Merge branch 'master' of github.com:gnuboard/g5

empty_mb_name is a function checking name from user input form. But it
was not checked by empty_mb_name function. So I fix it.

.gitignore

@@ -6,14 +6,8 @@ sirgle/
 test.php
 *.key
 *.sh
-log
-g5_tree
 cheditor5.*/
 ckeditor*/
 log/
 g5_tree/
-.vscode/
 naver*.html
-initests01/
-SIRsoft000/
-config.php

_common.php

@@ -1,10 +1,3 @@
 <?php
 include_once('./common.php');
-
-// 커뮤니티 사용여부
-if(defined('G5_COMMUNITY_USE') && G5_COMMUNITY_USE === false) {
-    if (!defined('G5_USE_SHOP') || !G5_USE_SHOP)
-        die('<p>쇼핑몰 설치 후 이용해 주십시오.</p>');
-
-    define('_SHOP_', true);
-}
+?>

_head.php

@@ -1,4 +1,5 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 
-include_once(G5_PATH.'/head.php');
+include_once(G5_PATH.'/head.php');
+?>

_tail.php

@@ -1,4 +1,5 @@
 <?php
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 
-include_once(G5_PATH.'/tail.php');
+include_once(G5_PATH.'/tail.php');
+?>

adm/_common.php

@@ -6,5 +6,4 @@ include_once(G5_ADMIN_PATH.'/admin.lib.php');
 if( isset($token) ){
     $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
 }
-
-run_event('admin_common');
+?>

adm/_rewrite_config_form.php

@@ -1,120 +0,0 @@
-<?php
-if (!defined('_GNUBOARD_')) exit;
-
-$is_use_apache = (stripos($_SERVER['SERVER_SOFTWARE'], 'apache') !== false);
-
-$is_use_nginx = (stripos($_SERVER['SERVER_SOFTWARE'], 'nginx') !== false);
-
-$is_use_iis = !$is_use_apache && (stripos($_SERVER['SERVER_SOFTWARE'], 'microsoft-iis') !== false);
-
-$is_write_file = false;
-$is_apache_need_rules = false;
-$is_apache_rewrite = false;
-
-if( !($is_use_apache || $is_use_nginx || $is_use_iis) ){    // 셋다 아니면 다 출력시킨다.
-    $is_use_apache = true;
-    $is_use_nginx = true;
-}
-
-if ( $is_use_nginx ){
-    $is_write_file = false;
-}
-
-if ( $is_use_apache ){
-    $is_write_file = (is_writable(G5_PATH) || (file_exists(G5_PATH.'/.htaccess') && is_writable(G5_PATH.'/.htaccess'))) ? true : false;
-    $is_apache_need_rules = check_need_rewrite_rules();
-    $is_apache_rewrite = function_exists('apache_get_modules') && in_array('mod_rewrite', apache_get_modules());
-}
-
-$get_path_url = parse_url( G5_URL );
-
-$base_path = isset($get_path_url['path']) ? $get_path_url['path'].'/' : '/';
-
-// add_stylesheet('css 구문', 출력순서); 숫자가 작을 수록 먼저 출력됨
-add_stylesheet('<link rel="stylesheet" href="'.G5_JS_URL.'/remodal/remodal.css">', 11);
-add_stylesheet('<link rel="stylesheet" href="'.G5_JS_URL.'/remodal/remodal-default-theme.css">', 12);
-add_javascript('<script src="'.G5_JS_URL.'/remodal/remodal.js"></script>', 10);
-?>
-<section id="anc_cf_url">
-    <h2 class="h2_frm">짧은 주소 설정</h2>
-    <?php echo $pg_anchor ?>
-    <div class="local_desc02 local_desc">
-        <p>
-            게시판과 컨텐츠 페이지에 짧은 URL 을 사용합니다. <a href="https://sir.kr/manual/g5/286" class="btn btn_03" target="_blank" style="margin-left:10px">설정 관련 메뉴얼 보기</a>
-            <?php if( $is_use_apache && ! $is_use_nginx ){ ?>
-                <?php if( ! $is_apache_rewrite ){ ?>
-                <br><strong>Apache 서버인 경우 rewrite_module 이 비활성화 되어 있으면 짧은 주소를 사용할수 없습니다.</strong>
-                <?php } else if( ! $is_write_file && $is_apache_need_rules ) {   // apache인 경우 ?>
-                <br><strong>짧은 주소 사용시 아래 Apache 설정 코드를 참고하여 설정해 주세요.</strong>
-                <?php } ?>
-            <?php } ?>
-        </p>
-    </div>
-
-    <div class="server_config_views">
-        <?php if ( $is_use_apache ){ ?>
-            <button type="button" data-remodal-target="modal_apache" class="btn btn_03">Apache 설정 코드 보기</button>
-        <?php } ?>
-        <?php if ( $is_use_nginx ) { ?>
-            <button type="button" data-remodal-target="modal_nginx" class="btn btn_03">Nginx 설정 코드 보기</button>
-        <?php } ?>
-    </div>
-
-    <div class="tbl_frm01 tbl_wrap">
-        <table>
-        <caption>짧은주소 설정</caption>
-        <colgroup>
-            <col class="grid_4">
-            <col>
-        </colgroup>
-        <tbody>
-        <?php
-            $short_url_arrs = array(
-            '0'=>array('label'=>'사용안함', 'url'=>G5_URL.'/board.php?bo_table=free&wr_id=123'),
-            '1'=>array('label'=>'숫자', 'url'=>G5_URL.'/free/123'),
-            '2'=>array('label'=>'글 이름', 'url'=>G5_URL.'/free/안녕하세요/'),
-            );
-            foreach($short_url_arrs as $k=>$v){
-                $checked = ((int) $config['cf_bbs_rewrite'] === (int) $k) ? 'checked' : '';
-        ?>
-            <tr>
-                <td><input name="cf_bbs_rewrite" id="cf_bbs_rewrite_<?php echo $k; ?>" type="radio" value="<?php echo $k; ?>" <?php echo $checked;?> ><label for="cf_bbs_rewrite_<?php echo $k; ?>" class="rules_label"><?php echo $v['label']; ?></label></td>
-                <td><?php echo $v['url']; ?></td>
-            </tr>
-        <?php }     //end foreach ?>
-        </tbody>
-        </table>
-    </div>
-
-    <div class="server_rewrite_info">
-        <div class="is_rewrite remodal" data-remodal-id="modal_apache" role="dialog" aria-labelledby="modalApache" aria-describedby="modal1Desc">
-
-            <button type="button" class="connect-close" data-remodal-action="close">
-                <i class="fa fa-close"></i>
-                <span class="txt">닫기</span>
-            </button>
-
-            <h4 class="copy_title">.htaccess 파일에 적용할 코드입니다.
-            <?php if( ! $is_apache_rewrite ) { ?>
-            <br><span class="info-warning">Apache 서버인 경우 rewrite_module 이 비활성화 되어 있으면 짧은 주소를 사용할수 없습니다.</span>
-            <?php } else if ( ! $is_write_file && $is_apache_need_rules ) { ?>
-            <br><span class="info-warning">자동으로 .htaccess 파일을 수정 할수 있는 권한이 없습니다.<br>.htaccess 파일이 없다면 생성 후에, 아래 코드가 없으면 코드를 복사하여 붙여넣기 해 주세요.</span>
-            <?php } else if ( ! $is_apache_need_rules ){ ?>
-            <br><span class="info-success">정상적으로 적용된 상태입니다.</span>
-            <?php } ?>
-            </h4>
-            <textarea readonly="readonly" rows="10"><?php echo get_mod_rewrite_rules(true); ?></textarea>
-        </div>
-
-        <div class="is_rewrite remodal" data-remodal-id="modal_nginx" role="dialog" aria-labelledby="modalNginx" aria-describedby="modal2Desc">
-
-            <button type="button" class="connect-close" data-remodal-action="close">
-                <i class="fa fa-close"></i>
-                <span class="txt">닫기</span>
-            </button>
-            <h4 class="copy_title">아래 코드를 복사하여 nginx 설정 파일에 적용해 주세요.</h4>
-            <textarea readonly="readonly" rows="10"><?php echo get_nginx_conf_rules(true); ?></textarea>
-        </div>
-
-    </div>
-</section>

adm/admin.head.php

@@ -1,7 +1,7 @@
 <?php
 if (!defined('_GNUBOARD_')) exit;
 
-$g5_debug['php']['begin_time'] = $begin_time = get_microtime();
+$begin_time = get_microtime();
 
 $files = glob(G5_ADMIN_PATH.'/css/admin_extend_*');
 if (is_array($files)) {
@@ -32,23 +32,17 @@ function print_menu2($key, $no='')
 {
     global $menu, $auth_menu, $is_admin, $auth, $g5, $sub_menu;
 
-    $str = "<ul>";
+    $str .= "<ul>";
     for($i=1; $i<count($menu[$key]); $i++)
     {
-        if( ! isset($menu[$key][$i]) ){
-            continue;
-        }
-
         if ($is_admin != 'super' && (!array_key_exists($menu[$key][$i][0],$auth) || !strstr($auth[$menu[$key][$i][0]], 'r')))
             continue;
-        
-        $gnb_grp_div = $gnb_grp_style = '';
 
-        if (isset($menu[$key][$i][4])){
-            if (($menu[$key][$i][4] == 1 && $gnb_grp_style == false) || ($menu[$key][$i][4] != 1 && $gnb_grp_style == true)) $gnb_grp_div = 'gnb_grp_div';
+        if (($menu[$key][$i][4] == 1 && $gnb_grp_style == false) || ($menu[$key][$i][4] != 1 && $gnb_grp_style == true)) $gnb_grp_div = 'gnb_grp_div';
+        else $gnb_grp_div = '';
 
-            if ($menu[$key][$i][4] == 1) $gnb_grp_style = 'gnb_grp_style';
-        }
+        if ($menu[$key][$i][4] == 1) $gnb_grp_style = 'gnb_grp_style';
+        else $gnb_grp_style = '';
 
         $current_class = '';
 
@@ -107,11 +101,10 @@ function imageview(id, w, h)
     <h1><?php echo $config['cf_title'] ?></h1>
     <div id="hd_top">
         <button type="button" id="btn_gnb" class="btn_gnb_close <?php echo $adm_menu_cookie['btn_gnb'];?>">메뉴</button>
-       <div id="logo"><a href="<?php echo correct_goto_url(G5_ADMIN_URL); ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.png" alt="<?php echo get_text($config['cf_title']); ?> 관리자"></a></div>
+       <div id="logo"><a href="<?php echo G5_ADMIN_URL ?>"><img src="<?php echo G5_ADMIN_URL ?>/img/logo.png" alt="<?php echo $config['cf_title'] ?> 관리자"></a></div>
 
         <div id="tnb">
             <ul>
-                <li class="tnb_li"><a href="<?php echo G5_SHOP_URL ?>/" class="tnb_shop" target="_blank" title="쇼핑몰 바로가기">쇼핑몰 바로가기</a></li>
                 <li class="tnb_li"><a href="<?php echo G5_URL ?>/" class="tnb_community" target="_blank" title="커뮤니티 바로가기">커뮤니티 바로가기</a></li>
                 <li class="tnb_li"><a href="<?php echo G5_ADMIN_URL ?>/service.php" class="tnb_service">부가서비스</a></li>
                 <li class="tnb_li"><button type="button" class="tnb_mb_btn">관리자<span class="./img/btn_gnb.png">메뉴열기</span></button>
@@ -131,7 +124,7 @@ function imageview(id, w, h)
             foreach($amenu as $key=>$value) {
                 $href1 = $href2 = '';
 
-                if (isset($menu['menu'.$key][0][2]) && $menu['menu'.$key][0][2]) {
+                if ($menu['menu'.$key][0][2]) {
                     $href1 = '<a href="'.$menu['menu'.$key][0][2].'" class="gnb_1da">';
                     $href2 = '</a>';
                 } else {

adm/admin.js

@@ -108,7 +108,7 @@ function get_ajax_token()
 }
 
 $(function() {
-    $(document).on("click", "form input:submit, form button:submit", function() {
+    $(document).on("click", "form input:submit", function() {
         var f = this.form;
         var token = get_ajax_token();
 

adm/admin.lib.php

@@ -184,7 +184,7 @@ function get_theme_config_value($dir, $key='*')
         } else {
             $keys = array_map('trim', explode(',', $key));
             foreach($keys as $v) {
-                $tconfig[$v] = isset($theme_config[$v]) ? trim($theme_config[$v]) : '';
+                $tconfig[$v] = trim($theme_config[$v]);
             }
         }
     }
@@ -230,14 +230,6 @@ function get_member_id_select($name, $level, $selected="", $event="")
     return $str;
 }
 
-// php8 버전 호환 권한 검사 함수
-function auth_check_menu($auth, $sub_menu, $attr, $return=false) {
-
-    $check_auth = isset($auth[$sub_menu]) ? $auth[$sub_menu] : '';
-    return auth_check($check_auth, $attr, $return);
-
-}
-
 // 권한 검사
 function auth_check($auth, $attr, $return=false)
 {
@@ -387,7 +379,7 @@ function get_sanitize_input($s, $is_html=false){
     return $s;
 }
 
-function check_log_folder($log_path, $is_delete=true){
+function check_log_folder($log_path){
 
     if( is_writable($log_path) ){
 
@@ -411,26 +403,21 @@ function check_log_folder($log_path, $is_delete=true){
         }
     }
     
-	if( $is_delete ) {
-		try {
-			// txt 파일과 log 파일을 조회하여 30일이 지난 파일은 삭제합니다.
-			$txt_files = glob($log_path.'/*.txt');
-			$log_files = glob($log_path.'/*.log');
-			
-			$del_files = array_merge($txt_files, $log_files);
+    // txt 파일과 log 파일을 조회하여 30일이 지난 파일은 삭제합니다.
+    $txt_files = glob($log_path.'/*.txt');
+    $log_files = glob($log_path.'/*.log');
+    
+    $del_files = array_merge($txt_files, $log_files);
 
-			if( $del_files && is_array($del_files) ){
-				foreach ($del_files as $del_file) {
-					$filetime = filemtime($del_file);
-					// 30일이 지난 파일을 삭제
-					if($filetime && $filetime < (G5_SERVER_TIME - 2592000)) {
-						@unlink($del_file);
-					}
-				}
-			}
-		} catch(Exception $e) {
-		}
-	}
+    if( $del_files && is_array($del_files) ){
+        foreach ($del_files as $del_file) {
+            $filetime = filemtime($del_file);
+            // 30일이 지난 파일을 삭제
+            if($filetime && $filetime < (G5_SERVER_TIME - 2592000)) {
+                @unlink($del_file);
+            }
+        }
+    }
 }
 
 // POST로 넘어온 토큰과 세션에 저장된 토큰 비교
@@ -448,7 +435,7 @@ function check_admin_token()
 // 관리자 페이지 referer 체크
 function admin_referer_check($return=false)
 {
-    $referer = isset($_SERVER['HTTP_REFERER']) ? trim($_SERVER['HTTP_REFERER']) : '';
+    $referer = trim($_SERVER['HTTP_REFERER']);
     if(!$referer) {
         $msg = '정보가 올바르지 않습니다.';
 
@@ -490,8 +477,8 @@ function admin_check_xss_params($params){
 
         if( is_array($value) ){
             admin_check_xss_params($value);
-        } else if ( (preg_match('/<\s?[^\>]*\/?\s?>/i', $value) && (preg_match('/script.*?\/script/ius', $value) || preg_match('/[onload|onerror]=.*/ius', $value))) || preg_match('/^(?=.*token\()(?=.*xmlhttprequest\()(?=.*send\().*$/im', $value) || (preg_match('/[onload|onerror|focus]=.*/ius', $value) && preg_match('/(eval|expression|exec|prompt)(\s*)\((.*)\)/ius', $value)) ){
-            alert('요청 쿼리에 잘못된 스크립트문장이 있습니다.\\nXSS 공격일수도 있습니다.', G5_URL);
+        } else if ( preg_match('/<\s?[^\>]*\/?\s?>/i', $value) && (preg_match('/script.*?\/script/ius', $value) || preg_match('/[onload|onerror]=.*/ius', $value)) ){
+            alert('요청 쿼리에 잘못된 스크립트문장이 있습니다.\\nXSS 공격일수도 있습니다.');
             die();
         }
     }
@@ -499,41 +486,10 @@ function admin_check_xss_params($params){
     return;
 }
 
-function admin_menu_find_by($call, $search_key){
-    global $menu;
-    
-    static $cache_menu = array();
-    
-    if( empty($cache_menu) ){
-        foreach( $menu as $k1=>$arr1 ){
-
-            if (empty($arr1) ) continue;
-            foreach( $arr1 as $k2=>$arr2 ){
-                if (empty($arr2) ) continue;
-
-                $menu_key = isset($arr2[3]) ? $arr2[3] : '';
-                if (empty($menu_key) ) continue;
-
-                $cache_menu[$menu_key] = array(
-                    'sub_menu'=>$arr2[0],
-                    'title'=>$arr2[1],
-                    'link'=>$arr2[2],
-                    );
-            }
-        }
-    }
-
-    if( isset($cache_menu[$call]) && isset($cache_menu[$call][$search_key]) ){
-        return $cache_menu[$call][$search_key];
-    }
-
-    return '';
-}
-
 // 접근 권한 검사
 if (!$member['mb_id'])
 {
-    alert('로그인 하십시오.', G5_BBS_URL.'/login.php?url=' . urlencode(correct_goto_url(G5_ADMIN_URL)));
+    alert('로그인 하십시오.', G5_BBS_URL.'/login.php?url=' . urlencode(G5_ADMIN_URL));
 }
 else if ($is_admin != 'super')
 {
@@ -559,16 +515,12 @@ if (get_session('ss_mb_key') !== $admin_key) {
 
     include_once(G5_LIB_PATH.'/mailer.lib.php');
     // 메일 알림
-    mailer($member['mb_nick'], $member['mb_email'], $member['mb_email'], 'XSS 공격 알림', $_SERVER['REMOTE_ADDR'].' 아이피로 XSS 공격이 있었습니다.<br><br>관리자 권한을 탈취하려는 접근이므로 주의하시기 바랍니다.<br><br>해당 아이피는 차단하시고 의심되는 게시물이 있는지 확인하시기 바랍니다.'.G5_URL, 0);
+    mailer($member['mb_nick'], $member['mb_email'], $member['mb_email'], 'XSS 공격 알림', $_SERVER['REMOTE_ADDR'].' 아이피로 XSS 공격이 있었습니다.\n\n관리자 권한을 탈취하려는 접근이므로 주의하시기 바랍니다.\n\n해당 아이피는 차단하시고 의심되는 게시물이 있는지 확인하시기 바랍니다.\n\n'.G5_URL, 0);
 
     alert_close('정상적으로 로그인하여 접근하시기 바랍니다.');
 }
 
-if(isset($auth) && is_array($auth)) {
-    @ksort($auth);
-} else {
-    $auth = array();
-}
+@ksort($auth);
 
 // 가변 메뉴
 unset($auth_menu);
@@ -589,11 +541,6 @@ foreach($menu_files as $file){
 }
 @ksort($amenu);
 
-$amenu = run_replace('admin_amenu', $amenu);
-if( isset($menu) && $menu ){
-    $menu = run_replace('admin_menu', $menu); 
-}
-
 $arr_query = array();
 if (isset($sst))  $arr_query[] = 'sst='.$sst;
 if (isset($sod))  $arr_query[] = 'sod='.$sod;
@@ -609,4 +556,5 @@ if ( isset($_REQUEST) && $_REQUEST ){
 }
 
 // 관리자에서는 추가 스크립트는 사용하지 않는다.
-//$config['cf_add_script'] = '';
+//$config['cf_add_script'] = '';
+?>

adm/admin.menu100.php

@@ -20,4 +20,5 @@ if(version_compare(phpversion(), '5.3.0', '>=') && defined('G5_BROWSCAP_USE') &&
 }
 
 $menu['menu100'][] = array('100410', 'DB업그레이드', G5_ADMIN_URL.'/dbupgrade.php', 'db_upgrade');
-$menu['menu100'][] = array('100400', '부가서비스', G5_ADMIN_URL.'/service.php', 'cf_service');
+$menu['menu100'][] = array('100400', '부가서비스', G5_ADMIN_URL.'/service.php', 'cf_service');
+?>

adm/admin.menu200.php

@@ -8,4 +8,5 @@ $menu['menu200'] = array (
     array('200820', '접속자로그삭제', G5_ADMIN_URL.'/visit_delete.php', 'mb_delete', 1),
     array('200200', '포인트관리', G5_ADMIN_URL.'/point_list.php', 'mb_point'),
     array('200900', '투표관리', G5_ADMIN_URL.'/poll_list.php', 'mb_poll')
-);
+);
+?>

adm/admin.menu300.php

@@ -9,4 +9,5 @@ $menu['menu300'] = array (
     array('300600', '내용관리', G5_ADMIN_URL.'/contentlist.php', 'scf_contents', 1),
     array('300700', 'FAQ관리', G5_ADMIN_URL.'/faqmasterlist.php', 'scf_faq', 1),
     array('300820', '글,댓글 현황', G5_ADMIN_URL.'/write_count.php', 'scf_write_count'),
-);
+);
+?>

adm/admin.menu400.shop_1of2.php

@@ -1,21 +0,0 @@
-<?php
-if (!defined('G5_USE_SHOP') || !G5_USE_SHOP) return;
-
-$menu['menu400'] = array (
-    array('400000', '쇼핑몰관리', G5_ADMIN_URL.'/shop_admin/', 'shop_config'),
-    array('400010', '쇼핑몰현황', G5_ADMIN_URL.'/shop_admin/', 'shop_index'),
-    array('400100', '쇼핑몰설정', G5_ADMIN_URL.'/shop_admin/configform.php', 'scf_config'),
-    array('400400', '주문내역', G5_ADMIN_URL.'/shop_admin/orderlist.php', 'scf_order', 1),
-    array('400440', '개인결제관리', G5_ADMIN_URL.'/shop_admin/personalpaylist.php', 'scf_personalpay', 1),
-    array('400200', '분류관리', G5_ADMIN_URL.'/shop_admin/categorylist.php', 'scf_cate'),
-    array('400300', '상품관리', G5_ADMIN_URL.'/shop_admin/itemlist.php', 'scf_item'),
-    array('400660', '상품문의', G5_ADMIN_URL.'/shop_admin/itemqalist.php', 'scf_item_qna'),
-    array('400650', '사용후기', G5_ADMIN_URL.'/shop_admin/itemuselist.php', 'scf_ps'),
-    array('400620', '상품재고관리', G5_ADMIN_URL.'/shop_admin/itemstocklist.php', 'scf_item_stock'),
-    array('400610', '상품유형관리', G5_ADMIN_URL.'/shop_admin/itemtypelist.php', 'scf_item_type'),
-    array('400500', '상품옵션재고관리', G5_ADMIN_URL.'/shop_admin/optionstocklist.php', 'scf_item_option'),
-    array('400800', '쿠폰관리', G5_ADMIN_URL.'/shop_admin/couponlist.php', 'scf_coupon'),
-    array('400810', '쿠폰존관리', G5_ADMIN_URL.'/shop_admin/couponzonelist.php', 'scf_coupon_zone'),
-    array('400750', '추가배송비관리', G5_ADMIN_URL.'/shop_admin/sendcostlist.php', 'scf_sendcost', 1),
-    array('400410', '미완료주문', G5_ADMIN_URL.'/shop_admin/inorderlist.php', 'scf_inorder', 1),
-);

adm/admin.menu500.shop_2of2.php

@@ -1,15 +0,0 @@
-<?php
-if (!defined('G5_USE_SHOP') || !G5_USE_SHOP) return;
-
-$menu['menu500'] = array (
-    array('500000', '쇼핑몰현황/기타', G5_ADMIN_URL.'/shop_admin/itemsellrank.php', 'shop_stats'),
-    array('500110', '매출현황', G5_ADMIN_URL.'/shop_admin/sale1.php', 'sst_order_stats'),
-    array('500100', '상품판매순위', G5_ADMIN_URL.'/shop_admin/itemsellrank.php', 'sst_rank'),
-    array('500120', '주문내역출력', G5_ADMIN_URL.'/shop_admin/orderprint.php', 'sst_print_order', 1),
-    array('500400', '재입고SMS알림', G5_ADMIN_URL.'/shop_admin/itemstocksms.php', 'sst_stock_sms', 1),
-    array('500300', '이벤트관리', G5_ADMIN_URL.'/shop_admin/itemevent.php', 'scf_event'),
-    array('500310', '이벤트일괄처리', G5_ADMIN_URL.'/shop_admin/itemeventlist.php', 'scf_event_mng'),
-    array('500500', '배너관리', G5_ADMIN_URL.'/shop_admin/bannerlist.php', 'scf_banner', 1),
-    array('500140', '보관함현황', G5_ADMIN_URL.'/shop_admin/wishlist.php', 'sst_wish'),
-    array('500210', '가격비교사이트', G5_ADMIN_URL.'/shop_admin/price.php', 'sst_compare', 1)
-);

adm/admin.menu900.php

@@ -11,4 +11,5 @@ $menu["menu900"] = array (
     array('900700', '휴대폰번호 그룹', ''.G5_SMS5_ADMIN_URL.'/num_group.php' , 'hp_group', 1),
     array('900800', '휴대폰번호 관리', ''.G5_SMS5_ADMIN_URL.'/num_book.php', 'hp_manage', 1),
     array('900900', '휴대폰번호 파일', ''.G5_SMS5_ADMIN_URL.'/num_book_file.php' , 'hp_file', 1)
-);
+);
+?>

adm/admin.tail.php

@@ -1,9 +1,7 @@
 <?php
 if (!defined('_GNUBOARD_')) exit;
 
-// 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전이 통합됨에 따라 그누보드 버전만 표시
-// $print_version = defined('G5_YOUNGCART_VER') ? 'YoungCart Version '.G5_YOUNGCART_VER : 'Version '.G5_GNUBOARD_VER;
-$print_version = 'Version '.G5_GNUBOARD_VER;
+$print_version = defined('G5_YOUNGCART_VER') ? 'YoungCart Version '.G5_YOUNGCART_VER : 'Version '.G5_GNUBOARD_VER;
 ?>
 
         <noscript>
@@ -152,4 +150,5 @@ function menu_rearrange(el)
 </script>
 
 <?php
-include_once(G5_PATH.'/tail.sub.php');
+include_once(G5_PATH.'/tail.sub.php');
+?>

adm/ajax.token.php

@@ -10,4 +10,5 @@ if($error)
 
 $token = get_admin_token();
 
-die(json_encode(array('error'=>'', 'token'=>$token, 'url'=>'')));
+die(json_encode(array('error'=>'', 'token'=>$token, 'url'=>'')));
+?>

adm/ajax.use_captcha.php

@@ -3,4 +3,5 @@ include_once('./_common.php');
 
 if( isset($_POST['admin_use_captcha']) ){
     set_session('ss_admin_use_captcha', true);
-}
+}
+?>

adm/auth_list.php

@@ -160,7 +160,7 @@ $pagelist = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_w
 echo $pagelist;
 ?>
 
-<form name="fauthlist2" id="fauthlist2" action="./auth_update.php" method="post" autocomplete="off" onsubmit="return fauth_add_submit(this);">
+<form name="fauthlist2" id="fauthlist2" action="./auth_update.php" method="post" autocomplete="off">
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>">
 <input type="hidden" name="stx" value="<?php echo $stx ?>">
 <input type="hidden" name="sst" value="<?php echo $sst ?>">
@@ -218,17 +218,6 @@ echo $pagelist;
                 <label for="d">d (삭제)</label>
             </td>
         </tr>
-        <tr>
-            <th scope="row">자동등록방지</th>
-            <td>
-                <?php
-                include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
-                $captcha_html = captcha_html();
-                $captcha_js   = chk_captcha_js();
-                echo $captcha_html;
-                ?>
-            </td>
-        </tr>
         </tbody>
         </table>
     </div>
@@ -241,13 +230,6 @@ echo $pagelist;
 </form>
 
 <script>
-function fauth_add_submit(f){
-    
-    <?php echo $captcha_js; // 캡챠 사용시 자바스크립트에서 입력된 캡챠를 검사함  ?>
-
-    return true;
-}
-
 function fauthlist_submit(f)
 {
     if (!is_checked("chk[]")) {
@@ -266,4 +248,5 @@ function fauthlist_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/auth_list_delete.php

@@ -10,7 +10,6 @@ if ($is_admin != 'super')
 check_admin_token();
 
 $count = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
-$post_act_button = isset($_POST['act_button']) ? clean_xss_tags($_POST['act_button'], 1, 1) : '';
 
 if (!$count)
     alert($_POST['act_button']." 하실 항목을 하나 이상 체크하세요.");
@@ -22,15 +21,14 @@ if ( (isset($_POST['mb_id']) && ! is_array($_POST['mb_id'])) || (isset($_POST['a
 for ($i=0; $i<$count; $i++)
 {
     // 실제 번호를 넘김
-    $k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
+    $k = $chk[$i];
     
-    $mb_id = isset($_POST['mb_id'][$k]) ? preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['mb_id'][$k]) : '';
-    $au_menu = isset($_POST['au_menu'][$k]) ? preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['au_menu'][$k]) : '';
+    $mb_id = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['mb_id'][$k]);
+    $au_menu = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['au_menu'][$k]);
 
     $sql = " delete from {$g5['auth_table']} where mb_id = '".$mb_id."' and au_menu = '".$au_menu."' ";
     sql_query($sql);
-
-    run_event('adm_auth_delete_member', $mb_id, $au_menu);
 }
 
-goto_url('./auth_list.php?'.$qstr);
+goto_url('./auth_list.php?'.$qstr);
+?>

adm/auth_update.php

@@ -1,12 +1,6 @@
 <?php
 $sub_menu = "100200";
 include_once('./_common.php');
-include_once(G5_LIB_PATH.'/mailer.lib.php');
-
-$au_menu = isset($_POST['au_menu']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['au_menu']) : '';
-$post_r = isset($_POST['r']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['r']) : '';
-$post_w = isset($_POST['w']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['w']) : '';
-$post_d = isset($_POST['d']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['d']) : '';
 
 if ($is_admin != 'super')
     alert('최고관리자만 접근 가능합니다.');
@@ -17,37 +11,20 @@ if (!$mb['mb_id'])
 
 check_admin_token();
 
-include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
-
-if (!chk_captcha()) {
-    alert('자동등록방지 숫자가 틀렸습니다.');
-}
-
 $sql = " insert into {$g5['auth_table']}
-            set mb_id   = '$mb_id',
-                au_menu = '$au_menu',
-                au_auth = '{$post_r},{$post_w},{$post_d}' ";
+            set mb_id   = '{$_POST['mb_id']}',
+                au_menu = '{$_POST['au_menu']}',
+                au_auth = '{$_POST['r']},{$_POST['w']},{$_POST['d']}' ";
 $result = sql_query($sql, FALSE);
 if (!$result) {
     $sql = " update {$g5['auth_table']}
-                set au_auth = '{$post_r},{$post_w},{$post_d}'
-              where mb_id   = '$mb_id'
-                and au_menu = '$au_menu' ";
+                set au_auth = '{$_POST['r']},{$_POST['w']},{$_POST['d']}'
+              where mb_id   = '{$_POST['mb_id']}'
+                and au_menu = '{$_POST['au_menu']}' ";
     sql_query($sql);
 }
 
 //sql_query(" OPTIMIZE TABLE `$g5['auth_table']` ");
 
-// 세션을 체크하여 하루에 한번만 메일알림이 가게 합니다.
-if( str_replace('-', '', G5_TIME_YMD) !== get_session('adm_auth_update') ){
-    $site_url = preg_replace('/^www\./', '', strtolower($_SERVER['SERVER_NAME']));
-    $to_email = 'gnuboard@'.$site_url;
-
-    mailer($config['cf_admin_email_name'], $to_email, $config['cf_admin_email'], '['.$config['cf_title'].'] 관리권한설정 알림', '<p><b>['.$config['cf_title'].'] 관리권한설정 변경 안내</b></p><p style="padding-top:1em">회원 아이디 '.$mb['mb_id'].' 에 관리권한이 추가 되었습니다.</p><p style="padding-top:1em">'.G5_TIME_YMDHIS.'</p><p style="padding-top:1em"><a href="'.G5_URL.'" target="_blank">'.$config['cf_title'].'</a></p>', 1);
-
-    set_session('adm_auth_update', str_replace('-', '', G5_TIME_YMD));
-}
-
-run_event('adm_auth_update', $mb);
-
-goto_url('./auth_list.php?'.$qstr);
+goto_url('./auth_list.php?'.$qstr);
+?>

adm/board_copy.php

@@ -2,7 +2,7 @@
 $sub_menu = "300100";
 include_once("./_common.php");
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 $g5['title'] = '게시판 복사';
 include_once(G5_PATH.'/head.sub.php');
@@ -31,7 +31,7 @@ include_once(G5_PATH.'/head.sub.php');
             </tr>
             <tr>
                 <th scope="col"><label for="target_subject">게시판 제목<strong class="sound_only">필수</strong></label></th>
-                <td><input type="text" name="target_subject" value="[복사본] <?php echo get_sanitize_input($board['bo_subject']); ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
+                <td><input type="text" name="target_subject" value="[복사본] <?php echo $board['bo_subject'] ?>" id="target_subject" required class="required frm_input" maxlength="120"></td>
             </tr>
             <tr>
                 <th scope="col">복사 유형</th>
@@ -58,19 +58,6 @@ include_once(G5_PATH.'/head.sub.php');
 <script>
 function fboardcopy_check(f)
 {
-    <?php
-    if(!$w){
-    $js_array = get_bo_table_banned_word();
-    echo "var banned_array = ". json_encode($js_array) . ";\n";
-    }
-    ?>
-
-    // 게시판명이 금지된 단어로 되어 있으면
-    if( (typeof banned_array != 'undefined') && jQuery.inArray(f.target_table.value, banned_array) !== -1 ){
-        alert("입력한 게시판 TABLE명을 사용할수 없습니다. 다른 이름으로 입력해 주세요.");
-        return false;
-    }
-
     if (f.bo_table.value == f.target_table.value) {
         alert("원본 테이블명과 복사할 테이블명이 달라야 합니다.");
         return false;
@@ -82,4 +69,5 @@ function fboardcopy_check(f)
 
