var max_bytes = document.getElementById("sms_max_bytes");
-    var lms_max_length = <?php echo G5_ICODE_LMS_MAX_LENGTH;?>

    var i = 0;
    var cnt = 0;
@@ -428,14 +427,14 @@ function byte_check(wr_message, sms_bytes)

    <?php if($config['cf_sms_type'] == 'LMS') { ?>
    if(cnt > 90)
-        max_bytes.innerHTML = lms_max_length;
+        max_bytes.innerHTML = 1500;
    else
        max_bytes.innerHTML = 90;

-    if (cnt > lms_max_length)
+    if (cnt > 1500)
    {
-        exceed = cnt - lms_max_length;
-        alert('메시지 내용은 '+ lms_max_length +'바이트를 넘을수 없습니다.\n\n작성하신 메세지 내용은 '+ exceed +'byte가 초과되었습니다.\n\n초과된 부분은 자동으로 삭제됩니다.');
+        exceed = cnt - 1500;
+        alert('메시지 내용은 1500바이트를 넘을수 없습니다.\n\n작성하신 메세지 내용은 '+ exceed +'byte가 초과되었습니다.\n\n초과된 부분은 자동으로 삭제됩니다.');
        var tcnt = 0;
        var xcnt = 0;
        var tmp = conts.value;
@@ -448,7 +447,7 @@ function byte_check(wr_message, sms_bytes)
                tcnt += 1;
            }

-            if (tcnt > lms_max_length) {
+            if (tcnt > 1500) {
                tmp = tmp.substring(0,i);
                break;
            } else {
@@ -7,8 +7,6 @@ while ($res = sql_fetch_array($qry)) array_push($group, $res);

 $res = sql_fetch("select count(*) as cnt from `{$g5['sms5_form_table']}` where fg_no=0");
 $no_count = $res['cnt'];
-
-$fg_no = isset($fg_no) ? (int) $fg_no : '';
 ?>

 <form name="emo_frm">
@@ -6,24 +6,8 @@ auth_check($auth[$sub_menu], "w");

 check_admin_token();

-$result = sql_query("describe `{$g5['sms5_write_table']}`");
-while ($row = sql_fetch_array($result)){
-    if( $row['Field'] === 'wr_message' && $row['Type'] === 'varchar(255)' ){
-        sql_query("ALTER TABLE `{$g5['sms5_write_table']}` MODIFY wr_message TEXT NOT NULL;", false);
-        break;
-    }
-}
-
 $g5['title'] = "문자전송중";

-if ($config['cf_sms_use'] != 'icode') {
-    alert('기본환경설정에서 icode sms 사용이 비활성화 되어 있습니다.');
-}
-
-if ( ! (($config['cf_icode_id'] && $config['cf_icode_pw']) || $config['cf_icode_token_key']) ) {
-    alert('아이코드 설정값이 존재하지 않습니다.');
-}
-
 $wr_reply   = preg_replace('#[^0-9\-]#', '', trim($wr_reply));
 $wr_message = clean_xss_tags(trim($wr_message));

@@ -110,12 +94,12 @@ while ($row = array_shift($send_list))
                $hp = get_hp($item[$i][1], 0);
                $name = $item[$i][0];

-                if(!$hp) continue 2;
+                if(!$hp) continue;

                if ($wr_overlap && array_overlap($hps, $hp)) {
                    $overlap++;
                    array_push( $duplicate_data['hp'], $row['bk_hp'] );
-                    continue 2;
+                    continue;
                }

                array_push($list, array('bk_hp' => $hp, 'bk_name' => $name));
@@ -127,12 +111,12 @@ while ($row = array_shift($send_list))
                $row = sql_fetch("select * from {$g5['sms5_book_table']} where bk_no='$item[$i]'");
                $row['bk_hp'] = get_hp($row['bk_hp'], 0);

-                if(!$row['bk_hp']) continue 2;
+                if(!$row['bk_hp']) continue;

                if ($wr_overlap && array_overlap($hps, $row['bk_hp'])) {
                    $overlap++;
                    array_push( $duplicate_data['hp'], $row['bk_hp'] );
-                    continue 2;
+                    continue;
                }
                array_push($list, $row);
                array_push($hps, $row['bk_hp']);
@@ -157,11 +141,14 @@ if ($wr_by && $wr_bm && $wr_bd && $wr_bh && $wr_bi) {
    $booking = '';
 }

+if ($config['cf_sms_use'] != 'icode') {
+    alert('기본환경설정에서 icode sms 사용이 비활성화 되어 있습니다.');
+}
+
 include_once(G5_ADMIN_PATH.'/admin.head.php');

 $reply = str_replace('-', '', trim($wr_reply));
-$db_wr_message = conv_unescape_nl($wr_message);
-$wr_message = conv_unescape_nl(stripslashes($wr_message));
+$wr_message = conv_unescape_nl($wr_message);

 $SMS = new SMS5;

@@ -199,7 +186,7 @@ if($config['cf_sms_type'] == 'LMS') {

            if($result) {
                $result = $SMS->Send();
-                
+
                if ($result) //SMS 서버에 접속했습니다.
                {
                    foreach ($SMS->Result as $result)
@@ -255,7 +242,7 @@ if($config['cf_sms_type'] == 'LMS') {
            }
        }

-        sql_query("insert into {$g5['sms5_write_table']} set wr_no='$wr_no', wr_renum=0, wr_reply='$wr_reply', wr_message='$db_wr_message', wr_success='$wr_success', wr_failure='$wr_failure', wr_memo='$str_serialize', wr_booking='$wr_booking', wr_total='$wr_total', wr_datetime='".G5_TIME_YMDHIS."'");
+        sql_query("insert into {$g5['sms5_write_table']} set wr_no='$wr_no', wr_renum=0, wr_reply='$wr_reply', wr_message='$wr_message', wr_success='$wr_success', wr_failure='$wr_failure', wr_memo='$str_serialize', wr_booking='$wr_booking', wr_total='$wr_total', wr_datetime='".G5_TIME_YMDHIS."'");
    }
 } else {
    $SMS->SMS_con($config['cf_icode_server_ip'], $config['cf_icode_id'], $config['cf_icode_pw'], $config['cf_icode_server_port']);
@@ -273,7 +260,7 @@ if($config['cf_sms_type'] == 'LMS') {
            else
                $wr_no = 1;

-            sql_query("insert into {$g5['sms5_write_table']} set wr_no='$wr_no', wr_renum=0, wr_reply='$wr_reply', wr_message='$db_wr_message', wr_booking='$wr_booking', wr_total='$wr_total', wr_datetime='".G5_TIME_YMDHIS."'");
+            sql_query("insert into {$g5['sms5_write_table']} set wr_no='$wr_no', wr_renum=0, wr_reply='$wr_reply', wr_message='$wr_message', wr_booking='$wr_booking', wr_total='$wr_total', wr_datetime='".G5_TIME_YMDHIS."'");

            $wr_success = 0;
            $wr_failure = 0;
@@ -337,16 +324,11 @@ if($config['cf_sms_type'] == 'LMS') {

 function win_close_alert($msg) {

-    $html = "<script>".PHP_EOL;
-    //$html .= "act = window.open('sms_ing.php', 'act', 'width=300, height=200');".PHP_EOL;
-    //$html .= "act.close();".PHP_EOL;
-    $html .= "alert('$msg');
-        if ('referrer' in document) {
-            window.location = document.referrer;
-        } else {
-            window.history.back();
-        }
-    </script>";
+    $html = "<script>
+    act = window.open('sms_ing.php', 'act', 'width=300, height=200');
+    act.close();
+    alert('$msg');
+    history.back();</script>";

    echo $html;
    exit;
@@ -354,8 +336,8 @@ function win_close_alert($msg) {

 ?>
 <script>
-//act = window.open('sms_ing.php', 'act', 'width=300, height=200');
-//act.close();
+act = window.open('sms_ing.php', 'act', 'width=300, height=200');
+act.close();
 location.href = 'history_view.php?wr_no=<?php echo $wr_no?>';
 </script>
 <?php
@@ -29,7 +29,7 @@ if(!in_array($type, $arr_type)) {
 }

 if($type == 'board') {
-    $keys = run_replace('theme_config_load_keys', array('bo_gallery_cols', 'bo_gallery_width', 'bo_gallery_height', 'bo_mobile_gallery_width', 'bo_mobile_gallery_height', 'bo_image_width'), $type);
+    $keys = array('bo_gallery_cols', 'bo_gallery_width', 'bo_gallery_height', 'bo_mobile_gallery_width', 'bo_mobile_gallery_height', 'bo_image_width');
    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));

    $i = 0;
@@ -43,7 +43,7 @@ if($type == 'board') {
    if($i == 0)
        $data['error'] = '적용할 게시판 이미지 설정이 없습니다.';
 } else if($type == 'conf_skin') {
-    $keys = run_replace('theme_config_load_keys', array('cf_new_skin', 'cf_mobile_new_skin', 'cf_search_skin', 'cf_mobile_search_skin', 'cf_connect_skin', 'cf_mobile_connect_skin', 'cf_faq_skin', 'cf_mobile_faq_skin'), $type);
+    $keys = array('cf_new_skin', 'cf_mobile_new_skin', 'cf_search_skin', 'cf_mobile_search_skin', 'cf_connect_skin', 'cf_mobile_connect_skin', 'cf_faq_skin', 'cf_mobile_faq_skin');

    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));

@@ -58,7 +58,7 @@ if($type == 'board') {
    if($i == 0)
        $data['error'] = '적용할 기본환경 스킨 설정이 없습니다.';
 } else if($type == 'conf_member') {
-    $keys = run_replace('theme_config_load_keys', array('cf_member_skin', 'cf_mobile_member_skin'), $type);
+    $keys = array('cf_member_skin', 'cf_mobile_member_skin');

    $tconfig = get_theme_config_value($config['cf_theme'], implode(',', $keys));

@@ -12,13 +12,13 @@ if(!in_array($theme, $theme_dir))
    die('선택하신 테마가 설치되어 있지 않습니다.');

 $info = get_theme_info($theme);
-$name = get_text($info['theme_name']);

 if($info['screenshot'])
    $screenshot = '<img src="'.$info['screenshot'].'" alt="'.$name.'">';
 else
    $screenshot = '<img src="'.G5_ADMIN_URL.'/img/theme_img.jpg" alt="">';

+$name = get_text($info['theme_name']);
 if($info['theme_uri']) {
    $name = '<a href="'.set_http($info['theme_uri']).'" target="_blank" class="thdt_home">'.$name.'</a>';
 }
@@ -68,7 +68,5 @@ if($_POST['set_default_skin'] == 1) {
    }
 }

-run_event('adm_theme_update', $theme, $_POST['set_default_skin']);
-
 die('');
 ?>
@@ -11,11 +11,6 @@ include_once(G5_PLUGIN_PATH.'/jquery-ui/datepicker.php');

 $colspan = 6;
 $listall = '<a href="'.$_SERVER['SCRIPT_NAME'].'">처음</a>'; //페이지 처음으로 (초기화용도)
-$sql_search = '';
-
-if(isset($sfl) && $sfl && !in_array($sfl, array('vi_ip','vi_date','vi_time','vi_referer','vi_agent','vi_browser','vi_os','vi_device')) ) {
-    $sfl = '';
-}
 ?>

 <div class="local_sch local_sch01">
@@ -53,7 +53,7 @@ if($config['cf_leave_day'] > 0) {
 }

 // 음성 캡챠 파일 삭제
-$captcha_mp3 = glob(G5_DATA_PATH.'/cache/kcaptcha-*.mp3');
+$captcha_mp3 = glob(G5_PATH.'/data/cache/kcaptcha-*.mp3');
 if($captcha_mp3 && is_array($captcha_mp3)) {
    foreach ($captcha_mp3 as $file) {
        if (filemtime($file) + 86400 < G5_SERVER_TIME) {
@@ -88,5 +88,5 @@ delete_cache_latest($bo_table);

 run_event('bbs_delete_comment', $comment_id, $board);

-goto_url(short_url_clean(G5_HTTP_BBS_URL.'/board.php?bo_table='.$bo_table.'&amp;wr_id='.$write['wr_parent'].'&amp;page='.$page. $qstr));
+goto_url(G5_HTTP_BBS_URL.'/board.php?bo_table='.$bo_table.'&amp;wr_id='.$write['wr_parent'].'&amp;page='.$page. $qstr);
 ?>
@@ -100,8 +100,7 @@ if(preg_match("/[\xA1-\xFE][\xA1-\xFE]/", $file['bf_source'])){
 }
 */

-//$original = urlencode($file['bf_source']);
-$original = rawurlencode($file['bf_source']);
+$original = urlencode($file['bf_source']);

@include_once($board_skin_path.'/download.tail.skin.php');

@@ -109,18 +108,17 @@ run_event('download_file_header', $file, $file_exist_check);

 if(preg_match("/msie/i", $_SERVER['HTTP_USER_AGENT']) && preg_match("/5\.5/", $_SERVER['HTTP_USER_AGENT'])) {
    header("content-type: doesn/matter");
-    header("content-length: ".filesize($filepath));
+    header("content-length: ".filesize("$filepath"));
    header("content-disposition: attachment; filename=\"$original\"");
    header("content-transfer-encoding: binary");
 } else if (preg_match("/Firefox/i", $_SERVER['HTTP_USER_AGENT'])){
    header("content-type: file/unknown");
-    header("content-length: ".filesize($filepath));
-    //header("content-disposition: attachment; filename=\"".basename($file['bf_source'])."\"");
-    header("content-disposition: attachment; filename=\"".$original."\"");
+    header("content-length: ".filesize("$filepath"));
+    header("content-disposition: attachment; filename=\"".basename($file['bf_source'])."\"");
    header("content-description: php generated data");
 } else {
    header("content-type: file/unknown");
-    header("content-length: ".filesize($filepath));
+    header("content-length: ".filesize("$filepath"));
    header("content-disposition: attachment; filename=\"$original\"");
    header("content-description: php generated data");
 }
@@ -39,7 +39,7 @@ $sql .= " order by bo_order ";
 $result = sql_query($sql);
 for ($i=0; $row=sql_fetch_array($result); $i++) {
    $lt_style = "";
-    if ($i%3 !== 0) $lt_style = "margin-left:2%";
+    if ($i%2==1) $lt_style = "margin-left:2%";
    else $lt_style = "";
 ?>
    <div style="float:left;<?php echo $lt_style ?>"  class="lt_wr">
@@ -20,7 +20,7 @@ run_event('memo_form_update_before', $recv_list);
 for ($i=0; $i<count($recv_list); $i++) {
    $row = sql_fetch(" select mb_id, mb_nick, mb_open, mb_leave_date, mb_intercept_date from {$g5['member_table']} where mb_id = '{$recv_list[$i]}' ");
    if ($row) {
-        if ($is_admin || ($row['mb_open'] && (!$row['mb_leave_date'] && !$row['mb_intercept_date']))) {
+        if ($is_admin || ($row['mb_open'] && (!$row['mb_leave_date'] || !$row['mb_intercept_date']))) {
            $member_list['id'][]   = $row['mb_id'];
            $member_list['nick'][] = $row['mb_nick'];
        } else {
@@ -31,17 +31,14 @@ else
    alert($kind.' 값을 넘겨주세요.');
 }

+$g5['title'] = $t.' 쪽지 보기';
+include_once(G5_PATH.'/head.sub.php');
+
 $sql = " select * from {$g5['memo_table']}
            where me_id = '$me_id'
            and me_{$kind}_mb_id = '{$member['mb_id']}' ";
 $memo = sql_fetch($sql);

-set_session('ss_memo_delete_token', $token = uniqid(time()));
-$del_link = 'memo_delete.php?me_id='.$memo['me_id'].'&amp;token='.$token.'&amp;kind='.$kind;
-
-$g5['title'] = $t.' 쪽지 보기';
-include_once(G5_PATH.'/head.sub.php');
-
 // 이전 쪽지
 $sql = " select me.*, a.rownum from `{$g5['memo_table']}` as me inner join ( select me_id , (@rownum:=@rownum+1) as rownum from `{$g5['memo_table']}` as memo, (select @rownum:=0) tmp where me_{$kind}_mb_id = '{$member['mb_id']}' and memo.me_type = '$kind' order by me_id desc ) as a on a.me_id = me.me_id where me.me_id < '$me_id' and me.me_{$kind}_mb_id = '{$member['mb_id']}' and me.me_type = '$kind' order by me.me_id desc limit 1 ";

@@ -27,8 +27,6 @@ $sql = " select distinct wr_num from $write_table where wr_id in ({$wr_id_list})
 $result = sql_query($sql);
 while ($row = sql_fetch_array($result))
 {
-    $save[$cnt]['wr_contents'] = array();
-
    $wr_num = $row['wr_num'];
    for ($i=0; $i<count($_POST['chk_bo_table']); $i++)
    {
@@ -54,8 +52,6 @@ while ($row = sql_fetch_array($result))
        $result2 = sql_query($sql2);
        while ($row2 = sql_fetch_array($result2))
        {
-            $save[$cnt]['wr_contents'][] = $row2['wr_content'];
-
            $nick = cut_str($member['mb_nick'], $config['cf_cut_name']);
            if (!$row2['wr_is_comment'] && $config['cf_use_copy_log']) {
                if(strstr($row2['wr_option'], 'html')) {
@@ -196,8 +192,6 @@ while ($row = sql_fetch_array($result))

        sql_query(" update {$g5['board_table']} set bo_count_write = bo_count_write + '$count_write' where bo_table = '$move_bo_table' ");
        sql_query(" update {$g5['board_table']} set bo_count_comment = bo_count_comment + '$count_comment' where bo_table = '$move_bo_table' ");
-        
-        run_event('bbs_move_copy', $row2, $move_bo_table, $insert_id, $next_wr_num, $sw);

        delete_cache_latest($move_bo_table);
    }
@@ -214,20 +208,16 @@ if ($sw == 'move')
    {
        if( isset($save[$i]['bf_file']) && $save[$i]['bf_file'] ){
            for ($k=0; $k<count($save[$i]['bf_file']); $k++) {
-                $del_file = run_replace('delete_file_path', clean_relative_paths($save[$i]['bf_file'][$k]), $save[$i]);
+                $del_file = $save[$i]['bf_file'][$k];

                if ( is_file($del_file) && file_exists($del_file) ){
                    @unlink($del_file);
                }
-                
+
                // 썸네일 파일 삭제, 먼지손 님 코드 제안
                delete_board_thumbnail($bo_table, basename($save[$i]['bf_file'][$k]));
            }
        }
-        
-        for ($k=0; $k<count($save[$i]['wr_contents']); $k++){
-            delete_editor_thumbnail($save[$i]['wr_contents'][$k]);
-        }

        sql_query(" delete from $write_table where wr_parent = '{$save[$i]['wr_id']}' ");
        sql_query(" delete from {$g5['board_new_table']} where bo_table = '$bo_table' and wr_id = '{$save[$i]['wr_id']}' ");
@@ -8,25 +8,24 @@ if ($is_admin != 'super')