 
 <?php
-include_once(G5_PATH.'/tail.sub.php');
+include_once(G5_PATH.'/tail.sub.php');
+?>

adm/board_copy_update.php

@@ -4,24 +4,17 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$target_table   = isset($_POST['target_table']) ? trim($_POST['target_table']) : '';
-$target_subject = isset($_POST['target_subject']) ? trim($_POST['target_subject']) : '';
-
-$target_subject = strip_tags(clean_xss_attributes($target_subject));
+$target_table   = trim($_POST['target_table']);
+$target_subject = trim($_POST['target_subject']);
 
 if (!preg_match('/[A-Za-z0-9_]{1,20}/', $target_table)) {
     alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)');
 }
 
-// 게시판명이 금지된 단어로 되어 있으면
-if ( $w == '' && in_array($target_table, get_bo_table_banned_word()) ){
-    alert('입력한 게시판 TABLE명을 사용할수 없습니다. 다른 이름으로 입력해 주세요.');
-}
-
 $row = sql_fetch(" select count(*) as cnt from {$g5['board_table']} where bo_table = '$target_table' ");
 if ($row['cnt'])
     alert($target_table.'은(는) 이미 존재하는 게시판 테이블명 입니다.\\n복사할 테이블명으로 사용할 수 없습니다.');
@@ -74,7 +67,6 @@ $sql = " insert into {$g5['board_table']}
                 bo_use_ip_view = '{$board['bo_use_ip_view']}',
                 bo_use_list_view = '{$board['bo_use_list_view']}',
                 bo_use_list_content = '{$board['bo_use_list_content']}',
-                bo_use_list_file = '{$board['bo_use_list_file']}',
                 bo_table_width = '{$board['bo_table_width']}',
                 bo_subject_len = '{$board['bo_subject_len']}',
                 bo_mobile_subject_len = '{$board['bo_mobile_subject_len']}',
@@ -168,8 +160,6 @@ if ($copy_case == 'schema_data_both') {
         }
     }
     $d->close();
-    
-    run_event('admin_board_copy_file', $bo_table, $target_table);
 
     // 글복사
     $sql = " insert into {$g5['write_prefix']}$target_table select * from {$g5['write_prefix']}$bo_table ";
@@ -191,9 +181,6 @@ if ($copy_case == 'schema_data_both') {
 
 if (count($file_copy)) {
     for ($i=0; $i<count($file_copy); $i++) {
-
-        $file_copy[$i] = run_replace('admin_copy_update_file', $file_copy[$i], $file_copy[$i]['bf_file'], $bo_table, $target_table);
-
         $sql = " insert into {$g5['board_file_table']}
                     set bo_table = '$target_table',
                          wr_id = '{$file_copy[$i]['wr_id']}',
@@ -202,15 +189,11 @@ if (count($file_copy)) {
                          bf_file = '{$file_copy[$i]['bf_file']}',
                          bf_download = '{$file_copy[$i]['bf_download']}',
                          bf_content = '".addslashes($file_copy[$i]['bf_content'])."',
-                         bf_fileurl = '".addslashes($file_copy[$i]['bf_fileurl'])."',
-                         bf_thumburl = '".addslashes($file_copy[$i]['bf_thumburl'])."',
-                         bf_storage = '".addslashes($file_copy[$i]['bf_storage'])."',
                          bf_filesize = '{$file_copy[$i]['bf_filesize']}',
                          bf_width = '{$file_copy[$i]['bf_width']}',
                          bf_height = '{$file_copy[$i]['bf_height']}',
                          bf_type = '{$file_copy[$i]['bf_type']}',
                          bf_datetime = '{$file_copy[$i]['bf_datetime']}' ";
-
         sql_query($sql, false);
     }
 }
@@ -221,3 +204,4 @@ delete_cache_latest($target_table);
 echo "<script>opener.document.location.reload();</script>";
 
 alert("복사에 성공 했습니다.", './board_copy.php?bo_table='.$bo_table.'&amp;'.$qstr);
+?>

adm/board_delete.inc.php

@@ -26,10 +26,8 @@ sql_query(" delete from {$g5['board_file_table']} where bo_table = '{$tmp_bo_tab
 // 게시판 테이블 DROP
 sql_query(" drop table {$g5['write_prefix']}{$tmp_bo_table} ", FALSE);
 
-// 좋아요 테이블에서 기록 삭제
-sql_query(" delete from {$g5['board_good_table']} where bo_table = '{$tmp_bo_table}' ");
-
 delete_cache_latest($tmp_bo_table);
 
 // 게시판 폴더 전체 삭제
-rm_rf(G5_DATA_PATH.'/file/'.$tmp_bo_table);
+rm_rf(G5_DATA_PATH.'/file/'.$tmp_bo_table);
+?>

adm/board_form.php

@@ -3,7 +3,7 @@ $sub_menu = "300100";
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 $sql = " select count(*) as cnt from {$g5['group_table']} ";
 $row = sql_fetch($sql);
@@ -11,8 +11,6 @@ if (!$row['cnt'])
     alert('게시판그룹이 한개 이상 생성되어야 합니다.', './boardgroup_form.php');
 
 $html_title = '게시판';
-$reaonly = '';
-$required_valid = '';
 
 if (!isset($board['bo_device'])) {
     // 게시판 사용 필드 추가
@@ -79,69 +77,11 @@ if (!isset($board['bo_mobile_subject'])) {
 }
 
 if (!isset($board['bo_use_captcha'])) {
-    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_use_captcha` TINYINT NOT NULL DEFAULT '0' AFTER `bo_use_sns` ", false);
+    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_use_captcha` TINYINT NOT NULL DEFAULT '0' AFTER `bo_use_sns` ");
 }
 
-if (!isset($board['bo_select_editor'])) {
-    sql_query(" ALTER TABLE `{$g5['board_table']}` ADD `bo_select_editor` VARCHAR(50) NOT NULL DEFAULT '' AFTER `bo_use_dhtml_editor` ", false);
-}
-
-$board_default = array(
-'bo_mobile_subject'=>'',
-'bo_device'=>'',
-'bo_use_category'=>0,
-'bo_category_list'=>'',
-'bo_admin'=>'',
-'bo_list_level'=>0,
-'bo_read_level'=>0,
-'bo_write_level'=>0,
-'bo_reply_level'=>0,
-'bo_comment_level'=>0,
-'bo_link_level'=>0,
-'bo_upload_level'=>0,
-'bo_download_level'=>0,
-'bo_html_level'=>0,
-'bo_use_sideview'=>0,
-'bo_select_editor'=>'',
-'bo_use_rss_view'=>0,
-'bo_use_good'=>0,
-'bo_use_nogood'=>0,
-'bo_use_name'=>0,
-'bo_use_signature'=>0,
-'bo_use_ip_view'=>0,
-'bo_use_list_content'=>0,
-'bo_use_list_file'=>0,
-'bo_use_list_view'=>0,
-'bo_use_email'=>0,
-'bo_use_file_content'=>0,
-'bo_use_cert'=>'',
-'bo_write_min'=>0,
-'bo_write_max'=>0,
-'bo_comment_min'=>0,
-'bo_comment_max'=>0,
-'bo_use_sns'=>0,
-'bo_order'=>0,
-'bo_use_captcha'=>0,
-'bo_content_head'=>'',
-'bo_content_tail'=>'',
-'bo_mobile_content_head'=>'',
-'bo_mobile_content_tail'=>'',
-'bo_insert_content'=>'',
-'bo_sort_field'=>'',
-);
-
-for($i=0;$i<=10;$i++){
-    $board_default['bo_'.$i.'_subj'] = '';
-    $board_default['bo_'.$i] = '';
-}
-
-$board = array_merge($board_default, $board);
-
-run_event('adm_board_form_before', $board, $w);
-
 $required = "";
 $readonly = "";
-$sound_only = "";
 if ($w == '') {
 
     $html_title .= ' 생성';
@@ -241,11 +181,11 @@ $pg_anchor = '<ul class="anchor">
         <tr>
             <th scope="row"><label for="bo_table">TABLE<?php echo $sound_only ?></label></th>
             <td colspan="2">
-                <input type="text" name="bo_table" value="<?php echo $board['bo_table'] ?>" id="bo_table" <?php echo $required ?> <?php echo $readonly ?> class="frm_input <?php echo $readonly ?> <?php echo $required ?> <?php echo $required_valid ?>" maxlength="20">
+                <input type="text" name="bo_table" value="<?php echo $board['bo_table'] ?>" id="bo_table" <?php echo $required ?> <?php echo $readonly ?> class="frm_input <?php echo $reaonly ?> <?php echo $required ?> <?php echo $required_valid ?>" maxlength="20">
                 <?php if ($w == '') { ?>
                     영문자, 숫자, _ 만 가능 (공백없이 20자 이내)
                 <?php } else { ?>
-                    <a href="<?php echo get_pretty_url($board['bo_table']) ?>" class="btn_frmline">게시판 바로가기</a>
+                    <a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $board['bo_table'] ?>" class="btn_frmline">게시판 바로가기</a>
                     <a href="./board_list.php?<?php echo $qstr;?>" class="btn_frmline">목록으로</a>
                 <?php } ?>
             </td>
@@ -541,27 +481,6 @@ $pg_anchor = '<ul class="anchor">
                 <label for="chk_all_use_dhtml_editor">전체적용</label>
             </td>
         </tr>
-        <tr>
-            <th scope="row"><label for="bo_select_editor">게시판 에디터 선택</label></th>
-            <td>
-                <?php echo help('게시판에 사용할 에디터를 설정합니다. 스킨에 따라 적용되지 않을 수 있습니다.') ?>
-                <select name="bo_select_editor" id="bo_select_editor">
-                <?php
-                $arr = get_skin_dir('', G5_EDITOR_PATH);
-                for ($i=0; $i<count($arr); $i++) {
-                    if ($i == 0) echo "<option value=\"\">기본환경설정의 에디터 사용</option>";
-                    echo "<option value=\"".$arr[$i]."\"".get_selected($board['bo_select_editor'], $arr[$i]).">".$arr[$i]."</option>\n";
-                }
-                ?>
-                </select>
-            </td>
-            <td class="td_grpset">
-                <input type="checkbox" name="chk_grp_select_editor" value="1" id="chk_grp_select_editor">
-                <label for="chk_grp_select_editor">그룹적용</label>
-                <input type="checkbox" name="chk_all_select_editor" value="1" id="chk_all_select_editor">
-                <label for="chk_all_select_editor">전체적용</label>
-            </td>
-        </tr>
         <tr>
             <th scope="row"><label for="bo_use_rss_view">RSS 보이기 사용</label></th>
             <td>
@@ -1195,23 +1114,25 @@ $pg_anchor = '<ul class="anchor">
             <td>
                 <?php echo help('리스트에서 기본으로 정렬에 사용할 필드를 선택합니다. "기본"으로 사용하지 않으시는 경우 속도가 느려질 수 있습니다.') ?>
                 <select id="bo_sort_field" name="bo_sort_field">
-                    <?php foreach( get_board_sort_fields($board) as $v ){
-                        
-                        $option_value = $order_by_str = $v[0];
-                        if( $v[0] === 'wr_num, wr_reply' ){
-                            $selected = (! $board['bo_sort_field']) ? 'selected="selected"' : '';
-                            $option_value = '';
-                        } else {
-                            $selected = ($board['bo_sort_field'] === $v[0]) ? 'selected="selected"' : '';
-                        }
-                        
-                        if( $order_by_str !== 'wr_num, wr_reply' ){
-                            $tmp = explode(',', $v[0]);
-                            $order_by_str = $tmp[0];
-                        }
-
-                        echo '<option value="'.$option_value.'" '.$selected.' >'.$order_by_str.' : '.$v[1].'</option>';
-                    } //end foreach ?>
+                    <option value="" <?php echo get_selected($board['bo_sort_field'], ""); ?>>wr_num, wr_reply : 기본</option>
+                    <option value="wr_datetime asc" <?php echo get_selected($board['bo_sort_field'], "wr_datetime asc"); ?>>wr_datetime asc : 날짜 이전것 부터</option>
+                    <option value="wr_datetime desc" <?php echo get_selected($board['bo_sort_field'], "wr_datetime desc"); ?>>wr_datetime desc : 날짜 최근것 부터</option>
+                    <option value="wr_hit asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_hit asc, wr_num, wr_reply"); ?>>wr_hit asc : 조회수 낮은것 부터</option>
+                    <option value="wr_hit desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_hit desc, wr_num, wr_reply"); ?>>wr_hit desc : 조회수 높은것 부터</option>
+                    <option value="wr_last asc" <?php echo get_selected($board['bo_sort_field'], "wr_last asc"); ?>>wr_last asc : 최근글 이전것 부터</option>
+                    <option value="wr_last desc" <?php echo get_selected($board['bo_sort_field'], "wr_last desc"); ?>>wr_last desc : 최근글 최근것 부터</option>
+                    <option value="wr_comment asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_comment asc, wr_num, wr_reply"); ?>>wr_comment asc : 댓글수 낮은것 부터</option>
+                    <option value="wr_comment desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_comment desc, wr_num, wr_reply"); ?>>wr_comment desc : 댓글수 높은것 부터</option>
+                    <option value="wr_good asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_good asc, wr_num, wr_reply"); ?>>wr_good asc : 추천수 낮은것 부터</option>
+                    <option value="wr_good desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_good desc, wr_num, wr_reply"); ?>>wr_good desc : 추천수 높은것 부터</option>
+                    <option value="wr_nogood asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_nogood asc, wr_num, wr_reply"); ?>>wr_nogood asc : 비추천수 낮은것 부터</option>
+                    <option value="wr_nogood desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_nogood desc, wr_num, wr_reply"); ?>>wr_nogood desc : 비추천수 높은것 부터</option>
+                    <option value="wr_subject asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_subject asc, wr_num, wr_reply"); ?>>wr_subject asc : 제목 오름차순</option>
+                    <option value="wr_subject desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_subject desc, wr_num, wr_reply"); ?>>wr_subject desc : 제목 내림차순</option>
+                    <option value="wr_name asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_name asc, wr_num, wr_reply"); ?>>wr_name asc : 글쓴이 오름차순</option>
+                    <option value="wr_name desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "wr_name desc, wr_num, wr_reply"); ?>>wr_name desc : 글쓴이 내림차순</option>
+                    <option value="ca_name asc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "ca_name asc, wr_num, wr_reply"); ?>>ca_name asc : 분류명 오름차순</option>
+                    <option value="ca_name desc, wr_num, wr_reply" <?php echo get_selected($board['bo_sort_field'], "ca_name desc, wr_num, wr_reply"); ?>>ca_name desc : 분류명 내림차순</option>
                 </select>
             </td>
             <td class="td_grpset">
@@ -1340,7 +1261,7 @@ $pg_anchor = '<ul class="anchor">
 <div class="btn_fixed_top">
     <?php if( $bo_table && $w ){ ?>
         <a href="./board_copy.php?bo_table=<?php echo $board['bo_table']; ?>" id="board_copy" target="win_board_copy" class=" btn_02 btn">게시판복사</a>
-        <a href="<?php echo get_pretty_url($board['bo_table']); ?>" class=" btn_02 btn">게시판 바로가기</a>
+        <a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $board['bo_table']; ?>" class=" btn_02 btn">게시판 바로가기</a>
         <a href="./board_thumbnail_delete.php?bo_table=<?php echo $board['bo_table'].'&amp;'.$qstr;?>" onclick="return delete_confirm2('게시판 썸네일 파일을 삭제하시겠습니까?');" class="btn_02 btn">게시판 썸네일 삭제</a>
     <?php } ?>
     <input type="submit" value="확인" class="btn_submi btn btn_01" accesskey="s">
@@ -1453,19 +1374,6 @@ jQuery(function($){
 
 function fboardform_submit(f)
 {
-    <?php
-    if(!$w){
-    $js_array = get_bo_table_banned_word();
-    echo "var banned_array = ". json_encode($js_array) . ";\n";
-    }
-    ?>
-
-    // 게시판명이 금지된 단어로 되어 있으면
-    if( (typeof banned_array != 'undefined') && jQuery.inArray(f.bo_table.value, banned_array) !== -1 ){
-        alert("입력한 게시판 TABLE명을 사용할수 없습니다. 다른 이름으로 입력해 주세요.");
-        return false;
-    }
-
     <?php echo get_editor_js("bo_content_head"); ?>
     <?php echo get_editor_js("bo_content_tail"); ?>
     <?php echo get_editor_js("bo_mobile_content_head"); ?>
@@ -1492,4 +1400,5 @@ function fboardform_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/board_form_update.php

@@ -5,27 +5,20 @@ include_once('./_common.php');
 if ($w == 'u')
     check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
 $gr_id = isset($_POST['gr_id']) ? preg_replace('/[^a-z0-9_]/i', '', $_POST['gr_id']) : '';
 $bo_admin = isset($_POST['bo_admin']) ? preg_replace('/[^a-z0-9_\, \|\#]/i', '', $_POST['bo_admin']) : '';
-$bo_subject = isset($_POST['bo_subject']) ? strip_tags(clean_xss_attributes($_POST['bo_subject'])) : '';
-$bo_mobile_subject = isset($_POST['bo_mobile_subject']) ? strip_tags(clean_xss_attributes($_POST['bo_mobile_subject'])) : '';
 
 if (!$gr_id) { alert('그룹 ID는 반드시 선택하세요.'); }
 if (!$bo_table) { alert('게시판 TABLE명은 반드시 입력하세요.'); }
 if (!preg_match("/^([A-Za-z0-9_]{1,20})$/", $bo_table)) { alert('게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)'); }
-if (!$bo_subject) { alert('게시판 제목을 입력하세요.'); }
+if (!$_POST['bo_subject']) { alert('게시판 제목을 입력하세요.'); }
 
-// 게시판명이 금지된 단어로 되어 있으면
-if ( $w == '' && in_array($bo_table, get_bo_table_banned_word()) ){
-    alert('입력한 게시판 TABLE명을 사용할수 없습니다. 다른 이름으로 입력해 주세요.');
-}
-
-$bo_include_head = isset($_POST['bo_include_head']) ? preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($_POST['bo_include_head'], 0, 255)) : '';
-$bo_include_tail = isset($_POST['bo_include_tail']) ? preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($_POST['bo_include_tail'], 0, 255)) : '';
+$bo_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($bo_include_head, 0, 255));
+$bo_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($bo_include_tail, 0, 255));
 
 // 관리자가 자동등록방지를 사용해야 할 경우
 if ($board && ($board['bo_include_head'] !== $bo_include_head || $board['bo_include_tail'] !== $bo_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
@@ -42,6 +35,7 @@ if ($file = $bo_include_head) {
     if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $file) ) {
         alert('상단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
     }
+    $_POST['bo_include_head'] = $file;
 }
 
 if ($file = $bo_include_tail) {
@@ -50,6 +44,7 @@ if ($file = $bo_include_tail) {
     if( ! $file_ext || ! in_array($file_ext, array('php', 'htm', 'html')) || ! preg_match('/^.*\.(php|htm|html)$/i', $file) ) {
         alert('하단 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
     }
+    $_POST['bo_include_tail'] = $file;
 }
 
 if(!is_include_path_check($bo_include_head, 1)) {
@@ -60,11 +55,6 @@ if(!is_include_path_check($bo_include_tail, 1)) {
     alert('하단 파일 경로에 포함시킬수 없는 문자열이 있습니다.');
 }
 
-if( function_exists('filter_input_include_path') ){
-    $bo_include_head = filter_input_include_path($bo_include_head);
-    $bo_include_tail = filter_input_include_path($bo_include_tail);
-}
-
 $board_path = G5_DATA_PATH.'/file/'.$bo_table;
 
 // 게시판 디렉토리 생성
@@ -73,191 +63,119 @@ $board_path = G5_DATA_PATH.'/file/'.$bo_table;
 
 // 디렉토리에 있는 파일의 목록을 보이지 않게 한다.
 $file = $board_path . '/index.php';
-if( $f = @fopen($file, 'w') ){
-    @fwrite($f, '');
-    @fclose($f);
-    @chmod($file, G5_FILE_PERMISSION);
-}
+$f = @fopen($file, 'w');
+@fwrite($f, '');
+@fclose($f);
+@chmod($file, G5_FILE_PERMISSION);
 
 // 분류에 & 나 = 는 사용이 불가하므로 2바이트로 바꾼다.
 $src_char = array('&', '=');
 $dst_char = array('＆', '〓');
-$bo_category_list = isset($_POST['bo_category_list']) ? str_replace($src_char, $dst_char, $_POST['bo_category_list']) : '';
+$bo_category_list = str_replace($src_char, $dst_char, $bo_category_list);
 //https://github.com/gnuboard/gnuboard5/commit/f5f4925d4eb28ba1af728e1065fc2bdd9ce1da58 에 따른 조치
-$str_bo_category_list = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $bo_category_list);
+$str_bo_category_list = isset($_POST['bo_category_list']) ? preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $_POST['bo_category_list']) : '';
 
-$bo_use_category = isset($_POST['bo_use_category']) ? (int) $_POST['bo_use_category'] : 0;
-$bo_use_sideview = isset($_POST['bo_use_sideview']) ? (int) $_POST['bo_use_sideview'] : 0;
-$bo_use_dhtml_editor = isset($_POST['bo_use_dhtml_editor']) ? (int) $_POST['bo_use_dhtml_editor'] : 0;
-$bo_use_good = isset($_POST['bo_use_good']) ? (int) $_POST['bo_use_good'] : 0;
-$bo_use_nogood = isset($_POST['bo_use_nogood']) ? (int) $_POST['bo_use_nogood'] : 0;
-$bo_use_name = isset($_POST['bo_use_name']) ? (int) $_POST['bo_use_name'] : 0;
-$bo_use_signature = isset($_POST['bo_use_signature']) ? (int) $_POST['bo_use_signature'] : 0;
-$bo_use_ip_view = isset($_POST['bo_use_ip_view']) ? (int) $_POST['bo_use_ip_view'] : 0;
-$bo_use_list_view = isset($_POST['bo_use_list_view']) ? (int) $_POST['bo_use_list_view'] : 0;
-$bo_use_list_file = isset($_POST['bo_use_list_file']) ? (int) $_POST['bo_use_list_file'] : 0;
-$bo_use_list_content = isset($_POST['bo_use_list_content']) ? (int) $_POST['bo_use_list_content'] : 0;
-$bo_use_email = isset($_POST['bo_use_email']) ? (int) $_POST['bo_use_email'] : 0;
-$bo_use_sns = isset($_POST['bo_use_sns']) ? (int) $_POST['bo_use_sns'] : 0;
-$bo_use_captcha = isset($_POST['bo_use_captcha']) ? (int) $_POST['bo_use_captcha'] : 0;
-$bo_table_width = isset($_POST['bo_table_width']) ? (int) $_POST['bo_table_width'] : 0;
-$bo_subject_len = isset($_POST['bo_subject_len']) ? (int) $_POST['bo_subject_len'] : 0;
-$bo_mobile_subject_len = isset($_POST['bo_mobile_subject_len']) ? (int) $_POST['bo_mobile_subject_len'] : 0;
-$bo_page_rows = isset($_POST['bo_page_rows']) ? (int) $_POST['bo_page_rows'] : 0;
-$bo_mobile_page_rows = isset($_POST['bo_mobile_page_rows']) ? (int) $_POST['bo_mobile_page_rows'] : 0;
-$bo_use_rss_view = isset($_POST['bo_use_rss_view']) ? (int) $_POST['bo_use_rss_view'] : 0;
-$bo_use_secret = isset($_POST['bo_use_secret']) ? (int) $_POST['bo_use_secret'] : 0;
-$bo_use_file_content = isset($_POST['bo_use_file_content']) ? (int) $_POST['bo_use_file_content'] : 0;
-$bo_new = isset($_POST['bo_new']) ? (int) $_POST['bo_new'] : 0;
-$bo_hot = isset($_POST['bo_hot']) ? (int) $_POST['bo_hot'] : 0;
-$bo_image_width = isset($_POST['bo_image_width']) ? (int) $_POST['bo_image_width'] : 0;
-$bo_use_search = isset($_POST['bo_use_search']) ? (int) $_POST['bo_use_search'] : 0;
-$bo_use_cert = isset($_POST['bo_use_cert']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['bo_use_cert']) : '';
-$bo_device = isset($_POST['bo_device']) ? clean_xss_tags($_POST['bo_device'], 1, 1) : '';
-$bo_list_level = isset($_POST['bo_list_level']) ? (int) $_POST['bo_list_level'] : 0;
-$bo_read_level = isset($_POST['bo_read_level']) ? (int) $_POST['bo_read_level'] : 0;
-$bo_write_level = isset($_POST['bo_write_level']) ? (int) $_POST['bo_write_level'] : 0;
-$bo_reply_level = isset($_POST['bo_reply_level']) ? (int) $_POST['bo_reply_level'] : 0;
-$bo_comment_level = isset($_POST['bo_comment_level']) ? (int) $_POST['bo_comment_level'] : 0;
-$bo_html_level = isset($_POST['bo_html_level']) ? (int) $_POST['bo_html_level'] : 0;
-$bo_link_level = isset($_POST['bo_link_level']) ? (int) $_POST['bo_link_level'] : 0;
-$bo_count_modify = isset($_POST['bo_count_modify']) ? (int) $_POST['bo_count_modify'] : 0;
-$bo_count_delete = isset($_POST['bo_count_delete']) ? (int) $_POST['bo_count_delete'] : 0;
-$bo_upload_level = isset($_POST['bo_upload_level']) ? (int) $_POST['bo_upload_level'] : 0;
-$bo_download_level = isset($_POST['bo_download_level']) ? (int) $_POST['bo_download_level'] : 0;
-$bo_read_point = isset($_POST['bo_read_point']) ? (int) $_POST['bo_read_point'] : 0;
-$bo_write_point = isset($_POST['bo_write_point']) ? (int) $_POST['bo_write_point'] : 0;
-$bo_comment_point = isset($_POST['bo_comment_point']) ? (int) $_POST['bo_comment_point'] : 0;
-$bo_download_point = isset($_POST['bo_download_point']) ? (int) $_POST['bo_download_point'] : 0;
-$bo_select_editor = isset($_POST['bo_select_editor']) ? clean_xss_tags($_POST['bo_select_editor'], 1, 1) : '';
-$bo_skin = isset($_POST['bo_skin']) ? clean_xss_tags($_POST['bo_skin'], 1, 1) : '';
-$bo_mobile_skin = isset($_POST['bo_mobile_skin']) ? clean_xss_tags($_POST['bo_mobile_skin'], 1, 1) : '';
-$bo_content_head = isset($_POST['bo_content_head']) ? $_POST['bo_content_head'] : '';
-$bo_content_tail = isset($_POST['bo_content_tail']) ? $_POST['bo_content_tail'] : '';
-$bo_mobile_content_head = isset($_POST['bo_mobile_content_head']) ? $_POST['bo_mobile_content_head'] : '';
-$bo_mobile_content_tail = isset($_POST['bo_mobile_content_tail']) ? $_POST['bo_mobile_content_tail'] : '';
-$bo_insert_content = isset($_POST['bo_insert_content']) ? $_POST['bo_insert_content'] : '';
-$bo_gallery_cols = isset($_POST['bo_gallery_cols']) ? (int) $_POST['bo_gallery_cols'] : 0;
-$bo_gallery_width = isset($_POST['bo_gallery_width']) ? (int) $_POST['bo_gallery_width'] : 0;
-$bo_gallery_height = isset($_POST['bo_gallery_height']) ? (int) $_POST['bo_gallery_height'] : 0;
-$bo_mobile_gallery_width = isset($_POST['bo_mobile_gallery_width']) ? (int) $_POST['bo_mobile_gallery_width'] : 0;
-$bo_mobile_gallery_height = isset($_POST['bo_mobile_gallery_height']) ? (int) $_POST['bo_mobile_gallery_height'] : 0;
-$bo_upload_count = isset($_POST['bo_upload_count']) ? (int) $_POST['bo_upload_count'] : 0;
-$bo_upload_size = isset($_POST['bo_upload_size']) ? (int) $_POST['bo_upload_size'] : 0;
-$bo_reply_order = isset($_POST['bo_reply_order']) ? (int) $_POST['bo_reply_order'] : 0;
-$bo_order = isset($_POST['bo_order']) ? (int) $_POST['bo_order'] : 0;
-$bo_write_min = isset($_POST['bo_write_min']) ? (int) $_POST['bo_write_min'] : 0;
-$bo_write_max = isset($_POST['bo_write_max']) ? (int) $_POST['bo_write_max'] : 0;
-$bo_comment_min = isset($_POST['bo_comment_min']) ? (int) $_POST['bo_comment_min'] : 0;
-$bo_comment_max = isset($_POST['bo_comment_max']) ? (int) $_POST['bo_comment_max'] : 0;
-$bo_sort_field = isset($_POST['bo_sort_field']) ? clean_xss_tags($_POST['bo_sort_field'], 1, 1) : '';
-
-$etcs = array();
-
-for($i=1;$i<=10;$i++){
-    $etcs['bo_'.$i.'_subj'] = ${'bo_'.$i.'_subj'} = isset($_POST['bo_'.$i.'_subj']) ? $_POST['bo_'.$i.'_subj'] : '';
-    $etcs['bo_'.$i] = ${'bo_'.$i} = isset($_POST['bo_'.$i]) ? $_POST['bo_'.$i] : '';
-}
+$_POST['bo_subject'] = strip_tags($_POST['bo_subject']);
+$_POST['bo_mobile_subject'] = strip_tags($_POST['bo_mobile_subject']);
 
 $sql_common = " gr_id               = '{$gr_id}',
-                bo_subject          = '{$bo_subject}',
-                bo_mobile_subject   = '{$bo_mobile_subject}',
-                bo_device           = '{$bo_device}',
+                bo_subject          = '{$_POST['bo_subject']}',
+                bo_mobile_subject   = '{$_POST['bo_mobile_subject']}',
+                bo_device           = '{$_POST['bo_device']}',
                 bo_admin            = '{$bo_admin}',
-                bo_list_level       = '{$bo_list_level}',
-                bo_read_level       = '{$bo_read_level}',
-                bo_write_level      = '{$bo_write_level}',
-                bo_reply_level      = '{$bo_reply_level}',
-                bo_comment_level    = '{$bo_comment_level}',
-                bo_html_level       = '{$bo_html_level}',
-                bo_link_level       = '{$bo_link_level}',
-                bo_count_modify     = '{$bo_count_modify}',
-                bo_count_delete     = '{$bo_count_delete}',
-                bo_upload_level     = '{$bo_upload_level}',
-                bo_download_level   = '{$bo_download_level}',
-                bo_read_point       = '{$bo_read_point}',
-                bo_write_point      = '{$bo_write_point}',
-                bo_comment_point    = '{$bo_comment_point}',
-                bo_download_point   = '{$bo_download_point}',
-                bo_use_category     = '{$bo_use_category}',
+                bo_list_level       = '{$_POST['bo_list_level']}',
+                bo_read_level       = '{$_POST['bo_read_level']}',
+                bo_write_level      = '{$_POST['bo_write_level']}',
+                bo_reply_level      = '{$_POST['bo_reply_level']}',
+                bo_comment_level    = '{$_POST['bo_comment_level']}',
+                bo_html_level       = '{$_POST['bo_html_level']}',
+                bo_link_level       = '{$_POST['bo_link_level']}',
+                bo_count_modify     = '{$_POST['bo_count_modify']}',
+                bo_count_delete     = '{$_POST['bo_count_delete']}',
+                bo_upload_level     = '{$_POST['bo_upload_level']}',
+                bo_download_level   = '{$_POST['bo_download_level']}',
+                bo_read_point       = '{$_POST['bo_read_point']}',
+                bo_write_point      = '{$_POST['bo_write_point']}',
+                bo_comment_point    = '{$_POST['bo_comment_point']}',
+                bo_download_point   = '{$_POST['bo_download_point']}',
+                bo_use_category     = '{$_POST['bo_use_category']}',
                 bo_category_list    = '{$str_bo_category_list}',
-                bo_use_sideview     = '{$bo_use_sideview}',
-                bo_use_file_content = '{$bo_use_file_content}',
-                bo_use_secret       = '{$bo_use_secret}',
-                bo_use_dhtml_editor = '{$bo_use_dhtml_editor}',
-                bo_select_editor    = '{$bo_select_editor}',
-                bo_use_rss_view     = '{$bo_use_rss_view}',
-                bo_use_good         = '{$bo_use_good}',
-                bo_use_nogood       = '{$bo_use_nogood}',
-                bo_use_name         = '{$bo_use_name}',
-                bo_use_signature    = '{$bo_use_signature}',
-                bo_use_ip_view      = '{$bo_use_ip_view}',
-                bo_use_list_view    = '{$bo_use_list_view}',
-                bo_use_list_file    = '{$bo_use_list_file}',
-                bo_use_list_content = '{$bo_use_list_content}',
-                bo_use_email        = '{$bo_use_email}',
-                bo_use_cert         = '{$bo_use_cert}',
-                bo_use_sns          = '{$bo_use_sns}',
-                bo_use_captcha      = '{$bo_use_captcha}',
-                bo_table_width      = '{$bo_table_width}',
-                bo_subject_len      = '{$bo_subject_len}',
-                bo_mobile_subject_len      = '{$bo_mobile_subject_len}',
-                bo_page_rows        = '{$bo_page_rows}',
-                bo_mobile_page_rows = '{$bo_mobile_page_rows}',
-                bo_new              = '{$bo_new}',
-                bo_hot              = '{$bo_hot}',
-                bo_image_width      = '{$bo_image_width}',
-                bo_skin             = '{$bo_skin}',
-                bo_mobile_skin      = '{$bo_mobile_skin}',
+                bo_use_sideview     = '{$_POST['bo_use_sideview']}',
+                bo_use_file_content = '{$_POST['bo_use_file_content']}',
+                bo_use_secret       = '{$_POST['bo_use_secret']}',
+                bo_use_dhtml_editor = '{$_POST['bo_use_dhtml_editor']}',
+                bo_use_rss_view     = '{$_POST['bo_use_rss_view']}',
+                bo_use_good         = '{$_POST['bo_use_good']}',
+                bo_use_nogood       = '{$_POST['bo_use_nogood']}',
+                bo_use_name         = '{$_POST['bo_use_name']}',
+                bo_use_signature    = '{$_POST['bo_use_signature']}',
+                bo_use_ip_view      = '{$_POST['bo_use_ip_view']}',
+                bo_use_list_view    = '{$_POST['bo_use_list_view']}',
+                bo_use_list_file    = '{$_POST['bo_use_list_file']}',
+                bo_use_list_content = '{$_POST['bo_use_list_content']}',
+                bo_use_email        = '{$_POST['bo_use_email']}',
+                bo_use_cert         = '{$_POST['bo_use_cert']}',
+                bo_use_sns          = '{$_POST['bo_use_sns']}',
+                bo_use_captcha      = '{$_POST['bo_use_captcha']}',
+                bo_table_width      = '{$_POST['bo_table_width']}',
+                bo_subject_len      = '{$_POST['bo_subject_len']}',
+                bo_mobile_subject_len      = '{$_POST['bo_mobile_subject_len']}',
+                bo_page_rows        = '{$_POST['bo_page_rows']}',
+                bo_mobile_page_rows = '{$_POST['bo_mobile_page_rows']}',
+                bo_new              = '{$_POST['bo_new']}',
+                bo_hot              = '{$_POST['bo_hot']}',
+                bo_image_width      = '{$_POST['bo_image_width']}',
+                bo_skin             = '{$_POST['bo_skin']}',
+                bo_mobile_skin      = '{$_POST['bo_mobile_skin']}',
                 ";
 
 // 최고 관리자인 경우에만 수정가능
 if ($is_admin === 'super'){
 $sql_common .= " bo_include_head     = '".$bo_include_head."',
                 bo_include_tail     = '".$bo_include_tail."',
-                bo_content_head     = '{$bo_content_head}',
-                bo_content_tail     = '{$bo_content_tail}',
-                bo_mobile_content_head     = '{$bo_mobile_content_head}',
-                bo_mobile_content_tail     = '{$bo_mobile_content_tail}',
+                bo_content_head     = '{$_POST['bo_content_head']}',
+                bo_content_tail     = '{$_POST['bo_content_tail']}',
+                bo_mobile_content_head     = '{$_POST['bo_mobile_content_head']}',
+                bo_mobile_content_tail     = '{$_POST['bo_mobile_content_tail']}',
                 ";
 }
 
-$sql_common .= " bo_insert_content   = '{$bo_insert_content}',
-                bo_gallery_cols     = '{$bo_gallery_cols}',
-                bo_gallery_width    = '{$bo_gallery_width}',
-                bo_gallery_height   = '{$bo_gallery_height}',
-                bo_mobile_gallery_width = '{$bo_mobile_gallery_width}',
-                bo_mobile_gallery_height= '{$bo_mobile_gallery_height}',
-                bo_upload_count     = '{$bo_upload_count}',
-                bo_upload_size      = '{$bo_upload_size}',
-                bo_reply_order      = '{$bo_reply_order}',
-                bo_use_search       = '{$bo_use_search}',
-                bo_order            = '{$bo_order}',
-                bo_write_min        = '{$bo_write_min}',
-                bo_write_max        = '{$bo_write_max}',
-                bo_comment_min      = '{$bo_comment_min}',
-                bo_comment_max      = '{$bo_comment_max}',
-                bo_sort_field       = '{$bo_sort_field}',
-                bo_1_subj           = '{$bo_1_subj}',
-                bo_2_subj           = '{$bo_2_subj}',
-                bo_3_subj           = '{$bo_3_subj}',
-                bo_4_subj           = '{$bo_4_subj}',
-                bo_5_subj           = '{$bo_5_subj}',
-                bo_6_subj           = '{$bo_6_subj}',
-                bo_7_subj           = '{$bo_7_subj}',
-                bo_8_subj           = '{$bo_8_subj}',
-                bo_9_subj           = '{$bo_9_subj}',
-                bo_10_subj          = '{$bo_10_subj}',
-                bo_1                = '{$bo_1}',
-                bo_2                = '{$bo_2}',
-                bo_3                = '{$bo_3}',
-                bo_4                = '{$bo_4}',
-                bo_5                = '{$bo_5}',
-                bo_6                = '{$bo_6}',
-                bo_7                = '{$bo_7}',
-                bo_8                = '{$bo_8}',
-                bo_9                = '{$bo_9}',
-                bo_10               = '{$bo_10}' ";
+$sql_common .= " bo_insert_content   = '{$_POST['bo_insert_content']}',
+                bo_gallery_cols     = '{$_POST['bo_gallery_cols']}',
+                bo_gallery_width    = '{$_POST['bo_gallery_width']}',
+                bo_gallery_height   = '{$_POST['bo_gallery_height']}',
+                bo_mobile_gallery_width = '{$_POST['bo_mobile_gallery_width']}',
+                bo_mobile_gallery_height= '{$_POST['bo_mobile_gallery_height']}',
+                bo_upload_count     = '{$_POST['bo_upload_count']}',
+                bo_upload_size      = '{$_POST['bo_upload_size']}',
+                bo_reply_order      = '{$_POST['bo_reply_order']}',
+                bo_use_search       = '{$_POST['bo_use_search']}',
+                bo_order            = '{$_POST['bo_order']}',
+                bo_write_min        = '{$_POST['bo_write_min']}',
+                bo_write_max        = '{$_POST['bo_write_max']}',
+                bo_comment_min      = '{$_POST['bo_comment_min']}',
+                bo_comment_max      = '{$_POST['bo_comment_max']}',
+                bo_sort_field       = '{$_POST['bo_sort_field']}',
+                bo_1_subj           = '{$_POST['bo_1_subj']}',
+                bo_2_subj           = '{$_POST['bo_2_subj']}',
+                bo_3_subj           = '{$_POST['bo_3_subj']}',
+                bo_4_subj           = '{$_POST['bo_4_subj']}',
+                bo_5_subj           = '{$_POST['bo_5_subj']}',
+                bo_6_subj           = '{$_POST['bo_6_subj']}',
+                bo_7_subj           = '{$_POST['bo_7_subj']}',
+                bo_8_subj           = '{$_POST['bo_8_subj']}',
+                bo_9_subj           = '{$_POST['bo_9_subj']}',
+                bo_10_subj          = '{$_POST['bo_10_subj']}',
+                bo_1                = '{$_POST['bo_1']}',
+                bo_2                = '{$_POST['bo_2']}',
+                bo_3                = '{$_POST['bo_3']}',
+                bo_4                = '{$_POST['bo_4']}',
+                bo_5                = '{$_POST['bo_5']}',
+                bo_6                = '{$_POST['bo_6']}',
+                bo_7                = '{$_POST['bo_7']}',
+                bo_8                = '{$_POST['bo_8']}',
+                bo_9                = '{$_POST['bo_9']}',
+                bo_10               = '{$_POST['bo_10']}' ";
 
 if ($w == '') {
 
@@ -274,9 +192,7 @@ if ($w == '') {
 
     // 게시판 테이블 생성
     $file = file('./sql_write.sql');
-    $file = get_db_create_replace($file);
-
-    $sql = implode("\n", $file);
+    $sql = implode($file, "\n");
 
     $create_table = $g5['write_prefix'] . $bo_table;
 
@@ -366,14 +282,13 @@ if (is_checked('chk_grp_write_point'))          $grp_fields .= " , bo_write_poin
 if (is_checked('chk_grp_comment_point'))        $grp_fields .= " , bo_comment_point = '{$bo_comment_point}' ";
 if (is_checked('chk_grp_download_point'))       $grp_fields .= " , bo_download_point = '{$bo_download_point}' ";
 if (is_checked('chk_grp_category_list')) {
-    $grp_fields .= " , bo_category_list = '{$str_bo_category_list}' ";
+    $grp_fields .= " , bo_category_list = '{$bo_category_list}' ";
     $grp_fields .= " , bo_use_category = '{$bo_use_category}' ";
 }
 if (is_checked('chk_grp_use_sideview'))         $grp_fields .= " , bo_use_sideview = '{$bo_use_sideview}' ";
 if (is_checked('chk_grp_use_file_content'))     $grp_fields .= " , bo_use_file_content = '{$bo_use_file_content}' ";
 if (is_checked('chk_grp_use_secret'))           $grp_fields .= " , bo_use_secret = '{$bo_use_secret}' ";
 if (is_checked('chk_grp_use_dhtml_editor'))     $grp_fields .= " , bo_use_dhtml_editor = '{$bo_use_dhtml_editor}' ";
-if (is_checked('chk_grp_select_editor'))        $grp_fields .= " , bo_select_editor = '{$bo_select_editor}' ";
 if (is_checked('chk_grp_use_rss_view'))         $grp_fields .= " , bo_use_rss_view = '{$bo_use_rss_view}' ";
 if (is_checked('chk_grp_use_good'))             $grp_fields .= " , bo_use_good = '{$bo_use_good}' ";
 if (is_checked('chk_grp_use_nogood'))           $grp_fields .= " , bo_use_nogood = '{$bo_use_nogood}' ";
@@ -426,8 +341,8 @@ if (is_checked('chk_grp_use_search'))           $grp_fields .= " , bo_use_search
 if (is_checked('chk_grp_order'))                $grp_fields .= " , bo_order = '{$bo_order}' ";
 for ($i=1; $i<=10; $i++) {
     if (is_checked('chk_grp_'.$i)) {
-        $grp_fields .= " , bo_{$i}_subj = '".$etcs['bo_'.$i.'_subj']."' ";
-        $grp_fields .= " , bo_{$i} = '".$etcs['bo_'.$i]."' ";
+        $grp_fields .= " , bo_{$i}_subj = '".$_POST['bo_'.$i.'_subj']."' ";
+        $grp_fields .= " , bo_{$i} = '".$_POST['bo_'.$i]."' ";
     }
 }
 
@@ -456,14 +371,13 @@ if (is_checked('chk_all_write_point'))          $all_fields .= " , bo_write_poin
 if (is_checked('chk_all_comment_point'))        $all_fields .= " , bo_comment_point = '{$bo_comment_point}' ";
 if (is_checked('chk_all_download_point'))       $all_fields .= " , bo_download_point = '{$bo_download_point}' ";
 if (is_checked('chk_all_category_list')) {
-    $all_fields .= " , bo_category_list = '{$str_bo_category_list}' ";
+    $all_fields .= " , bo_category_list = '{$bo_category_list}' ";
     $all_fields .= " , bo_use_category = '{$bo_use_category}' ";
 }
 if (is_checked('chk_all_use_sideview'))         $all_fields .= " , bo_use_sideview = '{$bo_use_sideview}' ";
 if (is_checked('chk_all_use_file_content'))     $all_fields .= " , bo_use_file_content = '{$bo_use_file_content}' ";
 if (is_checked('chk_all_use_secret'))           $all_fields .= " , bo_use_secret = '{$bo_use_secret}' ";
 if (is_checked('chk_all_use_dhtml_editor'))     $all_fields .= " , bo_use_dhtml_editor = '{$bo_use_dhtml_editor}' ";
-if (is_checked('chk_all_select_editor'))        $all_fields .= " , bo_select_editor = '{$bo_select_editor}' ";
 if (is_checked('chk_all_use_rss_view'))         $all_fields .= " , bo_use_rss_view = '{$bo_use_rss_view}' ";
 if (is_checked('chk_all_use_good'))             $all_fields .= " , bo_use_good = '{$bo_use_good}' ";
 if (is_checked('chk_all_use_nogood'))           $all_fields .= " , bo_use_nogood = '{$bo_use_nogood}' ";
@@ -516,8 +430,8 @@ if (is_checked('chk_all_use_search'))           $all_fields .= " , bo_use_search
 if (is_checked('chk_all_order'))                $all_fields .= " , bo_order = '{$bo_order}' ";
 for ($i=1; $i<=10; $i++) {
     if (is_checked('chk_all_'.$i)) {
-        $all_fields .= " , bo_{$i}_subj = '".$etcs['bo_'.$i.'_subj']."' ";
-        $all_fields .= " , bo_{$i} = '".$etcs['bo_'.$i]."' ";
+        $all_fields .= " , bo_{$i}_subj = '".$_POST['bo_'.$i.'_subj']."' ";
+        $all_fields .= " , bo_{$i} = '".$_POST['bo_'.$i]."' ";
     }
 }
 
@@ -530,6 +444,5 @@ delete_cache_latest($bo_table);
 if(function_exists('get_admin_captcha_by'))
     get_admin_captcha_by('remove');
 
-run_event('admin_board_form_update', $bo_table, $w);
-
-goto_url("./board_form.php?w=u&bo_table={$bo_table}&amp;{$qstr}");
+goto_url("./board_form.php?w=u&bo_table={$bo_table}&amp;{$qstr}");
+?>

adm/board_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "300100";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $sql_common = " from {$g5['board_table']} a ";
 $sql_search = " where (1) ";
@@ -63,9 +63,9 @@ $colspan = 15;
 
 <label for="sfl" class="sound_only">검색대상</label>
 <select name="sfl" id="sfl">
-    <option value="bo_table"<?php echo get_selected($sfl, "bo_table", true); ?>>TABLE</option>
-    <option value="bo_subject"<?php echo get_selected($sfl, "bo_subject"); ?>>제목</option>
-    <option value="a.gr_id"<?php echo get_selected($sfl, "a.gr_id"); ?>>그룹ID</option>
+    <option value="bo_table"<?php echo get_selected($_GET['sfl'], "bo_table", true); ?>>TABLE</option>
+    <option value="bo_subject"<?php echo get_selected($_GET['sfl'], "bo_subject"); ?>>제목</option>
+    <option value="a.gr_id"<?php echo get_selected($_GET['sfl'], "a.gr_id"); ?>>그룹ID</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -81,7 +81,7 @@ $colspan = 15;
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>">
 <input type="hidden" name="stx" value="<?php echo $stx ?>">
 <input type="hidden" name="page" value="<?php echo $page ?>">
-<input type="hidden" name="token" value="<?php echo isset($token) ? $token : ''; ?>">
+<input type="hidden" name="token" value="<?php echo $token ?>">
 
 <div class="tbl_head01 tbl_wrap">
     <table>
@@ -131,7 +131,7 @@ $colspan = 15;
         </td>
         <td>
             <input type="hidden" name="board_table[<?php echo $i ?>]" value="<?php echo $row['bo_table'] ?>">
-            <a href="<?php echo get_pretty_url($row['bo_table']) ?>"><?php echo $row['bo_table'] ?></a>
+            <a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $row['bo_table'] ?>"><?php echo $row['bo_table'] ?></a>
         </td>
         <td>
             <label for="bo_skin_<?php echo $i; ?>" class="sound_only">스킨</label>
@@ -235,4 +235,5 @@ $(function(){
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/board_list_update.php

@@ -4,42 +4,24 @@ include_once('./_common.php');
 
 check_demo();
 
-$post_count_chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
-$chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? $_POST['chk'] : array();
-$act_button = isset($_POST['act_button']) ? strip_tags($_POST['act_button']) : '';
-$board_table = (isset($_POST['board_table']) && is_array($_POST['board_table'])) ? $_POST['board_table'] : array();
-
-if (! $post_count_chk) {
-    alert($act_button." 하실 항목을 하나 이상 체크하세요.");
+if (!count($_POST['chk'])) {
+    alert($_POST['act_button']." 하실 항목을 하나 이상 체크하세요.");
 }
 
 check_admin_token();
 
-if ($act_button === "선택수정") {
+if ($_POST['act_button'] == "선택수정") {
 
-    auth_check_menu($auth, $sub_menu, 'w');
+    auth_check($auth[$sub_menu], 'w');
 
-    for ($i=0; $i<$post_count_chk; $i++) {
+    for ($i=0; $i<count($_POST['chk']); $i++) {
 
         // 실제 번호를 넘김
-        $k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
-
-        $post_gr_id = isset($_POST['gr_id'][$k]) ? clean_xss_tags($_POST['gr_id'][$k], 1, 1) : '';
-        $post_bo_device = isset($_POST['bo_device'][$k]) ? clean_xss_tags($_POST['bo_device'][$k], 1, 1) : '';
-        $post_bo_skin = isset($_POST['bo_skin'][$k]) ? clean_xss_tags($_POST['bo_skin'][$k], 1, 1) : '';
-        $post_bo_mobile_skin = isset($_POST['bo_mobile_skin'][$k]) ? clean_xss_tags($_POST['bo_mobile_skin'][$k], 1, 1) : '';
-        $post_bo_read_point = isset($_POST['bo_read_point'][$k]) ? clean_xss_tags($_POST['bo_read_point'][$k], 1, 1) : '';
-        $post_bo_write_point = isset($_POST['bo_write_point'][$k]) ? clean_xss_tags($_POST['bo_write_point'][$k], 1, 1) : '';
-        $post_bo_comment_point = isset($_POST['bo_comment_point'][$k]) ? clean_xss_tags($_POST['bo_comment_point'][$k], 1, 1) : '';
-        $post_bo_download_point = isset($_POST['bo_download_point'][$k]) ? clean_xss_tags($_POST['bo_download_point'][$k], 1, 1) : '';
-        $post_bo_use_search = isset($_POST['bo_use_search'][$k]) ? clean_xss_tags($_POST['bo_use_search'][$k], 1, 1) : '';
-        $post_bo_use_sns = isset($_POST['bo_use_sns'][$k]) ? clean_xss_tags($_POST['bo_use_sns'][$k], 1, 1) : '';
-        $post_bo_order = isset($_POST['bo_order'][$k]) ? clean_xss_tags($_POST['bo_order'][$k], 1, 1) : '';
-        $post_board_table = isset($_POST['board_table'][$k]) ? clean_xss_tags($_POST['board_table'][$k], 1, 1) : '';
+        $k = $_POST['chk'][$i];
 
         if ($is_admin != 'super') {
             $sql = " select count(*) as cnt from {$g5['board_table']} a, {$g5['group_table']} b
-                      where a.gr_id = '".sql_real_escape_string($post_gr_id)."'
+                      where a.gr_id = '".sql_real_escape_string($_POST['gr_id'][$k])."'
                         and a.gr_id = b.gr_id
                         and b.gr_admin = '{$member['mb_id']}' ";
             $row = sql_fetch($sql);
@@ -47,42 +29,42 @@ if ($act_button === "선택수정") {
                 alert('최고관리자가 아닌 경우 다른 관리자의 게시판('.$board_table[$k].')은 수정이 불가합니다.');
         }
 
-        $p_bo_subject = is_array($_POST['bo_subject']) ? strip_tags(clean_xss_attributes($_POST['bo_subject'][$k])) : '';
+        $p_bo_subject = is_array($_POST['bo_subject']) ? strip_tags($_POST['bo_subject'][$k]) : '';
 
         $sql = " update {$g5['board_table']}
-                    set gr_id               = '".sql_real_escape_string($post_gr_id)."',
+                    set gr_id               = '".sql_real_escape_string(strip_tags($_POST['gr_id'][$k]))."',
                         bo_subject          = '".$p_bo_subject."',
-                        bo_device           = '".sql_real_escape_string($post_bo_device)."',
-                        bo_skin             = '".sql_real_escape_string($post_bo_skin)."',
-                        bo_mobile_skin      = '".sql_real_escape_string($post_bo_mobile_skin)."',
-                        bo_read_point       = '".sql_real_escape_string($post_bo_read_point)."',
-                        bo_write_point      = '".sql_real_escape_string($post_bo_write_point)."',
-                        bo_comment_point    = '".sql_real_escape_string($post_bo_comment_point)."',
-                        bo_download_point   = '".sql_real_escape_string($post_bo_download_point)."',
-                        bo_use_search       = '".sql_real_escape_string($post_bo_use_search)."',
-                        bo_use_sns          = '".sql_real_escape_string($post_bo_use_sns)."',
-                        bo_order            = '".sql_real_escape_string($post_bo_order)."'
-                  where bo_table            = '".sql_real_escape_string($post_board_table)."' ";
+                        bo_device           = '".sql_real_escape_string(strip_tags($_POST['bo_device'][$k]))."',
+                        bo_skin             = '".sql_real_escape_string(strip_tags($_POST['bo_skin'][$k]))."',
+                        bo_mobile_skin      = '".sql_real_escape_string(strip_tags($_POST['bo_mobile_skin'][$k]))."',
+                        bo_read_point       = '".sql_real_escape_string(strip_tags($_POST['bo_read_point'][$k]))."',
+                        bo_write_point      = '".sql_real_escape_string(strip_tags($_POST['bo_write_point'][$k]))."',
+                        bo_comment_point    = '".sql_real_escape_string(strip_tags($_POST['bo_comment_point'][$k]))."',
+                        bo_download_point   = '".sql_real_escape_string(strip_tags($_POST['bo_download_point'][$k]))."',
+                        bo_use_search       = '".sql_real_escape_string(strip_tags($_POST['bo_use_search'][$k]))."',
+                        bo_use_sns          = '".sql_real_escape_string(strip_tags($_POST['bo_use_sns'][$k]))."',
+                        bo_order            = '".sql_real_escape_string(strip_tags($_POST['bo_order'][$k]))."'
+                  where bo_table            = '".sql_real_escape_string($_POST['board_table'][$k])."' ";
 
         sql_query($sql);
     }
 
-} else if ($act_button === "선택삭제") {
+} else if ($_POST['act_button'] == "선택삭제") {
 
     if ($is_admin != 'super')
         alert('게시판 삭제는 최고관리자만 가능합니다.');
 
-    auth_check_menu($auth, $sub_menu, 'd');
+    auth_check($auth[$sub_menu], 'd');
 
     // _BOARD_DELETE_ 상수를 선언해야 board_delete.inc.php 가 정상 작동함
     define('_BOARD_DELETE_', true);
 
-    for ($i=0; $i<$post_count_chk; $i++) {
+    for ($i=0; $i<count($_POST['chk']); $i++) {
         // 실제 번호를 넘김
-        $k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
+        $k = $_POST['chk'][$i];
 
         // include 전에 $bo_table 값을 반드시 넘겨야 함
-        $tmp_bo_table = isset($_POST['board_table'][$k]) ? trim(clean_xss_tags($_POST['board_table'][$k], 1, 1)) : '';
+        $tmp_bo_table = trim($_POST['board_table'][$k]);
 
         if( preg_match("/^[A-Za-z0-9_]+$/", $tmp_bo_table) ){
             include ('./board_delete.inc.php');
@@ -92,6 +74,5 @@ if ($act_button === "선택수정") {
 
 }
 
-run_event('admin_board_list_update', $act_button, $chk, $board_table, $qstr);
-
-goto_url('./board_list.php?'.$qstr);
+goto_url('./board_list.php?'.$qstr);
+?>

adm/board_thumbnail_delete.php

@@ -2,7 +2,7 @@
 $sub_menu = '300100';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 if(!$board['bo_table'])
     alert('존재하지 않는 게시판입니다.');
@@ -48,4 +48,5 @@ if(is_dir($dir)) {
 <div class="btn_confirm01 btn_confirm"><a href="./board_form.php?w=u&amp;bo_table=<?php echo $bo_table; ?>&amp;<?php echo $qstr; ?>">게시판 수정으로 돌아가기</a></div>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/boardgroup_form.php

@@ -2,24 +2,17 @@
 $sub_menu = "300200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 if ($is_admin != 'super' && $w == '') alert('최고관리자만 접근 가능합니다.');
 
 $html_title = '게시판그룹';
 $gr_id_attr = '';
 $sound_only = '';
-
-if( ! isset($group['gr_id']) ){
-    $group['gr_id'] = '';
-    $group['gr_subject'] = '';
-    $group['gr_device'] = '';
-}
-
 if ($w == '') {
     $gr_id_attr = 'required';
     $sound_only = '<strong class="sound_only"> 필수</strong>';
-    $gr = array('gr_use_access' => 0, 'gr_admin'=>'');
+    $gr = array('gr_use_access' => 0);
     $html_title .= ' 생성';
 } else if ($w == 'u') {
     $gr_id_attr = 'readonly';
@@ -122,9 +115,9 @@ include_once('./admin.head.php');
         <th scope="row">여분필드<?php echo $i ?></th>
         <td class="td_extra">
             <label for="gr_<?php echo $i ?>_subj">여분필드 <?php echo $i ?> 제목</label>
-            <input type="text" name="gr_<?php echo $i ?>_subj" value="<?php echo isset($group['gr_'.$i.'_subj']) ? get_text($group['gr_'.$i.'_subj']) : ''; ?>" id="gr_<?php echo $i ?>_subj" class="frm_input">
+            <input type="text" name="gr_<?php echo $i ?>_subj" value="<?php echo get_text($group['gr_'.$i.'_subj']) ?>" id="gr_<?php echo $i ?>_subj" class="frm_input">
             <label for="gr_<?php echo $i ?>">여분필드 <?php echo $i ?> 내용</label>
-            <input type="text" name="gr_<?php echo $i ?>" value="<?php echo isset($gr['gr_'.$i]) ? get_sanitize_input($gr['gr_'.$i]) : ''; ?>" id="gr_<?php echo $i ?>" class="frm_input">
+            <input type="text" name="gr_<?php echo $i ?>" value="<?php echo get_sanitize_input($gr['gr_'.$i]); ?>" id="gr_<?php echo $i ?>" class="frm_input">
         </td>
     </tr>
     <?php } ?>
@@ -155,4 +148,5 @@ function fboardgroup_check(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/boardgroup_form_update.php

@@ -5,63 +5,42 @@ include_once('./_common.php');
 if ($w == 'u')
     check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 if ($is_admin != 'super' && $w == '') alert('최고관리자만 접근 가능합니다.');
 
 check_admin_token();
 
-$gr_id = isset($_POST['gr_id']) ? $_POST['gr_id'] : '';
-
-if (!preg_match("/^([A-Za-z0-9_]{1,10})$/", $gr_id))
+if (!preg_match("/^([A-Za-z0-9_]{1,10})$/", $_POST['gr_id']))
     alert('그룹 ID는 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (10자 이내)');
 
 if (!$gr_subject) alert('그룹 제목을 입력하세요.');
 
-$posts = array();
+$gr_subject = isset($_POST['gr_subject']) ? strip_tags($_POST['gr_subject']) : '';
 
-$check_keys = array(
-'gr_subject'=>'',
-'gr_device'=>'',
-'gr_admin'=>'',
-);
-
-for($i=1;$i<=10;$i++){
-    $check_keys['gr_'.$i.'_subj'] = isset($_POST['gr_'.$i.'_subj']) ? $_POST['gr_'.$i.'_subj'] : '';
-    $check_keys['gr_'.$i] = isset($_POST['gr_'.$i]) ? $_POST['gr_'.$i] : '';
-}
-
-foreach( $check_keys as $key=>$value ){
-    if( $key === 'gr_subject' ){
-        $posts[$key] = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : '';
-    } else {
-        $posts[$key] = isset($_POST[$key]) ? $_POST[$key] : '';
-    }
-}
-
-$sql_common = " gr_subject = '{$posts['gr_subject']}',
-                gr_device = '{$posts['gr_device']}',
-                gr_admin  = '{$posts['gr_admin']}',
-                gr_1_subj = '{$posts['gr_1_subj']}',
-                gr_2_subj = '{$posts['gr_2_subj']}',
-                gr_3_subj = '{$posts['gr_3_subj']}',
-                gr_4_subj = '{$posts['gr_4_subj']}',
-                gr_5_subj = '{$posts['gr_5_subj']}',
-                gr_6_subj = '{$posts['gr_6_subj']}',
-                gr_7_subj = '{$posts['gr_7_subj']}',
-                gr_8_subj = '{$posts['gr_8_subj']}',
-                gr_9_subj = '{$posts['gr_9_subj']}',
-                gr_10_subj = '{$posts['gr_10_subj']}',
-                gr_1 = '{$posts['gr_1']}',
-                gr_2 = '{$posts['gr_2']}',
-                gr_3 = '{$posts['gr_3']}',
-                gr_4 = '{$posts['gr_4']}',
-                gr_5 = '{$posts['gr_5']}',
-                gr_6 = '{$posts['gr_6']}',
-                gr_7 = '{$posts['gr_7']}',
-                gr_8 = '{$posts['gr_8']}',
-                gr_9 = '{$posts['gr_9']}',
-                gr_10 = '{$posts['gr_10']}' ";
+$sql_common = " gr_subject = '{$gr_subject}',
+                gr_device = '{$_POST['gr_device']}',
+                gr_admin  = '{$_POST['gr_admin']}',
+                gr_1_subj = '{$_POST['gr_1_subj']}',
+                gr_2_subj = '{$_POST['gr_2_subj']}',
+                gr_3_subj = '{$_POST['gr_3_subj']}',
+                gr_4_subj = '{$_POST['gr_4_subj']}',
+                gr_5_subj = '{$_POST['gr_5_subj']}',
+                gr_6_subj = '{$_POST['gr_6_subj']}',
+                gr_7_subj = '{$_POST['gr_7_subj']}',
+                gr_8_subj = '{$_POST['gr_8_subj']}',
+                gr_9_subj = '{$_POST['gr_9_subj']}',
+                gr_10_subj = '{$_POST['gr_10_subj']}',
+                gr_1 = '{$_POST['gr_1']}',
+                gr_2 = '{$_POST['gr_2']}',
+                gr_3 = '{$_POST['gr_3']}',
+                gr_4 = '{$_POST['gr_4']}',
+                gr_5 = '{$_POST['gr_5']}',
+                gr_6 = '{$_POST['gr_6']}',
+                gr_7 = '{$_POST['gr_7']}',
+                gr_8 = '{$_POST['gr_8']}',
+                gr_9 = '{$_POST['gr_9']}',
+                gr_10 = '{$_POST['gr_10']}' ";
 if (isset($_POST['gr_use_access']))
     $sql_common .= ", gr_use_access = '{$_POST['gr_use_access']}' ";
 else
@@ -69,13 +48,13 @@ else
 
 if ($w == '') {
 
-    $sql = " select count(*) as cnt from {$g5['group_table']} where gr_id = '{$gr_id}' ";
+    $sql = " select count(*) as cnt from {$g5['group_table']} where gr_id = '{$_POST['gr_id']}' ";
     $row = sql_fetch($sql);
     if ($row['cnt'])
         alert('이미 존재하는 그룹 ID 입니다.');
 
     $sql = " insert into {$g5['group_table']}
-                set gr_id = '{$gr_id}',
+                set gr_id = '{$_POST['gr_id']}',
                      {$sql_common} ";
     sql_query($sql);
 
@@ -83,13 +62,12 @@ if ($w == '') {
 
     $sql = " update {$g5['group_table']}
                 set {$sql_common}
-                where gr_id = '{$gr_id}' ";
+                where gr_id = '{$_POST['gr_id']}' ";
     sql_query($sql);
 
 } else {
     alert('제대로 된 값이 넘어오지 않았습니다.');
 }
 
-run_event('admin_boardgroup_form_update', $gr_id, $w);
-
-goto_url('./boardgroup_form.php?w=u&amp;gr_id='.$gr_id.'&amp;'.$qstr);
+goto_url('./boardgroup_form.php?w=u&amp;gr_id='.$gr_id.'&amp;'.$qstr);
+?>

adm/boardgroup_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "300200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 if (!isset($group['gr_device'])) {
     // 게시판 그룹 사용 필드 추가
@@ -10,7 +10,7 @@ if (!isset($group['gr_device'])) {
     // pc : pc 전용 사용
     // mobile : mobile 전용 사용
     // none : 사용 안함
-    sql_query(" ALTER TABLE  `{$g5['group_table']}` ADD  `gr_device` ENUM(  'both',  'pc',  'mobile' ) NOT NULL DEFAULT  'both' AFTER  `gr_subject` ", false);
+    sql_query(" ALTER TABLE  `{$g5['board_group_table']}` ADD  `gr_device` ENUM(  'both',  'pc',  'mobile' ) NOT NULL DEFAULT  'both' AFTER  `gr_subject` ", false);
 }
 
 $sql_common = " from {$g5['group_table']} ";
@@ -66,9 +66,9 @@ $colspan = 10;
 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
 <label for="sfl" class="sound_only">검색대상</label>
 <select name="sfl" id="sfl">
-    <option value="gr_subject"<?php echo get_selected($sfl, "gr_subject"); ?>>제목</option>
-    <option value="gr_id"<?php echo get_selected($sfl, "gr_id"); ?>>ID</option>
-    <option value="gr_admin"<?php echo get_selected($sfl, "gr_admin"); ?>>그룹관리자</option>
+    <option value="gr_subject"<?php echo get_selected($_GET['sfl'], "gr_subject"); ?>>제목</option>
+    <option value="gr_id"<?php echo get_selected($_GET['sfl'], "gr_id"); ?>>ID</option>
+    <option value="gr_admin"<?php echo get_selected($_GET['sfl'], "gr_admin"); ?>>그룹관리자</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" name="stx" id="stx" value="<?php echo $stx ?>" required class="required frm_input">
@@ -124,7 +124,7 @@ $colspan = 10;
     <tr class="<?php echo $bg; ?>">
         <td class="td_chk">
             <input type="hidden" name="group_id[<?php echo $i ?>]" value="<?php echo $row['gr_id'] ?>">
-            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo get_text($row['gr_subject']); ?> 그룹</label>
+            <label for="chk_<?php echo $i; ?>" class="sound_only"><?php echo $row['gr_subject'] ?> 그룹</label>
             <input type="checkbox" name="chk[]" value="<?php echo $i ?>" id="chk_<?php echo $i ?>">
         </td>
         <td class="td_left"><a href="<?php echo G5_BBS_URL ?>/group.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo $row['gr_id'] ?></a></td>
@@ -135,9 +135,9 @@ $colspan = 10;
         <td class="td_mng td_input">
         <?php if ($is_admin == 'super'){ ?>
             <label for="gr_admin_<?php echo $i; ?>" class="sound_only">그룹관리자</label>
-            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo get_sanitize_input($row['gr_admin']); ?>" id="gr_admin_<?php echo $i ?>" class="tbl_input" size="10" maxlength="20">
+            <input type="text" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>" id="gr_admin_<?php echo $i ?>" class="tbl_input" size="10" maxlength="20">
         <?php }else{ ?>
-            <input type="hidden" name="gr_admin[<?php echo $i ?>]" value="<?php echo get_sanitize_input($row['gr_admin']); ?>"><?php echo get_text($row['gr_admin']); ?>
+            <input type="hidden" name="gr_admin[<?php echo $i ?>]" value="<?php echo $row['gr_admin'] ?>"><?php echo $row['gr_admin'] ?>
         <?php } ?>
         </td>
         <td class="td_num"><a href="./board_list.php?sfl=a.gr_id&amp;stx=<?php echo $row['gr_id'] ?>"><?php echo $row2['cnt'] ?></a></td>
@@ -207,4 +207,5 @@ function fboardgrouplist_submit(f)
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/boardgroup_list_update.php