 $board = array();
 $save_bo_table = array();
-$save_wr_id = array();

 for($i=0;$i<count($_POST['chk_bn_id']);$i++)
 {
    // 실제 번호를 넘김
    $k = $_POST['chk_bn_id'][$i];

-    $bo_table = isset($_POST['bo_table'][$k]) ? preg_replace('/[^a-z0-9_]/i', '', $_POST['bo_table'][$k]) : '';
-    $wr_id    = isset($_POST['wr_id'][$k]) ? preg_replace('/[^0-9]/i', '', $_POST['wr_id'][$k]) : 0;
+    $bo_table = $_POST['bo_table'][$k];
+    $wr_id    = $_POST['wr_id'][$k];

-    $save_bo_table[$i] = $bo_table;
-	$save_wr_id[$i] = $wr_id;
+    $save_bo_table[] = $bo_table;

    $write_table = $g5['write_prefix'].$bo_table;

    if ($board['bo_table'] != $bo_table)
        $board = sql_fetch(" select bo_subject, bo_write_point, bo_comment_point, bo_notice from {$g5['board_table']} where bo_table = '$bo_table' ");

-    $write = get_write($write_table, $wr_id);
+    $sql = " select * from $write_table where wr_id = '$wr_id' ";
+    $write = sql_fetch($sql);
    if (!$write) continue;

    // 원글 삭제
@@ -139,11 +138,12 @@ for($i=0;$i<count($_POST['chk_bn_id']);$i++)
    }
 }

+$save_bo_table = array_unique($save_bo_table);
 foreach ($save_bo_table as $key=>$value) {
    delete_cache_latest($value);
 }

-run_event('bbs_new_delete', $chk_bn_id, $save_bo_table, $save_wr_id);
+run_event('bbs_new_delete', $chk_bn_id, $save_bo_table);

 goto_url("new.php?sfl=$sfl&stx=$stx&page=$page");
 ?>
@@ -3,10 +3,6 @@ include_once('./_common.php');

 $g5['title'] = '비밀번호 입력';

-if( isset($comment_id) ){
-    $comment_id = (int) $comment_id;
-}
-
 switch ($w) {
    case 'u' :
        $action = G5_HTTP_BBS_URL.'/write.php';
@@ -22,26 +22,21 @@ if($is_guest) {

 $filepath = G5_DATA_PATH.'/qa/'.$file['qa_file'.$no];
 $filepath = addslashes($filepath);
-$file_exist_check = (!is_file($filepath) || !file_exists($filepath)) ? false : true;
-
-if ( false === run_replace('qa_download_file_exist_check', $file_exist_check, $file) ){
+if (!is_file($filepath) || !file_exists($filepath))
    alert('파일이 존재하지 않습니다.');
-}

 $g5['title'] = '다운로드 &gt; '.conv_subject($file['qa_subject'], 255);

-run_event('qa_download_file_header', $file, $file_exist_check);
-
 $original = urlencode($file['qa_source'.$no]);

 if(preg_match("/msie/i", $_SERVER['HTTP_USER_AGENT']) && preg_match("/5\.5/", $_SERVER['HTTP_USER_AGENT'])) {
    header("content-type: doesn/matter");
-    header("content-length: ".filesize($filepath));
+    header("content-length: ".filesize("$filepath"));
    header("content-disposition: attachment; filename=\"$original\"");
    header("content-transfer-encoding: binary");
 } else {
    header("content-type: file/unknown");
-    header("content-length: ".filesize($filepath));
+    header("content-length: ".filesize("$filepath"));
    header("content-disposition: attachment; filename=\"$original\"");
    header("content-description: php generated data");
 }
@@ -155,8 +155,7 @@ if(is_file($skin_file)) {

    for ($i=1; $i<=2; $i++) {
        if(preg_match("/\.({$config['cf_image_extension']})$/i", $view['qa_file'.$i])) {
-            $attr_href = run_replace('thumb_view_image_href', G5_BBS_URL.'/view_image.php?fn='.urlencode('/'.G5_DATA_DIR.'/qa/'.$view['qa_file'.$i]), '/'.G5_DATA_DIR.'/qa/'.$view['qa_file'.$i], '', '', '', '');
-            $view['img_file'][] = '<a href="'.$attr_href.'" target="_blank" class="view_image"><img src="'.G5_DATA_URL.'/qa/'.$view['qa_file'.$i].'"></a>';
+            $view['img_file'][] = '<a href="'.G5_BBS_URL.'/view_image.php?fn='.urlencode('/data/qa/'.$view['qa_file'.$i]).'" target="_blank" class="view_image"><img src="'.G5_DATA_URL.'/qa/'.$view['qa_file'.$i].'"></a>';
            $view['img_count']++;
            continue;
        }
@@ -12,13 +12,10 @@ set_session("ss_cert_no",   "");
 set_session("ss_cert_hash", "");
 set_session("ss_cert_type", "");

-$is_social_login_modify = false;
-
 if( $provider && function_exists('social_nonce_is_valid') ){   //모바일로 소셜 연결을 했다면
    if( social_nonce_is_valid(get_session("social_link_token"), $provider) ){  //토큰값이 유효한지 체크
        $w = 'u';   //회원 수정으로 처리
        $_POST['mb_id'] = $member['mb_id'];
-        $is_social_login_modify = true;
    }
 }

@@ -78,14 +75,8 @@ if ($w == "") {
    // 수정 후 다시 이 폼으로 돌아오기 위해 임시로 저장해 놓음
    set_session("ss_tmp_password", $_POST[mb_password]);
    */
-    
-    if($_POST['mb_id'] && ! (isset($_POST['mb_password']) && $_POST['mb_password'])){
-        if( ! $is_social_login_modify ){
-            alert('비밀번호를 입력해 주세요.');
-        }
-    }

-    if (isset($_POST['mb_password'])) {
+    if ($_POST['mb_password']) {
        // 수정된 정보를 업데이트후 되돌아 온것이라면 비밀번호가 암호화 된채로 넘어온것임
        if ($_POST['is_update']) {
            $tmp_password = $_POST['mb_password'];
@@ -70,7 +70,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) {

 <item>
 <title><?php echo specialchars_replace($row['wr_subject']); ?></title>
-<link><?php echo specialchars_replace(get_pretty_url($bo_table, $row['wr_id'])); ?></link>
+<link><?php echo specialchars_replace(get_pretty_url($bo_table, $wr_id)); ?></link>
 <description><![CDATA[<?php echo $file ?><?php echo conv_content($row['wr_content'], $html) ?>]]></description>
 <dc:creator><?php echo specialchars_replace($row['wr_name']) ?></dc:creator>
 <?php
@@ -6,10 +6,6 @@ include_once(G5_PATH.'/head.sub.php');

 $filename = preg_replace('/[^A-Za-z0-9 _ .\-\/]/', '', $_GET['fn']);

-if(function_exists('clean_relative_paths')){
-    $filename = clean_relative_paths($filename);
-}
-
 $extension = pathinfo($filename, PATHINFO_EXTENSION);

 if ( ! preg_match('/(jpg|jpeg|png|gif|bmp)$/i', $extension) ){
@@ -436,7 +436,7 @@ if (!$group['gr_use_access'] && $board['bo_read_level'] < 2 && !$secret) {

 // 파일개수 체크
 $file_count   = 0;
-$upload_count = (isset($_FILES['bf_file']['name']) && is_array($_FILES['bf_file']['name'])) ? count($_FILES['bf_file']['name']) : 0;
+$upload_count = count($_FILES['bf_file']['name']);

 for ($i=0; $i<$upload_count; $i++) {
    if($_FILES['bf_file']['name'][$i] && is_uploaded_file($_FILES['bf_file']['tmp_name'][$i]))
@@ -461,119 +461,116 @@ $chars_array = array_merge(range(0,9), range('a','z'), range('A','Z'));
 // 가변 파일 업로드
 $file_upload_msg = '';
 $upload = array();
+for ($i=0; $i<count($_FILES['bf_file']['name']); $i++) {
+    $upload[$i]['file']     = '';
+    $upload[$i]['source']   = '';
+    $upload[$i]['filesize'] = 0;
+    $upload[$i]['image']    = array();
+    $upload[$i]['image'][0] = '';
+    $upload[$i]['image'][1] = '';
+    $upload[$i]['image'][2] = '';
+    $upload[$i]['fileurl'] = '';
+    $upload[$i]['thumburl'] = '';
+    $upload[$i]['storage'] = '';

-if(isset($_FILES['bf_file']['name']) && is_array($_FILES['bf_file']['name'])) {
-    for ($i=0; $i<count($_FILES['bf_file']['name']); $i++) {
-        $upload[$i]['file']     = '';
-        $upload[$i]['source']   = '';
-        $upload[$i]['filesize'] = 0;
-        $upload[$i]['image']    = array();
-        $upload[$i]['image'][0] = 0;
-        $upload[$i]['image'][1] = 0;
-        $upload[$i]['image'][2] = 0;
-        $upload[$i]['fileurl'] = '';
-        $upload[$i]['thumburl'] = '';
-        $upload[$i]['storage'] = '';
+    // 삭제에 체크가 되어있다면 파일을 삭제합니다.
+    if (isset($_POST['bf_file_del'][$i]) && $_POST['bf_file_del'][$i]) {
+        $upload[$i]['del_check'] = true;

-        // 삭제에 체크가 되어있다면 파일을 삭제합니다.
-        if (isset($_POST['bf_file_del'][$i]) && $_POST['bf_file_del'][$i]) {
-            $upload[$i]['del_check'] = true;
+        $row = sql_fetch(" select * from {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' ");

-            $row = sql_fetch(" select * from {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' ");
+        $delete_file = run_replace('delete_file_path', G5_DATA_PATH.'/file/'.$bo_table.'/'.str_replace('../', '', $row['bf_file']), $row);
+        if( file_exists($delete_file) ){
+            @unlink($delete_file);
+        }
+        // 썸네일삭제
+        if(preg_match("/\.({$config['cf_image_extension']})$/i", $row['bf_file'])) {
+            delete_board_thumbnail($bo_table, $row['bf_file']);
+        }
+    }
+    else
+        $upload[$i]['del_check'] = false;
+
+    $tmp_file  = $_FILES['bf_file']['tmp_name'][$i];
+    $filesize  = $_FILES['bf_file']['size'][$i];
+    $filename  = $_FILES['bf_file']['name'][$i];
+    $filename  = get_safe_filename($filename);
+
+    // 서버에 설정된 값보다 큰파일을 업로드 한다면
+    if ($filename) {
+        if ($_FILES['bf_file']['error'][$i] == 1) {
+            $file_upload_msg .= '\"'.$filename.'\" 파일의 용량이 서버에 설정('.$upload_max_filesize.')된 값보다 크므로 업로드 할 수 없습니다.\\n';
+            continue;
+        }
+        else if ($_FILES['bf_file']['error'][$i] != 0) {
+            $file_upload_msg .= '\"'.$filename.'\" 파일이 정상적으로 업로드 되지 않았습니다.\\n';
+            continue;
+        }
+    }
+
+    if (is_uploaded_file($tmp_file)) {
+        // 관리자가 아니면서 설정한 업로드 사이즈보다 크다면 건너뜀
+        if (!$is_admin && $filesize > $board['bo_upload_size']) {
+            $file_upload_msg .= '\"'.$filename.'\" 파일의 용량('.number_format($filesize).' 바이트)이 게시판에 설정('.number_format($board['bo_upload_size']).' 바이트)된 값보다 크므로 업로드 하지 않습니다.\\n';
+            continue;
+        }
+
+        //=================================================================\
+        // 090714
+        // 이미지나 플래시 파일에 악성코드를 심어 업로드 하는 경우를 방지
+        // 에러메세지는 출력하지 않는다.
+        //-----------------------------------------------------------------
+        $timg = @getimagesize($tmp_file);
+        // image type
+        if ( preg_match("/\.({$config['cf_image_extension']})$/i", $filename) ||
+             preg_match("/\.({$config['cf_flash_extension']})$/i", $filename) ) {
+            if ($timg['2'] < 1 || $timg['2'] > 16)
+                continue;
+        }
+        //=================================================================
+
+        $upload[$i]['image'] = $timg;
+
+        // 4.00.11 - 글답변에서 파일 업로드시 원글의 파일이 삭제되는 오류를 수정
+        if ($w == 'u') {
+            // 존재하는 파일이 있다면 삭제합니다.
+            $row = sql_fetch(" select * from {$g5['board_file_table']} where bo_table = '$bo_table' and wr_id = '$wr_id' and bf_no = '$i' ");

            $delete_file = run_replace('delete_file_path', G5_DATA_PATH.'/file/'.$bo_table.'/'.str_replace('../', '', $row['bf_file']), $row);
            if( file_exists($delete_file) ){
-                @unlink($delete_file);
+                @unlink(G5_DATA_PATH.'/file/'.$bo_table.'/'.$row['bf_file']);
            }
-            // 썸네일삭제
+            // 이미지파일이면 썸네일삭제
            if(preg_match("/\.({$config['cf_image_extension']})$/i", $row['bf_file'])) {
                delete_board_thumbnail($bo_table, $row['bf_file']);
            }
        }
-        else
-            $upload[$i]['del_check'] = false;

-        $tmp_file  = $_FILES['bf_file']['tmp_name'][$i];
-        $filesize  = $_FILES['bf_file']['size'][$i];
-        $filename  = $_FILES['bf_file']['name'][$i];
-        $filename  = get_safe_filename($filename);
+        // 프로그램 원래 파일명
+        $upload[$i]['source'] = $filename;
+        $upload[$i]['filesize'] = $filesize;

-        // 서버에 설정된 값보다 큰파일을 업로드 한다면
-        if ($filename) {
-            if ($_FILES['bf_file']['error'][$i] == 1) {
-                $file_upload_msg .= '\"'.$filename.'\" 파일의 용량이 서버에 설정('.$upload_max_filesize.')된 값보다 크므로 업로드 할 수 없습니다.\\n';
-                continue;
-            }
-            else if ($_FILES['bf_file']['error'][$i] != 0) {
-                $file_upload_msg .= '\"'.$filename.'\" 파일이 정상적으로 업로드 되지 않았습니다.\\n';
-                continue;
-            }
-        }
+        // 아래의 문자열이 들어간 파일은 -x 를 붙여서 웹경로를 알더라도 실행을 하지 못하도록 함
+        $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc)/i", "$0-x", $filename);

-        if (is_uploaded_file($tmp_file)) {
-            // 관리자가 아니면서 설정한 업로드 사이즈보다 크다면 건너뜀
-            if (!$is_admin && $filesize > $board['bo_upload_size']) {
-                $file_upload_msg .= '\"'.$filename.'\" 파일의 용량('.number_format($filesize).' 바이트)이 게시판에 설정('.number_format($board['bo_upload_size']).' 바이트)된 값보다 크므로 업로드 하지 않습니다.\\n';
-                continue;
-            }
+        shuffle($chars_array);
+        $shuffle = implode('', $chars_array);

-            //=================================================================\
-            // 090714
-            // 이미지나 플래시 파일에 악성코드를 심어 업로드 하는 경우를 방지
-            // 에러메세지는 출력하지 않는다.
-            //-----------------------------------------------------------------
-            $timg = @getimagesize($tmp_file);
-            // image type
-            if ( preg_match("/\.({$config['cf_image_extension']})$/i", $filename) ||
-                 preg_match("/\.({$config['cf_flash_extension']})$/i", $filename) ) {
-                if ($timg['2'] < 1 || $timg['2'] > 16)
-                    continue;
-            }
-            //=================================================================
+        // 첨부파일 첨부시 첨부파일명에 공백이 포함되어 있으면 일부 PC에서 보이지 않거나 다운로드 되지 않는 현상이 있습니다. (길상여의 님 090925)
+        $upload[$i]['file'] = abs(ip2long($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);

-            $upload[$i]['image'] = $timg;
+        $dest_file = G5_DATA_PATH.'/file/'.$bo_table.'/'.$upload[$i]['file'];

-            // 4.00.11 - 글답변에서 파일 업로드시 원글의 파일이 삭제되는 오류를 수정
-            if ($w == 'u') {
-                // 존재하는 파일이 있다면 삭제합니다.
-                $row = sql_fetch(" select * from {$g5['board_file_table']} where bo_table = '$bo_table' and wr_id = '$wr_id' and bf_no = '$i' ");
+        // 업로드가 안된다면 에러메세지 출력하고 죽어버립니다.
+        $error_code = move_uploaded_file($tmp_file, $dest_file) or die($_FILES['bf_file']['error'][$i]);

-                $delete_file = run_replace('delete_file_path', G5_DATA_PATH.'/file/'.$bo_table.'/'.str_replace('../', '', $row['bf_file']), $row);
-                if( file_exists($delete_file) ){
-                    @unlink(G5_DATA_PATH.'/file/'.$bo_table.'/'.$row['bf_file']);
-                }
-                // 이미지파일이면 썸네일삭제
-                if(preg_match("/\.({$config['cf_image_extension']})$/i", $row['bf_file'])) {
-                    delete_board_thumbnail($bo_table, $row['bf_file']);
-                }
-            }
+        // 올라간 파일의 퍼미션을 변경합니다.
+        chmod($dest_file, G5_FILE_PERMISSION);