@@ -6,41 +6,34 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$post_chk = isset($_POST['chk']) ? (array) $_POST['chk'] : array();
-$post_group_id = isset($_POST['group_id']) ? (array) $_POST['group_id'] : array();
-$act_button = isset($_POST['act_button']) ? $_POST['act_button'] : '';
-
-$count = count($post_chk);
+$count = count($_POST['chk']);
 
 if(!$count)
-    alert($act_button.'할 게시판그룹을 1개이상 선택해 주세요.');
+    alert($_POST['act_button'].'할 게시판그룹을 1개이상 선택해 주세요.');
 
 for ($i=0; $i<$count; $i++)
 {
-    $k     = isset($post_chk[$i]) ? (int) $post_chk[$i] : 0;
-    $gr_id = preg_replace('/[^a-z0-9_]/i', '', $post_group_id[$k]);
-    $gr_subject = isset($_POST['gr_subject'][$k]) ? strip_tags(clean_xss_attributes($_POST['gr_subject'][$k])) : '';
-    $gr_admin = isset($_POST['gr_admin'][$k]) ? strip_tags(clean_xss_attributes($_POST['gr_admin'][$k])) : '';
-    $gr_device = isset($_POST['gr_device'][$k]) ? clean_xss_tags($_POST['gr_device'][$k], 1, 1, 10) : '';
-    $gr_use_access = isset($_POST['gr_use_access'][$k]) ? (int) $_POST['gr_use_access'][$k] : 0;
-    $gr_order = isset($_POST['gr_order'][$k]) ? (int) $_POST['gr_order'][$k] : 0;
+    $k     = $_POST['chk'][$i];
+    $gr_id = preg_replace('/[^a-z0-9_]/i', '', $_POST['group_id'][$k]);
+    $gr_subject = is_array($_POST['gr_subject']) ? strip_tags($_POST['gr_subject'][$k]) : '';
+    $gr_admin = is_array($_POST['gr_admin']) ? strip_tags($_POST['gr_admin'][$k]) : '';
 
-    if($act_button == '선택수정') {
+    if($_POST['act_button'] == '선택수정') {
         $sql = " update {$g5['group_table']}
                     set gr_subject    = '{$gr_subject}',
-                        gr_device     = '".sql_real_escape_string($gr_device)."',
-                        gr_admin      = '".sql_real_escape_string($gr_admin)."',
-                        gr_use_access = '".$gr_use_access."',
-                        gr_order      = '".$gr_order."'
+                        gr_device     = '".sql_real_escape_string($_POST['gr_device'][$k])."',
+                        gr_admin      = '".sql_real_escape_string($_POST['gr_admin'][$k])."',
+                        gr_use_access = '".sql_real_escape_string($_POST['gr_use_access'][$k])."',
+                        gr_order      = '".sql_real_escape_string($_POST['gr_order'][$k])."'
                   where gr_id         = '{$gr_id}' ";
         if ($is_admin != 'super')
             $sql .= " and gr_admin    = '{$gr_admin}' ";
         sql_query($sql);
-    } else if($act_button == '선택삭제') {
+    } else if($_POST['act_button'] == '선택삭제') {
         $row = sql_fetch(" select count(*) as cnt from {$g5['board_table']} where gr_id = '$gr_id' ");
         if ($row['cnt'])
             alert("이 그룹에 속한 게시판이 존재하여 게시판 그룹을 삭제할 수 없습니다.\\n\\n이 그룹에 속한 게시판을 먼저 삭제하여 주십시오.", './board_list.php?sfl=gr_id&amp;stx='.$gr_id);
@@ -53,6 +46,5 @@ for ($i=0; $i<$count; $i++)
     }
 }
 
-run_event('admin_boardgroup_list_update', $act_button, $chk, $post_group_id, $qstr);
-
-goto_url('./boardgroup_list.php?'.$qstr);
+goto_url('./boardgroup_list.php?'.$qstr);
+?>

adm/boardgroupmember_form.php

@@ -2,12 +2,10 @@
 $sub_menu = "300200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 $mb = get_member($mb_id);
-$token = isset($token) ? $token : '';
-
-if (! (isset($mb['mb_id']) && $mb['mb_id']))
+if (!$mb['mb_id'])
     alert('존재하지 않는 회원입니다.');
 
 $g5['title'] = '접근가능그룹';
@@ -53,7 +51,7 @@ $colspan = 4;
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>" id="sfl">
 <input type="hidden" name="stx" value="<?php echo $stx ?>" id="stx">
 <input type="hidden" name="page" value="<?php echo $page ?>" id="page">
-<input type="hidden" name="token" value="<?php echo get_sanitize_input($token); ?>" id="token">
+<input type="hidden" name="token" value="<?php echo $token ?>" id="token">
 <input type="hidden" name="mb_id" value="<?php echo $mb['mb_id'] ?>" id="mb_id">
 <input type="hidden" name="w" value="d" id="w">
 
@@ -130,4 +128,5 @@ function boardgroupmember_form_check(f)
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/boardgroupmember_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "300200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $gr = get_group($gr_id);
 if (!$gr['gr_id']) {
@@ -59,7 +59,7 @@ $colspan = 7;
 <input type="hidden" name="gr_id" value="<?php echo $gr_id ?>">
 <label for="sfl" class="sound_only">검색대상</label>
 <select name="sfl" id="sfl">
-    <option value="a.mb_id"<?php echo get_selected($sfl, "a.mb_id") ?>>회원아이디</option>
+    <option value="a.mb_id"<?php echo get_selected($_GET['sfl'], "a.mb_id") ?>>회원아이디</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -152,4 +152,5 @@ function fboardgroupmember_submit(f)
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/boardgroupmember_update.php

@@ -6,7 +6,7 @@ sql_query(" ALTER TABLE {$g5['group_member_table']} CHANGE `gm_id` `gm_id` INT(
 
 if ($w == '')
 {
-    auth_check_menu($auth, $sub_menu, 'w');
+    auth_check($auth[$sub_menu], 'w');
 
     $mb = get_member($mb_id);
     if (!$mb['mb_id']) {
@@ -39,7 +39,7 @@ if ($w == '')
 }
 else if ($w == 'd' || $w == 'ld')
 {
-    auth_check_menu($auth, $sub_menu, 'd');
+    auth_check($auth[$sub_menu], 'd');
 
     $count = count($_POST['chk']);
     if(!$count)
@@ -66,4 +66,5 @@ else if ($w == 'd' || $w == 'ld')
 if ($w == 'ld')
     goto_url('./boardgroupmember_list.php?gr_id='.$gr_id);
 else
-    goto_url('./boardgroupmember_form.php?mb_id='.$mb_id);
+    goto_url('./boardgroupmember_form.php?mb_id='.$mb_id);
+?>

adm/browscap.php

@@ -3,7 +3,7 @@ $sub_menu = "100510";
 include_once('./_common.php');
 
 if(!(version_compare(phpversion(), '5.3.0', '>=') && defined('G5_BROWSCAP_USE') && G5_BROWSCAP_USE))
-    alert('사용할 수 없는 기능입니다.', correct_goto_url(G5_ADMIN_URL));
+    alert('사용할 수 없는 기능입니다.', G5_ADMIN_URL);
 
 if ($is_admin != 'super')
     alert('최고관리자만 접근 가능합니다.');
@@ -41,4 +41,5 @@ $(function() {
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/browscap_convert.php

@@ -3,12 +3,12 @@ $sub_menu = "100520";
 include_once('./_common.php');
 
 if(!(version_compare(phpversion(), '5.3.0', '>=') && defined('G5_BROWSCAP_USE') && G5_BROWSCAP_USE))
-    alert('사용할 수 없는 기능입니다.', correct_goto_url(G5_ADMIN_URL));
+    alert('사용할 수 없는 기능입니다.', G5_ADMIN_URL);
 
 if ($is_admin != 'super')
     alert('최고관리자만 접근 가능합니다.');
 
-$rows = isset($_GET['rows']) ? preg_replace('#[^0-9]#', '', $_GET['rows']) : 0;
+$rows = preg_replace('#[^0-9]#', '', $_GET['rows']);
 if(!$rows)
     $rows = 100;
 
@@ -42,4 +42,5 @@ $(function() {
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/browscap_converter.php

@@ -71,4 +71,5 @@ for($i=0; $row=sql_fetch_array($result); $i++) {
 if(($total_count - $cnt) == 0 || $total_count == 0)
     echo '<div class="check_processing"></div><p>변환완료</p>';
 else
-    echo '<p>총 '.number_format($total_count).'건 중 '.number_format($cnt).'건 변환완료<br><br>접속로그를 추가로 변환하시려면 아래 업데이트 버튼을 클릭해 주세요.</p><button type="button" id="run_update">업데이트</button>';
+    echo '<p>총 '.number_format($total_count).'건 중 '.number_format($cnt).'건 변환완료<br><br>접속로그를 추가로 변환하시려면 아래 업데이트 버튼을 클릭해 주세요.</p><button type="button" id="run_update">업데이트</button>';
+?>

adm/browscap_update.php

@@ -20,4 +20,5 @@ $browscap->updateMethod = 'cURL';
 $browscap->cacheFilename = 'browscap_cache.php';
 $browscap->updateCache();
 
-die('');
+die('');
+?>

adm/cache_file_delete.php

@@ -10,8 +10,6 @@ if(function_exists('social_log_file_delete')){
     social_log_file_delete();
 }
 
-run_event('adm_cache_file_delete_before');
-
 $g5['title'] = '캐시파일 일괄삭제';
 include_once('./admin.head.php');
 ?>
@@ -33,9 +31,6 @@ $cnt=0;
 echo '<ul class="session_del">'.PHP_EOL;
 
 $files = glob(G5_DATA_PATH.'/cache/latest-*');
-$content_files = glob(G5_DATA_PATH.'/cache/content-*');
-
-$files = array_merge($files, $content_files);
 if (is_array($files)) {
     foreach ($files as $cache_file) {
         $cnt++;
@@ -49,11 +44,10 @@ if (is_array($files)) {
     }
 }
 
-run_event('adm_cache_file_delete');
-
 echo '<li>완료됨</li></ul>'.PHP_EOL;
 echo '<div class="local_desc01 local_desc"><p><strong>최신글 캐시파일 '.$cnt.'건 삭제 완료됐습니다.</strong><br>프로그램의 실행을 끝마치셔도 좋습니다.</p></div>'.PHP_EOL;
 ?>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/captcha_file_delete.php

@@ -49,4 +49,5 @@ echo '<div class="local_desc01 local_desc"><p><strong>캡챠파일 '.$cnt.'건
 ?>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/config_form.php

@@ -2,7 +2,7 @@
 $sub_menu = "100100";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 if ($is_admin != 'super')
     alert('최고관리자만 접근 가능합니다.');
@@ -253,31 +253,6 @@ if(!sql_query(" DESC {$g5['social_profile_table']} ", false)) {
                 ) ", true);
 }
 
-// 짧은 URL 주소를 사용 여부 필드 추가
-if (!isset($config['cf_bbs_rewrite'])) {
-    sql_query(" ALTER TABLE `{$g5['config_table']}`
-                    ADD `cf_bbs_rewrite` tinyint(4) NOT NULL DEFAULT '0' AFTER `cf_link_target` ", true);
-}
-
-// 읽지 않은 메모 수 칼럼 추가
-if(!isset($member['mb_memo_cnt'])) {
-    sql_query(" ALTER TABLE `{$g5['member_table']}`
-                ADD `mb_memo_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_call`", true);
-}
-
-// 스크랩 읽은 수 추가
-if(!isset($member['mb_scrap_cnt'])) {
-    sql_query(" ALTER TABLE `{$g5['member_table']}`
-                ADD `mb_scrap_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_cnt`", true);
-}
-
-// 아이코드 토큰키 추가
-if( ! isset($config['cf_icode_token_key']) ){
-    $sql = "ALTER TABLE `{$g5['config_table']}` 
-            ADD COLUMN `cf_icode_token_key` VARCHAR(100) NOT NULL DEFAULT '' AFTER `cf_icode_server_port`; ";
-    sql_query($sql, false);
-}
-
 if(!$config['cf_faq_skin']) $config['cf_faq_skin'] = "basic";
 if(!$config['cf_mobile_faq_skin']) $config['cf_mobile_faq_skin'] = "basic";
 
@@ -289,7 +264,6 @@ $pg_anchor = '<ul class="anchor">
     <li><a href="#anc_cf_board">게시판기본</a></li>
     <li><a href="#anc_cf_join">회원가입</a></li>
     <li><a href="#anc_cf_cert">본인확인</a></li>
-    <li><a href="#anc_cf_url">짧은주소</a></li>
     <li><a href="#anc_cf_mail">기본메일환경</a></li>
     <li><a href="#anc_cf_article_mail">글작성메일</a></li>
     <li><a href="#anc_cf_join_mail">가입메일</a></li>
@@ -304,7 +278,6 @@ $pg_anchor = '<ul class="anchor">
 if (!$config['cf_icode_server_ip'])   $config['cf_icode_server_ip'] = '211.172.232.124';
 if (!$config['cf_icode_server_port']) $config['cf_icode_server_port'] = '7295';
 
-$userinfo = array('payment'=>'');
 if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
     $userinfo = get_icode_userinfo($config['cf_icode_id'], $config['cf_icode_pw']);
 }
@@ -329,7 +302,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
         <tbody>
         <tr>
             <th scope="row"><label for="cf_title">홈페이지 제목<strong class="sound_only">필수</strong></label></th>
-            <td colspan="3"><input type="text" name="cf_title" value="<?php echo get_sanitize_input($config['cf_title']); ?>" id="cf_title" required class="required frm_input" size="40"></td>
+            <td colspan="3"><input type="text" name="cf_title" value="<?php echo $config['cf_title'] ?>" id="cf_title" required class="required frm_input" size="40"></td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_admin">최고관리자<strong class="sound_only">필수</strong></label></th>
@@ -339,14 +312,14 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row"><label for="cf_admin_email">관리자 메일 주소<strong class="sound_only">필수</strong></label></th>
             <td colspan="3">
                 <?php echo help('관리자가 보내고 받는 용도로 사용하는 메일 주소를 입력합니다. (회원가입, 인증메일, 테스트, 회원메일발송 등에서 사용)') ?>
-                <input type="text" name="cf_admin_email" value="<?php echo get_sanitize_input($config['cf_admin_email']); ?>" id="cf_admin_email" required class="required email frm_input" size="40">
+                <input type="text" name="cf_admin_email" value="<?php echo $config['cf_admin_email'] ?>" id="cf_admin_email" required class="required email frm_input" size="40">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_admin_email_name">관리자 메일 발송이름<strong class="sound_only">필수</strong></label></th>
             <td colspan="3">
                 <?php echo help('관리자가 보내고 받는 용도로 사용하는 메일의 발송이름을 입력합니다. (회원가입, 인증메일, 테스트, 회원메일발송 등에서 사용)') ?>
-                <input type="text" name="cf_admin_email_name" value="<?php echo get_sanitize_input($config['cf_admin_email_name']); ?>" id="cf_admin_email_name" required class="required frm_input" size="40">
+                <input type="text" name="cf_admin_email_name" value="<?php echo $config['cf_admin_email_name'] ?>" id="cf_admin_email_name" required class="required frm_input" size="40">
             </td>
         </tr>
         <tr>
@@ -357,79 +330,79 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row"><label for="cf_login_point">로그인시 포인트<strong class="sound_only">필수</strong></label></th>
             <td>
                 <?php echo help('회원이 로그인시 하루에 한번만 적립') ?>
-                <input type="text" name="cf_login_point" value="<?php echo (int) $config['cf_login_point'] ?>" id="cf_login_point" required class="required frm_input" size="5"> 점
+                <input type="text" name="cf_login_point" value="<?php echo $config['cf_login_point'] ?>" id="cf_login_point" required class="required frm_input" size="5"> 점
             </td>
             <th scope="row"><label for="cf_memo_send_point">쪽지보낼시 차감 포인트<strong class="sound_only">필수</strong></label></th>
             <td>
                  <?php echo help('양수로 입력하십시오. 0점은 쪽지 보낼시 포인트를 차감하지 않습니다.') ?>
-                <input type="text" name="cf_memo_send_point" value="<?php echo (int) $config['cf_memo_send_point']; ?>" id="cf_memo_send_point" required class="required frm_input" size="5"> 점
+                <input type="text" name="cf_memo_send_point" value="<?php echo $config['cf_memo_send_point'] ?>" id="cf_memo_send_point" required class="required frm_input" size="5"> 점
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_cut_name">이름(닉네임) 표시</label></th>
             <td colspan="3">
-                <input type="text" name="cf_cut_name" value="<?php echo (int) $config['cf_cut_name'] ?>" id="cf_cut_name" class="frm_input" size="5"> 자리만 표시
+                <input type="text" name="cf_cut_name" value="<?php echo $config['cf_cut_name'] ?>" id="cf_cut_name" class="frm_input" size="5"> 자리만 표시
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_nick_modify">닉네임 수정</label></th>
-            <td>수정하면 <input type="text" name="cf_nick_modify" value="<?php echo (int) $config['cf_nick_modify'] ?>" id="cf_nick_modify" class="frm_input" size="3"> 일 동안 바꿀 수 없음</td>
+            <td>수정하면 <input type="text" name="cf_nick_modify" value="<?php echo $config['cf_nick_modify'] ?>" id="cf_nick_modify" class="frm_input" size="3"> 일 동안 바꿀 수 없음</td>
             <th scope="row"><label for="cf_open_modify">정보공개 수정</label></th>
-            <td>수정하면 <input type="text" name="cf_open_modify" value="<?php echo (int) $config['cf_open_modify'] ?>" id="cf_open_modify" class="frm_input" size="3"> 일 동안 바꿀 수 없음</td>
+            <td>수정하면 <input type="text" name="cf_open_modify" value="<?php echo $config['cf_open_modify'] ?>" id="cf_open_modify" class="frm_input" size="3"> 일 동안 바꿀 수 없음</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_new_del">최근게시물 삭제</label></th>
             <td>
                 <?php echo help('설정일이 지난 최근게시물 자동 삭제') ?>
-                <input type="text" name="cf_new_del" value="<?php echo (int) $config['cf_new_del'] ?>" id="cf_new_del" class="frm_input" size="5"> 일
+                <input type="text" name="cf_new_del" value="<?php echo $config['cf_new_del'] ?>" id="cf_new_del" class="frm_input" size="5"> 일
             </td>
             <th scope="row"><label for="cf_memo_del">쪽지 삭제</label></th>
             <td>
                 <?php echo help('설정일이 지난 쪽지 자동 삭제') ?>
-                <input type="text" name="cf_memo_del" value="<?php echo (int) $config['cf_memo_del'] ?>" id="cf_memo_del" class="frm_input" size="5"> 일
+                <input type="text" name="cf_memo_del" value="<?php echo $config['cf_memo_del'] ?>" id="cf_memo_del" class="frm_input" size="5"> 일
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_visit_del">접속자로그 삭제</label></th>
             <td>
                 <?php echo help('설정일이 지난 접속자 로그 자동 삭제') ?>
-                <input type="text" name="cf_visit_del" value="<?php echo (int) $config['cf_visit_del'] ?>" id="cf_visit_del" class="frm_input" size="5"> 일
+                <input type="text" name="cf_visit_del" value="<?php echo $config['cf_visit_del'] ?>" id="cf_visit_del" class="frm_input" size="5"> 일
             </td>
             <th scope="row"><label for="cf_popular_del">인기검색어 삭제</label></th>
             <td>
                 <?php echo help('설정일이 지난 인기검색어 자동 삭제') ?>
-                <input type="text" name="cf_popular_del" value="<?php echo (int) $config['cf_popular_del'] ?>" id="cf_popular_del" class="frm_input" size="5"> 일
+                <input type="text" name="cf_popular_del" value="<?php echo $config['cf_popular_del'] ?>" id="cf_popular_del" class="frm_input" size="5"> 일
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_login_minutes">현재 접속자</label></th>
             <td>
                 <?php echo help('설정값 이내의 접속자를 현재 접속자로 인정') ?>
-                <input type="text" name="cf_login_minutes" value="<?php echo (int) $config['cf_login_minutes'] ?>" id="cf_login_minutes" class="frm_input" size="3"> 분
+                <input type="text" name="cf_login_minutes" value="<?php echo $config['cf_login_minutes'] ?>" id="cf_login_minutes" class="frm_input" size="3"> 분
             </td>
             <th scope="row"><label for="cf_new_rows">최근게시물 라인수</label></th>
             <td>
                 <?php echo help('목록 한페이지당 라인수') ?>
-                <input type="text" name="cf_new_rows" value="<?php echo (int) $config['cf_new_rows'] ?>" id="cf_new_rows" class="frm_input" size="3"> 라인
+                <input type="text" name="cf_new_rows" value="<?php echo $config['cf_new_rows'] ?>" id="cf_new_rows" class="frm_input" size="3"> 라인
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_page_rows">한페이지당 라인수</label></th>
             <td>
                 <?php echo help('목록(리스트) 한페이지당 라인수') ?>
-                <input type="text" name="cf_page_rows" value="<?php echo (int) $config['cf_page_rows'] ?>" id="cf_page_rows" class="frm_input" size="3"> 라인
+                <input type="text" name="cf_page_rows" value="<?php echo $config['cf_page_rows'] ?>" id="cf_page_rows" class="frm_input" size="3"> 라인
             </td>
             <th scope="row"><label for="cf_mobile_page_rows">모바일 한페이지당 라인수</label></th>
             <td>
                 <?php echo help('모바일 목록 한페이지당 라인수') ?>
-                <input type="text" name="cf_mobile_page_rows" value="<?php echo (int) $config['cf_mobile_page_rows'] ?>" id="cf_mobile_page_rows" class="frm_input" size="3"> 라인
+                <input type="text" name="cf_mobile_page_rows" value="<?php echo $config['cf_mobile_page_rows'] ?>" id="cf_mobile_page_rows" class="frm_input" size="3"> 라인
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_write_pages">페이지 표시 수<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="cf_write_pages" value="<?php echo (int) $config['cf_write_pages'] ?>" id="cf_write_pages" required class="required numeric frm_input" size="3"> 페이지씩 표시</td>
+            <td><input type="text" name="cf_write_pages" value="<?php echo $config['cf_write_pages'] ?>" id="cf_write_pages" required class="required numeric frm_input" size="3"> 페이지씩 표시</td>
             <th scope="row"><label for="cf_mobile_pages">모바일 페이지 표시 수<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="cf_mobile_pages" value="<?php echo (int) $config['cf_mobile_pages'] ?>" id="cf_mobile_pages" required class="required numeric frm_input" size="3"> 페이지씩 표시</td>
+            <td><input type="text" name="cf_mobile_pages" value="<?php echo $config['cf_mobile_pages'] ?>" id="cf_mobile_pages" required class="required numeric frm_input" size="3"> 페이지씩 표시</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_new_skin">최근게시물 스킨<strong class="sound_only">필수</strong></label></th>
@@ -516,13 +489,13 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
 			<th scope="row"><label for="cf_recaptcha_site_key">구글 reCAPTCHA Site key</label></th>
 			<td colspan="3">
             <?php echo help('reCAPTCHA V2와 Invisible reCAPTCHA 캡챠의 sitekey 와 secret 키는 동일하지 않고, 서로 발급받는 키가 다릅니다.') ?>
-            <input type="text" name="cf_recaptcha_site_key" value="<?php echo get_sanitize_input($config['cf_recaptcha_site_key']); ?>" id="cf_recaptcha_site_key" class="frm_input" size="52"> <a href="https://www.google.com/recaptcha/admin" target="_blank" class="btn_frmline">reCAPTCHA 등록하기</a>
+            <input type="text" name="cf_recaptcha_site_key" value="<?php echo $config['cf_recaptcha_site_key']; ?>" id="cf_recaptcha_site_key" class="frm_input" size="52"> <a href="https://www.google.com/recaptcha/admin" target="_blank" class="btn_frmline">reCAPTCHA 등록하기</a>
             </td>
 		</tr>
 		<tr>
             <th scope="row"><label for="cf_recaptcha_secret_key">구글 reCAPTCHA Secret key</label></th>
             <td colspan="3">
-                <input type="text" name="cf_recaptcha_secret_key" value="<?php echo get_sanitize_input($config['cf_recaptcha_secret_key']); ?>" id="cf_recaptcha_secret_key" class="frm_input" size="52">
+                <input type="text" name="cf_recaptcha_secret_key" value="<?php echo $config['cf_recaptcha_secret_key']; ?>" id="cf_recaptcha_secret_key" class="frm_input" size="52">
             </td>
 		</tr>
         <tr>
@@ -536,33 +509,33 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row"><label for="cf_point_term">포인트 유효기간</label></th>
             <td colspan="3">
                 <?php echo help('기간을 0으로 설정시 포인트 유효기간이 적용되지 않습니다.') ?>
-                <input type="text" name="cf_point_term" value="<?php echo (int) $config['cf_point_term']; ?>" id="cf_point_term" required class="required frm_input" size="5"> 일
+                <input type="text" name="cf_point_term" value="<?php echo $config['cf_point_term']; ?>" id="cf_point_term" required class="required frm_input" size="5"> 일
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_possible_ip">접근가능 IP</label></th>
             <td>
                 <?php echo help('입력된 IP의 컴퓨터만 접근할 수 있습니다.<br>123.123.+ 도 입력 가능. (엔터로 구분)') ?>
-                <textarea name="cf_possible_ip" id="cf_possible_ip"><?php echo get_sanitize_input($config['cf_possible_ip']); ?></textarea>
+                <textarea name="cf_possible_ip" id="cf_possible_ip"><?php echo $config['cf_possible_ip'] ?></textarea>
             </td>
             <th scope="row"><label for="cf_intercept_ip">접근차단 IP</label></th>
             <td>
                 <?php echo help('입력된 IP의 컴퓨터는 접근할 수 없음.<br>123.123.+ 도 입력 가능. (엔터로 구분)') ?>
-                <textarea name="cf_intercept_ip" id="cf_intercept_ip"><?php echo get_sanitize_input($config['cf_intercept_ip']); ?></textarea>
+                <textarea name="cf_intercept_ip" id="cf_intercept_ip"><?php echo $config['cf_intercept_ip'] ?></textarea>
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_analytics">방문자분석 스크립트</label></th>
             <td colspan="3">
                 <?php echo help('방문자분석 스크립트 코드를 입력합니다. 예) 구글 애널리틱스'); ?>
-                <textarea name="cf_analytics" id="cf_analytics"><?php echo get_text($config['cf_analytics']); ?></textarea>
+                <textarea name="cf_analytics" id="cf_analytics"><?php echo $config['cf_analytics']; ?></textarea>
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_add_meta">추가 메타태그</label></th>
             <td colspan="3">
                 <?php echo help('추가로 사용하실 meta 태그를 입력합니다.'); ?>
-                <textarea name="cf_add_meta" id="cf_add_meta"><?php echo get_text($config['cf_add_meta']); ?></textarea>
+                <textarea name="cf_add_meta" id="cf_add_meta"><?php echo $config['cf_add_meta']; ?></textarea>
             </td>
         </tr>
         <tr>
@@ -570,14 +543,14 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <td colspan="3">
                 <?php if (!function_exists('curl_init')) echo help('<b>경고) curl이 지원되지 않아 네이버 신디케이션을 사용할수 없습니다.</b>'); ?>
                 <?php echo help('네이버 신디케이션 연동키(token)을 입력하면 네이버 신디케이션을 사용할 수 있습니다.<br>연동키는 <a href="http://webmastertool.naver.com/" target="_blank"><u>네이버 웹마스터도구</u></a> -> 네이버 신디케이션에서 발급할 수 있습니다.') ?>
-                <input type="text" name="cf_syndi_token" value="<?php echo isset($config['cf_syndi_token']) ? get_sanitize_input($config['cf_syndi_token']) : ''; ?>" id="cf_syndi_token" class="frm_input" size="70">
+                <input type="text" name="cf_syndi_token" value="<?php echo $config['cf_syndi_token'] ?>" id="cf_syndi_token" class="frm_input" size="70">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_syndi_except">네이버 신디케이션 제외게시판</label></th>
             <td colspan="3">
                 <?php echo help('네이버 신디케이션 수집에서 제외할 게시판 아이디를 | 로 구분하여 입력하십시오. 예) notice|adult<br>참고로 그룹접근사용 게시판, 글읽기 권한 2 이상 게시판, 비밀글은 신디케이션 수집에서 제외됩니다.') ?>
-                <input type="text" name="cf_syndi_except" value="<?php echo isset($config['cf_syndi_except']) ? get_sanitize_input($config['cf_syndi_except']) : ''; ?>" id="cf_syndi_except" class="frm_input" size="70">
+                <input type="text" name="cf_syndi_except" value="<?php echo $config['cf_syndi_except'] ?>" id="cf_syndi_except" class="frm_input" size="70">
             </td>
         </tr>
         </tbody>
@@ -605,7 +578,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
         <tbody>
         <tr>
             <th scope="row"><label for="cf_delay_sec">글쓰기 간격<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="cf_delay_sec" value="<?php echo (int) $config['cf_delay_sec'] ?>" id="cf_delay_sec" required class="required numeric frm_input" size="3"> 초 지난후 가능</td>
+            <td><input type="text" name="cf_delay_sec" value="<?php echo $config['cf_delay_sec'] ?>" id="cf_delay_sec" required class="required numeric frm_input" size="3"> 초 지난후 가능</td>
             <th scope="row"><label for="cf_link_target">새창 링크</label></th>
             <td>
                 <?php echo help('글내용중 자동 링크되는 타켓을 지정합니다.') ?>
@@ -619,46 +592,46 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
         </tr>
         <tr>
             <th scope="row"><label for="cf_read_point">글읽기 포인트<strong class="sound_only">필수</strong></label></th>
-            <td><input type="text" name="cf_read_point" value="<?php echo (int) $config['cf_read_point'] ?>" id="cf_read_point" required class="required frm_input" size="3"> 점</td>
+            <td><input type="text" name="cf_read_point" value="<?php echo $config['cf_read_point'] ?>" id="cf_read_point" required class="required frm_input" size="3"> 점</td>
             <th scope="row"><label for="cf_write_point">글쓰기 포인트</label></th>
-            <td><input type="text" name="cf_write_point" value="<?php echo (int) $config['cf_write_point'] ?>" id="cf_write_point" required class="required frm_input" size="3"> 점</td>
+            <td><input type="text" name="cf_write_point" value="<?php echo $config['cf_write_point'] ?>" id="cf_write_point" required class="required frm_input" size="3"> 점</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_comment_point">댓글쓰기 포인트</label></th>
-            <td><input type="text" name="cf_comment_point" value="<?php echo (int) $config['cf_comment_point'] ?>" id="cf_comment_point" required class="required frm_input" size="3"> 점</td>
+            <td><input type="text" name="cf_comment_point" value="<?php echo $config['cf_comment_point'] ?>" id="cf_comment_point" required class="required frm_input" size="3"> 점</td>
             <th scope="row"><label for="cf_download_point">다운로드 포인트</label></th>
-            <td><input type="text" name="cf_download_point" value="<?php echo (int) $config['cf_download_point'] ?>" id="cf_download_point" required class="required frm_input" size="3"> 점</td>
+            <td><input type="text" name="cf_download_point" value="<?php echo $config['cf_download_point'] ?>" id="cf_download_point" required class="required frm_input" size="3"> 점</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_search_part">검색 단위</label></th>
-            <td colspan="3"><input type="text" name="cf_search_part" value="<?php echo (int) $config['cf_search_part'] ?>" id="cf_search_part" class="frm_input" size="4"> 건 단위로 검색</td>
+            <td colspan="3"><input type="text" name="cf_search_part" value="<?php echo $config['cf_search_part'] ?>" id="cf_search_part" class="frm_input" size="4"> 건 단위로 검색</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_image_extension">이미지 업로드 확장자</label></th>
             <td colspan="3">
                 <?php echo help('게시판 글작성시 이미지 파일 업로드 가능 확장자. | 로 구분') ?>
-                <input type="text" name="cf_image_extension" value="<?php echo get_sanitize_input($config['cf_image_extension']); ?>" id="cf_image_extension" class="frm_input" size="70">
+                <input type="text" name="cf_image_extension" value="<?php echo $config['cf_image_extension'] ?>" id="cf_image_extension" class="frm_input" size="70">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_flash_extension">플래쉬 업로드 확장자</label></th>
             <td colspan="3">
                 <?php echo help('게시판 글작성시 플래쉬 파일 업로드 가능 확장자. | 로 구분') ?>
-                <input type="text" name="cf_flash_extension" value="<?php echo get_sanitize_input($config['cf_flash_extension']); ?>" id="cf_flash_extension" class="frm_input" size="70">
+                <input type="text" name="cf_flash_extension" value="<?php echo $config['cf_flash_extension'] ?>" id="cf_flash_extension" class="frm_input" size="70">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_movie_extension">동영상 업로드 확장자</label></th>
             <td colspan="3">
                 <?php echo help('게시판 글작성시 동영상 파일 업로드 가능 확장자. | 로 구분') ?>
-                <input type="text" name="cf_movie_extension" value="<?php echo get_sanitize_input($config['cf_movie_extension']); ?>" id="cf_movie_extension" class="frm_input" size="70">
+                <input type="text" name="cf_movie_extension" value="<?php echo $config['cf_movie_extension'] ?>" id="cf_movie_extension" class="frm_input" size="70">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_filter">단어 필터링</label></th>
             <td colspan="3">
                 <?php echo help('입력된 단어가 포함된 내용은 게시할 수 없습니다. 단어와 단어 사이는 ,로 구분합니다.') ?>
-                <textarea name="cf_filter" id="cf_filter" rows="7"><?php echo get_sanitize_input($config['cf_filter']); ?></textarea>
+                <textarea name="cf_filter" id="cf_filter" rows="7"><?php echo $config['cf_filter'] ?></textarea>
              </td>
         </tr>
         </tbody>
@@ -733,11 +706,11 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row"><label for="cf_register_level">회원가입시 권한</label></th>
             <td><?php echo get_member_level_select('cf_register_level', 1, 9, $config['cf_register_level']) ?></td>
             <th scope="row"><label for="cf_register_point">회원가입시 포인트</label></th>
-            <td><input type="text" name="cf_register_point" value="<?php echo (int) $config['cf_register_point'] ?>" id="cf_register_point" class="frm_input" size="5"> 점</td>
+            <td><input type="text" name="cf_register_point" value="<?php echo $config['cf_register_point'] ?>" id="cf_register_point" class="frm_input" size="5"> 점</td>
         </tr>
         <tr>
             <th scope="row" id="th310"><label for="cf_leave_day">회원탈퇴후 삭제일</label></th>
-            <td colspan="3"><input type="text" name="cf_leave_day" value="<?php echo (int) $config['cf_leave_day'] ?>" id="cf_leave_day" class="frm_input" size="2"> 일 후 자동 삭제</td>
+            <td colspan="3"><input type="text" name="cf_leave_day" value="<?php echo $config['cf_leave_day'] ?>" id="cf_leave_day" class="frm_input" size="2"> 일 후 자동 삭제</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_use_member_icon">회원아이콘 사용</label></th>
@@ -754,25 +727,25 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
         </tr>
         <tr>
             <th scope="row"><label for="cf_member_icon_size">회원아이콘 용량</label></th>
-            <td><input type="text" name="cf_member_icon_size" value="<?php echo (int) $config['cf_member_icon_size'] ?>" id="cf_member_icon_size" class="frm_input" size="10"> 바이트 이하</td>
+            <td><input type="text" name="cf_member_icon_size" value="<?php echo $config['cf_member_icon_size'] ?>" id="cf_member_icon_size" class="frm_input" size="10"> 바이트 이하</td>
             <th scope="row">회원아이콘 사이즈</th>
             <td>
                 <label for="cf_member_icon_width">가로</label>
-                <input type="text" name="cf_member_icon_width" value="<?php echo (int) $config['cf_member_icon_width'] ?>" id="cf_member_icon_width" class="frm_input" size="2">
+                <input type="text" name="cf_member_icon_width" value="<?php echo $config['cf_member_icon_width'] ?>" id="cf_member_icon_width" class="frm_input" size="2">
                 <label for="cf_member_icon_height">세로</label>
-                <input type="text" name="cf_member_icon_height" value="<?php echo (int) $config['cf_member_icon_height'] ?>" id="cf_member_icon_height" class="frm_input" size="2">
+                <input type="text" name="cf_member_icon_height" value="<?php echo $config['cf_member_icon_height'] ?>" id="cf_member_icon_height" class="frm_input" size="2">
                 픽셀 이하
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_member_img_size">회원이미지 용량</label></th>
-            <td><input type="text" name="cf_member_img_size" value="<?php echo (int) $config['cf_member_img_size'] ?>" id="cf_member_img_size" class="frm_input" size="10"> 바이트 이하</td>
+            <td><input type="text" name="cf_member_img_size" value="<?php echo $config['cf_member_img_size'] ?>" id="cf_member_img_size" class="frm_input" size="10"> 바이트 이하</td>
             <th scope="row">회원이미지 사이즈</th>
             <td>
                 <label for="cf_member_img_width">가로</label>
-                <input type="text" name="cf_member_img_width" value="<?php echo (int) $config['cf_member_img_width'] ?>" id="cf_member_img_width" class="frm_input" size="2">
+                <input type="text" name="cf_member_img_width" value="<?php echo $config['cf_member_img_width'] ?>" id="cf_member_img_width" class="frm_input" size="2">
                 <label for="cf_member_img_height">세로</label>
-                <input type="text" name="cf_member_img_height" value="<?php echo (int) $config['cf_member_img_height'] ?>" id="cf_member_img_height" class="frm_input" size="2">
+                <input type="text" name="cf_member_img_height" value="<?php echo $config['cf_member_img_height'] ?>" id="cf_member_img_height" class="frm_input" size="2">
                 픽셀 이하
             </td>
         </tr>
@@ -780,27 +753,27 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row"><label for="cf_use_recommend">추천인제도 사용</label></th>
             <td><input type="checkbox" name="cf_use_recommend" value="1" id="cf_use_recommend" <?php echo $config['cf_use_recommend']?'checked':''; ?>> 사용</td>
             <th scope="row"><label for="cf_recommend_point">추천인 포인트</label></th>
-            <td><input type="text" name="cf_recommend_point" value="<?php echo (int) $config['cf_recommend_point'] ?>" id="cf_recommend_point" class="frm_input"> 점</td>
+            <td><input type="text" name="cf_recommend_point" value="<?php echo $config['cf_recommend_point'] ?>" id="cf_recommend_point" class="frm_input"> 점</td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_prohibit_id">아이디,닉네임 금지단어</label></th>
             <td>
                 <?php echo help('회원아이디, 닉네임으로 사용할 수 없는 단어를 정합니다. 쉼표 (,) 로 구분') ?>
-                <textarea name="cf_prohibit_id" id="cf_prohibit_id" rows="5"><?php echo get_sanitize_input($config['cf_prohibit_id']); ?></textarea>
+                <textarea name="cf_prohibit_id" id="cf_prohibit_id" rows="5"><?php echo $config['cf_prohibit_id'] ?></textarea>
             </td>
             <th scope="row"><label for="cf_prohibit_email">입력 금지 메일</label></th>
             <td>
                 <?php echo help('입력 받지 않을 도메인을 지정합니다. 엔터로 구분 ex) hotmail.com') ?>
-                <textarea name="cf_prohibit_email" id="cf_prohibit_email" rows="5"><?php echo get_sanitize_input($config['cf_prohibit_email']); ?></textarea>
+                <textarea name="cf_prohibit_email" id="cf_prohibit_email" rows="5"><?php echo $config['cf_prohibit_email'] ?></textarea>
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_stipulation">회원가입약관</label></th>
-            <td colspan="3"><textarea name="cf_stipulation" id="cf_stipulation" rows="10"><?php echo html_purifier($config['cf_stipulation']); ?></textarea></td>
+            <td colspan="3"><textarea name="cf_stipulation" id="cf_stipulation" rows="10"><?php echo $config['cf_stipulation'] ?></textarea></td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_privacy">개인정보처리방침</label></th>
-            <td colspan="3"><textarea id="cf_privacy" name="cf_privacy" rows="10"><?php echo html_purifier($config['cf_privacy']); ?></textarea></td>
+            <td colspan="3"><textarea id="cf_privacy" name="cf_privacy" rows="10"><?php echo $config['cf_privacy'] ?></textarea></td>
         </tr>
         </tbody>
         </table>
@@ -862,7 +835,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <th scope="row" class="cf_cert_service"><label for="cf_cert_kcb_cd">코리아크레딧뷰로<br>KCB 회원사ID</label></th>
             <td class="cf_cert_service">
                 <?php echo help('KCB 회원사ID를 입력해 주십시오.<br>서비스에 가입되어 있지 않다면, KCB와 계약체결 후 회원사ID를 발급 받으실 수 있습니다.<br>이용하시려는 서비스에 대한 계약을 아이핀, 휴대폰 본인확인 각각 체결해주셔야 합니다.<br>아이핀 본인확인 테스트의 경우에는 KCB 회원사ID가 필요 없으나,<br>휴대폰 본인확인 테스트의 경우 KCB 에서 따로 발급 받으셔야 합니다.') ?>
-                <input type="text" name="cf_cert_kcb_cd" value="<?php echo get_sanitize_input($config['cf_cert_kcb_cd']); ?>" id="cf_cert_kcb_cd" class="frm_input" size="20"> <a href="http://sir.kr/main/service/b_ipin.php" target="_blank" class="btn_frmline">KCB 아이핀 서비스 신청페이지</a>
+                <input type="text" name="cf_cert_kcb_cd" value="<?php echo $config['cf_cert_kcb_cd'] ?>" id="cf_cert_kcb_cd" class="frm_input" size="20"> <a href="http://sir.kr/main/service/b_ipin.php" target="_blank" class="btn_frmline">KCB 아이핀 서비스 신청페이지</a>
                 <a href="http://sir.kr/main/service/b_cert.php" target="_blank" class="btn_frmline">KCB 휴대폰 본인확인 서비스 신청페이지</a>
             </td>
         </tr>
@@ -871,7 +844,7 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <td class="cf_cert_service">
                 <?php echo help('SM으로 시작하는 5자리 사이트 코드중 뒤의 3자리만 입력해 주십시오.<br>서비스에 가입되어 있지 않다면, 본인확인 서비스 신청페이지에서 서비스 신청 후 사이트코드를 발급 받으실 수 있습니다.') ?>
                 <span class="sitecode">SM</span>
-                <input type="text" name="cf_cert_kcp_cd" value="<?php echo get_sanitize_input($config['cf_cert_kcp_cd']); ?>" id="cf_cert_kcp_cd" class="frm_input" size="3"> <a href="http://sir.kr/main/service/p_cert.php" target="_blank" class="btn_frmline">NHN KCP 휴대폰 본인확인 서비스 신청페이지</a>
+                <input type="text" name="cf_cert_kcp_cd" value="<?php echo $config['cf_cert_kcp_cd'] ?>" id="cf_cert_kcp_cd" class="frm_input" size="3"> <a href="http://sir.kr/main/service/p_cert.php" target="_blank" class="btn_frmline">NHN KCP 휴대폰 본인확인 서비스 신청페이지</a>
             </td>
         </tr>
         <tr>
@@ -879,21 +852,21 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
             <td class="cf_cert_service">
                 <?php echo help('LG유플러스 상점아이디 중 si_를 제외한 나머지 아이디만 입력해 주십시오.<br>서비스에 가입되어 있지 않다면, 본인확인 서비스 신청페이지에서 서비스 신청 후 상점아이디를 발급 받으실 수 있습니다.<br><strong>LG유플러스 휴대폰본인확인은 ActiveX 설치가 필요하므로 Internet Explorer 에서만 사용할 수 있습니다.</strong>') ?>
                 <span class="sitecode">si_</span>
-                <input type="text" name="cf_lg_mid" value="<?php echo get_sanitize_input($config['cf_lg_mid']); ?>" id="cf_lg_mid" class="frm_input" size="20"> <a href="http://sir.kr/main/service/lg_cert.php" target="_blank" class="btn_frmline">LG유플러스 본인확인 서비스 신청페이지</a>
+                <input type="text" name="cf_lg_mid" value="<?php echo $config['cf_lg_mid'] ?>" id="cf_lg_mid" class="frm_input" size="20"> <a href="http://sir.kr/main/service/lg_cert.php" target="_blank" class="btn_frmline">LG유플러스 본인확인 서비스 신청페이지</a>
             </td>
         </tr>
         <tr>
             <th scope="row" class="cf_cert_service"><label for="cf_lg_mert_key">LG유플러스 MERT KEY</label></th>
             <td class="cf_cert_service">
                 <?php echo help('LG유플러스 상점MertKey는 상점관리자 -> 계약정보 -> 상점정보관리에서 확인하실 수 있습니다.') ?>
-                <input type="text" name="cf_lg_mert_key" value="<?php echo get_sanitize_input($config['cf_lg_mert_key']); ?>" id="cf_lg_mert_key" class="frm_input" size="40">
+                <input type="text" name="cf_lg_mert_key" value="<?php echo $config['cf_lg_mert_key'] ?>" id="cf_lg_mert_key" class="frm_input" size="40">
             </td>
         </tr>
         <tr>
             <th scope="row" class="cf_cert_service"><label for="cf_cert_limit">본인확인 이용제한</label></th>
             <td class="cf_cert_service">
                 <?php echo help('하루동안 아이핀과 휴대폰 본인확인 인증 이용회수를 제한할 수 있습니다.<br>회수제한은 실서비스에서 아이핀과 휴대폰 본인확인 인증에 개별 적용됩니다.<br>0 으로 설정하시면 회수제한이 적용되지 않습니다.'); ?>
-                <input type="text" name="cf_cert_limit" value="<?php echo (int) $config['cf_cert_limit']; ?>" id="cf_cert_limit" class="frm_input" size="3"> 회
+                <input type="text" name="cf_cert_limit" value="<?php echo $config['cf_cert_limit']; ?>" id="cf_cert_limit" class="frm_input" size="3"> 회
             </td>
         </tr>
         <tr>
@@ -908,9 +881,6 @@ if ($config['cf_sms_use'] && $config['cf_icode_id'] && $config['cf_icode_pw']) {
     </div>
 </section>
 