-            // 프로그램 원래 파일명
-            $upload[$i]['source'] = $filename;
-            $upload[$i]['filesize'] = $filesize;
-
-            // 아래의 문자열이 들어간 파일은 -x 를 붙여서 웹경로를 알더라도 실행을 하지 못하도록 함
-            $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc)/i", "$0-x", $filename);
-
-            shuffle($chars_array);
-            $shuffle = implode('', $chars_array);
-
-            // 첨부파일 첨부시 첨부파일명에 공백이 포함되어 있으면 일부 PC에서 보이지 않거나 다운로드 되지 않는 현상이 있습니다. (길상여의 님 090925)
-            $upload[$i]['file'] = abs(ip2long($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);
-
-            $dest_file = G5_DATA_PATH.'/file/'.$bo_table.'/'.$upload[$i]['file'];
-
-            // 업로드가 안된다면 에러메세지 출력하고 죽어버립니다.
-            $error_code = move_uploaded_file($tmp_file, $dest_file) or die($_FILES['bf_file']['error'][$i]);
-
-            // 올라간 파일의 퍼미션을 변경합니다.
-            chmod($dest_file, G5_FILE_PERMISSION);
-
-            $dest_file = run_replace('write_update_upload_file', $dest_file, $board, $wr_id, $w);
-            $upload[$i] = run_replace('write_update_upload_array', $upload[$i], $dest_file, $board, $wr_id, $w);
-        }
-    }   // end for
-}   // end if
+        $dest_file = run_replace('write_update_upload_file', $dest_file, $board, $wr_id, $w);
+        $upload[$i] = run_replace('write_update_upload_array', $upload[$i], $dest_file, $board, $wr_id, $w);
+    }
+}

 // 나중에 테이블에 저장하는 이유는 $wr_id 값을 저장해야 하기 때문입니다.
 for ($i=0; $i<count($upload); $i++)
@@ -596,10 +593,10 @@ for ($i=0; $i<count($upload); $i++)
                             bf_fileurl = '{$upload[$i]['fileurl']}',
                             bf_thumburl = '{$upload[$i]['thumburl']}',
                             bf_storage = '{$upload[$i]['storage']}',
-                             bf_filesize = '".(int)$upload[$i]['filesize']."',
-                             bf_width = '".(int)$upload[$i]['image'][0]."',
-                             bf_height = '".(int)$upload[$i]['image'][1]."',
-                             bf_type = '".(int)$upload[$i]['image'][2]."',
+                             bf_filesize = '{$upload[$i]['filesize']}',
+                             bf_width = '{$upload[$i]['image']['0']}',
+                             bf_height = '{$upload[$i]['image']['1']}',
+                             bf_type = '{$upload[$i]['image']['2']}',
                             bf_datetime = '".G5_TIME_YMDHIS."'
                      where bo_table = '{$bo_table}'
                                and wr_id = '{$wr_id}'
@@ -629,10 +626,10 @@ for ($i=0; $i<count($upload); $i++)
                         bf_thumburl = '{$upload[$i]['thumburl']}',
                         bf_storage = '{$upload[$i]['storage']}',
                         bf_download = 0,
-                         bf_filesize = '".(int)$upload[$i]['filesize']."',
-                         bf_width = '".(int)$upload[$i]['image'][0]."',
-                         bf_height = '".(int)$upload[$i]['image'][1]."',
-                         bf_type = '".(int)$upload[$i]['image'][2]."',
+                         bf_filesize = '{$upload[$i]['filesize']}',
+                         bf_width = '{$upload[$i]['image']['0']}',
+                         bf_height = '{$upload[$i]['image']['1']}',
+                         bf_type = '{$upload[$i]['image']['2']}',
                         bf_datetime = '".G5_TIME_YMDHIS."' ";
        sql_query($sql);

@@ -216,50 +216,23 @@ ini_set("session.gc_divisor", 100); // session.gc_divisor는 session.gc_probabil
 session_set_cookie_params(0, '/');
 ini_set("session.cookie_domain", G5_COOKIE_DOMAIN);

+@session_start();
+//==============================================================================
+
+
 //==============================================================================
 // 공용 변수
 //------------------------------------------------------------------------------
 // 기본환경설정
 // 기본적으로 사용하는 필드만 얻은 후 상황에 따라 필드를 추가로 얻음
-$config = get_config(true);
-
-// 본인인증 또는 쇼핑몰 사용시에만 secure; SameSite=None 로 설정합니다.
-if( $config['cf_cert_use'] || (defined('G5_YOUNGCART_VER') && G5_YOUNGCART_VER) ) {
-    // Chrome 80 버전부터 아래 이슈 대응
-    // https://developers-kr.googleblog.com/2020/01/developers-get-ready-for-new.html?fbclid=IwAR0wnJFGd6Fg9_WIbQPK3_FxSSpFLqDCr9bjicXdzy--CCLJhJgC9pJe5ss
-    if(!function_exists('session_start_samesite')) {
-        function session_start_samesite($options = array())
-        {
-            global $g5;
-
-            $res = @session_start($options);
-
-            // IE 브라우저 또는 엣지브라우저 또는 IOS 모바일과 http환경에서는 secure; SameSite=None을 설정하지 않습니다.
-            if( preg_match('/Edge/i', $_SERVER['HTTP_USER_AGENT']) || preg_match('/(iPhone|iPod|iPad).*AppleWebKit.*Safari/i', $_SERVER['HTTP_USER_AGENT']) || preg_match('~MSIE|Internet Explorer~i', $_SERVER['HTTP_USER_AGENT']) || preg_match('~Trident/7.0(; Touch)?; rv:11.0~',$_SERVER['HTTP_USER_AGENT']) || ! (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') ){
-                return $res;
-            }
-
-            $headers = headers_list();
-            krsort($headers);
-            foreach ($headers as $header) {
-                if (!preg_match('~^Set-Cookie: PHPSESSID=~', $header)) continue;
-                $header = preg_replace('~; secure(; HttpOnly)?$~', '', $header) . '; secure; SameSite=None';
-                header($header, false);
-                $g5['session_cookie_samesite'] = 'none';
-                break;
-            }
-            return $res;
-        }
-    }
-
-    session_start_samesite();
-} else {
-    @session_start();
-}
-//==============================================================================
+$config = get_config();

 define('G5_HTTP_BBS_URL',  https_url(G5_BBS_DIR, false));
 define('G5_HTTPS_BBS_URL', https_url(G5_BBS_DIR, true));
+if ($config['cf_editor'])
+    define('G5_EDITOR_LIB', G5_EDITOR_PATH."/{$config['cf_editor']}/editor.lib.php");
+else
+    define('G5_EDITOR_LIB', G5_LIB_PATH."/editor.lib.php");

 define('G5_CAPTCHA_DIR',    !empty($config['cf_captcha']) ? $config['cf_captcha'] : 'kcaptcha');
 define('G5_CAPTCHA_URL',    G5_PLUGIN_URL.'/'.G5_CAPTCHA_DIR);
@@ -442,7 +415,7 @@ if ($_SESSION['ss_mb_id']) { // 로그인중이라면
 $write = array();
 $write_table = "";
 if ($bo_table) {
-    $board = get_board_db($bo_table, true);
+    $board = get_board_db($bo_table);
    if ($board['bo_table']) {
        set_cookie("ck_bo_table", $board['bo_table'], 86400 * 1);
        $gr_id = $board['gr_id'];
@@ -457,22 +430,12 @@ if ($bo_table) {
            }
        }
    }
-    
-    // 게시판에서 
-    if (isset($board['bo_select_editor']) && $board['bo_select_editor']){
-        $config['cf_editor'] = $board['bo_select_editor'];
-    }
 }

-if ($gr_id && !is_array($gr_id)) {
-    $group = get_group($gr_id, true);
+if ($gr_id) {
+    $group = get_group($gr_id);
 }

-if ($config['cf_editor']) {
-    define('G5_EDITOR_LIB', G5_EDITOR_PATH."/{$config['cf_editor']}/editor.lib.php");
-} else {
-    define('G5_EDITOR_LIB', G5_LIB_PATH."/editor.lib.php");
-}

 // 회원, 비회원 구분
 $is_member = $is_guest = false;
@@ -661,6 +624,7 @@ include_once(G5_BBS_PATH.'/visit_insert.inc.php');
 // 일정 기간이 지난 DB 데이터 삭제 및 최적화
 include_once(G5_BBS_PATH.'/db_table.optimize.php');

+
 // common.php 파일을 수정할 필요가 없도록 확장합니다.
 $extend_file = array();
 $tmp = dir(G5_EXTEND_PATH);
@@ -5,7 +5,7 @@
 ********************/

 define('G5_VERSION', '그누보드5');
-define('G5_GNUBOARD_VER', '5.4.3');
+define('G5_GNUBOARD_VER', '5.4.0.9');

 // 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음
 define('_GNUBOARD_', true);
@@ -2,7 +2,7 @@
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

 // 유저 사이드뷰에서 아이콘 지정 안했을시 기본 no 프로필 이미지
-define('G5_NO_PROFILE_IMG', '<span class="profile_img"><img src="'.G5_IMG_URL.'/no_profile.gif" alt="no_profile" width="'.$config['cf_member_icon_width'].'" height="'.$config['cf_member_icon_height'].'"></span>');
+define('G5_NO_PROFILE_IMG', '<span class="profile_img"><img src="'.G5_IMG_URL.'/no_profile.gif" alt="no_profile" width="20" height="20"></span>');

 // 썸네일 처리 방식, 비율유지 하지 않고 썸네일을 생성하려면 주석을 풀고 값은 false 입력합니다. ( true 또는 주석으로 된 경우에는 비율 유지합니다. )
 //define('G5_USE_THUMB_RATIO', false);
@@ -7,7 +7,7 @@ add_replace('invalid_password', 'g54_return_invalid_password', 10, 3);

 function g54_return_invalid_password($bool, $type, $wr){
    if($type === 'write' && $bool === false && $wr['wr_password'] && isset($_POST['wr_password'])) {
-        if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && (strlen($wr['wr_password']) === G5_MYSQL_PASSWORD_LENGTH || strlen($wr['wr_password']) === 16)) {
+        if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && strlen($wr['wr_password']) === G5_MYSQL_PASSWORD_LENGTH) {
            if( sql_password($_POST['wr_password']) === $wr['wr_password'] ){
                $bool = true;
            }
@@ -22,7 +22,7 @@ function g54_check_bbs_password($type, $wr, $qstr=''){

        global $bo_table, $w;

-        if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && (strlen($wr['wr_password']) === G5_MYSQL_PASSWORD_LENGTH || strlen($wr['wr_password']) === 16)) {
+        if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && strlen($wr['wr_password']) === G5_MYSQL_PASSWORD_LENGTH) {
            if( sql_password($_POST['wr_password']) === $wr['wr_password'] ){
                if ($w == 's') {
                    $ss_name = 'ss_secret_'.$bo_table.'_'.$wr['wr_num'];
@@ -13,12 +13,6 @@ define('G5_SMS5_ADMIN_DIR',        'sms_admin');
 define('G5_SMS5_ADMIN_PATH',       G5_ADMIN_PATH.'/'.G5_SMS5_ADMIN_DIR);
 define('G5_SMS5_ADMIN_URL',        G5_ADMIN_URL.'/'.G5_SMS5_ADMIN_DIR);

-define('ICODE_JSON_SOCKET_HOST', '211.172.232.124');
-define('ICODE_JSON_SOCKET_PORT', '9201');
-
-define('G5_ICODE_LMS_MAX_LENGTH', 1500);    // 구버전 LMS 최대길이
-define('G5_ICODE_JSON_MAX_LENGTH', 2000);   // JSON 버전 LMS 최대길이
-
 // SMS 테이블명
 $g5['sms5_prefix']                = 'sms5_';
 $g5['sms5_config_table']          = $g5['sms5_prefix'] . 'config';
@@ -1,6 +1,6 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

-define('G5_JS_VER',  '191202');
-define('G5_CSS_VER', '191202');
+define('G5_JS_VER',  '191110');
+define('G5_CSS_VER', '191110');
 ?>
@@ -337,7 +337,7 @@ for($i=0; $row=sql_fetch_array($result); $i++) {
    // 게시판 테이블 생성
    $bo_table = $row['bo_table'];
    $file = file(G5_ADMIN_PATH.'/sql_write.sql');
-    $sql = implode("\n", $file);
+    $sql = implode($file, "\n");

    $create_table = $g5['write_prefix'] . $bo_table;

@@ -1,8 +1,6 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

-run_event('pre_head');
-
 if(defined('G5_THEME_PATH')) {
    require_once(G5_THEME_PATH.'/head.php');
    return;
@@ -2,6 +2,8 @@
 // 이 파일은 새로운 파일 생성시 반드시 포함되어야 함
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

+run_event('head_sub');
+
 // 테마 head.sub.php 파일
 if(!defined('G5_IS_ADMIN') && defined('G5_THEME_PATH') && is_file(G5_THEME_PATH.'/head.sub.php')) {
    require_once(G5_THEME_PATH.'/head.sub.php');
@@ -15,10 +15,6 @@ if (file_exists($dbconfig_file)) {
    die(install_json_msg('프로그램이 이미 설치되어 있습니다.'));
 }

-if (preg_match("/[^0-9a-z_]+/i", $_POST['table_prefix']) ) {
-    die(install_json_msg('TABLE명 접두사는 영문자, 숫자, _ 만 입력하세요.'));
-}
-
 $mysql_host  = safe_install_string_check($_POST['mysql_host'], 'json');
 $mysql_user  = safe_install_string_check($_POST['mysql_user'], 'json');
 $mysql_pass  = safe_install_string_check($_POST['mysql_pass'], 'json');
@@ -26,7 +22,7 @@ $mysql_db    = safe_install_string_check($_POST['mysql_db'], 'json');
 $table_prefix= safe_install_string_check(preg_replace('/[^a-zA-Z0-9_]/', '_', $_POST['table_prefix']));

 $tmp_str = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '';
-$ajax_token = md5($tmp_str.$_SERVER['REMOTE_ADDR'].dirname(dirname(__FILE__).'/'));
+$ajax_token = md5($tmp_str.$_SERVER['REMOTE_ADDR'].$_SERVER['DOCUMENT_ROOT']);

 $bool_ajax_token = ($ajax_token == $_POST['ajax_token']) ? true : false;

@@ -47,7 +47,6 @@ CREATE TABLE IF NOT EXISTS `g5_board` (
  `bo_use_file_content` tinyint(4) NOT NULL DEFAULT '0',
  `bo_use_secret` tinyint(4) NOT NULL DEFAULT '0',
  `bo_use_dhtml_editor` tinyint(4) NOT NULL DEFAULT '0',
-  `bo_select_editor` varchar(50) NOT NULL DEFAULT '',
  `bo_use_rss_view` tinyint(4) NOT NULL DEFAULT '0',
  `bo_use_good` tinyint(4) NOT NULL DEFAULT '0',
  `bo_use_nogood` tinyint(4) NOT NULL DEFAULT '0',
@@ -19,7 +19,7 @@ if (!isset($_POST['agree']) || $_POST['agree'] != '동의함') {
 }

 $tmp_str = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '';
-$ajax_token = md5($tmp_str.$_SERVER['REMOTE_ADDR'].dirname(dirname(__FILE__).'/'));
+$ajax_token = md5($tmp_str.$_SERVER['REMOTE_ADDR'].$_SERVER['DOCUMENT_ROOT']);
 ?>


@@ -61,7 +61,7 @@ $ajax_token = md5($tmp_str.$_SERVER['REMOTE_ADDR'].dirname(dirname(__FILE__).'/'
        <th scope="row"><label for="table_prefix">TABLE명 접두사</label></th>
        <td>
            <input name="table_prefix" type="text" value="g5_" id="table_prefix">
-            <span>TABLE명 접두사는 영문자, 숫자, _ 만 입력 가능합니다.</span>
+            <span>가능한 변경하지 마십시오.</span>
        </td>
    </tr>
    </tbody>
@@ -33,10 +33,6 @@ $admin_pass  = $_POST['admin_pass'];
 $admin_name  = $_POST['admin_name'];
 $admin_email = $_POST['admin_email'];

-if (preg_match("/[^0-9a-z_]+/i", $table_prefix) ) {
-    die('<div class="ins_inner"><p>TABLE명 접두사는 영문자, 숫자, _ 만 입력하세요.</p><div class="inner_btn"><a href="./install_config.php">뒤로가기</a></div></div>');
-}
-
 if (preg_match("/[^0-9a-z_]+/i", $admin_id)) {
    die('<div class="ins_inner"><p>관리자 아이디는 영문자, 숫자, _ 만 입력하세요.</p><div class="inner_btn"><a href="./install_config.php">뒤로가기</a></div></div>');
 }
@@ -296,7 +292,7 @@ for ($i=0; $i<count($tmp_bo_table); $i++)
    // 게시판 테이블 생성
    $file = file("../".G5_ADMIN_DIR."/sql_write.sql");
    $file = get_db_create_replace($file);
-    $sql = implode("\n", $file);
+    $sql = implode($file, "\n");

    $create_table = $table_prefix.'write_' . $tmp_bo_table[$i];

@@ -344,10 +340,10 @@ $f = @fopen($file, 'a');

 fwrite($f, "<?php\n");
 fwrite($f, "if (!defined('_GNUBOARD_')) exit;\n");
-fwrite($f, "define('G5_MYSQL_HOST', '".addcslashes($mysql_host, "\\'")."');\n");
-fwrite($f, "define('G5_MYSQL_USER', '".addcslashes($mysql_user, "\\'")."');\n");
-fwrite($f, "define('G5_MYSQL_PASSWORD', '".addcslashes($mysql_pass, "\\'")."');\n");
-fwrite($f, "define('G5_MYSQL_DB', '".addcslashes($mysql_db, "\\'")."');\n");
+fwrite($f, "define('G5_MYSQL_HOST', '{$mysql_host}');\n");
+fwrite($f, "define('G5_MYSQL_USER', '{$mysql_user}');\n");
+fwrite($f, "define('G5_MYSQL_PASSWORD', '{$mysql_pass}');\n");
+fwrite($f, "define('G5_MYSQL_DB', '{$mysql_db}');\n");
 fwrite($f, "define('G5_MYSQL_SET_MODE', {$mysql_set_mode});\n\n");
 fwrite($f, "define('G5_TABLE_PREFIX', '{$table_prefix}');\n\n");
 fwrite($f, "\$g5['write_prefix'] = G5_TABLE_PREFIX.'write_'; // 게시판 테이블명 접두사\n\n");
@@ -165,9 +165,33 @@ function set_cookie(name, value, expirehours, domain)
 // 쿠키 얻음
 function get_cookie(name)
 {
-	var match = document.cookie.match(new RegExp('(^| )' + name + '=([^;]+)'));
-	if (match) return unescape(match[2]);
-	return "";
+    var find_sw = false;
+    var start, end;
+    var i = 0;
+
+    for (i=0; i<= document.cookie.length; i++)
+    {
+        start = i;
+        end = start + name.length;
+
+        if(document.cookie.substring(start, end) == name)
+        {
+            find_sw = true
+            break
+        }
+    }
+
+    if (find_sw == true)
+    {
+        start = end + 1;
+        end = document.cookie.indexOf(";", start);
+
+        if(end < start)
+            end = document.cookie.length;
+
+        return unescape(document.cookie.substring(start, end));
+    }
+    return "";
 }