-<?php
-include_once('_rewrite_config_form.php');
-?>
 
 <section id="anc_cf_mail">
     <h2 class="h2_frm">기본 메일 환경 설정</h2>
@@ -1097,7 +1067,7 @@ include_once('_rewrite_config_form.php');
                     <input type="checkbox" name="cf_social_servicelist[]" id="check_social_kakao" value="kakao" <?php echo option_array_checked('kakao', $config['cf_social_servicelist']); ?> >
                     <label for="check_social_kakao">카카오 로그인을 사용합니다</label>
                     <div>
-                    <h3>카카오 로그인 Redirect URI</h3>
+                    <h3>카카오 웹 Redirect Path</h3>
                     <p><?php echo get_social_callbackurl('kakao', true); ?></p>
                     </div>
                 </div>
@@ -1130,7 +1100,7 @@ include_once('_rewrite_config_form.php');
                     <label for="check_social_payco">페이코 로그인을 사용합니다</label>
                     <div>
                     <h3>페이코 CallbackURL</h3>
-                    <p><?php echo get_social_callbackurl('payco', false, true); ?></p>
+                    <p><?php echo get_social_callbackurl('payco'); ?></p>
                     </div>
                 </div>
             </td>
@@ -1138,73 +1108,73 @@ include_once('_rewrite_config_form.php');
         <tr>
             <th scope="row"><label for="cf_naver_clientid">네이버 Client ID</label></th>
             <td>
-                <input type="text" name="cf_naver_clientid" value="<?php echo get_sanitize_input($config['cf_naver_clientid']); ?>" id="cf_naver_clientid" class="frm_input" size="40"> <a href="https://developers.naver.com/apps/#/register" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_naver_clientid" value="<?php echo $config['cf_naver_clientid'] ?>" id="cf_naver_clientid" class="frm_input" size="40"> <a href="https://developers.naver.com/apps/#/register" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_naver_secret">네이버 Client Secret</label></th>
             <td>
-                <input type="text" name="cf_naver_secret" value="<?php echo get_sanitize_input($config['cf_naver_secret']); ?>" id="cf_naver_secret" class="frm_input" size="45">
+                <input type="text" name="cf_naver_secret" value="<?php echo $config['cf_naver_secret'] ?>" id="cf_naver_secret" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_facebook_appid">페이스북 앱 ID</label></th>
             <td>
-                <input type="text" name="cf_facebook_appid" value="<?php echo get_sanitize_input($config['cf_facebook_appid']); ?>" id="cf_facebook_appid" class="frm_input" size="40"> <a href="https://developers.facebook.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_facebook_appid" value="<?php echo $config['cf_facebook_appid'] ?>" id="cf_facebook_appid" class="frm_input" size="40"> <a href="https://developers.facebook.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_facebook_secret">페이스북 앱 Secret</label></th>
             <td>
-                <input type="text" name="cf_facebook_secret" value="<?php echo get_sanitize_input($config['cf_facebook_secret']); ?>" id="cf_facebook_secret" class="frm_input" size="45">
+                <input type="text" name="cf_facebook_secret" value="<?php echo $config['cf_facebook_secret'] ?>" id="cf_facebook_secret" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_twitter_key">트위터 컨슈머 Key</label></th>
             <td>
-                <input type="text" name="cf_twitter_key" value="<?php echo get_sanitize_input($config['cf_twitter_key']); ?>" id="cf_twitter_key" class="frm_input" size="40"> <a href="https://developer.twitter.com/en/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_twitter_key" value="<?php echo $config['cf_twitter_key'] ?>" id="cf_twitter_key" class="frm_input" size="40"> <a href="https://dev.twitter.com/apps" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_twitter_secret">트위터 컨슈머 Secret</label></th>
             <td>
-                <input type="text" name="cf_twitter_secret" value="<?php echo get_sanitize_input($config['cf_twitter_secret']); ?>" id="cf_twitter_secret" class="frm_input" size="45">
+                <input type="text" name="cf_twitter_secret" value="<?php echo $config['cf_twitter_secret'] ?>" id="cf_twitter_secret" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_google_clientid">구글 Client ID</label></th>
             <td>
-                <input type="text" name="cf_google_clientid" value="<?php echo get_sanitize_input($config['cf_google_clientid']); ?>" id="cf_google_clientid" class="frm_input" size="40"> <a href="https://console.developers.google.com" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_google_clientid" value="<?php echo $config['cf_google_clientid'] ?>" id="cf_google_clientid" class="frm_input" size="40"> <a href="https://console.developers.google.com" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_google_secret">구글 Client Secret</label></th>
             <td>
-                <input type="text" name="cf_google_secret" value="<?php echo get_sanitize_input($config['cf_google_secret']); ?>" id="cf_google_secret" class="frm_input" size="45">
+                <input type="text" name="cf_google_secret" value="<?php echo $config['cf_google_secret'] ?>" id="cf_google_secret" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_googl_shorturl_apikey">구글 짧은주소 API Key</label></th>
             <td colspan="3">
-                <input type="text" name="cf_googl_shorturl_apikey" value="<?php echo get_sanitize_input($config['cf_googl_shorturl_apikey']); ?>" id="cf_googl_shorturl_apikey" class="frm_input" size="40"> <a href="http://code.google.com/apis/console/" target="_blank" class="btn_frmline">API Key 등록하기</a>
+                <input type="text" name="cf_googl_shorturl_apikey" value="<?php echo $config['cf_googl_shorturl_apikey'] ?>" id="cf_googl_shorturl_apikey" class="frm_input" size="40"> <a href="http://code.google.com/apis/console/" target="_blank" class="btn_frmline">API Key 등록하기</a>
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_kakao_rest_key">카카오 REST API 키</label></th>
             <td>
-                <input type="text" name="cf_kakao_rest_key" value="<?php echo get_sanitize_input($config['cf_kakao_rest_key']); ?>" id="cf_kakao_rest_key" class="frm_input" size="40"> <a href="https://developers.kakao.com/product/kakaoLogin" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_kakao_rest_key" value="<?php echo $config['cf_kakao_rest_key'] ?>" id="cf_kakao_rest_key" class="frm_input" size="40"> <a href="https://developers.kakao.com/apps/new" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_kakao_client_secret">카카오 Client Secret</label></th>
             <td>
-                <input type="text" name="cf_kakao_client_secret" value="<?php echo get_sanitize_input($config['cf_kakao_client_secret']); ?>" id="cf_kakao_client_secret" class="frm_input" size="45">
+                <input type="text" name="cf_kakao_client_secret" value="<?php echo $config['cf_kakao_client_secret'] ?>" id="cf_kakao_client_secret" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_kakao_js_apikey">카카오 JavaScript 키</label></th>
             <td colspan="3">
-                <input type="text" name="cf_kakao_js_apikey" value="<?php echo get_sanitize_input($config['cf_kakao_js_apikey']); ?>" id="cf_kakao_js_apikey" class="frm_input" size="45">
+                <input type="text" name="cf_kakao_js_apikey" value="<?php echo $config['cf_kakao_js_apikey'] ?>" id="cf_kakao_js_apikey" class="frm_input" size="45">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="cf_payco_clientid">페이코 Client ID</label></th>
             <td>
-                <input type="text" name="cf_payco_clientid" value="<?php echo get_sanitize_input($config['cf_payco_clientid']); ?>" id="cf_payco_clientid" class="frm_input" size="40"> <a href="https://developers.payco.com/guide" target="_blank" class="btn_frmline">앱 등록하기</a>
+                <input type="text" name="cf_payco_clientid" value="<?php echo $config['cf_payco_clientid']; ?>" id="cf_payco_clientid" class="frm_input" size="40"> <a href="https://developers.payco.com/guide" target="_blank" class="btn_frmline">앱 등록하기</a>
             </td>
             <th scope="row"><label for="cf_payco_secret">페이코 Secret</label></th>
             <td>
-                <input type="text" name="cf_payco_secret" value="<?php echo get_sanitize_input($config['cf_payco_secret']); ?>" id="cf_payco_secret" class="frm_input" size="45">
+                <input type="text" name="cf_payco_secret" value="<?php echo $config['cf_payco_secret']; ?>" id="cf_payco_secret" class="frm_input" size="45">
             </td>
         </tr>
         </tbody>
@@ -1265,31 +1235,31 @@ include_once('_rewrite_config_form.php');
         <tr>
             <th scope="row"><label for="cf_sms_type">SMS 전송유형</label></th>
             <td>
-                <?php echo help("전송유형을 SMS로 선택하시면 최대 80바이트까지 전송하실 수 있으며<br>LMS로 선택하시면 90바이트 이하는 SMS로, 그 이상은 ".G5_ICODE_LMS_MAX_LENGTH."바이트까지 LMS로 전송됩니다.<br>요금은 건당 SMS는 16원, LMS는 48원입니다."); ?>
+                <?php echo help("전송유형을 SMS로 선택하시면 최대 80바이트까지 전송하실 수 있으며<br>LMS로 선택하시면 90바이트 이하는 SMS로, 그 이상은 1500바이트까지 LMS로 전송됩니다.<br>요금은 건당 SMS는 16원, LMS는 48원입니다."); ?>
                 <select id="cf_sms_type" name="cf_sms_type">
                     <option value="" <?php echo get_selected($config['cf_sms_type'], ''); ?>>SMS</option>
                     <option value="LMS" <?php echo get_selected($config['cf_sms_type'], 'LMS'); ?>>LMS</option>
                 </select>
             </td>
         </tr>
-        <tr class="icode_old_version">
-            <th scope="row"><label for="cf_icode_id">아이코드 회원아이디<br>(구버전)</label></th>
+        <tr>
+            <th scope="row"><label for="cf_icode_id">아이코드 회원아이디</label></th>
             <td>
                 <?php echo help("아이코드에서 사용하시는 회원아이디를 입력합니다."); ?>
-                <input type="text" name="cf_icode_id" value="<?php echo get_sanitize_input($config['cf_icode_id']); ?>" id="cf_icode_id" class="frm_input" size="20">
+                <input type="text" name="cf_icode_id" value="<?php echo $config['cf_icode_id']; ?>" id="cf_icode_id" class="frm_input" size="20">
             </td>
         </tr>
-        <tr class="icode_old_version">
-            <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호<br>(구버전)</label></th>
+        <tr>
+            <th scope="row"><label for="cf_icode_pw">아이코드 비밀번호</label></th>
             <td>
                 <?php echo help("아이코드에서 사용하시는 비밀번호를 입력합니다."); ?>
-                <input type="password" name="cf_icode_pw" value="<?php echo get_sanitize_input($config['cf_icode_pw']); ?>" id="cf_icode_pw" class="frm_input">
+                <input type="password" name="cf_icode_pw" value="<?php echo $config['cf_icode_pw']; ?>" id="cf_icode_pw" class="frm_input">
             </td>
         </tr>
-        <tr class="icode_old_version <?php if(!(isset($userinfo['payment']) && $userinfo['payment'])){ echo 'cf_tr_hide'; } ?>">
-            <th scope="row">요금제<br>(구버전)</th>
+        <tr>
+            <th scope="row">요금제</th>
             <td>
-                <input type="hidden" name="cf_icode_server_ip" value="<?php echo get_sanitize_input($config['cf_icode_server_ip']); ?>">
+                <input type="hidden" name="cf_icode_server_ip" value="<?php echo $config['cf_icode_server_ip']; ?>">
                 <?php
                     if ($userinfo['payment'] == 'A') {
                        echo '충전제';
@@ -1304,31 +1274,21 @@ include_once('_rewrite_config_form.php');
                 ?>
             </td>
         </tr>
-        <?php if ($userinfo['payment'] == 'A') { ?>
-        <tr class="icode_old_version">
-            <th scope="row">충전 잔액<br>(구버전)</th>
-            <td>
-                <?php echo number_format($userinfo['coin']); ?> 원.
-                <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo get_text($config['cf_icode_id']); ?>&amp;icode_passwd=<?php echo get_text($config['cf_icode_pw']); ?>" target="_blank" class="btn_frmline">충전하기</a>
-            </td>
-        </tr>
-        <?php } ?>
-        <tr class="icode_json_version">
-            <th scope="row"><label for="cf_icode_token_key">아이코드 토큰키<br>(JSON버전)</label></th>
-            <td>
-                <?php echo help("아이코드 JSON 버전의 경우 아이코드 토큰키를 입력시 실행됩니다.<br>SMS 전송유형을 LMS로 설정시 90바이트 이내는 SMS, 90 ~ 2000 바이트는 LMS 그 이상은 절삭 되어 LMS로 발송됩니다."); ?>
-                <input type="text" name="cf_icode_token_key" value="<?php echo isset($config['cf_icode_token_key']) ? get_sanitize_input($config['cf_icode_token_key']) : ''; ?>" id="cf_icode_token_key" class="frm_input" size="40">
-                <?php echo help("아이코드 사이트 -> 토큰키관리 메뉴에서 생성한 토큰키를 입력합니다."); ?>
-                <br>
-                서버아이피 : <?php echo $_SERVER['SERVER_ADDR']; ?>
-            </td>
-        </tr>
         <tr>
             <th scope="row">아이코드 SMS 신청<br>회원가입</th>
             <td>
                 <a href="http://icodekorea.com/res/join_company_fix_a.php?sellid=sir2" target="_blank" class="btn_frmline">아이코드 회원가입</a>
             </td>
         </tr>
+         <?php if ($userinfo['payment'] == 'A') { ?>
+        <tr>
+            <th scope="row">충전 잔액</th>
+            <td>
+                <?php echo number_format($userinfo['coin']); ?> 원.
+                <a href="http://www.icodekorea.com/smsbiz/credit_card_amt.php?icode_id=<?php echo $config['cf_icode_id']; ?>&amp;icode_passwd=<?php echo $config['cf_icode_pw']; ?>" target="_blank" class="btn_frmline">충전하기</a>
+            </td>
+        </tr>
+        <?php } ?>
         </tbody>
         </table>
     </div>
@@ -1435,26 +1395,6 @@ $(function(){
 
 function fconfigform_submit(f)
 {
-    var current_user_ip = "<?php echo $_SERVER['REMOTE_ADDR']; ?>";
-    var cf_intercept_ip_val = f.cf_intercept_ip.value;
-
-    if( cf_intercept_ip_val && current_user_ip ){
-        var cf_intercept_ips = cf_intercept_ip_val.split("\n");
-
-        for(var i=0; i < cf_intercept_ips.length; i++){
-            if ( cf_intercept_ips[i].trim() ) {
-                cf_intercept_ips[i] = cf_intercept_ips[i].replace(".", "\.");
-                cf_intercept_ips[i] = cf_intercept_ips[i].replace("+", "[0-9\.]+");
-                
-                var re = new RegExp(cf_intercept_ips[i]);
-                if ( re.test(current_user_ip) ){
-                    alert("현재 접속 IP : "+ current_user_ip +" 가 차단될수 있기 때문에, 다른 IP를 입력해 주세요.");
-                    return false;
-                }
-            }
-        }
-    }
-
     f.action = "./config_form_update.php";
     return true;
 }
@@ -1487,14 +1427,10 @@ if($config['cf_cert_use']) {
 
     // kcp일 때
     if($config['cf_cert_hp'] == 'kcp') {
-        if(strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
-            if(PHP_INT_MAX == 2147483647) // 32-bit
-                $exe = G5_KCPCERT_PATH . '/bin/ct_cli';
-            else
-                $exe = G5_KCPCERT_PATH . '/bin/ct_cli_x64';
-        } else {
-            $exe = G5_KCPCERT_PATH . '/bin/ct_cli_exe.exe';
-        }
+        if(PHP_INT_MAX == 2147483647) // 32-bit
+            $exe = G5_KCPCERT_PATH . '/bin/ct_cli';
+        else
+            $exe = G5_KCPCERT_PATH . '/bin/ct_cli_x64';
 
         echo module_exec_check($exe, 'ct_cli');
     }
@@ -1530,4 +1466,5 @@ if($config['cf_cert_use']) {
     }
 }
 
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/config_form_update.php

@@ -4,184 +4,41 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 if ($is_admin != 'super')
     alert('최고관리자만 접근 가능합니다.');
 
-$cf_title = isset($_POST['cf_title']) ? strip_tags(clean_xss_attributes($_POST['cf_title'])) : '';
-$cf_admin = isset($_POST['cf_admin']) ? clean_xss_tags($_POST['cf_admin'], 1, 1) : '';
-$posts = array();
-
 $mb = get_member($cf_admin);
-
-if (! (isset($mb['mb_id']) && $mb['mb_id']))
+if (!$mb['mb_id'])
     alert('최고관리자 회원아이디가 존재하지 않습니다.');
 
 check_admin_token();
 
-$cf_social_servicelist = !empty($_POST['cf_social_servicelist']) ? implode(',', $_POST['cf_social_servicelist']) : '';
-
-$check_keys = array('cf_lg_mid', 'cf_lg_mert_key', 'cf_cert_kcb_cd', 'cf_cert_kcp_cd', 'cf_editor', 'cf_recaptcha_site_key', 'cf_recaptcha_secret_key', 'cf_naver_clientid', 'cf_naver_secret', 'cf_facebook_appid', 'cf_facebook_secret', 'cf_twitter_key', 'cf_twitter_secret', 'cf_google_clientid', 'cf_google_secret', 'cf_googl_shorturl_apikey', 'cf_kakao_rest_key', 'cf_kakao_client_secret', 'cf_kakao_js_apikey', 'cf_payco_clientid', 'cf_payco_secret');
-
-foreach( $check_keys as $key ){
-    if ( isset($_POST[$key]) && $_POST[$key] ){
-        $posts[$key] = $_POST[$key] = preg_replace('/[^a-z0-9_\-\.]/i', '', $_POST[$key]);
-    }
-}
-
-$posts['cf_icode_server_port'] = $_POST['cf_icode_server_port'] = isset($_POST['cf_icode_server_port']) ? preg_replace('/[^0-9]/', '', $_POST['cf_icode_server_port']) : '7295';
-
-if(isset($_POST['cf_intercept_ip']) && $_POST['cf_intercept_ip']){
-
-    $pattern = explode("\n", trim($_POST['cf_intercept_ip']));
-    for ($i=0; $i<count($pattern); $i++) {
-        $pattern[$i] = trim($pattern[$i]);
-        if (empty($pattern[$i]))
-            continue;
-
-        $pattern[$i] = str_replace(".", "\.", $pattern[$i]);
-        $pattern[$i] = str_replace("+", "[0-9\.]+", $pattern[$i]);
-        $pat = "/^{$pattern[$i]}$/";
-
-        if( preg_match($pat, $_SERVER['REMOTE_ADDR']) ){
-            alert("현재 접속 IP : ".$_SERVER['REMOTE_ADDR']." 가 차단될수 있기 때문에, 다른 IP를 입력해 주세요.");
-        }
-    }
-}
-
-$check_keys = array(
-'cf_use_email_certify' => 'int',
-'cf_use_homepage' => 'int',
-'cf_req_homepage' => 'int',
-'cf_use_tel' => 'int',
-'cf_req_tel' => 'int',
-'cf_use_hp' => 'int',
-'cf_req_hp' => 'int',
-'cf_use_addr' => 'int',
-'cf_req_addr' => 'int',
-'cf_use_signature' => 'int',
-'cf_req_signature' => 'int',
-'cf_use_profile' => 'int',
-'cf_req_profile' => 'int',
-'cf_register_level' => 'int',
-'cf_register_point' => 'int',
-'cf_icon_level' => 'int',
-'cf_use_recommend' => 'int',
-'cf_leave_day' => 'int',
-'cf_search_part' => 'int',
-'cf_email_use' => 'int',
-'cf_email_wr_super_admin' => 'int',
-'cf_email_wr_group_admin' => 'int',
-'cf_email_wr_board_admin' => 'int',
-'cf_email_wr_write' => 'int',
-'cf_email_wr_comment_all' => 'int',
-'cf_email_mb_super_admin' => 'int',
-'cf_email_mb_member' => 'int',
-'cf_email_po_super_admin' => 'int',
-'cf_prohibit_id' => 'text',
-'cf_prohibit_email' => 'text',
-'cf_new_del' => 'int',
-'cf_memo_del' => 'int',
-'cf_visit_del' => 'int',
-'cf_popular_del' => 'int',
-'cf_use_member_icon' => 'int',
-'cf_member_icon_size' => 'int',
-'cf_member_icon_width' => 'int',
-'cf_member_icon_height' => 'int',
-'cf_member_img_size' => 'int',
-'cf_member_img_width' => 'int',
-'cf_member_img_height' => 'int',
-'cf_login_minutes' => 'int',
-'cf_formmail_is_member' => 'int',
-'cf_page_rows' => 'int',
-'cf_mobile_page_rows' => 'int',
-'cf_social_login_use' => 'int',
-'cf_cert_req' => 'int',
-'cf_cert_use' => 'int',
-'cf_cert_ipin' => 'char',
-'cf_cert_hp' => 'char',
-'cf_admin_email' => 'char',
-'cf_admin_email_name' => 'char',
-'cf_add_script' => 'text',
-'cf_use_point' => 'int',
-'cf_point_term' => 'int',
-'cf_use_copy_log' => 'int',
-'cf_login_point' => 'int',
-'cf_cut_name' => 'int',
-'cf_nick_modify' => 'int',
-'cf_new_skin' => 'char',
-'cf_new_rows' => 'int',
-'cf_search_skin' => 'char',
-'cf_connect_skin' => 'char',
-'cf_faq_skin' => 'char',
-'cf_read_point' => 'int',
-'cf_write_point' => 'int',
-'cf_comment_point' => 'int',
-'cf_download_point' => 'int',
-'cf_write_pages' => 'int',
-'cf_mobile_pages' => 'int',
-'cf_link_target' => 'char',
-'cf_delay_sec' => 'int',
-'cf_filter' => 'text',
-'cf_possible_ip' => 'text',
-'cf_analytics' => 'text',
-'cf_add_meta' => 'text',
-'cf_member_skin' => 'char',
-'cf_image_extension' => 'char',
-'cf_flash_extension' => 'char',
-'cf_movie_extension' => 'char',
-'cf_visit' => 'char',
-'cf_stipulation' => 'text',
-'cf_privacy' => 'text',
-'cf_open_modify' => 'int',
-'cf_memo_send_point' => 'int',
-'cf_mobile_new_skin' => 'char',
-'cf_mobile_search_skin' => 'char',
-'cf_mobile_connect_skin' => 'char',
-'cf_mobile_faq_skin' => 'char',
-'cf_mobile_member_skin' => 'char',
-'cf_captcha_mp3' => 'char',
-'cf_cert_limit' => 'int',
-'cf_sms_use' => 'char',
-'cf_sms_type' => 'char',
-'cf_icode_id' => 'char',
-'cf_icode_pw' => 'char',
-'cf_icode_server_ip' => 'char',
-'cf_captcha' => 'char',
-'cf_syndi_token' => '',
-'cf_syndi_except' => ''
-);
-
-for($i=1;$i<=10;$i++){
-    $check_keys['cf_'.$i.'_subj'] = isset($_POST['cf_'.$i.'_subj']) ? $_POST['cf_'.$i.'_subj'] : '';
-    $check_keys['cf_'.$i] = isset($_POST['cf_'.$i]) ? $_POST['cf_'.$i] : '';
-}
-
-foreach( $check_keys as $k => $v ){
-    if( $v === 'int' ){
-        $posts[$key] = $_POST[$k] = isset($_POST[$k]) ? (int) $_POST[$k] : 0;
-    } else {
-        if(in_array($k, array('cf_analytics', 'cf_add_meta', 'cf_add_script', 'cf_stipulation', 'cf_privacy'))){
-            $posts[$key] = $_POST[$k] = isset($_POST[$k]) ? $_POST[$k] : '';
-        } else {
-            $posts[$key] = $_POST[$k] = isset($_POST[$k]) ? strip_tags(clean_xss_attributes($_POST[$k])) : '';
-        }
-    }
-}
-
 // 본인확인을 사용할 경우 아이핀, 휴대폰인증 중 하나는 선택되어야 함
 if($_POST['cf_cert_use'] && !$_POST['cf_cert_ipin'] && !$_POST['cf_cert_hp'])
     alert('본인확인을 위해 아이핀 또는 휴대폰 본인학인 서비스를 하나이상 선택해 주십시오');
 
 if(!$_POST['cf_cert_use']) {
-    $posts[$key] = $_POST['cf_cert_ipin'] = '';
-    $posts[$key] = $_POST['cf_cert_hp'] = '';
+    $_POST['cf_cert_ipin'] = '';
+    $_POST['cf_cert_hp'] = '';
+}
+
+$cf_social_servicelist = !empty($_POST['cf_social_servicelist']) ? implode(',', $_POST['cf_social_servicelist']) : '';
+
+$_POST['cf_title'] = strip_tags($_POST['cf_title']);
+
+$check_keys = array('cf_lg_mid', 'cf_lg_mert_key', 'cf_cert_kcb_cd', 'cf_cert_kcp_cd', 'cf_editor', 'cf_recaptcha_site_key', 'cf_recaptcha_secret_key', 'cf_naver_clientid', 'cf_naver_secret', 'cf_facebook_appid', 'cf_facebook_secret', 'cf_twitter_key', 'cf_twitter_secret', 'cf_google_clientid', 'cf_google_secret', 'cf_googl_shorturl_apikey', 'cf_kakao_rest_key', 'cf_kakao_client_secret', 'cf_kakao_js_apikey', 'cf_payco_clientid', 'cf_payco_secret');
+
+foreach( $check_keys as $key ){
+    if ( isset($_POST[$key]) && $_POST[$key] ){
+        $_POST[$key] = preg_replace('/[^a-z0-9_\-\.]/i', '', $_POST[$key]);
+    }
 }
 
 $sql = " update {$g5['config_table']}
-            set cf_title = '{$cf_title}',
-                cf_admin = '{$cf_admin}',
+            set cf_title = '{$_POST['cf_title']}',
+                cf_admin = '{$_POST['cf_admin']}',
                 cf_admin_email = '{$_POST['cf_admin_email']}',
                 cf_admin_email_name = '{$_POST['cf_admin_email_name']}',
                 cf_add_script = '{$_POST['cf_add_script']}',
@@ -212,7 +69,6 @@ $sql = " update {$g5['config_table']}
                 cf_add_meta = '{$_POST['cf_add_meta']}',
                 cf_syndi_token = '{$_POST['cf_syndi_token']}',
                 cf_syndi_except = '{$_POST['cf_syndi_except']}',
-                cf_bbs_rewrite = '{$_POST['cf_bbs_rewrite']}',
                 cf_member_skin = '{$_POST['cf_member_skin']}',
                 cf_use_homepage = '{$_POST['cf_use_homepage']}',
                 cf_req_homepage = '{$_POST['cf_req_homepage']}',
@@ -286,7 +142,6 @@ $sql = " update {$g5['config_table']}
                 cf_sms_type = '{$_POST['cf_sms_type']}',
                 cf_icode_id = '{$_POST['cf_icode_id']}',
                 cf_icode_pw = '{$_POST['cf_icode_pw']}',
-                cf_icode_token_key = '{$_POST['cf_icode_token_key']}',
                 cf_icode_server_ip = '{$_POST['cf_icode_server_ip']}',
                 cf_icode_server_port = '{$_POST['cf_icode_server_port']}',
                 cf_googl_shorturl_apikey = '{$_POST['cf_googl_shorturl_apikey']}',
@@ -332,12 +187,5 @@ sql_query($sql);
 
 //sql_query(" OPTIMIZE TABLE `$g5[config_table]` ");
 
-if( isset($_POST['cf_bbs_rewrite']) ){
-    g5_delete_all_cache();
-}
-
-run_event('admin_config_form_update');
-
-update_rewrite_rules();
-
-goto_url('./config_form.php', false);
+goto_url('./config_form.php', false);
+?>

adm/contentform.php

@@ -3,9 +3,7 @@ $sub_menu = '300600';
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, "w");
-
-$co_id = isset($_REQUEST['co_id']) ? preg_replace('/[^a-z0-9_]/i', '', $_REQUEST['co_id']) : '';
+auth_check($auth[$sub_menu], "w");
 
 // 상단, 하단 파일경로 필드 추가
 if(!sql_query(" select co_include_head from {$g5['content_table']} limit 1 ", false)) {
@@ -53,13 +51,6 @@ else
 {
     $html_title .= ' 입력';
     $co = array(
-        'co_id' => '',
-        'co_subject' => '',
-        'co_content' => '',
-        'co_mobile_content' => '',
-        'co_include_head' => '',
-        'co_include_tail' => '',
-        'co_tag_filter_use' => 1,
         'co_html' => 2,
         'co_skin' => 'basic',
         'co_mobile_skin' => 'basic'
@@ -87,7 +78,7 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
         <td>
             <?php echo help('20자 이내의 영문자, 숫자, _ 만 가능합니다.'); ?>
             <input type="text" value="<?php echo $co['co_id']; ?>" name="co_id" id ="co_id" required <?php echo $readonly; ?> class="required <?php echo $readonly; ?> frm_input" size="20" maxlength="20">
-            <?php if ($w == 'u') { ?><a href="<?php echo get_pretty_url('content', $co_id); ?>" class="btn_frmline">내용확인</a><?php } ?>
+            <?php if ($w == 'u') { ?><a href="<?php echo G5_BBS_URL; ?>/content.php?co_id=<?php echo $co_id; ?>" class="btn_frmline">내용확인</a><?php } ?>
         </td>
     </tr>
     <tr>
@@ -162,7 +153,6 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
             <input type="file" name="co_himg" id="co_himg">
             <?php
             $himg = G5_DATA_PATH.'/content/'.$co['co_id'].'_h';
-            $himg_str = '';
             if (file_exists($himg)) {
                 $size = @getimagesize($himg);
                 if($size[0] && $size[0] > 750)
@@ -187,7 +177,6 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
             <input type="file" name="co_timg" id="co_timg">
             <?php
             $timg = G5_DATA_PATH.'/content/'.$co['co_id'].'_t';
-            $timg_str = '';
             if (file_exists($timg)) {
                 $size = @getimagesize($timg);
                 if($size[0] && $size[0] > 750)
@@ -295,4 +284,5 @@ function frmcontentform_check(f)
 </script>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/contentformupdate.php

@@ -6,37 +6,28 @@ if ($w == "u" || $w == "d")
     check_demo();
 
 if ($w == 'd')
-    auth_check_menu($auth, $sub_menu, "d");
+    auth_check($auth[$sub_menu], "d");
 else
-    auth_check_menu($auth, $sub_menu, "w");
+    auth_check($auth[$sub_menu], "w");
 
 check_admin_token();
 
-$co_row = array('co_id'=>'', 'co_include_head'=>'', 'co_include_tail'=>'');
-
 if ($w == "" || $w == "u")
 {
-    if(isset($_REQUEST['co_id']) && preg_match("/[^a-z0-9_]/i", $_REQUEST['co_id'])) alert("ID 는 영문자, 숫자, _ 만 가능합니다.");
+    if(preg_match("/[^a-z0-9_]/i", $co_id)) alert("ID 는 영문자, 숫자, _ 만 가능합니다.");
 
     $sql = " select * from {$g5['content_table']} where co_id = '$co_id' ";
     $co_row = sql_fetch($sql);
 }
 
-$co_id = isset($_REQUEST['co_id']) ? preg_replace('/[^a-z0-9_]/i', '', $_REQUEST['co_id']) : '';
-$co_subject = isset($_POST['co_subject']) ? strip_tags(clean_xss_attributes($_POST['co_subject'])) : '';
-$co_include_head = isset($_POST['co_include_head']) ? preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($_POST['co_include_head'], 0, 255)) : '';
-$co_include_tail = isset($_POST['co_include_tail']) ? preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($_POST['co_include_tail'], 0, 255)) : '';
+$co_id = preg_replace('/[^a-z0-9_]/i', '', $co_id);
+$co_subject = strip_tags($co_subject);
+$co_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_head, 0, 255));
+$co_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_tail, 0, 255));
 $co_tag_filter_use = isset($_POST['co_tag_filter_use']) ? (int) $_POST['co_tag_filter_use'] : 1;
-$co_himg_del = (isset($_POST['co_himg_del']) && $_POST['co_himg_del']) ? 1 : 0;
-$co_timg_del = (isset($_POST['co_timg_del']) && $_POST['co_timg_del']) ? 1 : 0;
-$co_html = isset($_POST['co_html']) ? (int) $_POST['co_html'] : 0;
-$co_content = isset($_POST['co_content']) ? $_POST['co_content'] : '';
-$co_mobile_content = isset($_POST['co_mobile_content']) ? $_POST['co_mobile_content'] : '';
-$co_skin = isset($_POST['co_skin']) ? clean_xss_tags($_POST['co_skin'], 1, 1) : '';
-$co_mobile_skin = isset($_POST['co_mobile_skin']) ? clean_xss_tags($_POST['co_mobile_skin'], 1, 1) : '';
 
 // 관리자가 자동등록방지를 사용해야 할 경우
-if ((( isset($co_row['co_include_head']) && $co_row['co_include_head'] !== $co_include_head ) || ( isset($co_row['co_include_tail']) && $co_row['co_include_tail'] !== $co_include_tail )) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
+if (($co_row['co_include_head'] !== $co_include_head || $co_row['co_include_tail'] !== $co_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
     include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');
 
     if (!chk_captcha()) {
@@ -80,13 +71,6 @@ if( $co_include_tail && ! is_include_path_check($co_include_tail, 1) ){
     $error_msg = '/data/file/ 또는 /data/editor/ 포함된 문자를 하단 파일 경로에 포함시킬수 없습니다.';
 }
 
-if( function_exists('filter_input_include_path') ){
-    $co_include_head = filter_input_include_path($co_include_head);
-    $co_include_tail = filter_input_include_path($co_include_tail);
-}
-
-$co_seo_title = exist_seo_title_recursive('content', generate_seo_title($co_subject), $g5['content_table'], $co_id);
-
 $sql_common = " co_include_head     = '$co_include_head',
                 co_include_tail     = '$co_include_tail',
                 co_html             = '$co_html',
@@ -94,14 +78,13 @@ $sql_common = " co_include_head     = '$co_include_head',
                 co_subject          = '$co_subject',
                 co_content          = '$co_content',
                 co_mobile_content   = '$co_mobile_content',
-                co_seo_title        = '$co_seo_title',
                 co_skin             = '$co_skin',
                 co_mobile_skin      = '$co_mobile_skin' ";
 
 if ($w == "")
 {
     $row = $co_row;
-    if (isset($row['co_id']) && $row['co_id'])
+    if ($row['co_id'])
         alert("이미 같은 ID로 등록된 내용이 있습니다.");
 
     $sql = " insert {$g5['content_table']}
@@ -128,8 +111,6 @@ else if ($w == "d")
 if(function_exists('get_admin_captcha_by'))
     get_admin_captcha_by('remove');
 
-g5_delete_cache_by_prefix('content-'.$co_id.'-');
-
 if ($w == "" || $w == "u")
 {
     if ($_FILES['co_himg']['name'])
@@ -154,4 +135,5 @@ if ($w == "" || $w == "u")
 else
 {
     goto_url("./contentlist.php");
-}
+}
+?>

adm/contentlist.php

@@ -2,7 +2,7 @@
 $sub_menu = '300600';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, "r");
+auth_check($auth[$sub_menu], "r");
 
 if( !isset($g5['content_table']) ){
     die('<meta charset="utf-8">/data/dbconfig.php 파일에 <strong>$g5[\'content_table\'] = G5_TABLE_PREFIX.\'content\';</strong> 를 추가해 주세요.');
@@ -77,7 +77,7 @@ $result = sql_query($sql);
         <td class="td_left"><?php echo htmlspecialchars2($row['co_subject']); ?></td>
         <td class="td_mng td_mng_l">
             <a href="./contentform.php?w=u&amp;co_id=<?php echo $row['co_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>수정</a>
-            <a href="<?php echo get_pretty_url('content', $row['co_id']); ?>" class="btn btn_02"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span> 보기</a>
+            <a href="<?php echo G5_BBS_URL; ?>/content.php?co_id=<?php echo $row['co_id']; ?>" class="btn btn_02"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span> 보기</a>
             <a href="./contentformupdate.php?w=d&amp;co_id=<?php echo $row['co_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo htmlspecialchars2($row['co_subject']); ?> </span>삭제</a>
         </td>
     </tr>
@@ -94,4 +94,5 @@ $result = sql_query($sql);
 <?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/css/admin.css

@@ -13,21 +13,20 @@ legend {position:absolute;margin:0;padding:0;font-size:0;line-height:0;text-inde
 label, input, button, select, img {vertical-align:middle}
 input, button {margin:0;padding:0;font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;font-size:1em}
 button,input[type="submit"] {cursor:pointer}
-textarea, select {font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;font-size:1em}
+textarea, select {font-family:'Malgun Gothic',"맑은 고딕",AppleGothic,Dotum,"돋움", sans-serif;;font-size:1em}
 select {margin:0}
 p {margin:0;padding:0;word-break:break-all}
 pre {overflow-x:scroll;font-size:1.1em}
 a:link, a:visited {color:#000;text-decoration:none}
 
 * {
--webkit-box-sizing: border-box;
--moz-box-sizing: border-box;
-box-sizing: border-box;
+  -webkit-box-sizing: border-box;
+     -moz-box-sizing: border-box;
+          box-sizing: border-box;
 }
 
 h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
 
-#wrapper {min-height:480px}
 /* 레이아웃 */
 #hd h1 {position:absolute;font-size:0;line-height:0;overflow:hidden}
 #hd_top{position:fixed;top:0;left:0;width:100%;height:50px;background:#3f51b5;z-index:1000}
@@ -39,12 +38,12 @@ h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
 #tnb{float:right;padding:10px}
 #tnb ul:after{display:block;visibility:hidden;clear:both;content:""}
 #tnb li{float:left;position:relative;margin-left:3px}
-#tnb a{color:#fff;padding:0 10px;display:block;line-height:30px;}
+#tnb a{color:#fff;;padding:0 10px;display:block;line-height:30px;}
 #tnb .tnb_service{border-radius:3px;background:#4e5eb7;color:#fff;padding:0 10px;text-align:left;height:30px;line-height:30px;}
 #tnb .tnb_service:hover{background:#5969c3}
-#tnb button{width:100px;border:0;border-radius:3px;background:#4e5eb7;color:#fff;padding:0 30px 0 10px;text-align:left;height:30px;position:relative;text-overflow: ellipsis;overflow: hidden;white-space: nowrap;}
-#tnb button span{display:block;text-indent:-999px;overflow:hidden;width:30px;border-radius:3px;height:30px;position:absolute;top:0;right:0;background:url(../img/op_btn.png) 50% 50% no-repeat #5969c3}
-#tnb button:hover {background:#5969c3}
+#tnb  button{width:100px;;border:0;border-radius:3px;background:#4e5eb7;color:#fff;padding:0 30px 0 10px;text-align:left;height:30px;position:relative;text-overflow: ellipsis;overflow: hidden;white-space: nowrap;}
+#tnb  button span{display:block;text-indent:-999px;overflow:hidden;width:30px;border-radius:3px;height:30px;position:absolute;top:0;right:0;background:url(../img/op_btn.png) 50% 50% no-repeat #5969c3}
+#tnb  button:hover {background:#5969c3}
 #tnb .tnb_mb_area{display:none;background:#5e6dc2;width:100px;position:absolute;padding:5px;margin-top:1px;}
 #tnb .tnb_mb_area a{padding:0}
 #tnb .tnb_mb_area li{float:none;}
@@ -75,9 +74,9 @@ h2{font-size: 1.083em;font-weight: bold;margin:10px 0}
 #gnb .on .btn_op.menu-900{background:url(../img/menu-4.png) 50% 50% no-repeat #fff}
 #gnb .gnb_li button:hover{background-color:#f3f3f3}
 #gnb .gnb_oparea{display:none;position:absolute;top:0;left:50px;background:#fff;height:100%;width:170px;padding:20px;border-right:1px solid #dbdbdb;
--webkit-box-shadow: 2px 0 2px rgba(150,150,150,100.1);
--moz-box-shadow: 2px 0 2px rgba(150,150,150,0.1);
-box-shadow: 2px 0 2px rgba(150,150,150,0.1);}
+-webkit-box-shadow: 2px 0 2px  rgba(150,150,150,100.1);
+   -moz-box-shadow: 2px 0 2px  rgba(150,150,150,0.1);
+        box-shadow: 2px 0 2px  rgba(150,150,150,0.1);}
 #gnb .on .gnb_oparea{display:block}
 #gnb .gnb_oparea h3{margin-bottom:10px;line-height:18px;font-size:1.17em}
 #gnb .gnb_oparea li{line-height:28px}
@@ -144,7 +143,6 @@ box-shadow: 2px 0 2px rgba(150,150,150,0.1);}
 .btn_submit{background:#ff4081;color:#fff}
 a.btn_submit{background:#ff4081;color:#fff}
 
-
 .btn_confirm .btn_submit {padding:0 15px;border:0;height:30px;color:#fff}
 .btn_frmline {display:inline-block;padding:0 7px;height:24px;border:0;background:#444;color:#fff !important;letter-spacing:-0.1em;text-decoration:none;vertical-align:middle;line-height:2em} /* 우편번호검색버튼 등 */
 .btn_frmline:focus, .btn_frmline:hover, .btn_frmline:active {text-decoration:none}
@@ -182,12 +180,10 @@ a.btn_submit{background:#ff4081;color:#fff}
 .btn_add01 button {margin:0}
 
 
-
-.td_mng a.btn,.td_mng a{display:inline-block;height:26px;line-height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
-.td_mng button,.td_mng button.btn{height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
-
-.btn{height:30px;border:0;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
-a.btn{display:inline-block;height:30px;line-height:30px;border:0;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
+.td_mng a.btn,.td_mng a{display:inline-block;height:26px;line-height:26px;border:0;;border-radius:3px;padding:0 8px;margin:1px;font-weight:normal}
+.td_mng button,.td_mng button.btn{height:26px;border:0;border-radius:3px;padding:0 8px;margin:1px;border:0;;font-weight:normal}
+.btn{height:30px;border:0;;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;vertical-align:middle}
+a.btn{display:inline-block;height:30px;line-height:30px;border:0;;border-radius:5px;padding:0 10px;font-weight:bold;font-size:1.09em;;vertical-align:middle}
 .btn_submit{background:#ff4081;color:#fff}
 a.btn_submit{background:#ff4081;color:#fff}
 .btn_submit:hover{background:#ff1464}
@@ -198,7 +194,7 @@ a.btn_submit{background:#ff4081;color:#fff}
 .btn_03,a.btn_03{background:#3f51b5;color:#fff;}
 
 .btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;border:0;border-radius:5px;padding:0 10px}
-a.btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;line-height:33px;border-radius:5px;padding:0 10px;text-decoration:none !important}
+a.btn_frmline{display:inline-block;background:#9eacc6;color:#fff;height:35px;line-height:33px;border-radius:5px;padding:0 10px;text-decoration:none  !important}
 .btn_ov01{display:inline-block;line-height:30px;height:30px;font-size:0.92em;vertical-align:top}
 .btn_ov01:after{display:block;visibility:hidden;clear :both;content:""}
 .btn_ov01 .ov_txt{float:left;background:#9eacc6;color:#fff;border-radius:5px 0 0 5px;padding:0 5px}
@@ -210,7 +206,7 @@ a.btn_ov02:hover,a.ov_listall:hover{background:#3f51b5}
 .sound_only {display:inline-block !important;position:absolute;top:0;left:0;margin:0 !important;padding:0 !important;width:1px !important;height:1px !important;font-size:0;line-height:0;border:0 !important;overflow:hidden !important}
 .frm_input{height:35px;line-height:32px;border:1px solid #d5d5d5;}
 .frm_input_full{width:100%}
-.required{background:url('../img/wrest.gif') top right no-repeat #fff !important}
+.required{background:url('../img/wrest.gif')  top right no-repeat #fff !important}
 select{height:35px;line-height:32px;border:1px solid #d5d5d5;}
 textarea{width:100%;border:1px solid #d5d5d5;min-height:80px}
 legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent:-9999em;border:0;overflow:hidden}
@@ -235,7 +231,7 @@ legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent
 .color_st03{background:#b668d0;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
 .color_st04{background:#ffa700;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
 .color_st05{background:#688fef;color:#fff;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
-.color_st06{color:#ff0000;border:1px solid #ff0000;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
+.color_st06{;color:#ff0000;border:1px solid #ff0000;display:inline-block;padding:0 3px;font-size:0.92em;line-height:18px}
 
 /* 폼 안내글 */
 .frm_info {display:block;padding:0 0 5px;color:#5b747e}
@@ -245,11 +241,10 @@ legend {position:absolute;width:0;height:0;font-size:0;line-height:0;text-indent
 .anchor:after {display:block;visibility:hidden;clear:both;content:""}
 .anchor li{float:left;margin-left:-1px;list-style:none}
 .anchor a {display:inline-block;padding:5px 10px;border:1px solid #c8ced1;background:#d6dde1;text-decoration:none}
-.anchor .selected{background:#3f51b5}
+.anchor  .selected{background:#3f51b5}
 
 
 
-
 #sort_mb {width:800px}
 
 #sort_sodr {width:600px}
@@ -266,20 +261,21 @@ border-bottom: 5px solid black;}
 /* 페이지 내 검색 */
 .local_sch{}
 .local_sch:after ,.local_sch div:after{display:block;visibility:hidden;clear:both;content:""}
-.local_sch .btn_sch{width:30px;height:30px;padding:0;float:left;border:1px solid #dcdcdc;border-left:0;background:url(../img/sch_btn.png) no-repeat 50% 50%;text-indent:-999px;overflow:hidden}
-.local_sch .btn_sch2{width:35px;height:35px;padding:0;border:1px solid #dcdcdc;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;text-indent:-999px;overflow:hidden}
-.local_sch .sch_input{height:30px;border:1px solid #dcdcdc;border-right:0;padding:0 5px;float:left;}
+.local_sch .btn_sch{width:30px;height:30px;border:0;padding:0;float:left;background:url(../img/sch_btn.png) no-repeat 50% 50%;border:1px solid #dcdcdc;border-left:0;text-indent:-999px;overflow:hidden}
+.local_sch .btn_sch2{width:35px;height:35px;border:0;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;border:1px solid #dcdcdc;text-indent:-999px;overflow:hidden}
+
+.local_sch .sch_input{height:30px;border:1px solid #dcdcdc;border-right:0;;padding:0 5px;float:left;}
 .local_sch select{height:30px;margin-right:3px;border:1px solid #dcdcdc}
 .local_sch01{margin: 10px 0;}
 .local_sch02{}
 .local_sch01 .frm_input{height:30px;border:1px solid #dcdcdc;padding:0 5px;}
-.local_sch01 .btn_submit{width:30px;height:30px;border:1px solid #dcdcdc;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;text-indent:-999px;overflow:hidden}
-.local_sch03{padding:5px 15px;background:#e9ebf9;margin:10px 0}
+.local_sch01 .btn_submit{width:30px;height:30px;border:0;padding:0;background:url(../img/sch_btn.png) no-repeat 50% 50% #eee;border:1px solid #dcdcdc;text-indent:-999px;overflow:hidden}
+.local_sch03{;padding:5px 15px;background:#e9ebf9;margin:10px 0}
 .local_sch div{margin:5px 0;}
 .local_sch03 strong{display:inline-block;width:70px;}
-.local_sch03 label{margin-right:5px;display:inline-block}
+.local_sch03  label{margin-right:5px;display:inline-block}
 .local_sch03 button{height:30px;padding:0 5px;border:0;background:#9eacc6;color:#fff;}
-.local_sch03 .btn_submit{height:30px;padding:0 5px;border:0;color:#fff;}
+.local_sch03 .btn_submit{height:30px;padding:0 5px;border:0;;color:#fff;}
 .local_sch03 .frm_input{height:30px;border:1px solid #dcdcdc;padding:0 5px;}
 /* 페이지 내 실행 */
 .local_cmd {min-width:960px}
@@ -306,11 +302,10 @@ border-bottom: 5px solid black;}
 /* 페이지 내 카운트 */
 .local_ov {min-width:960px}
 
-.local_ov01 {position:relative;margin: 10px 0;}
-.local_ov01 .ov_a{display:inline-block;line-height:30px;height:30px;font-size:0.92em;background:#ff4081;color:#fff;vertical-align:top;border-radius:5px;padding:0 7px}
-.local_ov01 .ov_a:hover{background:#ff1464}
+.local_ov01 {position:relative;;margin: 10px 0;}
+.local_ov01 .ov_a {display:inline-block;margin:0 0 0 5px;padding:0 0 0 10px;border-left:1px solid #ccc;color:#ff3061}
+
 
-
 /* 테이블 */
 table {clear:both;width:100%;border-collapse:collapse;border-spacing:0;}
 table caption {height:0;font-size:0;line-height:0;overflow:hidden}
@@ -420,10 +415,6 @@ tfoot th {}
 .visit_del_bt{margin:5px 0;border-top:1px solid #eee;padding:5px 0}
 .visit_del_bt .btn_submit{border:0;height:35px;padding: 0 5px;border-radius:3px}
 
-/*접속자로그삭제*/
-.visit_del_bt{margin:5px 0;border-top:1px solid #eee;padding:5px 0}
-.visit_del_bt .btn_submit{border:0;height:35px;padding: 0 5px;border-radius:3px}
-
 /* 공통 */
 .td_addr {text-align:left !important}
 .td_alignc {text-align:center}
@@ -524,24 +515,8 @@ td.td_grpset {width:160px;border-left:1px solid #e9ecee;text-align:center}
 /* 환경설정 */
 .cf_cert_hide {display:none}
 
-.server_config_views {margin-bottom:10px}
-.rules_label {margin-left:5px;vertical-align:middle}
-
-.is_rewrite .connect-close {position:absolute;top:10px;right:10px;margin:0;padding:0;width:30px;height:30px;border:0;background:transparent;color:#383838;cursor:pointer;font-size:15px}
-.is_rewrite .connect-close:hover {color:#ff5191}
-.is_rewrite .connect-close .fa {margin:0 0 0 1px}
-.is_rewrite .connect-close .txt {position:absolute;line-height:0;font-size:0;overflow:hidden}
-.is_rewrite textarea{width:99%;min-height:260px}
-.is_rewrite .copy_title{margin-top:15px;margin-bottom:10px;font-weight:bold;text-align:left}
-.is_rewrite .info-success{color:#155724}
-.is_rewrite .info-warning{color:#856404}
-
-.icode_old_version th{background-color:#FFFCED}
-.icode_json_version th{background-color:#F6F1FF}
-.cf_tr_hide {display:none}
-
 /* 관리권한설정 */
-#add_admin fieldset {margin-top:20px;overflow:auto;padding:2px 6px;line-height:1.4;resize:vertical}
+#add_admin fieldset {margin-top:20px}
 
 /* 메일 테스트 */
 
@@ -554,44 +529,6 @@ td.td_grpset {width:160px;border-left:1px solid #e9ecee;text-align:center}
 .session_del strong{color:#ff0000}
 .session_del p{line-height:1.7em;padding:10px 15px ;background:#f7ecea;border:2px solid #ffb6c1}
 
-/* ########## 쇼핑몰 사용시 적용 ########## */
-.sidx {padding:20px 0 30px;zoom:1}
-.sidx:after {display:block;visibility:hidden;clear:both;content:""}
-
-.sidx_anchor {position:absolute;margin:0;padding:0;width:1px;height:1px;font-size:0;line-height:0;overflow:hidden}
-
-/* idx 쇼핑몰 */
-#anc_sidx_ord {float:left;width:66%}
-#sidx_graph {position:relative}
-#sidx_graph_price {position:absolute;top:10px;left:20px;margin:0;padding:0;width:12%;list-style:none}
-#sidx_graph_price li {position:relative;padding:0 10% 0 0;height:48px;font-family:tahoma;text-align:right}
-#sidx_graph_price li span {position:absolute;top:7px;right:-10%;width:10px;height:1px;background:#e9e9e9}
-#sidx_graph_area {position:absolute;top:0;left:15%;margin:0;padding:0;width:85%;height:260px;border:1px solid #e9e9e9;list-style:none}
-#sidx_graph_area li {position:relative;float:left;padding:0 1% 0 0;width:14%;height:100%}
-#sidx_graph_area .graph {position:absolute;bottom:0;width:40%;height:0}
-#sidx_graph_area .order {background:#8562ca;left:7%}
-#sidx_graph_area .cancel {background:#62c5ca;right:7%}
-#sidx_graph_area #price_tooltip {display:none;position:absolute;top:-18px;left:0;background-color:#fff;border:1px solid gray}
-#sidx_graph_area #price_tooltip div {white-space:nowrap}
-#sidx_graph_date {position:absolute;top:275px;left:15%;margin:0;padding:0;width:85%;border:1px solid #fff;list-style:none}
-#sidx_graph_date li {position:relative;float:left;width:14%;font-family:tahoma;text-align:center}
-#sidx_graph_date li span {position:absolute;top:-16px;right:0;width:1px;height:10px;background:#e9e9e9}
-#sidx_graph_legend {position:absolute;top:-25px;left:15%}
-#sidx_graph_legend span {display:inline-block;width:13px;height:13px;vertical-align:middle}
-#sidx_graph_legend #legend_order {background:#8562ca}
-#sidx_graph_legend #legend_cancel {margin:0 0 0 10px;background:#62c5ca}
-
-#sidx_graph_area .bg0{background:#fff }
-#sidx_graph_area .bg1{background:#eff3f9 }
-
-
-#anc_sidx_settle {margin:0 0 30px;padding:30px 0;border-top:1px solid #e9e9e9;border-bottom:1px solid #e9e9e9}
-#anc_sidx_settle table {text-align:center}
-
-#sidx_stat {float:right;width:32%}
-#sidx_stat h2 {padding:0 20px 0 0}
-#sidx_stat .tbl_wrap {padding:0 20px 0 0}
-
 /* idx 1:1문의/상품문의/사용후기 */
 .sidx_cs {}
 .sidx_cs section {float:left;margin:0 2% 0 0;width:32%}
@@ -612,270 +549,6 @@ td.td_grpset {width:160px;border-left:1px solid #e9ecee;text-align:center}
 