 // 쿠키 지움
@@ -535,12 +559,10 @@ function font_resize(id, rmv_class, add_class, othis)
 {
    var $el = $("#"+id);

-	if((typeof rmv_class !== "undefined" && rmv_class) || (typeof add_class !== "undefined" && add_class)){
-		$el.removeClass(rmv_class).addClass(add_class);
+    $el.removeClass(rmv_class).addClass(add_class);

-		set_cookie("ck_font_resize_rmv_class", rmv_class, 1, g5_cookie_domain);
-		set_cookie("ck_font_resize_add_class", add_class, 1, g5_cookie_domain);
-	}
+    set_cookie("ck_font_resize_rmv_class", rmv_class, 1, g5_cookie_domain);
+    set_cookie("ck_font_resize_add_class", add_class, 1, g5_cookie_domain);

    if(typeof othis !== "undefined"){
        $(othis).addClass('select').siblings().removeClass('select');
@@ -1,388 +0,0 @@
-/* This is the core CSS of Tooltipster */
-
-/* GENERAL STRUCTURE RULES (do not edit this section) */
-
-.tooltipster-base {
-	/* this ensures that a constrained height set by functionPosition,
-	if greater that the natural height of the tooltip, will be enforced
-	in browsers that support display:flex */
-	display: flex;
-	pointer-events: none;
-	/* this may be overriden in JS for fixed position origins */
-	position: absolute;
-}
-
-.tooltipster-box {
-	/* see .tooltipster-base. flex-shrink 1 is only necessary for IE10-
-	and flex-basis auto for IE11- (at least) */
-	flex: 1 1 auto;
-}
-
-.tooltipster-content {
-	/* prevents an overflow if the user adds padding to the div */
-	box-sizing: border-box;
-	/* these make sure we'll be able to detect any overflow */
-	max-height: 100%;
-	max-width: 100%;
-	overflow: auto;
-}
-
-.tooltipster-ruler {
-	/* these let us test the size of the tooltip without overflowing the window */
-	bottom: 0;
-	left: 0;
-	overflow: hidden;
-	position: fixed;
-	right: 0;
-	top: 0;
-	visibility: hidden;
-}
-
-/* ANIMATIONS */
-
-/* Open/close animations */
-
-/* fade */
-
-.tooltipster-fade {
-	opacity: 0;
-	-webkit-transition-property: opacity;
-	-moz-transition-property: opacity;
-	-o-transition-property: opacity;
-	-ms-transition-property: opacity;
-	transition-property: opacity;
-}
-.tooltipster-fade.tooltipster-show {
-	opacity: 1;
-}
-
-/* grow */
-
-.tooltipster-grow {
-	-webkit-transform: scale(0,0);
-	-moz-transform: scale(0,0);
-	-o-transform: scale(0,0);
-	-ms-transform: scale(0,0);
-	transform: scale(0,0);
-	-webkit-transition-property: -webkit-transform;
-	-moz-transition-property: -moz-transform;
-	-o-transition-property: -o-transform;
-	-ms-transition-property: -ms-transform;
-	transition-property: transform;
-	-webkit-backface-visibility: hidden;
-}
-.tooltipster-grow.tooltipster-show {
-	-webkit-transform: scale(1,1);
-	-moz-transform: scale(1,1);
-	-o-transform: scale(1,1);
-	-ms-transform: scale(1,1);
-	transform: scale(1,1);
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1);
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-moz-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-ms-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-o-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-}
-
-/* swing */
-
-.tooltipster-swing {
-	opacity: 0;
-	-webkit-transform: rotateZ(4deg);
-	-moz-transform: rotateZ(4deg);
-	-o-transform: rotateZ(4deg);
-	-ms-transform: rotateZ(4deg);
-	transform: rotateZ(4deg);
-	-webkit-transition-property: -webkit-transform, opacity;
-	-moz-transition-property: -moz-transform;
-	-o-transition-property: -o-transform;
-	-ms-transition-property: -ms-transform;
-	transition-property: transform;
-}
-.tooltipster-swing.tooltipster-show {
-	opacity: 1;
-	-webkit-transform: rotateZ(0deg);
-	-moz-transform: rotateZ(0deg);
-	-o-transform: rotateZ(0deg);
-	-ms-transform: rotateZ(0deg);
-	transform: rotateZ(0deg);
-	-webkit-transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 1);
-	-webkit-transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 2.4);
-	-moz-transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 2.4);
-	-ms-transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 2.4);
-	-o-transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 2.4);
-	transition-timing-function: cubic-bezier(0.230, 0.635, 0.495, 2.4);
-}
-
-/* fall */
-
-.tooltipster-fall {
-	-webkit-transition-property: top;
-	-moz-transition-property: top;
-	-o-transition-property: top;
-	-ms-transition-property: top;
-	transition-property: top;
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1);
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-moz-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-ms-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-o-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-}
-.tooltipster-fall.tooltipster-initial {
-	top: 0 !important;
-}
-.tooltipster-fall.tooltipster-show {
-}
-.tooltipster-fall.tooltipster-dying {
-	-webkit-transition-property: all;
-	-moz-transition-property: all;
-	-o-transition-property: all;
-	-ms-transition-property: all;
-	transition-property: all;
-	top: 0 !important;
-	opacity: 0;
-}
-
-/* slide */
-
-.tooltipster-slide {
-	-webkit-transition-property: left;
-	-moz-transition-property: left;
-	-o-transition-property: left;
-	-ms-transition-property: left;
-	transition-property: left;
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1);
-	-webkit-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-moz-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-ms-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	-o-transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-	transition-timing-function: cubic-bezier(0.175, 0.885, 0.320, 1.15);
-}
-.tooltipster-slide.tooltipster-initial {
-	left: -40px !important;
-}
-.tooltipster-slide.tooltipster-show {
-}
-.tooltipster-slide.tooltipster-dying {
-	-webkit-transition-property: all;
-	-moz-transition-property: all;
-	-o-transition-property: all;
-	-ms-transition-property: all;
-	transition-property: all;
-	left: 0 !important;
-	opacity: 0;
-}
-
-/* Update animations */
-
-/* We use animations rather than transitions here because
- transition durations may be specified in the style tag due to
- animationDuration, and we try to avoid collisions and the use
- of !important */
-
-/* fade */
-
-@keyframes tooltipster-fading {
-	0% {
-		opacity: 0;
-	}
-	100% {
-		opacity: 1;
-	}
-}
-
-.tooltipster-update-fade {
-	animation: tooltipster-fading 400ms;
-}
-
-/* rotate */
-
-@keyframes tooltipster-rotating {
-	25% {
-		transform: rotate(-2deg);
-	}
-	75% {
-		transform: rotate(2deg);
-	}
-	100% {
-		transform: rotate(0);
-	}
-}
-
-.tooltipster-update-rotate {
-	animation: tooltipster-rotating 600ms;
-}
-
-/* scale */
-
-@keyframes tooltipster-scaling {
-	50% {
-		transform: scale(1.1);
-	}
-	100% {
-		transform: scale(1);
-	}
-}
-
-.tooltipster-update-scale {
-	animation: tooltipster-scaling 600ms;
-}
-
-/**
- * DEFAULT STYLE OF THE SIDETIP PLUGIN
- * 
- * All styles are "namespaced" with .tooltipster-sidetip to prevent
- * conflicts between plugins.
- */
-
-/* .tooltipster-box */
-
-.tooltipster-sidetip .tooltipster-box {
-	background: #565656;
-	border: 2px solid black;
-	border-radius: 4px;
-}
-
-.tooltipster-sidetip.tooltipster-bottom .tooltipster-box {
-	margin-top: 8px;
-}
-
-.tooltipster-sidetip.tooltipster-left .tooltipster-box {
-	margin-right: 8px;
-}
-
-.tooltipster-sidetip.tooltipster-right .tooltipster-box {
-	margin-left: 8px;
-}
-
-.tooltipster-sidetip.tooltipster-top .tooltipster-box {
-	margin-bottom: 8px;
-}
-
-/* .tooltipster-content */
-
-.tooltipster-sidetip .tooltipster-content {
-	color: white;
-	line-height: 18px;
-	padding: 6px 14px;
-}
-
-/* .tooltipster-arrow : will keep only the zone of .tooltipster-arrow-uncropped that
-corresponds to the arrow we want to display */
-
-.tooltipster-sidetip .tooltipster-arrow {
-	overflow: hidden;
-	position: absolute;
-}
-
-.tooltipster-sidetip.tooltipster-bottom .tooltipster-arrow {
-	height: 10px;
-	/* half the width, for centering */
-	margin-left: -10px;
-	top: 0;
-	width: 20px;
-}
-
-.tooltipster-sidetip.tooltipster-left .tooltipster-arrow {
-	height: 20px;
-	margin-top: -10px;
-	right: 0;
-	/* top 0 to keep the arrow from overflowing .tooltipster-base when it has not
-	been positioned yet */
-	top: 0;
-	width: 10px;
-}
-
-.tooltipster-sidetip.tooltipster-right .tooltipster-arrow {
-	height: 20px;
-	margin-top: -10px;
-	left: 0;
-	/* same as .tooltipster-left .tooltipster-arrow */
-	top: 0;
-	width: 10px;
-}
-
-.tooltipster-sidetip.tooltipster-top .tooltipster-arrow {
-	bottom: 0;
-	height: 10px;
-	margin-left: -10px;
-	width: 20px;
-}
-
-/* common rules between .tooltipster-arrow-background and .tooltipster-arrow-border */
-
-.tooltipster-sidetip .tooltipster-arrow-background, .tooltipster-sidetip .tooltipster-arrow-border {
-	height: 0;
-	position: absolute;
-	width: 0;
-}
-
-/* .tooltipster-arrow-background */
-
-.tooltipster-sidetip .tooltipster-arrow-background {
-	border: 10px solid transparent;
-}
-
-.tooltipster-sidetip.tooltipster-bottom .tooltipster-arrow-background {
-	border-bottom-color: #565656;
-	left: 0;
-	top: 3px;
-}
-
-.tooltipster-sidetip.tooltipster-left .tooltipster-arrow-background {
-	border-left-color: #565656;
-	left: -3px;
-	top: 0;
-}
-
-.tooltipster-sidetip.tooltipster-right .tooltipster-arrow-background {
-	border-right-color: #565656;
-	left: 3px;
-	top: 0;
-}
-
-.tooltipster-sidetip.tooltipster-top .tooltipster-arrow-background {
-	border-top-color: #565656;
-	left: 0;
-	top: -3px;
-}
-
-/* .tooltipster-arrow-border */
-
-.tooltipster-sidetip .tooltipster-arrow-border {
-	border: 10px solid transparent;
-	left: 0;
-	top: 0;
-}
-
-.tooltipster-sidetip.tooltipster-bottom .tooltipster-arrow-border {
-	border-bottom-color: black;
-}
-
-.tooltipster-sidetip.tooltipster-left .tooltipster-arrow-border {
-	border-left-color: black;
-}
-
-.tooltipster-sidetip.tooltipster-right .tooltipster-arrow-border {
-	border-right-color: black;
-}
-
-.tooltipster-sidetip.tooltipster-top .tooltipster-arrow-border {
-	border-top-color: black;
-}
-
-/* tooltipster-arrow-uncropped */
-
-.tooltipster-sidetip .tooltipster-arrow-uncropped {
-	position: relative;
-}
-
-.tooltipster-sidetip.tooltipster-bottom .tooltipster-arrow-uncropped {
-	top: -10px;
-}
-
-.tooltipster-sidetip.tooltipster-right .tooltipster-arrow-uncropped {
-	left: -10px;
-}
@@ -33,9 +33,9 @@ class FileCache
     *
     * @param string $id
     */
-	public function get($id, $expired_time=0)
+	public function get($id)
 	{
-		$data = $this->_get($id, $expired_time);
+		$data = $this->_get($id);
 		return is_array($data) ? $data['data'] : FALSE;
 	}

@@ -59,7 +59,7 @@ class FileCache

    }

-	protected function _get($id, $expired_time=0)
+	protected function _get($id)
 	{
        $cache_file_path = $this->get_cache_file_path($id);

@@ -67,28 +67,15 @@ class FileCache
 		{
 			return FALSE;
 		}
-        
-        $server_time = defined('G5_SERVER_TIME') ? G5_SERVER_TIME : time();

-        try{
-            $file_contents = file_get_contents($cache_file_path);
-            $file_ex = explode("\n\n", $file_contents);
-            $data = unserialize(base64_decode($file_ex[1]));
-        } catch(Exception $e){
-            $data = array('ttl'=>1, 'time'=> $server_time - 1000);
-        }
-        
-		if ($data['ttl'] > 0 && $server_time > $data['time'] + $data['ttl'])
+		$data = unserialize(file_get_contents( $cache_file_path ));
+
+		if ($data['ttl'] > 0 && time() > $data['time'] + $data['ttl'])
 		{
 			unlink( $cache_file_path );
 			return FALSE;
 		}

-        if ($data['time'] && $expired_time && $data['time'] < ($server_time - $expired_time)){
-            unlink( $cache_file_path );
-            return FALSE;
-        }
-
 		return $data;
 	}

@@ -148,10 +135,7 @@ class FileCache
 			'data'		=> $data
 		);

-        $cache_content = "<?php if (!defined('_GNUBOARD_')) exit; ?>\n\n";
-        $cache_content .= base64_encode(serialize($contents));
-
-		if ($this->write_file($cache_file_path, $cache_content))
+		if ($this->write_file($cache_file_path, serialize($contents)))
 		{
 			chmod($cache_file_path, G5_FILE_PERMISSION);
 			return TRUE;
@@ -183,7 +167,7 @@ class FileCache
        if ($ttl !== null) {
            $expire = time() + $ttl;
        }
-        return base64_encode(serialize(array($data, $expire)));
+        return serialize(array($data, $expire));
    }

    /**
@@ -197,7 +181,7 @@ class FileCache
     */
    public function decode($data)
    {
-        return unserialize(base64_decode($data));
+        return unserialize($data);
    }
 }
 ?>
@@ -87,9 +87,6 @@ Class GML_Hook extends Hook {

        foreach ($filters as $priority) {
            foreach ($priority as $filter) {
-                if( isset($args[0]) ){
-                    $args[0] = $value;
-                }
                $replace = $that->runAction($filter, $args);

                if( ! is_null($replace) ) {
@@ -52,10 +52,10 @@ function g5_set_cache($key, $save_data, $ttl = null){
    }
 }

-function g5_get_cache($key, $expired_time=0){
+function g5_get_cache($key){

    if( $cache = get_cachemanage_instance() ){
-        return $cache->get($key, $expired_time);
+        return $cache->get($key);
    }
    
    return false;
@@ -116,19 +116,6 @@ function goto_url($url)
 // 세션변수 생성
 function set_session($session_name, $value)
 {
-	global $g5;
-
-	static $check_cookie = null;
-	
-	if( $check_cookie === null ){
-		$cookie_session_name = session_name();
-		if( ! isset($g5['session_cookie_samesite']) && ! ($cookie_session_name && isset($_COOKIE[$cookie_session_name]) && $_COOKIE[$cookie_session_name]) && ! headers_sent() ){
-			@session_regenerate_id(false);
-		}
-
-		$check_cookie = 1;
-	}
-
    if (PHP_VERSION < '5.3.0')
        session_register($session_name);
    // PHP 버전별 차이를 없애기 위한 방법
@@ -611,7 +598,7 @@ function html_purifier($html)
    //유튜브, 비메오 전체화면 가능하게 하기
    $config->set('Filter.Custom', array(new HTMLPurifier_Filter_Iframevideo()));
    $purifier = new HTMLPurifier($config);
-    return run_replace('html_purifier_result', $purifier->purify($html), $purifier, $html);
+    return $purifier->purify($html);
 }


@@ -746,15 +733,10 @@ function get_next_num($table)
 function get_group($gr_id, $is_cache=false)
 {
    global $g5;
-    
-    if( is_array($gr_id) ){
-        return array();
-    }

    static $cache = array();

    $gr_id = preg_replace('/[^a-z0-9_]/i', '', $gr_id);
-    $cache = run_replace('get_group_db_cache', $cache, $gr_id, $is_cache);
    $key = md5($gr_id);

    if( $is_cache && isset($cache[$key]) ){
@@ -774,8 +756,7 @@ function get_member($mb_id, $fields='*', $is_cache=false)
 {
    global $g5;
    
-    if (preg_match("/[^0-9a-z_]+/i", $mb_id))
-        return array();
+    $mb_id = preg_replace("/[^0-9a-z_]+/i", "", $mb_id);

    static $cache = array();

@@ -1404,8 +1385,7 @@ function view_file_link($file, $width, $height, $content='')
        $attr = '';

    if (preg_match("/\.({$config['cf_image_extension']})$/i", $file)) {
-        $attr_href = run_replace('thumb_view_image_href', G5_BBS_URL.'/view_image.php?bo_table='.$board['bo_table'].'&amp;fn='.urlencode($file), $file, $board['bo_table'], $width, $height, $content);
-        $img = '<a href="'.$attr_href.'" target="_blank" class="view_image">';
+        $img = '<a href="'.G5_BBS_URL.'/view_image.php?bo_table='.$board['bo_table'].'&amp;fn='.urlencode($file).'" target="_blank" class="view_image">';
        $img .= '<img src="'.G5_DATA_URL.'/file/'.$board['bo_table'].'/'.urlencode($file).'" alt="'.$content.'" '.$attr.'>';
        $img .= '</a>';

@@ -1606,19 +1586,15 @@ function sql_query($sql, $error=G5_DISPLAY_SQL_ERROR, $link=null)
        }
    }

-    $end_time = $is_debug ? get_microtime() : 0;
-
    if($result && $is_debug) {
        // 여기에 실행한 sql문을 화면에 표시하는 로직 넣기
        $g5_debug['sql'][] = array(
            'sql' => $sql,
            'start_time' => $start_time,
-            'end_time' => $end_time,
+            'end_time' => get_microtime(),
            );
    }

-    run_event('sql_query_after', $result, $sql, $start_time, $end_time);
-
    return $result;
 }