 .sidx_cs #anc_sidx_ps .ps_link {display:block;margin:5px 0}
 
-/* 쇼핑몰 설정 */
-#anc_scf_payment textarea {height:50px}
-.get_shop_skin,.shop_etc,.shop_pc_index,.shop_mobile_index{background: #9eacc6;color: #fff;height: 30px;border: 0;border-radius: 5px;padding: 0 10px;font-weight: bold;font-size: 1.09em;
-vertical-align: middle;}
-
-a.scf_pgreg {display:inline-block;margin:5px 0 0;padding:5px 10px;background:#226C8B;color:#fff;font-weight:normal;text-decoration:none}
-a.kcp_btn {display:inline-block;margin:5px 0 0;padding:5px 10px;background:#226C8B;color:#fff;font-weight:normal;text-decoration:none}
-a.lg_btn{display:inline-block;margin:5px 0 0;padding:5px 10px;background:#ED008C;color:#fff;font-weight:normal;text-decoration:none}
-a.kg_btn{display:inline-block;margin:5px 0 0;padding:5px 10px;background:#4A2C7C;color:#fff;font-weight:normal;text-decoration:none}
-a.kakao_btn{display:inline-block;margin:5px 0 0;padding:5px 10px;background:#FDDC2F;color:#3B1E1E;font-weight:normal;text-decoration:none}
-a.naver_btn {display:inline-block;margin:5px 0 0;padding:5px 10px;background:#00C73C;color:#fff;font-weight:normal;text-decoration:none}
-
-.scf_cardtest {margin:5px 0 0}
-.scf_cardtest_btn {margin-left:5px;vertical-align:middle}
-#scf_cardtest_tip {margin:10px 0 0;padding:10px;border:3px solid #ddd}
-#scf_cardtest_tip strong {display:inline-block;margin:0 0 5px}
-#scf_cardtest_tip dl {margin:0 0 15px;padding:0;zoom:1}
-#scf_cardtest_tip dl:after {display:block;visibility:hidden;clear:both;content:""}
-#scf_cardtest_tip dt {float:left;width:100px}
-#scf_cardtest_tip dd {padding:0;overflow:hidden}
-.scf_cardtest_tip {display:none}
-.scf_cardtest_hide {display:none}
-.scf_cardtest_tip_adm_hide {display:none}
-
-.scf_img {display:none}
-
-#scf_sms_pre h3 {padding:10px 0}
-#scf_sms_pre dl {margin:0 0 10px;zoom:1}
-#scf_sms_pre dl:after {display:block;visibility:hidden;clear:both;content:""}
-#scf_sms_pre dt {clear:both;float:left;padding:5px 0;width:100px}
-#scf_sms_pre dd {padding:5px 0;overflow:hidden}
-#scf_sms {margin:0 20px 30px;padding:20px 0 0;zoom:1}
-#scf_sms:after {display:block;visibility:hidden;clear:both;content:""}
-.scf_sms_box {float:left;margin:0 8px 0 9px;width:163px;text-align:center}
-.scf_sms_box h4 {margin:0 0 5px}
-.scf_sms_img {margin:10px 0;width:163px;height:191px;background:url('../shop_admin/img/sms_back.gif') no-repeat 0 0;text-align:center}
-.scf_sms_img textarea {margin:54px 0 0;width:115px;height:85px;border:0;background:transparent;font-size:0.95em;overflow:hidden}
-.scf_sms_img span {display:block}
-.scf_sms_cnt {display:block}
-
-ul.de_pg_tab{margin:0;padding:0;zoom:1}
-ul.de_pg_tab:after{display:block;visibility:hidden;clear:both;content:"";}
-ul.de_pg_tab li{position:relative;display:inline-block;float:left;text-align:center;margin:0;padding:0;width:120px}
-ul.de_pg_tab li a{margin:0 2px;display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;line-height:2.5;background-color:#f7f7f7;color:#74777b;font-weight:bold;font-size:1.2em;text-decoration:none}
-ul.de_pg_tab li a:hover{text-decoration:none}
-ul.de_pg_tab li.tab-current a{background:#2CC185;color:#fff}
-
-.pg_info_fld{position:relative}
-.kcp_info_fld th{background-color:#F6FCFF}
-.lg_info_fld th{background-color:#FFF4FA}
-.inicis_info_fld th{background-color:#F6F1FF}
-.kakao_info_fld th{background-color:#FFFCED}
-.naver_info_fld th{background-color:#F3FFF3}
-
-/* 주문내역 */
-#sodr_list td {text-align:center}
-#sodr_list .td_name {text-align:center !important}
-
-#orderitemlist {position:relative}
-#orderitemlist .itemlist {z-index:2;position:absolute;top:0;left:-41px;width:958px;padding:10px;border:1px solid #a2a5a9;background:#f2f5f9}
-#orderitemlist .itemlist h2{margin:0 0 10px}
-#orderitemlist td {background:#fff}
-#orderitemlist #orderitemlist_close {text-align:right}
-
-#sodr_list .list_escrow {display:block;color:#80bc0d;text-align:center}
-#sodr_list .list_test {display:block;text-align:center;color:#ff3061}
-#sodr_list .odrpay {max-width:50px}
-
-.local_sch03.local_sch [data-tooltip-text]:hover {position:relative}
-.local_sch03.local_sch [data-tooltip-text]:hover:after{line-height:20px;background-color:#000;background-color:rgba(0,0,0,0.8);-webkit-box-shadow:0 0 3px 1px rgba(50,50,50,0.4);-moz-box-shadow:0 0 3px 1px rgba(50,50,50,0.4);box-shadow:0 0 3px 1px rgba(50,50,50,0.4);-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;color:#FFF;font-size:11px;content:attr(data-tooltip-text);white-space: pre;margin-bottom:10px;top:130%;left:0;padding:7px 12px;position:absolute;max-width:500px;word-wrap:break-word;z-index:9999}
-
-/* 주문내역 수정 */
-.sodr_nonpay {color:#ff6600}
-strong.sodr_nonpay {display:block;padding:5px 0;text-align:right}
-.sodr_sppay {color:#1f9bff}
-#anc_sodr_memo textarea {width:100%}
-#anc_sodr_memo .btn_confirm {margin:10px 0 0}
-#anc_sodr_orderer #od_addr1, #anc_sodr_orderer #od_addr2, #anc_sodr_orderer #od_addr3 {margin:5px 0 0}
-#anc_sodr_taker #od_b_addr1, #anc_sodr_taker #od_b_addr2, #anc_sodr_taker #od_b_addr3 {margin:5px 0 0}
-#anc_sodr_orderer #od_addr_jibeon, #anc_sodr_taker #od_b_addr_jibeon {display:block;margin:5px 0 0}
-
-#sodr_qty_log {padding:0 20px}
-#sodr_qty_log h3 {margin:20px 0 10px}
-#sodr_qty_log div {padding:10px;height:auto !important;height:200px;max-height:200px;border:1px solid #e9e9e9;background:#f5f6fa;line-height:1.8em;overflow-y:scroll}
-
-#sodr_request_frm h3 {margin:20px 0 0}
-#sodr_request_item h3 {margin-bottom:10px}
-#sodr_request_frm #forderrequest {border-top:1px solid #e9e9e9}
-#sodr_request_log_wrap {padding:10px;height:auto !important;height:200px;max-height:200px;border:1px solid #e9e9e9;background:#f5f6fa;overflow-y:scroll}
-#sodr_request_log_wrap p {position:relative;padding:5px 0;border-bottom:1px solid #e9e9e9}
-#sodr_request_log_wrap span {display:inline-block;margin:0 0 0 80px}
-#sodr_request_log_wrap b {display:inline-block;margin:0 15px 0 0;font-weight:normal}
-#sodr_request_log_wrap button {position:absolute;top:7px;left:0;margin:0;padding:0;border:0;background:transparent;font-weight:bold}
-#sodr_request_handle h3 {margin-bottom:10px}
-
-#anc_sodr_request h3 {margin:20px 0 10px}
-#sodr_request_list {padding:10px;height:auto !important;height:200px;max-height:200px;border:1px solid #e9e9e9;background:#f5f6fa;overflow-y:scroll}
-#sodr_request_list p {position:relative;padding:5px 0;border-bottom:1px solid #e9e9e9}
-
-#anc_sodr_chk .dvr_link {color:#ff3061;text-decoration:underline}
-.od_test_caution{line-height: 1.7em;padding: 10px 15px;background: #f7ecea;border: 2px solid #ffb6c1;color: #ff0000;font-weight: bold;margin:10px 0 20px}
-
-/* 주문통합내역 */
-#sodr_sort {margin:0 20px 20px;padding:0;list-style:none;zoom:1}
-#sodr_sort:after {display:block;visibility:hidden;clear:both;content:""}
-#sodr_sort li {float:left;margin:0 10px 0 0}
-#sodr_sort a {font-size:0.95em;text-decoration:underline;letter-spacing:-0.1em}
-#sodr_sort a.sort_on {color:#ff3061}
-
-#sodr_all {margin:0 20px}
-#sodr_all h2 {position:absolute;font-size:0;line-height:0;overflow:hidden}
-
-#sodr_all .btn_list {margin:10px 0}
-
-.sodr_all_list {clear:both;margin:0 0 50px;padding:0;list-style:none}
-
-.sodr_all_list .sodr_basic {float:left;zoom:1}
-.sodr_all_list .sodr_basic:after {display:block;visibility:hidden;clear:both;content:""}
-.sodr_all_list .sodr_basic dt {float:left;margin:0 10px 0 0}
-.sodr_all_list .sodr_basic dd {float:left;margin:0 30px 0 0}
-.sodr_all_list .sodr_basic strong a {color:#ff3061;text-decoration:underline}
-
-.sodr_all_list .sodr_person {float:right;zoom:1}
-.sodr_all_list .sodr_person:after {display:block;visibility:hidden;clear:both;content:""}
-.sodr_all_list .sodr_person dt {float:left;margin:0 0 0 30px}
-.sodr_all_list .sodr_person dd {float:left;margin:0 0 0 10px}
-
-.sodr_all_list .sodr_pay {clear:both;margin:0;border-top:1px solid #d1dee2;zoom:1}
-.sodr_all_list .sodr_pay:after {display:block;visibility:hidden;clear:both;content:""}
-.sodr_all_list .sodr_pay dt {float:left;padding:8px 0;width:15%}
-.sodr_all_list .sodr_pay dd {float:left;margin:0;padding:8px 0;width:35%}
-
-#sodr_total table {text-align:center}
-#sodr_total th {width:125px}
-
-/* 분류관리 목록 */
-#sct .sct_name {width:130px}
-#sct th{padding:5px}
-
-#sct .sct_name div {position:relative}
-#sct .sct_name1 {padding-left:25px}
-#sct .sct_name2 {padding-left:50px}
-#sct .sct_name3 {padding-left:75px}
-#sct .sct_name4 {padding-left:100px}
-#sct .name_lbl {position:absolute;top:0;left:-20px;width:13px;height:13px;background:url('../shop_admin/img/icon_reply.gif') 0 0 no-repeat}
-.sct_pcskin select,.sct_mskin select{width:37% !important}
-.sct_pcskin .frm_input,.sct_mskin .frm_input{width:60% !important}
-
-/* 분류 추가/수정 */
-.frm_ca_id {display:inline-block;margin:0 10px 0 0;font-weight:bold}
-
-/* 상품관리 */
-.sit_odrby {text-align:center}
-.sit_amt {text-align:right;background-color:#e8fbff !important}
-.sit_amt2 {text-align:right;border-color:#c3e189 !important;background-color:#f6ffe6 !important}
-.sit_amt3 {text-align:right;border-color:#f6c8c4 !important;background-color:#ffedeb !important}
-.sit_camt, .sit_pt, .sit_qty {text-align:right}
-.frm_sit_title {margin:5px 0 0}
-#fitemlistupdate .td_sort select{width: 33%;float: left;margin-right: 0.3%;}
-
-/* 상품입력/수정 */
-#sit_compact {padding:15px 0;border:1px solid #e9e9e9;background:#f7f7f7;text-align:center}
-
-.sit_w_opt {height:70px !important}
-.sit_wimg {display:none}
-.sit_relation_list {width:100%;background:#f6f6f6}
-.sit_relation_selected {width:100%;background:#fcfff2}
-#add_span img, #sel_span img {margin:5px 0}
-
-.sit_option {margin:0 0 10px;padding:10px 10px 0;border:1px solid #e9e9e9;background:#f7f7f7}
-.sit_option .frm_input {background:#fff !important;color:#000}
-.sit_option_frm_wrapper {margin:0 0 10px;height:auto !important;height:500px;max-height:500px;border:1px solid #ccc;overflow-y:scroll}
-.sit_option_frm_wrapper th {padding:5px 0 !important;text-align:center !important;width:auto !important}
-
-#sit_option_frm .btn_list {margin:0 0 10px}
-#sit_option_frm fieldset {padding:10px;border:1px solid #e9e9e9;background:#f7f7f7;text-align:center}
-#sit_option_frm fieldset .frm_input {margin:0 10px 0 5px;background:#fff !important;color:#000}
-
-#sit_option_addfrm_btn {position:relative}
-#sit_option_addfrm_btn button {position:absolute;top:-45px;right:0}
-
-#sit_option_addfrm .btn_list {margin:0 0 10px}
-#sit_option_addfrm fieldset {padding:10px;border:1px solid #e9e9e9;background:#f7f7f7;text-align:center}
-#sit_option_addfrm fieldset .frm_input {margin:0 10px 0 5px;background:#fff !important;color:#000}
-
-/* 상품 복사 */
-#sit_copy {margin:10px;padding:10px;background:#fff}
-#sit_copy label {display:inline-block;margin:0 10px 0 0;font-weight:bold}
-
-/* 상품 일괄 등록 */
-#excelfile_upload {margin:10px ;padding:20px;border:1px solid #e9e9e9;background:#fff}
-#excelfile_upload label {font-weight:bold}
-#excelfile_input {margin:0 0 20px;text-align:center}
-#excelfile_result {margin:0 20px 20px;border-bottom:1px solid #e9e9e9;zoom:1}
-#excelfile_result:after {display:block;visibility:hidden;clear:both;content:""}
-#excelfile_result dt {clear:both;float:left;padding:10px 0;width:40%;font-weight:bold}
-#excelfile_result dd {float:left;margin:0;padding:10px 0;width:60%}
-#excelfile_result .result_done {color:#5d910b}
-#excelfile_result .result_fail {color:#ff3061}
-
-/* 상품옵션재고관리 */
-.sit_stock_qty_alert {color:#ff1133;font-weight:bold}
-
-/* 배송일괄처리 */
-#sdeli_proc_fs {padding:20px 0;border-bottom:1px solid #f7f7f7;text-align:center}
-
-/* 이벤트 입력/수정 */
-.frm_ev_id {display:inline-block;margin:0 10px 0 0;font-weight:bold}
-
-/* 관련 상품, 관련 이벤트 입력/수정 */
-.srel section ul {margin:0;padding:0 10px;list-style:none;background:#fff}
-.srel section li {padding:5px 0;border-bottom:1px solid #e9e9e9;zoom:1}
-.srel section li:after {display:block;visibility:hidden;clear:both;content:''}
-.srel .srel_list, .srel .srel_sel {height:auto !important;height:200px;max-height:200px;border:1px solid #ced9de;background:#f6f6f6;overflow-y:scroll}
-.srel .list_item {float:left;width:80%}
-.srel .list_item img {float:left;margin:0 10px 0 0}
-.srel .list_item_btn {float:right;margin-top:7px}
-.srel .srel_sel {border:1px solid #ced9de;background:#fcfff2}
-.srel .srel_list p, .srel .srel_sel p {padding:10px 0;text-align:center}
-.srel .compare_left ul {margin:0;list-style:none}
-.srel .srel_noneimg li {padding:7px 0}
-.srel .srel_noneimg button {top:0;right:0}
-.srel .srel_pad {display:block;margin:0 0 10px}
-.srel .srel_pad:after {display:block;visibility:hidden;clear:both;content:''}
-.srel .srel_pad button {position:static}
-
-/* 쿠폰관리 */
-.scp_new_win .empty_table {padding:30px 0}
-
-#scp_list_find {margin:10px ;padding:20px;border:1px solid #e9e9e9;background:#fff}
-#scp_list_find .btn_frmline {line-height:1.5em !important}
-#scp_list_find label {font-weight:bold}
-
-.scp_find_code {width:110px;text-align:center}
-
-/* 매출현황 */
-#ssale_stats {zoom:1}
-#ssale_stats:after {display:block;clear:both;visibility:hidden;content:''}
-#ssale_stats div {float:left;padding:2%;width:46%;border-bottom:1px solid #eee;text-align:center}
-#ssale_stats h3 {margin:30px 0 0;font-size:1.3em;text-align:center}
-#ssale_stats form {margin:20px 0 10px;padding:10px 0}
-#ssale_stats .frm_input {padding:0 10px !important;height:24px !important}
-
-/* 주문내역출력 (새창) */
-.new_win .sodr_print_pop_list table {width:100%}
-
-#sodr_print_pop h2 {padding:15px 0;color:#ff3600;text-align:right}
-#sodr_print_pop h3 {margin:0 0 10px}
-
-.sodr_print_pop_list {margin:0 20px 10px;padding:0 0 10px;border-bottom:1px dotted #ddd}
-.sodr_print_pop_list .sodr_print_pop_same {margin:0 0 10px;border:1px solid #e9e9e9;background:#f7f7f7;text-align:center}
-.sodr_print_pop_list dl {margin:0 0 15px;padding:0;zoom:1}
-.sodr_print_pop_list dl:after {display:block;visibility:hidden;clear:both;content:""}
-.sodr_print_pop_list dt {float:left;padding:7px 0 6px;width:100px;border-bottom:1px solid #ddd}
-.sodr_print_pop_list dd {padding:7px 0 6px;border-bottom:1px solid #ddd;overflow:hidden}
-
-#sodr_print_pop_total {padding:20px 0;text-align:center}
-#sodr_print_pop_total span {display:block;margin:0 0 10px;font-size:1.5em}
-#sodr_print_pop_total strong {color:#ff3600}
-
-/* 배너관리 */
-.sbn_img {text-align:center}
-.sbn_image {display:none;margin:0 0 10px;text-align:left}
-
 /* SMS문자전송 */
 #sms_send {padding-bottom:100px;zoom:1}
 #sms_send:after {display:block;visibility:hidden;clear:both;content:""}
@@ -890,14 +563,6 @@ strong.sodr_nonpay {display:block;padding:5px 0;text-align:right}
 
 #sms_send .local_desc01 {min-width:320px}
 
-/* 가격비교사이트 */
-#anc_pricecompare_info li {margin:5px 0 5px -1px}
-
-.price_engine dt a {font-weight:bold}
-.price_engine dd {margin:0 0 15px}
-.price_engine ul{padding: 0 0 0 15px;}
-.price_engine li {margin:5px 0 5px -1px;list-style:disc }
-
 /* 새창 기본 스타일 */
 .new_win {}
 .new_win h1 {font-size:1.17em;padding:15px 20px;background:#fff;border-bottom:1px solid #ddd}
@@ -942,7 +607,7 @@ strong.sodr_nonpay {display:block;padding:5px 0;text-align:right}
 -moz-box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);
 box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);}
 .sv_wrap .sv:before{content: "";position: absolute;top: -6px;left: 15px;width: 0;height: 0;border-style: solid;border-width: 0 6px 6px 6px;border-color: transparent transparent #333 transparent;}
-.sv_wrap .sv a {display:inline-block;margin:0;padding:0 10px;line-height:30px;width:100px;font-weight:normal;color:#bbb }
+.sv_wrap .sv a {display:inline-block;margin:0;padding:0  10px;line-height:30px;width:100px;font-weight:normal;color:#bbb }
 .sv_wrap .sv a:hover{background:#000;color:#fff}
 .sv_member{color:#333}
 .sv_on {display:block !important;position:absolute;top:23px;left:0px;width:auto;height:auto}
@@ -998,98 +663,83 @@ box-shadow: 2px 2px 3px 0px rgba(0,0,0,0.2);}
 
 /*부가서비스*/
 .lnb_svc{color:#ff3061;font-weight:bold}
-.service_wrap{ width:965px;margin:0 0 10px;overflow:hidden}
-.sevice_1{border:1px solid #ebe8e8;width:310px;float:left;border-radius:5px;text-align:center;margin-right:6px;}
+.service_wrap{width:960px; margin:0 20px 10px;overflow:hidden}
+.sevice_1{border:1px solid #ebe8e8;width:330px;float:left;border-radius:5px;text-align:center;margin-right:6px;}
 .sevice_1 .svc_img{padding:30px 0 0;}
-.sevice_1 h3{font-size:16px;margin:185px 0 10px;color:#525252}
+.sevice_1 h3{font-size:16px;margin:15px 0;color:#525252}
 .sevice_1 p{padding:20px;background:#f8f8f8;font-size:12px;text-align:left;color:#898989;line-height:18px}
 .sevice_1 ul {width:100%;padding:0; margin:0;border-top:1px solid #ebe8e8;}
-.sevice_1 ul li{list-style:none;float:left;border-right:1px solid #ebe8e8;}
-.sevice_1 ul li a{display:inline-block;height:75px;width:100%}
-.sevice_1 ul li img{padding:8px 0 0;}
+.sevice_1 ul li{list-style:none;float:left;border-right:1px solid #ebe8e8;width:33%;}
+.sevice_1 ul li a{display:inline-block;height:76px;width:100%}
+.sevice_1 ul li img{padding:10px 0 0;}
 .sevice_1 ul li.last{border:0}
 .sevice_1 h4{width:100%;padding:0; margin:0;border-top:1px solid #ebe8e8;}
-.sevice_1 h4 a{display:inline-block;height:75px;padding:10px 0 0;width:100%}
+.sevice_1 h4 a{display:inline-block;height:66px;padding:10px 0 0;width:100%}
 
-.svc_card{background:url('../img/service_img1.jpg') no-repeat top center;margin-right:13px;}
-.svc_card ul li{width:33%;}
-.svc_phone {background:url('../img/service_img2.jpg') no-repeat top center;margin-right:13px;}
-.svc_phone ul li{width:33%;}
-.svc_ipin {background:url('../img/service_img3.jpg') no-repeat top center;}
-
-.service_2{padding-top:15px;clear:both}
-.service_2 h3{font-size:14px;letter-spacing:-1px;color:#525252;margin:0 0 4px}
-
-.service_2 .svc_a p{color:#898989;line-height:16px;letter-spacing:-1px;}
-
-.svc_keyword{clear:both ;}
-.svc_keyword .svc_a{float:left;width:230px;padding:46px 0 0 15px ;height:120px; }
-
-.service_2 .svc_ri .svc_a{padding:25px 0 0 22px;}
-
-.service_2 .svc_btn{float:right;}
-.service_2 .svc_btn a{display:inline-block;width:126px; height:37px;background:#ff3061;color:#fff;line-height:37px;text-align:center;margin:22px 13px 0;}
-.service_2 .svc_btn a:hover,.service_2 .svc_btn a:focus,.service_2 .svc_btn a:active{text-decoration:none}
-.svc_keyword{background:#e6f2f4}
-.svc_keyword .svc_btn{margin:40px 0 0 ;}
-.svc_keyword .svc_btn a{width:160px;}
-
-.svc_sms{border:1px solid #ebe8e8;position:relative;height:93px}
-.svc_sms:after{display:block;visibility:hidden;clear:both;content:""}
-.svc_sms .svc_btn2{position:absolute;top:0;right:0}
-.svc_sms .svc_btn2 a{display:inline-block; width:220px; height:91px; background:#fbfbfb; text-align:center; padding:20px 0 0;}
+.sevice_2{border:1px solid #ebe8e8;float:left;width:282px;}
+.sevice_2 .svc_a{padding:33px 0 0;}
+.sevice_2 .svc_a h3{font-size:14px;letter-spacing:-1px;color:#525252;margin-bottom:5px;padding:0 20px 0}
+.sevice_2 .svc_a p{color:#898989;line-height:18px;letter-spacing:-1px;padding:5px 20px 0;}
+.sevice_2 .svc_btn{text-align:center;position:absolute;bottom:0;left:0;width:282px;}
+.sevice_2 .svc_btn a{display:inline-block; background:#ff3061;text-align:center;color:#fff;padding:10px 20px;}
+.sevice_2 .svc_btn a:hover{text-decoration:none;}
+.sevice_2 .svc_sms{overflow:hidden; height:212px;position:relative}
+.sevice_2 .svc_sms .svc_btn a{display:inline-block; background:#f8f8f8;width:100%;text-align:center;margin:0;padding:10px 0 0 }
+.sevice_2 .svc_design{overflow:hidden;height:210px;position:relative}
+.sevice_2 .svc_design .svc_btn a{margin:0 0 20px}
 
 /* 캡챠 */
 #captcha {display:inline-block;position:relative}
 #captcha legend {position:absolute;margin:0;padding:0;font-size:0;line-height:0;text-indent:-9999em;overflow:hidden;}
-#captcha #captcha_img {height:40px;border:1px solid #898989;vertical-align:top;padding:0;margin:0}
-#captcha #captcha_mp3 {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat;text-indent:-999px;border-radius:3px}
-#captcha #captcha_reload {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat 0 -40px;text-indent:-999px;border-radius:3px}
+#captcha #captcha_img {;height:40px;border:1px solid #898989;vertical-align:top;padding:0;margin:0}
+#captcha #captcha_mp3 {;margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat;text-indent:-999px;border-radius:3px}
+#captcha #captcha_reload {margin:0;padding:0;width:40px;height:40px;border:0;background:transparent;vertical-align:middle;overflow:hidden;cursor:pointer;background:url('../../img/captcha2.png') no-repeat  0 -40px;text-indent:-999px;border-radius:3px}
 #captcha #captcha_key {margin:0 0 0 3px;padding:0 5px;width:90px;height:40px;border:1px solid #ccc;background:#fff;font-size:1.333em;font-weight:bold;text-align:center;border-radius:3px;vertical-align:top}
 #captcha #captcha_info {display:block;margin:5px 0 0;font-size:0.95em;letter-spacing:-0.1em}
 
 /*테마*/
 .theme_p{margin:0 0 10px }
-#theme_list{padding:0;margin:0;list-style:none; width: 1000px;position:relative}
+#theme_list{padding:0;margin:0;list-style:none;  width: 1000px;position:relative}
 #theme_list:after{display:block;visibility:hidden;clear:both;content:""}
 #theme_list li{margin:10px 10px 10px 0;float:left}
-
 #theme_list li:after{display:block;visibility:hidden;clear:both;content:""}
 #theme_list li .tmli_if{border: 1px solid #d1dee2;width:302px;}
 #theme_list li .tmli_if>img{width:300px;height:225px;}
 #theme_list li .tmli_if:hover>img{-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=50)";filter: alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;}
 #theme_list li .tmli_tit{position:relative; border-top: 1px solid #d1dee2; background: #e5ecef;}
-#theme_list li .tmli_tit p{height:40px;line-height:40px;padding:0 10px 0;font-weight:bold;text-overflow: ellipsis; overflow: hidden; white-space: nowrap;}
+#theme_list li .tmli_tit p{height:40px;line-height:40px;padding:0 10px 0;font-weight:bold;text-overflow: ellipsis;  overflow: hidden;  white-space: nowrap;}
 #theme_list li .tmli_tit button.tmli_dt{position:absolute;top:8px;right:10px;padding:5px;background:#111;color:#fff;display:none;border:none}
 #theme_list li .tmli_if:hover button.tmli_dt{display:block}
 #theme_list li .theme_sl{float:left;border:none;margin-top:5px;padding:0 5px;height:26px;background:#999;color:#fff}
 #theme_list li .theme_sl:hover{background:#ff3061}
 #theme_list li .theme_deactive{margin-left:4px}
 #theme_list li .theme_sl_use{background:#ff3061;line-height:26px}
-#theme_list li .theme_pr{float:right;margin-top:5px;padding:0 5px;height:26px;line-height:24px; border: 1px solid #ccc; background: #fafafa; }
-#theme_list li .theme_preview{ float: right; margin-top: 5px; padding:0 5px;height:26px; border: 1px solid #ccc; background: #fafafa; margin-right:3px}
+#theme_list li .theme_pr{float:right;margin-top:5px;padding:0 5px;height:26px;line-height:24px;  border: 1px solid #ccc;  background: #fafafa; }
+#theme_list li .theme_preview{  float: right;  margin-top: 5px; padding:0 5px;height:26px; border: 1px solid #ccc;  background: #fafafa; margin-right:3px}
+
 
 #theme_detail{position:fixed;top:50%;height:540px;width:900px;margin-top:-271px;background:#fff;background:#f3f3f3;border:1px solid #000;
--webkit-box-shadow: 1px 2px 5px rgba(150,150,150,100.5);
--moz-box-shadow: 1px 2px 5px rgba(150,150,150,0.5);
-box-shadow: 1px 2px 5px rgba(150,150,150,0.5);z-index:1000}
+-webkit-box-shadow: 1px 2px 5px  rgba(150,150,150,100.5);
+   -moz-box-shadow: 1px 2px 5px  rgba(150,150,150,0.5);
+        box-shadow: 1px 2px 5px  rgba(150,150,150,0.5);z-index:1000}
 #theme_detail:after{display:block;visibility:hidden;clear:both;content:""}
 #theme_detail h2{font-size:1.25em;background:#fff;padding:0 15px;line-height:40px;border-bottom:1px solid #d8d8d8;margin:0}
 .theme_dt_img{float:left;padding:20px}
 .theme_dt_img img{border:1px solid #aaa;}
 .theme_dt_if{float:left;width:235px;padding:20px 0}
-.theme_dt_if table{width:100%;border-collapse:collapse;margin:15px 0 0 ;font-size:0.92em}
+.theme_dt_if table{width:100%;border-collapse:collapse;;margin:15px 0 0 ;font-size:0.92em}
 .theme_dt_if table th{padding:5px;background:#fff;border-bottom:1px solid #f3f3f3;vertical-align:top;color:#3f51b5}
 .theme_dt_if table td{padding:5px;background:#fff;border-bottom:1px solid #f3f3f3;line-height:1.56em}
 .theme_dt_if table td a{text-decoration:underline}
 .theme_dt_if p{line-height:1.5em}
 .if_p_bg{display:inline-block;width:20px;height:1px ;background:#000;margin:30px 0 10px}
 #theme_detail .theme_dt_btn{position:absolute;top:0px;right:0px;background:#fff;}
-#theme_detail .theme_dt_btn .close_btn{border:0;border-left:1px solid #d8d8d8;background:url('../img/close.png') 50% 50% no-repeat;width:40px;height:40px;overflow:hidden;text-indent:-99999px}
+#theme_detail .theme_dt_btn .close_btn{background:url('../img/close.png') 50% 50% no-repeat;width:40px;height:40px;overflow:hidden;border:0;text-indent:-99999px;border-left:1px solid #d8d8d8}
 
 #theme_detail .theme_dt_btn .close_btn:hover{background-color:#eceffc}
 #theme_detail .theme_dt_btn .btn_03{line-height:28px;display:inline-block;vertical-align:top;margin-top:6px;padding:0 6px;border-radius:5px}
 
+
 /*글,댓글현황*/
 #wr_cont{position:relative;margin:10px 0}
 #wr_cont input[type="submit"]{background:#ff3061;border:none;color:#fff;padding: 0 5px;height: 24px;}
@@ -1111,31 +761,7 @@ box-shadow: 1px 2px 5px rgba(150,150,150,0.5);z-index:1000}
 #processing{margin: 0 auto;padding: 70px 0;border: 1px solid #eee;background: #f9f9f9;text-align:center;}
 #processing p{font-size:1.2em}
 .check_processing {width:300px;height:300px;margin:0 auto;background:url(../img/check.png) no-repeat 50% 50% }
-
-
-#processing button{background:#ff3061;border:none;color:#fff;padding: 15px;width:200px;margin-top:15px;border-radius:5px;font-weight:bold;font-size:1.167em}
-
-
-/*미완료 주문*/
-#inorderlist .td_name{text-align:center !important}
-#anc_sodr_pay .btn_confirm{margin-top:30px}
-#anc_sodr_pay .btn_confirm .btn_submit{width:300px;height:40px;font-size:14px;}
-
-/*상품문의 */
-#itemqalist .qa_href .tit_op{background:url(./../img/op_btn1.gif) no-repeat 50% 50%;display:inline-block;text-indent:-999px;overflow:hidden;width:7px;height:4px;margin-left:5px}
-#itemqalist .qa_div{background:#d8dfe9;padding:10px;margin:5px 0 0;display:none;}
-#itemqalist .qa_div strong{color:#415f9d;font-size:0.92em;display:block}
-#itemqalist .qa_div .qa_q{padding-bottom:10px;margin-bottom:5px;border-bottom:1px dashed #fff;}
-#itemqalist .qa_href{font-weight:bold;text-decoration:none;display:block;}
-#itemqalist .td_status{color:#888}
-#itemqalist .td_status strong{color:#ff4588}
-
-/*상품후기 */
-#itemuselist .use_href{font-weight:bold;text-decoration:none;display:block;}
-#itemuselist .use_href .tit_op{background:url(./../img/op_btn1.gif) no-repeat 50% 50%;display:inline-block;text-indent:-999px;overflow:hidden;width:7px;height:4px;margin-left:5px}
-#itemuselist .use_div{background:#d8dfe9;padding:10px;margin:5px 0 0;display:none;}
-#itemuselist .td_select{width:100px}
-
+#processing button{background:#ff3061;border:none;color:#fff;padding: 15px;width:200px;margin-top:15px;border-radius:5px;font-weight:bold;font-size:1.167em}
 
 @media only screen and (max-device-width : 768px) and (orientation : landscape){
 /* Styles */
@@ -1145,4 +771,4 @@ input[type="text"]{max-width:200px}
 @media only screen and (max-device-width : 480px) and (orientation : portrait){
 /* Styles */
 input[type="text"]{max-width:200px}
-}
+}

adm/dbupgrade.php

@@ -2,7 +2,7 @@
 $sub_menu = '100410';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $g5['title'] = 'DB 업그레이드';
 include_once('./admin.head.php');
@@ -74,139 +74,6 @@ if( isset($g5['social_profile_table']) && !sql_query(" DESC {$g5['social_profile
     $is_check = true;
 }
 