@@ -1812,7 +1788,7 @@ function get_table_define($table, $crlf="\n")

    $schema_create .= $crlf . ') ENGINE=MyISAM DEFAULT CHARSET=utf8';

-    return get_db_create_replace($schema_create);
+    return $schema_create;
 } // end of the 'PMA_getTableDef()' function


@@ -2324,8 +2300,6 @@ function delete_editor_thumbnail($contents)
 {
    if(!$contents)
        return;
-    
-    run_event('delete_editor_thumbnail_before', $contents);

    // $contents 중 img 태그 추출
    $matchs = get_editor_image($contents);
@@ -2346,8 +2320,6 @@ function delete_editor_thumbnail($contents)
                unlink($filename);
        }
    }
-
-    run_event('delete_editor_thumbnail_after', $contents, $matchs);
 }

 // 1:1문의 첨부파일 썸네일 삭제
@@ -2489,7 +2461,7 @@ function add_stylesheet($stylesheet, $order=0)
 {
    global $html_process;

-    if(trim($stylesheet) && method_exists($html_process, 'merge_stylesheet') )
+    if(trim($stylesheet))
        $html_process->merge_stylesheet($stylesheet, $order);
 }

@@ -2497,7 +2469,7 @@ function add_javascript($javascript, $order=0)
 {
    global $html_process;

-    if(trim($javascript) && method_exists($html_process, 'merge_javascript') )
+    if(trim($javascript))
        $html_process->merge_javascript($javascript, $order);
 }

@@ -2609,7 +2581,7 @@ class html_process {
                if(!trim($js[1]))
                    continue;

-                $js[1] = preg_replace('#\.js([\'\"]?>)<\/script>$#i', '.js?ver='.G5_JS_VER.'$1</script>', $js[1]);
+                $js[1] = preg_replace('#\.js([\'\"]?>)$#i', '.js?ver='.G5_JS_VER.'$1', $js[1]);

                $javascript .= $php_eol.$js[1];
                $php_eol = PHP_EOL;
@@ -3037,9 +3009,6 @@ function clean_xss_tags($str, $check_entities=0)
        if( $check_entities ){
            $result = str_replace(array('&colon;', '&lpar;', '&rpar;', '&NewLine;', '&Tab;'), '', $result);
        }
-        
-        $result = preg_replace('#([^\p{L}]|^)(?:javascript|jar|applescript|vbscript|vbs|wscript|jscript|behavior|mocha|livescript|view-source)\s*:(?:.*?([/\\\;()\'">]|$))#ius',
-                '$1$2', $result);

        if((string)$result === (string)$str) break;

@@ -3053,50 +3022,11 @@ function clean_xss_tags($str, $check_entities=0)
 // XSS 어트리뷰트 태그 제거
 function clean_xss_attributes($str)
 {
-    $xss_attributes_string = 'onAbort|onActivate|onAttribute|onAfterPrint|onAfterScriptExecute|onAfterUpdate|onAnimationCancel|onAnimationEnd|onAnimationIteration|onAnimationStart|onAriaRequest|onAutoComplete|onAutoCompleteError|onAuxClick|onBeforeActivate|onBeforeCopy|onBeforeCut|onBeforeDeactivate|onBeforeEditFocus|onBeforePaste|onBeforePrint|onBeforeScriptExecute|onBeforeUnload|onBeforeUpdate|onBegin|onBlur|onBounce|onCancel|onCanPlay|onCanPlayThrough|onCellChange|onChange|onClick|onClose|onCommand|onCompassNeedsCalibration|onContextMenu|onControlSelect|onCopy|onCueChange|onCut|onDataAvailable|onDataSetChanged|onDataSetComplete|onDblClick|onDeactivate|onDeviceLight|onDeviceMotion|onDeviceOrientation|onDeviceProximity|onDrag|onDragDrop|onDragEnd|onDragEnter|onDragLeave|onDragOver|onDragStart|onDrop|onDurationChange|onEmptied|onEnd|onEnded|onError|onErrorUpdate|onExit|onFilterChange|onFinish|onFocus|onFocusIn|onFocusOut|onFormChange|onFormInput|onFullScreenChange|onFullScreenError|onGotPointerCapture|onHashChange|onHelp|onInput|onInvalid|onKeyDown|onKeyPress|onKeyUp|onLanguageChange|onLayoutComplete|onLoad|onLoadedData|onLoadedMetaData|onLoadStart|onLoseCapture|onLostPointerCapture|onMediaComplete|onMediaError|onMessage|onMouseDown|onMouseEnter|onMouseLeave|onMouseMove|onMouseOut|onMouseOver|onMouseUp|onMouseWheel|onMove|onMoveEnd|onMoveStart|onMozFullScreenChange|onMozFullScreenError|onMozPointerLockChange|onMozPointerLockError|onMsContentZoom|onMsFullScreenChange|onMsFullScreenError|onMsGestureChange|onMsGestureDoubleTap|onMsGestureEnd|onMsGestureHold|onMsGestureStart|onMsGestureTap|onMsGotPointerCapture|onMsInertiaStart|onMsLostPointerCapture|onMsManipulationStateChanged|onMsPointerCancel|onMsPointerDown|onMsPointerEnter|onMsPointerLeave|onMsPointerMove|onMsPointerOut|onMsPointerOver|onMsPointerUp|onMsSiteModeJumpListItemRemoved|onMsThumbnailClick|onOffline|onOnline|onOutOfSync|onPage|onPageHide|onPageShow|onPaste|onPause|onPlay|onPlaying|onPointerCancel|onPointerDown|onPointerEnter|onPointerLeave|onPointerLockChange|onPointerLockError|onPointerMove|onPointerOut|onPointerOver|onPointerUp|onPopState|onProgress|onPropertyChange|onqt_error|onRateChange|onReadyStateChange|onReceived|onRepeat|onReset|onResize|onResizeEnd|onResizeStart|onResume|onReverse|onRowDelete|onRowEnter|onRowExit|onRowInserted|onRowsDelete|onRowsEnter|onRowsExit|onRowsInserted|onScroll|onSearch|onSeek|onSeeked|onSeeking|onSelect|onSelectionChange|onSelectStart|onStalled|onStorage|onStorageCommit|onStart|onStop|onShow|onSyncRestored|onSubmit|onSuspend|onSynchRestored|onTimeError|onTimeUpdate|onTimer|onTrackChange|onTransitionEnd|onToggle|onTouchCancel|onTouchEnd|onTouchLeave|onTouchMove|onTouchStart|onTransitionCancel|onTransitionEnd|onUnload|onURLFlip|onUserProximity|onVolumeChange|onWaiting|onWebKitAnimationEnd|onWebKitAnimationIteration|onWebKitAnimationStart|onWebKitFullScreenChange|onWebKitFullScreenError|onWebKitTransitionEnd|onWheel';
-    
-    do {
-        $count = $temp_count = 0;
-
-        $str = preg_replace(
-            '/(.*)(?:' . $xss_attributes_string . ')(?:\s*=\s*)(?:\'(?:.*?)\'|"(?:.*?)")(.*)/ius',
-            '$1-$2-$3-$4',
-            $str,
-            -1,
-            $temp_count
-        );
-        $count += $temp_count;
-
-        $str = preg_replace(
-            '/(.*)(?:' . $xss_attributes_string . ')\s*=\s*(?:[^\s>]*)(.*)/ius',
-            '$1$2',
-            $str,
-            -1,
-            $temp_count
-        );
-        $count += $temp_count;
-
-    } while ($count);
+    $str = preg_replace('#(onabort|onactivate|onafterprint|onafterupdate|onbeforeactivate|onbeforecopy|onbeforecut|onbeforedeactivate|onbeforeeditfocus|onbeforepaste|onbeforeprint|onbeforeunload|onbeforeupdate|onblur|onbounce|oncellchange|onchange|onclick|oncontextmenu|oncontrolselect|oncopy|oncut|ondataavaible|ondatasetchanged|ondatasetcomplete|ondblclick|ondeactivate|ondrag|ondragdrop|ondragend|ondragenter|ondragleave|ondragover|ondragstart|ondrop|onerror|onerrorupdate|onfilterupdate|onfinish|onfocus|onfocusin|onfocusout|onhelp|onkeydown|onkeypress|onkeyup|onlayoutcomplete|onload|onlosecapture|onmousedown|onmouseenter|onmouseleave|onmousemove|onmoveout|onmouseover|onmouseup|onmousewheel|onmove|onmoveend|onmovestart|onpaste|onpropertychange|onreadystatechange|onreset|onresize|onresizeend|onresizestart|onrowexit|onrowsdelete|onrowsinserted|onscroll|onselect|onselectionchange|onselectstart|onstart|onstop|onsubmit|onunload)\\s*=\\s*\\\?".*?"#is', '', $str);

    return $str;
 }

-function clean_relative_paths($path){
-    $path_len = strlen($path);
-    
-    $i = 0;
-    while($i <= $path_len){
-        $result = str_replace('../', '', str_replace('\\', '/', $path));
-
-        if((string)$result === (string)$path) break;
-
-        $path = $result;
-        $i++;
-    }
-
-    return $path;
-}
-
 // unescape nl 얻기
 function conv_unescape_nl($str)
 {
@@ -3126,8 +3056,7 @@ function member_delete($mb_id)
    }

    // 회원자료는 정보만 없앤 후 아이디는 보관하여 다른 사람이 사용하지 못하도록 함 : 061025
-    $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n".sql_real_escape_string($mb['mb_memo'])."' where mb_id = '{$mb_id}' ";
-
+    $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n{$mb['mb_memo']}' where mb_id = '{$mb_id}' ";
    sql_query($sql);

    // 포인트 테이블에서 삭제
@@ -3161,8 +3090,6 @@ function member_delete($mb_id)

    // 프로필 이미지 삭제
    @unlink(G5_DATA_PATH.'/member_image/'.substr($mb_id,0,2).'/'.$mb_id.'.gif');
-
-    run_event('member_delete_after', $mb_id);
 }

 // 이메일 주소 추출
@@ -3257,7 +3184,7 @@ function login_password_check($mb, $pass, $hash)
    if(!$mb_id)
        return false;

-    if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && (strlen($hash) === G5_MYSQL_PASSWORD_LENGTH || strlen($hash) === 16)) {
+    if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && strlen($hash) === G5_MYSQL_PASSWORD_LENGTH) {
        if( sql_password($pass) === $hash ){

            if( ! isset($mb['mb_password2']) ){
@@ -3621,7 +3548,7 @@ function get_member_profile_img($mb_id='', $width='', $height='', $alt='profile_
            // 프로필 이미지가 없을때 기본 이미지
            $no_profile_img = (defined('G5_THEME_NO_PROFILE_IMG') && G5_THEME_NO_PROFILE_IMG) ? G5_THEME_NO_PROFILE_IMG : G5_NO_PROFILE_IMG;
            $tmp = array();
-            preg_match( '/src="([^"]*)"/i', $no_profile_img, $tmp );
+            preg_match( '/src="([^"]*)"/i', $foo, $tmp );
            $no_profile_cache = $src = isset($tmp[1]) ? $tmp[1] : G5_IMG_URL.'/no_profile.gif';
        }
    }
@@ -3653,36 +3580,6 @@ function get_head_title($title){
    return $title;
 }

-function is_sms_send($is_type=''){
-    global $config;
-    
-    $is_sms_send = false;
-    
-    // 토큰키를 사용한다면
-    if(isset($config['cf_icode_token_key']) && $config['cf_icode_token_key']){
-        $is_sms_send = true;
-    } else if($config['cf_icode_id'] && $config['cf_icode_pw']) {
-        // 충전식일 경우 잔액이 있는지 체크
-
-        $userinfo = get_icode_userinfo($config['cf_icode_id'], $config['cf_icode_pw']);
-
-        if($userinfo['code'] == 0) {
-            if($userinfo['payment'] == 'C') { // 정액제
-                $is_sms_send = true;
-            } else {
-                $minimum_coin = 100;
-                if(defined('G5_ICODE_COIN'))
-                    $minimum_coin = intval(G5_ICODE_COIN);
-
-                if((int)$userinfo['coin'] >= $minimum_coin)
-                    $is_sms_send = true;
-            }
-        }
-    }
-
-    return $is_sms_send;
-}
-
 function is_use_email_certify(){
    global $config;

@@ -3762,10 +3659,10 @@ function is_include_path_check($path='', $is_input='')
            // 장태진 @jtjisgod <jtjisgod@gmail.com> 추가
            // 보안 목적 : rar wrapper 차단

-            if( stripos($path, 'rar:') !== false || stripos($path, 'php:') !== false || stripos($path, 'zlib:') !== false || stripos($path, 'bzip2:') !== false || stripos($path, 'zip:') !== false || stripos($path, 'data:') !== false || stripos($path, 'phar:') !== false || stripos($path, 'file:') !== false || stripos($path, '://') !== false ){
+            if( stripos($path, 'rar:') !== false || stripos($path, 'php:') !== false || stripos($path, 'zlib:') !== false || stripos($path, 'bzip2:') !== false || stripos($path, 'zip:') !== false || stripos($path, 'data:') !== false || stripos($path, 'phar:') !== false || stripos($path, 'file:') !== false ){
                return false;
            }
-
+            
            $replace_path = str_replace('\\', '/', $path);
            $slash_count = substr_count(str_replace('\\', '/', $_SERVER['SCRIPT_NAME']), '/');
            $peer_count = substr_count($replace_path, '../');
@@ -3776,12 +3673,12 @@ function is_include_path_check($path='', $is_input='')

            try {
                // whether $path is unix or not
-                $unipath = strlen($path)==0 || substr($path, 0, 1) != '/';
+                $unipath = strlen($path)==0 || $path{0}!='/';
                $unc = substr($path,0,2)=='\\\\'?true:false;
                // attempts to detect if path is relative in which case, add cwd
                if(strpos($path,':') === false && $unipath && !$unc){
                    $path=getcwd().DIRECTORY_SEPARATOR.$path;
-                    if(substr($path, 0, 1) == '/'){
+                    if($path{0}=='/'){
                        $unipath = false;
                    }
                }
@@ -3834,10 +3731,6 @@ function is_include_path_check($path='', $is_input='')
    return true;
 }

-function filter_input_include_path($path){
-    return str_replace('//', '/', $path);
-}
-
 function option_array_checked($option, $arr=array()){
    $checked = '';

@@ -70,10 +70,11 @@ function get_board_db($bo_table, $is_cache=false){

    static $cache = array();

-    $bo_table = preg_replace('/[^a-z0-9_]/i', '', $bo_table);
    $cache = run_replace('get_board_db_cache', $cache, $bo_table, $is_cache);
+
    $key = md5($bo_table);

+    $bo_table = preg_replace('/[^a-z0-9_]/i', '', $bo_table);
    if( $is_cache && isset($cache[$key]) ){
        return $cache[$key];
    }
@@ -328,7 +329,7 @@ function get_db_create_replace($sql_str){
 function get_class_encrypt(){
    static $cache;

-    if( $cache && is_object($cache) ){
+    if( $cache && is_object($obj) ){
        return $cache;
    }

@@ -4,19 +4,12 @@ if (!defined('_GNUBOARD_')) exit;
 // 요금제에 따른 port 구분
 function get_icode_port_type($id, $pw)
 {
-    global $config;
-    
-    // 토큰키를 사용한다면 true 로 리턴
-    if( isset($config['cf_icode_token_key']) && $config['cf_icode_token_key'] ){
-        return 1;
-    }
-
    $userinfo = get_icode_userinfo($id, $pw);

    if($userinfo['payment'] == 'A') { // 충전제
        return 1;
    } else if($userinfo['payment'] == 'C') { // 정액제
-        return 2;
+        return 1;
    } else {
        return false;
    }
@@ -35,21 +28,10 @@ class LMS {
 	var $socket_portcode;
 	var $Data = array();
 	var $Result = array();
-    var $icode_key;

 	// SMS 서버 접속
 	function SMS_con($host, $id, $pw, $portcode) {
-        global $config;
-        
-        // 토큰키를 사용한다면
-        if(isset($config['cf_icode_token_key']) && $config['cf_icode_token_key']){
-            $this->icode_key = $config['cf_icode_token_key'];
-            $this->socket_host = ICODE_JSON_SOCKET_HOST;
-            $this->socket_port = ICODE_JSON_SOCKET_PORT;
-        } else {
-            $this->socket_host	    = $host;
-        }
-
+		$this->socket_host	    = $host;
 		$this->socket_portcode	= $portcode;
 		$this->icode_id		    = FillSpace($id, 10);
 		$this->icode_pw		    = FillSpace($pw, 10);
@@ -61,63 +43,32 @@ class LMS {
 	}

 	function Add($strDest, $strCallBack, $strCaller, $strSubject, $strURL, $strData, $strDate="", $nCount) {
-        global $config;

 		// 문자 타입별 Port 설정.
 		$sendType = strlen($strData) > 90 ? 1 : 0; // 0: SMS / 1: LMS

-        // 토큰키를 사용한다면
-        if( isset($config['cf_icode_token_key']) && $config['cf_icode_token_key'] === $this->icode_key ){
-            
-            // 개행치환
-            $strData = preg_replace("/\r\n/","\n",$strData);
-            $strData = preg_replace("/\r/","\n",$strData);
+		/* 개발 완료 후 아래 포트를 rand 함수를 이용하는 라인으로 변경 바랍니다.*/

-            $checks = array('msg'=>$strData, 'subject'=>$strSubject);
-            $tmps = array();
-
-            foreach( $checks as $k=>$v ){
-
-                // 문자 내용이 euc-kr 인지 체크합니다.
-                $enc = mb_detect_encoding($v, array('EUC-KR', 'UTF-8'));
-
-                // 문자 내용이 euc-kr 이면 json_encode 에서 깨지기 때문에 utf-8 로 변환합니다.
-                $tmps[$k] = ($enc === 'EUC-KR') ? iconv_utf8($v) : $v;
-            }
-
-            $strData = $tmps['msg'];
-            $strSubject = $tmps['subject'];
-
-            // 문자 타입별 Port 설정.
-            $sendType = strlen($strData)>90 ? 1 : 0; // 0: SMS / 1: LMS
-            if($sendType==0) $strSubject = "";
-            
-            $is_use_json = true;
-
-        } else {
-            /* 개발 완료 후 아래 포트를 rand 함수를 이용하는 라인으로 변경 바랍니다.*/
-
-            // 충전식
-            if ($this->socket_portcode == 1) {
-                    if($sendType && $sendType == 1) {
-                        //$this->socket_port = 8200;		// LMS
-                        $this->socket_port=(int)rand(8200,8201);	// LMS
-                    } else {
-                        //$this->socket_port = 6295;		// SMS
-                        $this->socket_port=(int)rand(6295,6297);	// SMS
-                    }
-            }
-            // 정액제
-            else {
-                if($sendType && $sendType == 1) {
-                    //$this->socket_port = 8300; //	LMS
-                    $this->socket_port=(int)rand(8300,8301); //	LMS
-                } else {
-                    //$this->socket_port = 6291; //	SMS
-                    $this->socket_port=(int)rand(6291,6293); //	SMS
-                }
-            }
-        }
+		// 충전식
+		if ($this->socket_portcode == 1) {
+				if($sendType && $sendType == 1) {
+					//$this->socket_port = 8200;		// LMS
+					$this->socket_port=(int)rand(8200,8201);	// LMS
+				} else {
+					//$this->socket_port = 6295;		// SMS
+					$this->socket_port=(int)rand(6295,6297);	// SMS
+				}
+		}
+		// 정액제
+		else {
+			if($sendType && $sendType == 1) {
+				//$this->socket_port = 8300; //	LMS
+				$this->socket_port=(int)rand(8300,8301); //	LMS
+			} else {
+				//$this->socket_port = 6291; //	SMS
+				$this->socket_port=(int)rand(6291,6293); //	SMS
+			}
+		}

 		$strCallBack	= FillSpace($strCallBack, 11);       // 회신번호
 		$strDate			= FillSpace($strDate, 12);           // 즉시(12byte 공백), 예약전송(YmdHi)
@@ -137,9 +88,9 @@ class LMS {
 			$strSubject = str_replace(">", "]", $strSubject);

 			$strSubject = FillSpace($strSubject,30);
-			$strData	= $is_use_json ? CutCharUtf8($strData, G5_ICODE_JSON_MAX_LENGTH) : FillSpace(CutChar($strData, G5_ICODE_LMS_MAX_LENGTH), G5_ICODE_LMS_MAX_LENGTH);
+			$strData	= FillSpace(CutChar($strData,1500),1500);
 		} else if (!$strURL) {
-			$strData	= $is_use_json ? CutCharUtf8($strData, G5_ICODE_JSON_MAX_LENGTH) : FillSpace(CutChar($strData,90),90);
+			$strData	= FillSpace(CutChar($strData,90),90);
 			$strCaller  = FillSpace($strCaller,10);
 		} else {
 			$strURL		= FillSpace($strURL,50);
@@ -151,85 +102,39 @@ class LMS {

 		for ($i=0; $i<$nCount; $i++) {

-            if($is_use_json) {
-                $strDest[$i] = $strDest[$i];
-                $list = array(
-                    "key" => $this->icode_key, 
-                    "tel" => $strDest[$i],
-                    "cb" => $strCallBack,
-                    "msg" => $strData,
-                    "title" => $strSubject?$strSubject:"",
-                    "date" => $strDate?$strDate:""
-                );
-                $packet = json_encode($list);
-
-                if( !$packet ){ // json_encode가 잘못되었으면 보내지 않습니다.
-                    continue;
-                }
-                $this->Data[$i]    = '06'.str_pad(strlen($packet), 4, "0", STR_PAD_LEFT).$packet;
-            } else {
-                $strDest[$i] = FillSpace($strDest[$i],11);
-                if ($sendType && $sendType == 1) {
-                    $this->Data[$i]	= '01144 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strSubject.$strDate.$strData;
-                } else if (!$strURL) {
-                    $this->Data[$i]	= '01144 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strCaller.$strDate.$strData;
-                } else {
-                    $strData = FillSpace(CheckCallCenter($strURL, $strDest[$i], $strData),80);
-                    $this->Data[$i]	= '05173 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strURL.$strDate.$strData;
-                }
-            }
+			$strDest[$i] = FillSpace($strDest[$i],11);
+			if ($sendType && $sendType == 1) {
+				$this->Data[$i]	= '01144 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strSubject.$strDate.$strData;
+			} else if (!$strURL) {
+				$this->Data[$i]	= '01144 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strCaller.$strDate.$strData;
+			} else {
+				$strData = FillSpace(CheckCallCenter($strURL, $strDest[$i], $strData),80);
+				$this->Data[$i]	= '05173 '.$this->icode_id.$this->icode_pw.$strDest[$i].$strCallBack.$strURL.$strDate.$strData;
+			}
 		}
 		return true;
 	}


 	function Send() {
-        global $config;
+		$fsocket = fsockopen($this->socket_host,$this->socket_port, $errno, $errstr, 2);
+		if (!$fsocket) return false;
+		set_time_limit(60);

-        // 토큰키를 사용한다면
-        if( isset($config['cf_icode_token_key']) && $config['cf_icode_token_key'] === $this->icode_key ){
-            $fsocket = @fsockopen($this->socket_host,$this->socket_port, $errno, $errstr, 2);
-            if (!$fsocket) return false;
-            set_time_limit(300);
+		foreach($this->Data as $puts) {
+			fputs($fsocket, $puts);
+			while(!$gets) { $gets = fgets($fsocket,30); }
+			$dest = substr($puts,26,11);
+			if (substr($gets,0,19) == "0223  00".$dest) {
+				$this->Result[] = $dest.":".substr($gets,19,10);
+			} else {
+				$this->Result[$dest] = $dest.":Error(".substr($gets,6,2).")";
+			}
+			$gets = "";
+		}

-            foreach($this->Data as $puts) {
-                fputs($fsocket, $puts);
-                while(!$gets) { $gets = fgets($fsocket,32); }
-                $json = json_decode(substr($puts,6), true);
-
-                $dest = $json["tel"];
-                if (substr($gets,0,20) == "0225  00".FillSpace($dest,12)) {
-                    $this->Result[] = $dest.":".substr($gets,20,11);
-
-                } else {
-                    $this->Result[$dest] = $dest.":Error(".substr($gets,6,2).")";
-                    if(substr($gets,6,2) >= "80") break;
-                }
-                $gets = "";
-            }
-
-            fclose($fsocket);
-        } else {
-            $fsocket = @fsockopen($this->socket_host,$this->socket_port, $errno, $errstr, 2);
-            if (!$fsocket) return false;
-            set_time_limit(300);
-
-            foreach($this->Data as $puts) {
-                fputs($fsocket, $puts);
-                while(!$gets) { $gets = fgets($fsocket,30); }
-                $dest = substr($puts,26,11);
-                if (substr($gets,0,19) == "0223  00".$dest) {
-                    $this->Result[] = $dest.":".substr($gets,19,10);
-                } else {
-                    $this->Result[$dest] = $dest.":Error(".substr($gets,6,2).")";
-                }
-                $gets = "";
-            }
-
-            fclose($fsocket);
-        }
-
-		$this->Data = array();
+		fclose($fsocket);
+		$this->Data = "";
 		return true;
 	}
 }
@@ -263,24 +168,6 @@ function CutChar($word, $cut) {
 	return $word;
 }

-function CutCharUtf8($word, $cut) {
-  preg_match_all('/[\xE0-\xFF][\x80-\xFF]{2}|./', $word, $match); // target for BMP
-
-  $m = $match[0];
-  $slen = strlen($word); // length of source string
-  if ($slen <= $cut) return $word;
-  
-  $ret = array();
-  $count = 0;
-  for ($i=0; $i < $cut; $i++) {
-      $count += (strlen($m[$i]) > 1)?2:1;
-      if ($count > $cut) break;
-      $ret[] = $m[$i];
-  }
-
-  return join('', $ret);
-}
-
 /**
 * 수신번호의 값이 정확한 값인지 확인합니다.
 *
@@ -296,6 +183,7 @@ function CheckCommonTypeDest($strDest, $nCount) {
 	}
 }

+
 /**
 * 회신번호 유효성 여부조회 *
 * @param		string callback	회신번호
@@ -44,20 +44,8 @@ class SMS {
 	var $SMS_Port;
 	var $Data = array();
 	var $Result = array();
-    var $icode_key;
-    var $socket_port;
-    var $socket_host;

 	function SMS_con($sms_server,$sms_id,$sms_pw,$port) {
-        global $config;
-
-        // 토큰키를 사용한다면
-        if(isset($config['cf_icode_token_key']) && $config['cf_icode_token_key']){
-            $this->icode_key = $config['cf_icode_token_key'];
-            $this->socket_host = ICODE_JSON_SOCKET_HOST;
-            $this->socket_port = ICODE_JSON_SOCKET_PORT;
-        }
-
 		$this->ID=$sms_id;		// 계약 후 지정
 		$this->PWD=$sms_pw;		// 계약 후 지정
 		$this->SMS_Server=$sms_server;
@@ -72,82 +60,25 @@ class SMS {
 	}

 	function Add($dest, $callBack, $Caller, $msg, $rsvTime="") {
-        global $g5, $config;
+        global $g5;

-        // 토큰키를 사용한다면
-        if( isset($config['cf_icode_token_key']) && $config['cf_icode_token_key'] === $this->icode_key ){
+		// 내용 검사 1
+		$Error = CheckCommonType($dest, $rsvTime);
+		if ($Error) return $Error;
+		// 내용 검사 2
+		//if ( eregi("[^0-9]",$callBack) ) return "회신 전화번호가 잘못되었습니다";
+		if ( preg_match("/[^0-9]/i",$callBack) ) return "회신 전화번호가 잘못되었습니다";

-            // 내용 검사 1
-            $Error = CheckCommonType($dest, $rsvTime);
-            if ($Error) return $Error;
-            if ( preg_match("/[^0-9]/i",$callBack) ) return "회신 전화번호가 잘못되었습니다";
+        $msg=cut_char($msg,80); // 80자 제한
+		// 보낼 내용을 배열에 집어넣기
+		$dest = spacing($dest,11);
+		$callBack = spacing($callBack,11);
+		$Caller = spacing($Caller,10);
+		$rsvTime = spacing($rsvTime,12);
+		$msg = spacing($msg,80);

-            // 개행치환
-            $msg = preg_replace("/\r\n/", "\n", $msg);
-            $msg = preg_replace("/\r/", "\n", $msg);
-            // 90byte 이내는 SMS, 90 ~ 2000 byte 는 LMS 그 이상은 절삭 되어 LMS로 발송
-            // SMS 이기 때문에 90byte 이내로 합니다.
-            $msg=cut_char($msg, 90);
-            $msg = spacing($msg, 90);
-
-            // 한글 깨진것이 있는지 체크합니다.
-            if( preg_match('/^([\x00-\x7e]|.{2})*/', $msg, $z) ){
-                $msg = $z[0];
-            }
-
-            // 문자 내용이 euc-kr 인지 체크합니다.
-            $enc = mb_detect_encoding($msg, array('EUC-KR', 'UTF-8'));
-
-            // 문자 내용이 euc-kr 이면 json_encode 에서 깨지기 때문에  utf-8 로 변환합니다.
-            if($enc === 'EUC-KR'){
-                $msg = iconv_utf8($msg);
-            }
-            
-            // 보낼 내용을 배열에 집어넣기
-            $dest = spacing($dest,11);
-            $callBack = spacing($callBack,11);
-            $Caller = spacing($Caller,10);
-            $rsvTime = $rsvTime ? spacing($rsvTime,12) : '';
-
-            $list = array(
-                "key" => $this->icode_key, 
-                "tel" => $dest,
-                "cb" => $callBack,
-                "msg" => $msg,
-                "title" => "",      //SMS 의 경우 타이틀을 지정할수 없습니다.
-                "date" => $rsvTime
-            );
-
-            $packet = json_encode($list);
-
-            if( !$packet ){ // json_encode가 잘못되었으면 보내지 않습니다.
-                return "json_encode error";
-            }
-            $this->Data[]    = '06'.str_pad(strlen($packet), 4, "0", STR_PAD_LEFT).$packet;
-
-            return ''; 
-
-        } else {
-            // 기존 OLD SMS
-
-            // 내용 검사 1
-            $Error = CheckCommonType($dest, $rsvTime);
-            if ($Error) return $Error;
-            // 내용 검사 2
-            //if ( eregi("[^0-9]",$callBack) ) return "회신 전화번호가 잘못되었습니다";
-            if ( preg_match("/[^0-9]/i",$callBack) ) return "회신 전화번호가 잘못되었습니다";
-
-            $msg=cut_char($msg,80); // 80자 제한
-            // 보낼 내용을 배열에 집어넣기
-            $dest = spacing($dest,11);
-            $callBack = spacing($callBack,11);
-            $Caller = spacing($Caller,10);
-            $rsvTime = spacing($rsvTime,12);
-            $msg = spacing($msg,80);
-
-            $this->Data[] = '01144 '.$this->ID.$this->PWD.$dest.$callBack.$Caller.$rsvTime.$msg;
-            return "";
-        }
+		$this->Data[] = '01144 '.$this->ID.$this->PWD.$dest.$callBack.$Caller.$rsvTime.$msg;
+		return "";
 	}

 	function AddURL($dest, $callBack, $URL, $msg, $rsvTime="") {
@@ -190,54 +121,26 @@ class SMS {
 		return "";
 	}

-    function Send() {
-        global $config;
+	function Send () {
+		$fp=@fsockopen(trim($this->SMS_Server),trim($this->SMS_Port), $errno, $errstr, 2);
+		if (!$fp) return false;
+		set_time_limit(60);

-        // 토큰키를 사용한다면
-        if( isset($config['cf_icode_token_key']) && $config['cf_icode_token_key'] === $this->icode_key ){
-            $fsocket = @fsockopen(trim($this->socket_host),trim($this->socket_port), $errno, $errstr, 2);
-            if (!$fsocket) return false;
-            set_time_limit(300);
+		## php4.3.10일경우
+        ## zend 최신버전으로 업해주세요..
+        ## 또는 122번째 줄을 $this->Data as $tmp => $puts 로 변경해 주세요.

-            foreach($this->Data as $puts) {
-                fputs($fsocket, $puts);
-                while(!$gets) { $gets = fgets($fsocket,32); }
-                $json = json_decode(substr($puts,6), true);
-
-                $dest = $json["tel"];
-                if (substr($gets,0,20) == "0225  00".spacing($dest,12)) {
-                    $this->Result[] = $dest.":".substr($gets,20,11);
-
-                } else {
-                    $this->Result[$dest] = $dest.":Error(".substr($gets,6,2).")";
-                    if(substr($gets,6,2) >= "80") break;
-                }
-                $gets = "";
-            }
-            fclose($fsocket);
-
-        } else {
-
-            $fp=@fsockopen(trim($this->SMS_Server),trim($this->SMS_Port));
-            if (!$fp) return false;
-            set_time_limit(300);
-
-            ## php4.3.10일경우
-            ## zend 최신버전으로 업해주세요..
-            ## 또는 122번째 줄을 $this->Data as $tmp => $puts 로 변경해 주세요.
-
-            foreach($this->Data as $puts) {
-                $dest = substr($puts,26,11);
-                fputs($fp,$puts);
-                while(!$gets) { $gets=fgets($fp,30); }
-                if (substr($gets,0,19)=="0223  00".$dest) $this->Result[]=$dest.":".substr($gets,19,10);
-                else $this->Result[$dest]=$dest.":Error";
-                $gets="";
-            }
-            fclose($fp);
-        }
-		$this->Data=array();
-        return true;
+		foreach($this->Data as $puts) {
+			$dest = substr($puts,26,11);
+			fputs($fp,$puts);
+			while(!$gets) { $gets=fgets($fp,30); }
+			if (substr($gets,0,19)=="0223  00".$dest) $this->Result[]=$dest.":".substr($gets,19,10);
+			else $this->Result[$dest]=$dest.":Error";
+			$gets="";
+		}
+		fclose($fp);
+		$this->Data="";
+		return true;
 	}
 }
 ?>
@@ -9,8 +9,6 @@ function latest($skin_dir='', $bo_table, $rows=10, $subject_len=40, $cache_time=
    global $g5;

    if (!$skin_dir) $skin_dir = 'basic';
-    
-    $time_unit = 3600;  // 1시간으로 고정

    if(preg_match('#^theme/(.+)$#', $skin_dir, $match)) {
        if (G5_IS_MOBILE) {
@@ -33,11 +31,11 @@ function latest($skin_dir='', $bo_table, $rows=10, $subject_len=40, $cache_time=
        }
    }

-    $caches = false;
+    $caches = null;

    if(G5_USE_CACHE) {
        $cache_file_name = "latest-{$bo_table}-{$skin_dir}-{$rows}-{$subject_len}-".g5_cache_secret_key();
-        $caches = g5_get_cache($cache_file_name, $time_unit * $cache_time);
+        $caches = g5_get_cache($cache_file_name);
        $cache_list = isset($caches['list']) ? $caches['list'] : array();
        g5_latest_cache_data($bo_table, $cache_list);
    }
@@ -92,7 +90,7 @@ function latest($skin_dir='', $bo_table, $rows=10, $subject_len=40, $cache_time=
                'bo_subject' => sql_escape_string($bo_subject),
            );

-            g5_set_cache($cache_file_name, $caches, $time_unit * $cache_time);
+            g5_set_cache($cache_file_name, $caches, 3600 * $cache_time);
        }
    } else {
        $list = $cache_list;
@@ -46,7 +46,7 @@ function create_hash($password, $force_compat = false)
 {
    // Generate the salt.
    
-    if (function_exists('mcrypt_create_iv') && version_compare( PHP_VERSION, '7.2' , '<' ) ) {
+    if (function_exists('mcrypt_create_iv')) {
        $salt = base64_encode(mcrypt_create_iv(PBKDF2_COMPAT_SALT_BYTES, MCRYPT_DEV_URANDOM));
    } elseif (@file_exists('/dev/urandom') && $fp = @fopen('/dev/urandom', 'r')) {
        $salt = base64_encode(fread($fp, PBKDF2_COMPAT_SALT_BYTES));
@@ -86,7 +86,7 @@ function exist_mb_nick($reg_mb_nick, $reg_mb_id)
 function reserve_mb_nick($reg_mb_nick)
 {
    global $config;
-    if (preg_match("/[\,]?".preg_quote($reg_mb_nick)."/i", $config['cf_prohibit_id']))
+    if (preg_match("/[\,]?{$reg_mb_nick}/i", $config['cf_prohibit_id']))
        return "이미 예약된 단어로 사용할 수 없는 닉네임 입니다.";
    else
        return "";
@@ -110,8 +110,6 @@ function get_view_thumbnail($contents, $thumb_width=0)
    for($i=0; $i<count($matches[1]); $i++) {

        $img = $matches[1][$i];
-        $img_tag = isset($matches[0][$i]) ? $matches[0][$i] : '';
-
        preg_match("/src=[\'\"]?([^>\'\"]+[^>\'\"]+)/i", $img, $m);
        $src = $m[1];
        preg_match("/style=[\"\']?([^\"\'>]+)/i", $img, $m);
@@ -163,22 +161,16 @@ function get_view_thumbnail($contents, $thumb_width=0)
                }
            }

+            // 원본 width가 thumb_width보다 작다면
+            if($size[0] <= $thumb_width)
+                continue;
+
            // Animated GIF 체크
            $is_animated = false;
            if($size[2] == 1) {
                $is_animated = is_animated_gif($srcfile);
-
-                if($replace_content = run_replace('thumbnail_is_animated_gif_content', '', $contents, $srcfile, $is_animated, $img_tag, $data_path, $size)){
-
-                    $contents = $replace_content;
-                    continue;
-                }
            }

-            // 원본 width가 thumb_width보다 작다면
-            if($size[0] <= $thumb_width)
-                continue;
-
            // 썸네일 높이
            $thumb_height = round(($thumb_width * $size[1]) / $size[0]);
            $filename = basename($srcfile);
@@ -198,12 +190,12 @@ function get_view_thumbnail($contents, $thumb_width=0)
            } else {
                $thumb_tag = '<img src="'.G5_URL.str_replace($filename, $thumb_file, $data_path).'" alt="'.$alt.'"/>';
            }
-            
+
            // $img_tag에 editor 경로가 있으면 원본보기 링크 추가
+            $img_tag = $matches[0][$i];
            if(strpos($img_tag, G5_DATA_DIR.'/'.G5_EDITOR_DIR) && preg_match("/\.({$config['cf_image_extension']})$/i", $filename)) {
                $imgurl = str_replace(G5_URL, "", $src);
-                $attr_href = run_replace('thumb_view_image_href', G5_BBS_URL.'/view_image.php?fn='.urlencode($imgurl), $filename, '', $width, $height, $alt);
-                $thumb_tag = '<a href="'.$attr_href.'" target="_blank" class="view_image">'.$thumb_tag.'</a>';
+                $thumb_tag = '<a href="'.G5_BBS_URL.'/view_image.php?fn='.urlencode($imgurl).'" target="_blank" class="view_image">'.$thumb_tag.'</a>';
            }

            $contents = str_replace($img_tag, $thumb_tag, $contents);
@@ -314,11 +306,8 @@ function thumbnail($filename, $source_path, $target_path, $thumb_width, $thumb_h
        if(!$thumb_height) {
            $thumb_height = round(($thumb_width * $size[1]) / $size[0]);
        } else {
-            if($crop_mode === 'center' && ($size[0] > $thumb_width || $size[1] > $thumb_height)){
-                $is_large = true;
-            } else if($size[0] < $thumb_width || $size[1] < $thumb_height) {
+            if($size[0] < $thumb_width || $size[1] < $thumb_height)
                $is_large = false;
-            }
        }
    } else {
        if($thumb_height) {
@@ -695,19 +684,8 @@ and the roundoff errors in the Gaussian blur process, are welcome.
 }

 function is_animated_gif($filename) {
-
-    static $cache = array();
-    $key = md5($filename);
-
-    if( isset($cache[$key]) ){
-        return $cache[$key];
-    }
-
-    if(!($fh = @fopen($filename, 'rb'))){
-        $cache[$key] = false;
+    if(!($fh = @fopen($filename, 'rb')))
        return false;
-    }
-
    $count = 0;
    // 출처 : http://www.php.net/manual/en/function.imagecreatefromgif.php#104473
    // an animated gif contains multiple "frames", with each frame having a
@@ -724,11 +702,6 @@ function is_animated_gif($filename) {
   }

    fclose($fh);
-
-    $cache[$key] = ($count > 1) ? true : false;
-
-    run_event('is_animated_gif_after', $filename, $cache[$key]);
-
-    return $cache[$key];
+    return $count > 1;
 }
 ?>
@@ -16,13 +16,13 @@ function get_pretty_url($folder, $no='', $query_string='', $action='')
        return $url;
    }

-    // use shortten url
-    if($config['cf_bbs_rewrite']) {
-
+	// use shortten url
+	if($config['cf_bbs_rewrite']) {
+        
        $segments[0] = G5_URL;

        if( $folder === 'content' && $no ){     // 내용관리
-
+            
            $segments[1] = $folder;

            if( $config['cf_bbs_rewrite'] > 1 ){
@@ -36,32 +36,32 @@ function get_pretty_url($folder, $no='', $query_string='', $action='')

        } else if(in_array($folder, $boards)) {     // 게시판

-            $segments[1] = $folder;
+			$segments[1] = $folder;

-            if($no) {
+			if($no) {

                if( $config['cf_bbs_rewrite'] > 1 ){

-                $get_write = get_write( $g5['write_prefix'].$folder, $no , true);
-
-                $segments[2] = $get_write['wr_seo_title'] ? urlencode($get_write['wr_seo_title']).'/' : urlencode($no);
+                    $get_write = get_write( $g5['write_prefix'].$folder, $no , true);
+                    
+                    $segments[2] = $get_write['wr_seo_title'] ? urlencode($get_write['wr_seo_title']).'/' : urlencode($no);

                } else {
                    $segments[2] = urlencode($no);
                }

-            } else if($action) {
+			} else if($action) {
                $segments[2] = urlencode($action);
            }

-        } else {
+		} else {
            $segments[1] = $folder;
-            if($no) {
-                $no_array = explode("=", $no);
-                $no_value = end($no_array);
+			if($no) {
+				$no_array = explode("=", $no);
+				$no_value = end($no_array);
                $segments[2] = urlencode($no_value);
-            }
-        }
+			}
+		}

        if($query_string) {
            // If the first character of the query string is '&', replace it with '?'.
@@ -72,33 +72,33 @@ function get_pretty_url($folder, $no='', $query_string='', $action='')
            }
        }

-    } else { // don't use shortten url
-        if(in_array($folder, $boards)) {
-            $url = G5_BBS_URL. '/board.php?bo_table='. $folder;
-            if($no) {
-                $url .= '&amp;wr_id='. $no;
-            }
-            if($query_string) {
+	} else { // don't use shortten url
+		if(in_array($folder, $boards)) {
+			$url = G5_BBS_URL. '/board.php?bo_table='. $folder;
+			if($no) {
+				$url .= '&amp;wr_id='. $no;
+			}
+			if($query_string) {
                if(substr($query_string, 0, 1) !== '&') {
                    $url .= '&amp;';
                }

-                $url .= $query_string;
-            }
-        } else {
-            $url = G5_BBS_URL. '/'.$folder.'.php';
+				$url .= $query_string;
+			}
+		} else {
+			$url = G5_BBS_URL. '/'.$folder.'.php';
            if($no) {
-                $url .= ($folder === 'content') ? '?co_id='. $no : '?'. $no;
-            }
+				$url .= ($folder === 'content') ? '?co_id='. $no : '?'. $no;
+			}
            if($query_string) {
                $url .= ($no ? '?' : '&amp;'). $query_string;
-            }
-        }
+			}
+		}

        $segments[0] = $url;
-    }
+	}

-    return implode('/', $segments).$add_query;
+	return implode('/', $segments).$add_query;
 }

 function short_url_clean($string_url, $add_qry=''){
@@ -110,27 +110,22 @@ function short_url_clean($string_url, $add_qry=''){
        $string_url = str_replace('&amp;', '&', $string_url);
        $url=parse_url($string_url);
        $page_name = basename($url['path'],".php");
+        
+        $array_page_names = run_replace('url_clean_page_names', array('board', 'write'));

-        $array_page_names = run_replace('url_clean_page_names', array('board', 'write', 'content'));
-
-        if( stripos(preg_replace('/^https?:/i', '', $string_url), preg_replace('/^https?:/i', '', G5_BBS_URL)) === false || ! in_array($page_name, $array_page_names) ){   //게시판이 아니면 리턴
-            return run_replace('false_short_url_clean', $string_url, $url, $page_name, $array_page_names);
+        if( strpos($string_url, G5_BBS_URL) === false || ! in_array($page_name, $array_page_names) ){   //게시판이 아니면 리턴
+            return $string_url;
        }

        $return_url = '';
        parse_str($url['query'], $vars);

-        /*
        // 예) Array ( [scheme] => http [host] => sir.kr [path] => /bbs/board.php [query] => wr_id=1110870&bo_table=cm_free&cpage=1 [fragment] => c_1110946 )
-        foreach($vars as $k => $v) { $page_name .= "/".$v; }
-        */
-
+        //while(list($k,$v) = each($vars)) $page_name .= "/".$v;
+        
        if( $page_name === 'write' ){
            $vars['action'] = 'write';
            $allow_param_keys = array('bo_table'=>'', 'action'=>'');
-        } else if( $page_name === 'content' ){
-            $vars['action'] = 'content';
-            $allow_param_keys = array('action'=>'', 'co_id'=>'');
        } else {
            $allow_param_keys = array('bo_table'=>'', 'wr_id'=>'');
        }
@@ -145,7 +140,7 @@ function short_url_clean($string_url, $add_qry=''){

        if( $config['cf_bbs_rewrite'] > 1 && $page_name === 'board' && (isset($s['wr_id']) && $s['wr_id']) && (isset($s['bo_table']) && $s['bo_table']) ){
            $get_write = get_write( get_write_table_name($s['bo_table']), $s['wr_id'], true);
-
+            
            if( $get_write['wr_seo_title'] ){
                unset($s['wr_id']);
                $s['wr_seo_title'] = urlencode($get_write['wr_seo_title']).'/';
@@ -158,7 +153,7 @@ function short_url_clean($string_url, $add_qry=''){

        if( isset($url['host']) ){

-            $array_file_paths = run_replace('url_clean_page_paths', array('/'.G5_BBS_DIR.'/board.php', '/'.G5_BBS_DIR.'/write.php', '/'.G5_BBS_DIR.'/content.php'));
+            $array_file_paths = run_replace('url_clean_page_paths', array('/'.G5_BBS_DIR.'/board.php', '/'.G5_BBS_DIR.'/write.php'));

            $str_path = isset($url['path']) ? $url['path'] : '';
            $http = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') ? 'https://' : 'http://';
@@ -176,7 +171,7 @@ function short_url_clean($string_url, $add_qry=''){
            $add_param .= $add_param ? '&amp;'.$add_qry : '?'.$add_qry;
        }

-        foreach($s as $k => $v) { $return_url .= '/'.$v; }
+        while(list($k,$v) = each($s)) $return_url .= '/'.$v;

        return $host.$return_url.$add_param.$fragment;
    }
@@ -229,8 +224,7 @@ function exist_seo_url($type, $seo_title, $write_table, $sql_id=0){
    global $g5;

    $exists_title = '';
-    $sql_id = preg_replace('/[^a-z0-9_\-]/i', '', $sql_id);
-	// 영카트 상품코드의 경우 - 하이픈이 들어가야 함
+    $sql_id = preg_replace('/[^a-z0-9_]/i', '', $sql_id);

    if( $type === 'bbs' ){
        $sql = "select wr_seo_title FROM {$write_table} WHERE wr_seo_title = '".sql_real_escape_string($seo_title)."' AND wr_id <> '$sql_id' limit 1";
@@ -85,7 +85,6 @@
 .more_opt {display:none;position:absolute;top:50px;right:7px;background:#fff;border:1px solid #b8bfc4;z-index:999}
 .more_opt:before {content:"";position:absolute;top:-8px;right:6px;width:0;height:0;border-style:solid;border-width:0 6px 8px 6px;border-color:transparent transparent #b8bfc4 transparent}
 .more_opt:after {content:"";position:absolute;top:-6px;right:6px;width:0;height:0;border-style:solid;border-width:0 6px 8px 6px;border-color:transparent transparent #fff transparent}
-.more_opt.is_list_btn{width:90px}
 .more_opt li {display:block;border-bottom:1px solid #f1f1f1;padding:10px;margin:0;color:#6b757c;text-align:left}
 .more_opt li:last-child {border-bottom:0}
 .more_opt li button, .more_opt li a {width:100%;border:0;background:#fff;color:#6b757c}
@@ -300,7 +299,7 @@
 .bo_vc_w_wr:after {display:block;visibility:hidden;clear:both;content:""}
 .bo_vc_w .bo_vc_secret {display:block}

-#bo_vc_send_sns {display:block;margin-bottom:10px}
+#bo_vc_send_sns {display:block;float:left}
 #bo_vc_sns {display:block;margin:0;padding:0;list-style:none;zoom:1}
 #bo_vc_sns:after {display:block;visibility:hidden;clear:both;content:""}
 #bo_vc_sns li {float:left;margin:0 5px 0 0}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
thisgun	34d50021eb	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-26 19:05:44 +09:00
thisgun	e07f3275b7	인덱스 페이지에 코드 추가	2019-11-26 18:37:15 +09:00
thisgun	5f25f6efa7	버전 5.4.0.9 수정	2019-11-26 18:20:49 +09:00
thisgun	9858f457aa	훅 이벤트 추가 및 오류 수정	2019-11-26 18:20:24 +09:00
thisgun	7b77cd8753	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-25 16:21:58 +09:00
thisgun	2403fb785e	버전 5.4.0.8 수정	2019-11-25 15:10:23 +09:00
thisgun	fd22ae9d7b	모바일시 게시판 제목 앞에 카테고리가 출력 안되는 문제 및 css 수정	2019-11-25 15:07:47 +09:00
thisgun	171b0c6540	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-20 15:37:33 +09:00
thisgun	1a7a17f875	버전 5.4.0.7 수정	2019-11-20 14:37:49 +09:00
thisgun	d2a867c225	잘못된 css 구문 수정	2019-11-20 14:30:47 +09:00
thisgun	824710ebec	훅 코드 추가	2019-11-20 14:16:28 +09:00
thisgun	75091516e9	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-15 18:53:14 +09:00
thisgun	6ec6475f37	css 및 js 버전날짜 수정	2019-11-15 18:41:27 +09:00
thisgun	e048e900bc	버전 5.4.0.6 수정	2019-11-15 18:33:29 +09:00
thisgun	3973091aa0	짧은 url 표기 코드 수정	2019-11-13 11:37:45 +09:00
thisgun	8ecae083b8	코멘트 처리 페이지에서 hook 인자값 추가	2019-11-12 10:21:49 +09:00
thisgun	183a79f5ec	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-08 19:47:50 +09:00
thisgun	6b255e593a	버전 5.4.0.5 수정	2019-11-08 19:45:47 +09:00
thisgun	d5d799dbe8	잘못된 코멘트 링크 다시 수정	2019-11-08 12:10:33 +09:00
thisgun	336c8931a0	잘못된 링크 주소 수정	2019-11-08 11:54:13 +09:00
thisgun	65925e92c8	잘못된 링크 수정	2019-11-08 11:41:15 +09:00
thisgun	66bdff3450	Merge branch '54' of github.com:gnuboard/g5 into 54	2019-11-04 15:22:11 +09:00
thisgun	9629931b39	Merge branch 'master' of github.com:gnuboard/g5 into 54	2019-11-04 15:20:25 +09:00
thisgun	617d64b41f	메뉴 링크시 자동으로 짧은주소로 변경되게 수정	2019-11-01 10:35:11 +09:00
thisgun	362181c22b	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-10-29 15:00:42 +09:00
thisgun	2ae22e9d2a	관리자에서 권한체크 코드 수정함	2019-10-29 14:54:26 +09:00
thisgun	dd3e84340f	5.4.0.4 버전 수정	2019-10-29 14:36:01 +09:00
thisgun	14282c24fe	일부 코드 추가 및 hook 추가	2019-10-29 14:31:21 +09:00
thisgun	f54d245a3c	페이징 함수 수정	2019-10-24 16:22:29 +09:00
thisgun	b210f71318	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-10-23 16:57:09 +09:00
thisgun	bf467d7155	버전 5.4.0.3 으로 수정	2019-10-23 16:32:21 +09:00
thisgun	9fbe5e1e56	잘못된 부분 수정	2019-10-23 15:45:23 +09:00
thisgun	f3d0dcebc9	잘못된 코드 부분 수정	2019-10-23 14:49:06 +09:00
thisgun	89c8ad73c7	잘못된 중복 코드 다시 수정	2019-10-23 11:07:01 +09:00
thisgun	9fd9108566	썸네일 라이브러리 hook 추가	2019-10-23 11:04:54 +09:00
thisgun	3c323ef643	hook 구문 추가	2019-10-23 10:37:22 +09:00
thisgun	1a82914861	빠지거나 보완 해야 할 코드 수정	2019-10-22 12:26:53 +09:00
thisgun	e304651f11	잘못된 css 코드 수정	2019-10-04 12:21:11 +09:00
thisgun	ff0bfd168b	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-10-01 17:39:58 +09:00
thisgun	355ddc5c57	5.4.0.2 버전 수정	2019-10-01 16:16:04 +09:00
thisgun	3979ac6dbb	게시판 order by 지정시 오류 수정	2019-10-01 16:04:37 +09:00
thisgun	e3c68f982b	일부 css 수정	2019-10-01 12:03:09 +09:00
thisgun	f98eba0a9d	충돌 수정	2019-09-30 18:16:28 +09:00
thisgun	5b25e110c4	일부 훅 추가	2019-09-30 15:52:19 +09:00
thisgun	6157fe8b3b	hook 구문을 더 추가	2019-09-30 11:01:24 +09:00
thisgun	91df653dfb	hook 코드 추가	2019-09-20 11:03:48 +09:00
thisgun	0bc4ca7b47	일부 후킹 추가	2019-09-18 15:50:59 +09:00
thisgun	9a68f86230	게시글 수정시 글 제목을 수정했을때 나타나는 오류 수정	2019-09-17 19:08:26 +09:00
thisgun	a0a2ca2a9f	5.3.3.3 버전 merge	2019-09-17 18:24:39 +09:00
thisgun	0042ab0144	5.3 버전 merge	2019-09-17 18:24:02 +09:00
thisgun	545d081f2d	잘못된 코드 수정	2019-09-10 10:54:34 +09:00
thisgun	a0b9cd39cb	hook 추가 및 여러 코드 수정	2019-08-09 09:24:08 +09:00
thisgun	35ca744794	충돌수정	2019-08-07 17:12:51 +09:00
thisgun	75328dff71	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-07-19 20:22:44 +09:00
thisgun	7163838706	회원찾기 form 오류 수정	2019-07-19 20:15:39 +09:00
thisgun	31e98a85b8	Merge branch 'master' of github.com:gnuboard/g5 into g54	2019-07-19 20:03:30 +09:00
thisgun	05981661e7	5.4.0.1	2019-07-19 17:52:30 +09:00
thisgun	e0cb64e0a7	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-07-19 10:50:52 +09:00
thisgun	d663ca90d3	충돌 수정	2019-07-19 10:49:10 +09:00
thisgun	0eea266500	잘못된 링크 코드 변경	2019-07-19 10:48:01 +09:00
thisgun	b8ba893090	Merge branch 'g54' of github.com:gnuboard/g5 into 54	2019-06-24 17:30:45 +09:00
thisgun	e632542c75	충돌 수정	2019-06-24 12:07:46 +09:00
thisgun	26bbc9829d	최신글 라이브러리 잘못된 코드 수정	2019-06-10 12:14:02 +09:00
thisgun	f7c8fa4a8e	잘못된 BBS 폴더 지정 구문 수정	2019-05-31 15:28:51 +09:00
thisgun	12f53f4c3a	master 충돌 수정	2019-05-30 16:34:46 +09:00
thisgun	3a8e3a4654	글 제목 체크 추가	2019-05-29 17:54:45 +09:00
thisgun	2bd6a639d4	충돌 수정	2019-05-08 14:13:50 +09:00
thisgun	78dc1a91d3	잘못된 코드 수정	2019-05-08 14:10:38 +09:00
thisgun	f8f33e3439	5.4 베타버전 추가 및 시작	2019-05-03 21:30:42 +09:00
thisgun	85fcbbbdb7	패스워드 호환 코드 수정	2019-05-03 20:55:09 +09:00
thisgun	15c73972de	이전 패스워드 호환	2019-05-03 20:38:06 +09:00
thisgun	e8730704c1	테마 이미지 수정	2019-05-03 17:08:21 +09:00
thisgun	934e944fad	잘못된 코드 수정	2019-05-03 11:07:58 +09:00
thisgun	66e0880ebb	잘못된 코드 수정2	2019-04-24 18:18:35 +09:00
thisgun	99f09a5bf1	잘못된 로그인 스킨 코드 수정	2019-04-24 15:44:48 +09:00
thisgun	96dd706456	잘못된 코드 수정	2019-04-22 17:54:35 +09:00
thisgun	dc27423fe6	rewrite 설정 다시 수정	2019-03-21 12:26:30 +09:00
thisgun	c086efa040	rewrite 표시 코드 수정	2019-03-21 12:06:06 +09:00
thisgun	41ff66d35c	Merge branch 'g54' of github.com:gnuboard/g5 into g54	2019-03-21 11:20:09 +09:00
thisgun	1ad87b3e6c	rewrite 설정 수정	2019-03-21 11:09:37 +09:00
thisgun	d26ee21322	Merge branch 'g54' of github.com:gnuboard/g5 into g54	2019-03-20 16:43:41 +09:00
thisgun	e19e856c53	5.4 버전 테마 수정중	2019-03-20 16:19:17 +09:00
thisgun	75a1289b1a	5.4 버전 추가수정	2019-03-20 15:39:55 +09:00
thisgun	9f26c993a1	5.4 버전 수정중	2019-03-20 15:39:43 +09:00
thisgun	eb803ae9c9	hook 함수명 수정	2019-03-18 16:19:11 +09:00
thisgun	9af0d855b3	Merge branch 'master' of https://github.com/gnuboard/g5 into g54_theme2	2019-03-14 12:07:59 +09:00
thisgun	352856759d	Merge branch 'master' of https://github.com/gnuboard/g5 into g54_theme2	2019-02-18 15:14:45 +09:00
thisgun	0d968a52fa	Merge branch 'g54_theme2' of https://github.com/gnuboard/g5 into g54_theme2	2019-01-21 14:10:53 +09:00
thisgun	172b3dba98	테마 메뉴 관련 코드 수정	2019-01-21 14:09:52 +09:00
thisgun	63f4d7973c	충돌 수정	2019-01-18 18:15:18 +09:00
thisgun	dc21287913	master 충돌 수정	2019-01-18 17:53:17 +09:00
thisgun	c5593c56be	최신글 코드 수정	2019-01-15 15:32:48 +09:00
thisgun	29c4330e7a	Merge branch 'master' of github.com:gnuboard/g5 into g54_theme2	2019-01-15 15:31:02 +09:00
leebokyung	579190c786	공지가 없습니다 추가	2019-01-11 16:08:07 +09:00
leebokyung	266772d6dc	포인트 팝업 색상 변경	2019-01-11 15:51:59 +09:00
leebokyung	61c784eb57	오류검사	2019-01-11 15:33:44 +09:00
leebokyung	2a8a283a77	갤러리 글자크기	2019-01-11 14:57:42 +09:00
thisgun	6a1f6c89f6	오브젝트명 수정	2019-01-04 18:45:56 +09:00
thisgun	85cd83ecf1	Merge branch 'g54_theme2' of https://github.com/gnuboard/g5 into g54_theme2	2019-01-04 17:46:53 +09:00
thisgun	95c5b5ecd8	코드 수정	2019-01-04 17:46:42 +09:00
thisgun	bfdb44324f	일부 코드 수정	2019-01-04 17:46:02 +09:00
thisgun	2e84d5fbf4	필요없는 구문 수정	2019-01-04 15:30:05 +09:00
thisgun	7539f2517c	Merge branch 'g54_theme2' of https://github.com/gnuboard/g5 into g54_theme2	2019-01-04 11:55:44 +09:00
thisgun	e43fc63e42	Merge branch 'g54_theme2' of https://github.com/gnuboard/g5 into g54_theme2	2019-01-04 11:44:23 +09:00
thisgun	371788ee9f	Merge branch 'g54' of https://github.com/gnuboard/g5 into g54	2019-01-04 11:43:56 +09:00
thisgun	7c01ae4619	일부 틀린 구문 수정	2019-01-04 11:36:46 +09:00
thisgun	6766ef2e1f	5.4 버전 테마 수정중	2018-12-31 19:30:49 +09:00
thisgun	bf7d907ae7	모바일 슬라이더 적용중	2018-12-28 17:33:50 +09:00
thisgun	b83f82b3d7	master 와 merge	2018-12-26 16:05:22 +09:00
thisgun	7f62fffca4	버전 5.4 에 적용코드	2018-12-26 16:01:46 +09:00
thisgun	d38a44ba62	rss 주소 수정	2018-12-13 11:34:42 +09:00
thisgun	641ede57ef	쪽지관련 수정중	2018-12-13 11:32:14 +09:00
thisgun	39f944e684	Merge branch 'master' of github.com:gnuboard/g5 into g54	2018-12-06 09:46:23 +09:00
leebokyung	b71274a429	모바일qa	2018-12-04 17:09:08 +09:00
leebokyung	11dc38b883	모바일 qa input 전체 수정	2018-12-04 15:48:44 +09:00
leebokyung	ce50abd4b5	안쓰는 이미지 삭제2	2018-12-04 15:03:14 +09:00
leebokyung	ea478310d9	안쓰는 이미지 삭제, 웹표준 검사 pc	2018-12-04 14:51:59 +09:00
leebokyung	e1a510b013	갤러리 리스트 아이콘	2018-12-04 14:04:05 +09:00
leebokyung	8aad35f416	모바일 테스트	2018-12-04 12:09:20 +09:00
leebokyung	d57372907d	모바일 팝업 여백	2018-12-04 11:37:01 +09:00
leebokyung	ee6948e580	모바일 테스트중	2018-12-04 11:30:37 +09:00
leebokyung	8b0c24b8c3	비회원 댓글쓰기	2018-12-04 11:17:14 +09:00
leebokyung	6a4ac064c0	투표하기 클라스 추가	2018-12-04 11:05:36 +09:00
leebokyung	09be21e31f	회원가입 폼 input	2018-12-04 10:03:15 +09:00
leebokyung	038087546a	IE 수정	2018-12-04 09:58:09 +09:00
leebokyung	e8f233c280	모바일 파일첨부 틀어짐	2018-12-03 17:59:23 +09:00
leebokyung	dc5adce95f	모바일 테스트중	2018-12-03 17:51:37 +09:00
leebokyung	8d14c95e5c	최신글 모바일 링크 변경	2018-12-03 17:46:26 +09:00
leebokyung	546424a045	모바일 게시판 뒤로가기 추가	2018-12-03 17:24:31 +09:00
leebokyung	cd2deb541f	최신글 basic 글자크기 조절	2018-12-03 17:07:48 +09:00
leebokyung	2acac99875	최신댓글 수정	2018-12-03 17:04:40 +09:00
leebokyung	b08204d5a8	투표 input radio 색상 변경, 피씨 테스트 수정중	2018-12-03 16:44:06 +09:00
leebokyung	6ee46fd0c9	설문조사 팝업 여백	2018-12-03 16:34:28 +09:00
leebokyung	95234c0da5	공유하기 틀어진것 잡음	2018-12-03 16:30:19 +09:00
leebokyung	fb7fd98b77	버튼목록 팝업처리 백그라운드 이미지2	2018-12-03 16:27:36 +09:00
leebokyung	da14696e0c	버튼목록 팝업처리 백그라운드 이미지	2018-12-03 16:26:48 +09:00
leebokyung	b8f5356c93	댓글 비밀글	2018-12-03 16:12:15 +09:00
leebokyung	304984db63	댓글창 수정	2018-12-03 15:41:30 +09:00
leebokyung	e7e0649173	게시판 글쓰기 랙	2018-12-03 15:27:55 +09:00
leebokyung	cfe9003154	테스트중 오류 정리중	2018-12-03 15:01:50 +09:00
leebokyung	f4b30a878e	테마 테스트중	2018-12-03 13:21:30 +09:00
leebokyung	1eb10c9367	모바일 완료, PC+모바일 테스트중	2018-11-30 17:58:20 +09:00
leebokyung	4b6f94fe8c	모바일 정리중	2018-11-29 18:01:14 +09:00
thisgun	669770c1f1	Merge branch 'master' of https://github.com/gnuboard/g5 into g54	2018-11-28 19:12:15 +09:00
leebokyung	37737d5554	게 시 판	2018-11-28 17:25:16 +09:00
leebokyung	fe0f35a59c	모바일 게시판 회원가입	2018-11-28 12:04:34 +09:00
leebokyung	7414fed364	모바일 퍼블리싱 / 금요일 오후 작업 포함	2018-11-27 11:51:27 +09:00
thisgun	c43dc3ee9e	Merge branch 'master' of github.com:gnuboard/g5 into g54	2018-11-22 18:16:52 +09:00
leebokyung	71f6c8e852	모바일 사이드메뉴, 검색창, 인기검색어, 접속자집계, 최신글 수정중	2018-11-22 17:45:36 +09:00
leebokyung	d23eda245f	faq, 포인트, 아웃로그인	2018-11-22 12:18:01 +09:00
leebokyung	4922c46e7b	¸ð¹ÙÀÏ »õ±Û, ¹湮ÀÚ, °˻ö, ¼³¹®��»ç	2018-11-21 17:58:50 +09:00
leebokyung	a382a049c6	PC 정리 완료~	2018-11-20 16:44:30 +09:00
leebokyung	db813d69bd	qa, write, view, comment	2018-11-19 17:46:12 +09:00
leebokyung	9dacee38d3	팝업창 정리중, 게시판뷰 수정, 갤러리, 쪽지	2018-11-16 17:44:54 +09:00
leebokyung	6510d79217	faq	2018-11-15 17:48:59 +09:00
leebokyung	579e9ba598	로그인, 투표결과, 새글, 포인트, 스크랩	2018-11-15 17:00:34 +09:00
leebokyung	6877f818e1	검색창 옵션 or&and	2018-11-14 18:00:09 +09:00
leebokyung	0913dba0ee	검색, 방문자, 게시판 수정중	2018-11-14 16:57:32 +09:00
leebokyung	961d45b607	게시판 옵션 수정중	2018-11-14 12:14:27 +09:00
leebokyung	d11010e6d4	회원가입,소셜,쪽지 수정중	2018-11-13 17:52:50 +09:00
leebokyung	17d10c3c37	아이콘 전체 수정, 최신글 코드 변경, tnb	2018-11-13 12:21:05 +09:00
leebokyung	aad3eca303	메인 정리, 게시판 작업중	2018-11-12 17:58:58 +09:00
leebokyung	5f766ae06b	최신글, header, 접속자집계, gnb 푸터 수정중	2018-11-12 12:20:17 +09:00
leebokyung	8ba8b87690	로그인, 최신글, 설문조사, 헤더 수정중	2018-11-09 17:55:41 +09:00
leebokyung	3faf265c46	메인화면 정리중	2018-11-09 12:28:09 +09:00
leebokyung	7c01ab8f32	5.4버전 테마폴더 생성	2018-11-08 09:42:42 +09:00
thisgun	4376f39504	아이디 암호화 복호화 함수 원래대로 수정	2018-11-02 14:36:16 +09:00
thisgun	8b76de6650	잘못된 인스톨 코드 수정	2018-11-02 10:42:17 +09:00
thisgun	575a54b766	url 설정 설명문 수정	2018-11-02 10:35:49 +09:00
thisgun	517ce64fda	잘못된 취소 링크 수정	2018-11-02 09:36:43 +09:00
thisgun	e1c071a596	게시판 비밀번호 저장 방식 및 여러가지 문제점 수정	2018-11-02 09:02:37 +09:00
thisgun	704ae9863f	쪽지 및 게시판 회원 코드 수정	2018-11-01 09:46:26 +09:00
thisgun	fd1d53931a	충돌 수정	2018-10-31 12:28:29 +09:00
thisgun	8fcfc3a7ed	Merge branch 'master' of https://github.com/gnuboard/g5 into g54	2018-10-31 12:26:20 +09:00
thisgun	c55a0e4600	틀린 코드 수정	2018-10-31 11:38:46 +09:00
thisgun	73fa80fc52	hook 코드 및 회원 조회 함수명 변경	2018-10-30 18:08:57 +09:00
thisgun	0954bd8b5f	잘못된 rewrite 규칙 수정	2018-10-24 18:32:54 +09:00
thisgun	cf566e3512	URL 타이틀 지정 코드 수정	2018-10-24 13:53:44 +09:00
thisgun	eca24d196e	url 관련 코드 수정	2018-10-24 11:05:48 +09:00
thisgun	7f22566ecd	잘못된 구문 수정	2018-10-22 19:07:50 +09:00
thisgun	c84efa72a4	Merge branch 'master' of https://github.com/gnuboard/g5 into g54	2018-10-22 17:55:29 +09:00
thisgun	866f49ec47	pbkdf2 암호화 적용	2018-10-22 17:53:38 +09:00
thisgun	e40344fe96	Merge branch 'master' of https://github.com/gnuboard/g5 into g54	2018-10-18 11:43:40 +09:00
thisgun	ffdbaa5680	Merge branch 'g54' of https://github.com/gnuboard/g5 into g54	2018-10-12 18:01:48 +09:00
thisgun	6f19c8141a	Merge branch 'master' of https://github.com/gnuboard/g5 into g54	2018-10-12 17:57:45 +09:00
thisgun	082f0c43ee	seo_title 저장 코드 수정	2018-10-12 17:57:34 +09:00
thisgun	c8a9576d63	패스워드 체크 과정 빠진 부분 추가	2018-10-11 11:27:18 +09:00
thisgun	a5bd3841dd	Merge branch 'master' of github.com:gnuboard/g5 into pbkdf2	2018-10-11 11:07:30 +09:00
thisgun	352cf06944	pbkdf2 암호화 함수 적용	2018-10-11 09:59:42 +09:00
thisgun	c4a326cd48	Merge branch 'g54' of github.com:gnuboard/g5 into g54	2018-10-04 10:58:34 +09:00
thisgun	c742b3fff8	권한 문구 수정	2018-10-04 10:58:20 +09:00
thisgun	100328a031	일부 리라이트 규칙 수정	2018-10-04 10:52:24 +09:00
thisgun	e21429167b	리라이트 규칙 수정	2018-10-02 17:04:54 +09:00
thisgun	8d7c0005e4	틀린 구문 수정	2018-10-02 11:47:29 +09:00
thisgun	f5155c4fed	충돌 수정	2018-10-01 18:47:09 +09:00
thisgun	f6d994d810	리라이트 규칙 수정	2018-10-01 18:35:08 +09:00
thisgun	2757fb46f1	Merge branch 'g54' of github.com:gnuboard/g5 into g54	2018-10-01 14:23:55 +09:00
thisgun	e17e4dc869	KVE-2018-0732 취약점 수정	2018-10-01 11:49:08 +09:00
thisgun	75b6116057	짧은 주소 적용	2018-09-21 18:16:54 +09:00
thisgun	cbeef0e453	짧은 주소 url 수정	2018-09-20 09:29:08 +09:00
thisgun	7547b6e0ab	Merge branch 'master' of github.com:gnuboard/g5 into g54	2018-09-18 09:18:47 +09:00
thisgun	e61dc3534f	rewrite 수정	2018-09-18 09:18:39 +09:00
thisgun	92a27cb64a	충돌 수정	2018-09-14 16:16:56 +09:00
thisgun	db2b8a2f9b	Merge branch 'g54' of https://github.com/gnuboard/g5 into g54	2018-09-14 09:41:58 +09:00
thisgun	561d2ffd52	rewrite 수정	2018-09-14 09:41:35 +09:00
thisgun	6b9cbb9612	버그 수정	2018-09-13 13:47:47 +09:00
thisgun	27e0a541c7	잘못된 구문 수정	2018-09-13 12:22:02 +09:00
thisgun	16907801b7	짧은 주소 작업중	2018-09-13 10:42:56 +09:00
thisgun	7c1e1e6240	짧은 URL 적용중	2018-09-11 09:32:08 +09:00
thisgun	58b86e556a	짧은 URL 적용 수정중	2018-09-07 18:00:46 +09:00
thisgun	f66300a394	짧은주소 수정중	2018-09-06 18:34:14 +09:00
thisgun	25bd7430fc	일부 코드 수정	2018-09-06 17:21:27 +09:00