-// 게시판 짧은 주소
-$sql = " select bo_table from {$g5['board_table']} ";
-$result = sql_query($sql);
-
-while ($row = sql_fetch_array($result)) {
-    $write_table = $g5['write_prefix'] . $row['bo_table']; // 게시판 테이블 전체이름
-
-    $sql = " SHOW COLUMNS FROM {$write_table} LIKE 'wr_seo_title' ";
-    $row = sql_fetch($sql);
-    
-    if( !$row ){
-        sql_query("ALTER TABLE `{$write_table}`
-                    ADD `wr_seo_title` varchar(200) NOT NULL DEFAULT '' AFTER `wr_content`,
-                    ADD INDEX `wr_seo_title` (`wr_seo_title`);
-        ", false);
-
-        $is_check = true;
-    }
-}
-
-// 내용 관리 짧은 주소
-$sql = " SHOW COLUMNS FROM `{$g5['content_table']}` LIKE 'co_seo_title' ";
-$row = sql_fetch($sql);
-
-if( !$row ){
-    sql_query("ALTER TABLE `{$g5['content_table']}`
-                ADD `co_seo_title` varchar(200) NOT NULL DEFAULT '' AFTER `co_content`,
-                ADD INDEX `co_seo_title` (`co_seo_title`);
-    ", false);
-
-    $is_check = true;
-}
-
-$sql = "select * from {$g5['content_table']} limit 100 ";
-$result = sql_query($sql);
-
-while ($row = sql_fetch_array($result)) {
-
-    if( ! $row['co_seo_title']){
-        
-        $co_seo_title = exist_seo_title_recursive('content', generate_seo_title($row['co_subject']), $g5['content_table'], $row['co_id']);
-        
-        $sql = " update {$g5['content_table']}
-                    set co_seo_title = '$co_seo_title'
-                  where co_id = '{$row['co_id']}' ";
-        sql_query($sql);
-
-    }
-}
-
-// 메모 테이블
-$sql = " SHOW COLUMNS FROM `{$g5['memo_table']}` LIKE 'me_send_id' ";
-$row = sql_fetch($sql);
-
-if( !$row ){
-    sql_query("ALTER TABLE `{$g5['memo_table']}`
-                ADD `me_send_id` INT(11) NOT NULL DEFAULT '0',
-                ADD `me_type` ENUM('send','recv') NOT NULL DEFAULT 'recv',
-                ADD `me_send_ip` VARCHAR(100) NOT NULL DEFAULT '',
-                CHANGE COLUMN `me_id` `me_id` INT(11) NOT NULL AUTO_INCREMENT;
-    ", false);
-
-    $is_check = true;
-}
-
-// 읽지 않은 메모 수 칼럼
-if(!isset($member['mb_memo_cnt'])) {
-    sql_query(" ALTER TABLE `{$g5['member_table']}`
-                ADD `mb_memo_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_call`", true);
-
-    $is_check = true;
-}
-
-// 스크랩 읽은 수 추가
-if(!isset($member['mb_scrap_cnt'])) {
-    sql_query(" ALTER TABLE `{$g5['member_table']}`
-                ADD `mb_scrap_cnt` int(11) NOT NULL DEFAULT '0' AFTER `mb_memo_cnt`", true);
-
-	$is_check = true;
-}
-
-// 짧은 URL 주소를 사용 여부 필드 추가
-if (!isset($config['cf_bbs_rewrite'])) {
-    sql_query(" ALTER TABLE `{$g5['config_table']}`
-                    ADD `cf_bbs_rewrite` tinyint(4) NOT NULL DEFAULT '0' AFTER `cf_link_target` ", true);
-
-	$is_check = true;
-}
-
-// 파일테이블에 추가 칼럼
-
-$sql = " SHOW COLUMNS FROM `{$g5['board_file_table']}` LIKE 'bf_fileurl' ";
-$row = sql_fetch($sql);
-
-if( !$row ) {
-    sql_query(" ALTER TABLE `{$g5['board_file_table']}` 
-                ADD COLUMN `bf_fileurl` VARCHAR(255) NOT NULL DEFAULT '' AFTER `bf_content`,
-                ADD COLUMN `bf_thumburl` VARCHAR(255) NOT NULL DEFAULT '' AFTER `bf_fileurl`,
-                ADD COLUMN `bf_storage` VARCHAR(50) NOT NULL DEFAULT '' AFTER `bf_thumburl`", true);
-
-    $is_check = true;
-}
-
-// 임시저장 테이블이 없을 경우 생성
-if(!sql_query(" DESC {$g5['g5_shop_post_log_table']} ", false)) {
-    sql_query(" CREATE TABLE IF NOT EXISTS `{$g5['g5_shop_post_log_table']}` (
-                  `log_id` int(11) NOT NULL AUTO_INCREMENT,
-                  `oid` bigint(20) unsigned NOT NULL,
-                  `mb_id` varchar(255) NOT NULL DEFAULT '',
-                  `post_data` text NOT NULL,
-                  `ol_code` varchar(255) NOT NULL DEFAULT '',
-                  `ol_msg` text NOT NULL,
-                  `ol_datetime` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
-                  `ol_ip` varchar(25) NOT NULL DEFAULT '',
-                  PRIMARY KEY (`log_id`)
-                ) ENGINE=MyISAM DEFAULT CHARSET=utf8; ", true);
-
-	$is_check = true;
-}
-
-$result = sql_query("describe `{$g5['g5_shop_post_log_table']}`");
-while ($row = sql_fetch_array($result)){
-    if( $row['Field'] === 'ol_msg' && $row['Type'] === 'varchar(255)' ){
-        sql_query("ALTER TABLE `{$g5['g5_shop_post_log_table']}` MODIFY ol_msg TEXT NOT NULL;", false);
-        sql_query("ALTER TABLE `{$g5['g5_shop_post_log_table']}` DROP PRIMARY KEY;", false);
-        sql_query("ALTER TABLE `{$g5['g5_shop_post_log_table']}` ADD `log_id` int(11) NOT NULL AUTO_INCREMENT, ADD PRIMARY KEY (`log_id`);", false);
-        $is_check = true;
-        break;
-    }
-}
-
-$is_check = run_replace('admin_dbupgrade', $is_check);
-
 $db_upgrade_msg = $is_check ? 'DB 업그레이드가 완료되었습니다.' : '더 이상 업그레이드 할 내용이 없습니다.<br>현재 DB 업그레이드가 완료된 상태입니다.';
 ?>
 
@@ -217,4 +84,5 @@ $db_upgrade_msg = $is_check ? 'DB 업그레이드가 완료되었습니다.' : '
 </div>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/faqform.php

@@ -3,18 +3,16 @@ $sub_menu = '300700';
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, "w");
+auth_check($auth[$sub_menu], "w");
 
-$fm_id = isset($_GET['fm_id']) ? (int) $_GET['fm_id'] : 0;
-$fa_id = isset($_GET['fa_id']) ? (int) $_GET['fa_id'] : 0;
+$fm_id = (int) $fm_id;
+$fa_id = isset($fa_id) ? (int) $fa_id : 0;
 
 $sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' ";
 $fm = sql_fetch($sql);
 
 $html_title = 'FAQ '.$fm['fm_subject'];
 
-$fa = array('fa_id'=>0, 'fm_id'=>0, 'fa_subject'=>'', 'fa_content'=>'', 'fa_order'=>0);
-
 if ($w == "u")
 {
     $html_title .= " 수정";
@@ -99,4 +97,5 @@ function frmfaqform_check(f)
 </script>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/faqformupdate.php

@@ -6,18 +6,12 @@ if ($w == "u" || $w == "d")
     check_demo();
 
 if ($w == 'd')
-    auth_check_menu($auth, $sub_menu, "d");
+    auth_check($auth[$sub_menu], "d");
 else
-    auth_check_menu($auth, $sub_menu, "w");
+    auth_check($auth[$sub_menu], "w");
 
 check_admin_token();
 
-$fm_id = isset($_REQUEST['fm_id']) ? (int) $_REQUEST['fm_id'] : 0;
-$fa_id = isset($_REQUEST['fa_id']) ? (int) $_REQUEST['fa_id'] : 0;
-$fa_subject = isset($_POST['fa_subject']) ? $_POST['fa_subject'] : '';
-$fa_content = isset($_POST['fa_content']) ? $_POST['fa_content'] : '';
-$fa_order = isset($_POST['fa_order']) ? (int) $_POST['fa_order'] : 0;
-
 $sql_common = " fa_subject = '$fa_subject',
                 fa_content = '$fa_content',
                 fa_order = '$fa_order' ";
@@ -47,4 +41,5 @@ else if ($w == "d")
 if ($w == 'd')
     goto_url("./faqlist.php?fm_id=$fm_id");
 else
-    goto_url("./faqform.php?w=u&fm_id=$fm_id&fa_id=$fa_id");
+    goto_url("./faqform.php?w=u&fm_id=$fm_id&fa_id=$fa_id");
+?>

adm/faqlist.php

@@ -2,11 +2,11 @@
 $sub_menu = '300700';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, "r");
+auth_check($auth[$sub_menu], "r");
 
 $g5['title'] = 'FAQ 상세관리';
-if (isset($_REQUEST['fm_subject'])){
-    $fm_subject = clean_xss_tags($_REQUEST['fm_subject'], 1, 1, 255);
+if ($fm_subject){
+    $fm_subject = clean_xss_tags(strip_tags($fm_subject));
     $g5['title'] .= ' : '.$fm_subject;
 }
 
@@ -68,17 +68,15 @@ $result = sql_query($sql);
         $num = $i + 1;
 
         $bg = 'bg'.($i%2);
-
-        $fa_subject = conv_content($row['fa_subject'], 1);
     ?>
 
     <tr class="<?php echo $bg; ?>">
         <td class="td_num"><?php echo $num; ?></td>
-        <td class="td_left"><?php echo $fa_subject; ?></td>
+        <td class="td_left"><?php echo stripslashes($row['fa_subject']); ?></td>
         <td class="td_num"><?php echo $row['fa_order']; ?></td>
         <td class="td_mng td_mng_m">
-            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo $fa_subject; ?> </span>수정</a>
-            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo $fa_subject; ?> </span>삭제</a>
+            <a href="./faqform.php?w=u&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" class="btn btn_03"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>수정</a>
+            <a href="./faqformupdate.php?w=d&amp;fm_id=<?php echo $row['fm_id']; ?>&amp;fa_id=<?php echo $row['fa_id']; ?>" onclick="return delete_confirm(this);" class="btn btn_02"><span class="sound_only"><?php echo stripslashes($row['fa_subject']); ?> </span>삭제</a>
         </td>
     </tr>
 
@@ -96,4 +94,5 @@ $result = sql_query($sql);
 
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/faqmasterform.php

@@ -3,11 +3,11 @@ $sub_menu = '300700';
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, "w");
+auth_check($auth[$sub_menu], "w");
 
 $html_title = 'FAQ';
 
-$fm_id = isset($_GET['fm_id']) ? preg_replace('/[^0-9]/', '', $_GET['fm_id']) : 0;
+$fm_id = preg_replace('/[^0-9]/', '', $fm_id);
 
 if ($w == "u")
 {
@@ -21,7 +21,7 @@ if ($w == "u")
 else
 {
     $html_title .= ' 입력';
-    $fm = array('fm_order'=>'', 'fm_subject'=>'', 'fm_id'=>0, 'fm_head_html'=> '', 'fm_tail_html'=> '', 'fm_mobile_head_html' => '', 'fm_mobile_tail_html' => '');
+    $fm = array();
 }
 
 $g5['title'] = $html_title.' 관리';
@@ -72,7 +72,6 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
             <input type="file" name="fm_himg" id="fm_himg">
             <?php
             $himg = G5_DATA_PATH.'/faq/'.$fm['fm_id'].'_h';
-            $himg_str = '';
             if (file_exists($himg)) {
                 $size = @getimagesize($himg);
                 if($size[0] && $size[0] > 750)
@@ -97,7 +96,6 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
             <input type="file" name="fm_timg" id="fm_timg">
             <?php
             $timg = G5_DATA_PATH.'/faq/'.$fm['fm_id'].'_t';
-            $timg_str = '';
             if (file_exists($timg)) {
                 $size = @getimagesize($timg);
                 if($size[0] && $size[0] > 750)
@@ -164,4 +162,5 @@ function frmfaqmasterform_check(f)
 </script>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/faqmasterformupdate.php

@@ -5,29 +5,21 @@ include_once('./_common.php');
 if ($w == "u" || $w == "d")
     check_demo();
 
-if ($w == 'd')
-    auth_check_menu($auth, $sub_menu, "d");
+if ($W == 'd')
+    auth_check($auth[$sub_menu], "d");
 else
-    auth_check_menu($auth, $sub_menu, "w");
+    auth_check($auth[$sub_menu], "w");
 
 check_admin_token();
 
 @mkdir(G5_DATA_PATH."/faq", G5_DIR_PERMISSION);
 @chmod(G5_DATA_PATH."/faq", G5_DIR_PERMISSION);
 
-$fm_id = isset($_REQUEST['fm_id']) ? (int) $_REQUEST['fm_id'] : 0;
-$fm_himg_del = isset($_POST['fm_himg_del']) ? (int) $_POST['fm_himg_del'] : 0;
-$fm_timg_del = isset($_POST['fm_timg_del']) ? (int) $_POST['fm_timg_del'] : 0;
-$fm_subject = isset($_POST['fm_subject']) ? strip_tags(clean_xss_attributes($_POST['fm_subject'])) : '';
-$fm_head_html = isset($_POST['fm_head_html']) ? $_POST['fm_head_html'] : '';
-$fm_tail_html = isset($_POST['fm_tail_html']) ? $_POST['fm_tail_html'] : '';
-$fm_mobile_head_html = isset($_POST['fm_mobile_head_html']) ? $_POST['fm_mobile_head_html'] : '';
-$fm_mobile_tail_html = isset($_POST['fm_mobile_tail_html']) ? $_POST['fm_mobile_tail_html'] : '';
-$fm_order = isset($_POST['fm_order']) ? (int) $_POST['fm_order'] : 0;
-
 if ($fm_himg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_h");
 if ($fm_timg_del)  @unlink(G5_DATA_PATH."/faq/{$fm_id}_t");
 
+$fm_subject = strip_tags($fm_subject);
+
 $sql_common = " set fm_subject = '$fm_subject',
                     fm_head_html = '$fm_head_html',
                     fm_tail_html = '$fm_tail_html',
@@ -80,4 +72,5 @@ if ($w == "" || $w == "u")
     goto_url("./faqmasterform.php?w=u&fm_id=$fm_id");
 }
 else
-    goto_url("./faqmasterlist.php");
+    goto_url("./faqmasterlist.php");
+?>

adm/faqmasterlist.php

@@ -2,7 +2,7 @@
 $sub_menu = '300700';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, "r");
+auth_check($auth[$sub_menu], "r");
 
 //dbconfig파일에 $g5['faq_table'] , $g5['faq_master_table'] 배열변수가 있는지 체크
 if( !isset($g5['faq_table']) || !isset($g5['faq_master_table']) ){
@@ -124,4 +124,5 @@ $result = sql_query($sql);
 <?php echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page="); ?>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/index.php

@@ -100,6 +100,11 @@ $colspan = 12;
             $mb_nick = get_sideview($row['mb_id'], get_text($row['mb_nick']), $row['mb_email'], $row['mb_homepage']);
 
             $mb_id = $row['mb_id'];
+            if ($row['mb_leave_date'])
+                $mb_id = $mb_id;
+            else if ($row['mb_intercept_date'])
+                $mb_id = $mb_id;
+
         ?>
         <tr>
             <td class="td_mbid"><?php echo $mb_id ?></td>
@@ -133,7 +138,7 @@ $sql_common = " from {$g5['board_new_table']} a, {$g5['board_table']} b, {$g5['g
 
 if ($gr_id)
     $sql_common .= " and b.gr_id = '$gr_id' ";
-if (isset($view) && $view) {
+if ($view) {
     if ($view == 'w')
         $sql_common .= " and a.wr_id = a.wr_parent ";
     else if ($view == 'c')
@@ -207,8 +212,8 @@ $colspan = 5;
 
         <tr>
             <td class="td_category"><a href="<?php echo G5_BBS_URL ?>/new.php?gr_id=<?php echo $row['gr_id'] ?>"><?php echo cut_str($row['gr_subject'],10) ?></a></td>
-            <td class="td_category"><a href="<?php echo get_pretty_url($row['bo_table']) ?>"><?php echo cut_str($row['bo_subject'],20) ?></a></td>
-            <td><a href="<?php echo get_pretty_url($row['bo_table'], $row2['wr_id']); ?><?php echo $comment_link ?>"><?php echo $comment ?><?php echo conv_subject($row2['wr_subject'], 100) ?></a></td>
+            <td class="td_category"><a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $row['bo_table'] ?>"><?php echo cut_str($row['bo_subject'],20) ?></a></td>
+            <td><a href="<?php echo G5_BBS_URL ?>/board.php?bo_table=<?php echo $row['bo_table'] ?>&amp;wr_id=<?php echo $row2['wr_id'] ?><?php echo $comment_link ?>"><?php echo $comment ?><?php echo conv_subject($row2['wr_subject'], 100) ?></a></td>
             <td class="td_mbname"><div><?php echo $name ?></div></td>
             <td class="td_datetime"><?php echo $datetime ?></td>
         </tr>
@@ -278,7 +283,7 @@ $colspan = 7;
             $link1 = $link2 = "";
             if (!preg_match("/^\@/", $row['po_rel_table']) && $row['po_rel_table'])
             {
-                $link1 = '<a href="'.get_pretty_url($row['po_rel_table'], $row['po_rel_id']).'" target="_blank">';
+                $link1 = '<a href="'.G5_BBS_URL.'/board.php?bo_table='.$row['po_rel_table'].'&amp;wr_id='.$row['po_rel_id'].'" target="_blank">';
                 $link2 = '</a>';
             }
         ?>
@@ -309,4 +314,5 @@ $colspan = 7;
 </section>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/mail_delete.php

@@ -4,20 +4,21 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'd');
+auth_check($auth[$sub_menu], 'd');
 
 check_admin_token();
 
-$post_count_chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
+$count = count($_POST['chk']);
 
-if(! $post_count_chk)
+if(!$count)
     alert('삭제할 메일목록을 1개이상 선택해 주세요.');
 
-for($i=0; $i<$post_count_chk; $i++) {
-    $ma_id = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
+for($i=0; $i<$count; $i++) {
+    $ma_id = $_POST['chk'][$i];
 
     $sql = " delete from {$g5['mail_table']} where ma_id = '$ma_id' ";
     sql_query($sql);
 }
 
-goto_url('./mail_list.php');
+goto_url('./mail_list.php');
+?>

adm/mail_form.php

@@ -3,13 +3,10 @@ $sub_menu = "200300";
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $html_title = '회원메일';
 
-$ma_id = isset($_GET['ma_id']) ? (int) $_GET['ma_id'] : 0;
-$ma = array('ma_id'=>0, 'ma_subject'=>'', 'ma_content'=>'');
-
 if ($w == 'u') {
     $html_title .= '수정';
     $readonly = ' readonly';
@@ -43,7 +40,7 @@ include_once('./admin.head.php');
     <tbody>
     <tr>
         <th scope="row"><label for="ma_subject">메일 제목<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="ma_subject" value="<?php echo get_sanitize_input($ma['ma_subject']); ?>" id="ma_subject" required class="required frm_input" size="100"></td>
+        <td><input type="text" name="ma_subject" value="<?php echo $ma['ma_subject'] ?>" id="ma_subject" required class="required frm_input" size="100"></td>
     </tr>
     <tr>
         <th scope="row"><label for="ma_content">메일 내용<strong class="sound_only">필수</strong></label></th>
@@ -83,4 +80,5 @@ document.fmailform.ma_subject.focus();
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/mail_list.php

@@ -2,7 +2,7 @@
 $sub_menu = '200300';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $sql_common = " from {$g5['mail_table']} ";
 
@@ -101,4 +101,5 @@ $(function() {
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/mail_preview.php

@@ -3,9 +3,7 @@ $sub_menu = "200300";
 include_once('./_common.php');
 include_once(G5_LIB_PATH.'/mailer.lib.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
-
-$ma_id = isset($_REQUEST['ma_id']) ? (int) $_REQUEST['ma_id'] : 0;
+auth_check($auth[$sub_menu], 'r');
 
 $se = sql_fetch("select ma_subject, ma_content from {$g5['mail_table']} where ma_id = '{$ma_id}' ");
 

adm/mail_select_form.php

@@ -5,9 +5,7 @@ include_once('./_common.php');
 if (!$config['cf_email_use'])
     alert('환경설정에서 \'메일발송 사용\'에 체크하셔야 메일을 발송할 수 있습니다.');
 
-auth_check_menu($auth, $sub_menu, 'r');
-
-$ma_id = isset($_GET['ma_id']) ? (int) $_GET['ma_id'] : 0;
+auth_check($auth[$sub_menu], 'r');
 
 $sql = " select * from {$g5['mail_table']} where ma_id = '$ma_id' ";
 $ma = sql_fetch($sql);
@@ -28,8 +26,8 @@ $last_option = explode('||', $ma['ma_last_option']);
 for ($i=0; $i<count($last_option); $i++) {
     $option = explode('=', $last_option[$i]);
     // 동적변수
-    $var = isset($option[0]) ? $option[0] : '';
-    if( isset($option[1]) ) $$var = $option[1];
+    $var = $option[0];
+    $$var = $option[1];
 }
 
 if (!isset($mb_id1)) $mb_id1 = 1;
@@ -37,10 +35,6 @@ if (!isset($mb_level_from)) $mb_level_from = 1;
 if (!isset($mb_level_to)) $mb_level_to = 10;
 if (!isset($mb_mailling)) $mb_mailling = 1;
 
-$mb_id1_from = isset($mb_id1_from) ? clean_xss_tags($mb_id1_from, 1, 1, 30) : '';
-$mb_id1_to = isset($mb_id1_to) ? clean_xss_tags($mb_id1_to, 1, 1, 30) : '';
-$mb_email = isset($mb_email) ? clean_xss_tags($mb_email, 1, 1, 100) : '';
-
 $g5['title'] = '회원메일발송';
 include_once('./admin.head.php');
 ?>
@@ -61,15 +55,15 @@ include_once('./admin.head.php');
         <td>
             <input type="radio" name="mb_id1" value="1" id="mb_id1_all" <?php echo $mb_id1?"checked":""; ?>> <label for="mb_id1_all">전체</label>
             <input type="radio" name="mb_id1" value="0" id="mb_id1_section" <?php echo !$mb_id1?"checked":""; ?>> <label for="mb_id1_section">구간</label>
-            <input type="text" name="mb_id1_from" value="<?php echo get_sanitize_input($mb_id1_from); ?>" id="mb_id1_from" title="시작구간" class="frm_input"> 에서
-            <input type="text" name="mb_id1_to" value="<?php echo get_sanitize_input($mb_id1_to); ?>" id="mb_id1_to" title="종료구간" class="frm_input"> 까지
+            <input type="text" name="mb_id1_from" value="<?php echo $mb_id1_from ?>" id="mb_id1_from" title="시작구간" class="frm_input"> 에서
+            <input type="text" name="mb_id1_to" value="<?php echo $mb_id1_to ?>" id="mb_id1_to" title="종료구간" class="frm_input"> 까지
         </td>
     </tr>
     <tr>
         <th scope="row"><label for="mb_email">E-mail</label></th>
         <td>
             <?php echo help("메일 주소에 단어 포함 (예 : @".preg_replace('#^(www[^\.]*\.){1}#', '', $_SERVER['HTTP_HOST']).")") ?>
-            <input type="text" name="mb_email" value="<?php echo get_sanitize_input($mb_email); ?>" id="mb_email" class="frm_input" size="50">
+            <input type="text" name="mb_email" value="<?php echo $mb_email ?>" id="mb_email" class="frm_input" size="50">
         </td>
     </tr>
     <tr>
@@ -124,4 +118,5 @@ include_once('./admin.head.php');
 </form>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/mail_select_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "200300";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $ma_last_option = "";
 
@@ -117,4 +117,5 @@ include_once('./admin.head.php');
 </form>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/mail_select_update.php

@@ -2,7 +2,7 @@
 $sub_menu = "200300";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 $html_title = '회원메일 발송';
 
@@ -26,12 +26,14 @@ echo "</span>";
 
 <?php
 include_once('./admin.tail.php');
+?>
 
+<?php
 flush();
 ob_flush();
 
-$ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0;
-$select_member_list = isset($_POST['ma_list']) ? trim($_POST['ma_list']) : '';
+$ma_id = trim($_POST['ma_id']);
+$select_member_list = trim($_POST['ma_list']);
 
 //print_r2($_POST); EXIT;
 $member_list = explode("\n", conv_unescape_nl($select_member_list));
@@ -61,7 +63,7 @@ for ($i=0; $i<count($member_list); $i++)
         $content = preg_replace("/{회원아이디}/", $mb_id, $content);
         $content = preg_replace("/{이메일}/", $to_email, $content);
 
-        $content = $content . "<hr size=0><p><span style='font-size:9pt; font-family:굴림'>▶ 더 이상 정보 수신을 원치 않으시면 [<a href='".G5_BBS_URL."/email_stop.php?mb_id={$mb_id}&amp;mb_md5={$mb_md5}' target='_blank'>수신거부</a>] 해 주십시오.</span></p>";
+        $content = $content . "<hr size=0><p><span style='font-size:9pt; font-familye:굴림'>▶ 더 이상 정보 수신을 원치 않으시면 [<a href='".G5_BBS_URL."/email_stop.php?mb_id={$mb_id}&amp;mb_md5={$mb_md5}' target='_blank'>수신거부</a>] 해 주십시오.</span></p>";
 
         mailer($config['cf_admin_email_name'], $config['cf_admin_email'], $to_email, $subject, $content, 1);
 
@@ -82,4 +84,4 @@ for ($i=0; $i<count($member_list); $i++)
     }
 }
 ?>
-<script> document.all.cont.innerHTML += "<br><br>총 <?php echo number_format($cnt) ?>건 발송<br><br><font color=crimson><b>[끝]</b></font>"; document.body.scrollTop += 1000; </script>
+<script> document.all.cont.innerHTML += "<br><br>총 <?php echo number_format($cnt) ?>건 발송<br><br><font color=crimson><b>[끝]</b></font>"; document.body.scrollTop += 1000; </script>

adm/mail_test.php

@@ -7,7 +7,7 @@ if (!$config['cf_email_use'])
 
 include_once(G5_LIB_PATH.'/mailer.lib.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_demo();
 
@@ -17,7 +17,6 @@ $name = get_text($member['mb_name']);
 $nick = $member['mb_nick'];
 $mb_id = $member['mb_id'];
 $email = $member['mb_email'];
-$ma_id = isset($_REQUEST['ma_id']) ? (int) $_REQUEST['ma_id'] : 0;
 
 $sql = "select ma_subject, ma_content from {$g5['mail_table']} where ma_id = '{$ma_id}' ";
 $ma = sql_fetch($sql);
@@ -36,4 +35,5 @@ $content = $content . '<p>더 이상 정보 수신을 원치 않으시면 [<a hr
 
 mailer($config['cf_title'], $member['mb_email'], $member['mb_email'], $subject, $content, 1);
 
-alert($member['mb_nick'].'('.$member['mb_email'].')님께 테스트 메일을 발송하였습니다. 확인하여 주십시오.');
+alert($member['mb_nick'].'('.$member['mb_email'].')님께 테스트 메일을 발송하였습니다. 확인하여 주십시오.');
+?>

adm/mail_update.php

@@ -5,19 +5,16 @@ include_once('./_common.php');
 if ($w == 'u' || $w == 'd')
     check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0;
-$ma_subject = isset($_POST['ma_subject']) ? strip_tags(clean_xss_attributes($_POST['ma_subject'])) : '';
-$ma_content = isset($_POST['ma_content']) ? $_POST['ma_content'] : '';
-
 if ($w == '')
 {
     $sql = " insert {$g5['mail_table']}
-                set ma_subject = '{$ma_subject}',
-                     ma_content = '{$ma_content}',
+                set ma_id = '{$_POST['ma_id']}',
+                     ma_subject = '{$_POST['ma_subject']}',
+                     ma_content = '{$_POST['ma_content']}',
                      ma_time = '".G5_TIME_YMDHIS."',
                      ma_ip = '{$_SERVER['REMOTE_ADDR']}' ";
     sql_query($sql);
@@ -25,17 +22,18 @@ if ($w == '')
 else if ($w == 'u')
 {
     $sql = " update {$g5['mail_table']}
-                set ma_subject = '{$ma_subject}',
-                     ma_content = '{$ma_content}',
+                set ma_subject = '{$_POST['ma_subject']}',
+                     ma_content = '{$_POST['ma_content']}',
                      ma_time = '".G5_TIME_YMDHIS."',
                      ma_ip = '{$_SERVER['REMOTE_ADDR']}'
-                where ma_id = '{$ma_id}' ";
+                where ma_id = '{$_POST['ma_id']}' ";
     sql_query($sql);
 }
 else if ($w == 'd')
 {
-	$sql = " delete from {$g5['mail_table']} where ma_id = '{$ma_id}' ";
+	$sql = " delete from {$g5['mail_table']} where ma_id = '{$_POST['ma_id']}' ";
     sql_query($sql);
 }
 
-goto_url('./mail_list.php');
+goto_url('./mail_list.php');
+?>

adm/member_delete.php

@@ -4,11 +4,11 @@ include_once("./_common.php");
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, "d");
+auth_check($auth[$sub_menu], "d");
 
-$mb = isset($_POST['mb_id']) ? get_member($_POST['mb_id']) : array();
+$mb = get_member($_POST['mb_id']);
 
-if (! (isset($mb['mb_id']) && $mb['mb_id']))
+if (!$mb['mb_id'])
     alert("회원자료가 존재하지 않습니다.");
 else if ($member['mb_id'] == $mb['mb_id'])
     alert("로그인 중인 관리자는 삭제 할 수 없습니다.");
@@ -25,4 +25,5 @@ member_delete($mb['mb_id']);
 if ($url)
     goto_url("{$url}?$qstr&w=u&mb_id=$mb_id");
 else
-    goto_url("./member_list.php?$qstr");
+    goto_url("./member_list.php?$qstr");
+?>

adm/member_form.php

@@ -2,46 +2,7 @@
 $sub_menu = "200100";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
-
-$mb = array(
-'mb_certify' => null,
-'mb_adult' => null,
-'mb_sms' => null,
-'mb_intercept_date' => null,
-'mb_id' => null,
-'mb_name' => null,
-'mb_nick' => null,
-'mb_point' => null,
-'mb_email' => null,
-'mb_homepage' => null,
-'mb_hp' => null,
-'mb_tel' => null,
-'mb_zip1' => null,
-'mb_zip2' => null,
-'mb_addr1' => null,
-'mb_addr2' => null,
-'mb_addr3' => null,
-'mb_addr_jibeon' => null,
-'mb_signature' => null,
-'mb_profile' => null,
-'mb_memo' => null,
-'mb_leave_date' => null,
-'mb_1' => null,
-'mb_2' => null,
-'mb_3' => null,
-'mb_4' => null,
-'mb_5' => null,
-'mb_6' => null,
-'mb_7' => null,
-'mb_8' => null,
-'mb_9' => null,
-'mb_10' => null,
-);
-
-$sound_only = '';
-$required_mb_id_class = '';
-$required_mb_password = '';
+auth_check($auth[$sub_menu], 'w');
 
 if ($w == '')
 {
@@ -65,6 +26,7 @@ else if ($w == 'u')
         alert('자신보다 권한이 높거나 같은 회원은 수정할 수 없습니다.');
 
     $required_mb_id = 'readonly';
+    $required_mb_password = '';
     $html_title = '수정';
 
     $mb['mb_name'] = get_text($mb['mb_name']);
@@ -278,11 +240,10 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
             <input type="file" name="mb_icon" id="mb_icon">
             <?php
             $mb_dir = substr($mb['mb_id'],0,2);
-            $icon_file = G5_DATA_PATH.'/member/'.$mb_dir.'/'.get_mb_icon_name($mb['mb_id']).'.gif';
+            $icon_file = G5_DATA_PATH.'/member/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
             if (file_exists($icon_file)) {
-                $icon_url = str_replace(G5_DATA_PATH, G5_DATA_URL, $icon_file);
-                $icon_filemtile = (defined('G5_USE_MEMBER_IMAGE_FILETIME') && G5_USE_MEMBER_IMAGE_FILETIME) ? '?'.filemtime($icon_file) : '';
-                echo '<img src="'.$icon_url.$icon_filemtile.'" alt="">';
+                $icon_url = G5_DATA_URL.'/member/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
+                echo '<img src="'.$icon_url.'" alt="">';
                 echo '<input type="checkbox" id="del_mb_icon" name="del_mb_icon" value="1">삭제';
             }
             ?>
@@ -295,9 +256,10 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
             <input type="file" name="mb_img" id="mb_img">
             <?php
             $mb_dir = substr($mb['mb_id'],0,2);
-            $icon_file = G5_DATA_PATH.'/member_image/'.$mb_dir.'/'.get_mb_icon_name($mb['mb_id']).'.gif';
+            $icon_file = G5_DATA_PATH.'/member_image/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
             if (file_exists($icon_file)) {
-                echo get_member_profile_img($mb['mb_id']);
+                $icon_url = G5_DATA_URL.'/member_image/'.$mb_dir.'/'.$mb['mb_id'].'.gif';
+                echo '<img src="'.$icon_url.'" alt="">';
                 echo '<input type="checkbox" id="del_mb_img" name="del_mb_img" value="1">삭제';
             }
             ?>
@@ -479,8 +441,6 @@ this.form.mb_intercept_date.value=this.form.mb_intercept_date.defaultValue; }">
     <?php
         }   //end if
     }   //end if
-
-    run_event('admin_member_form_add', $mb, $w, 'table');
     ?>
 
     <?php for ($i=1; $i<=10; $i++) { ?>
@@ -516,7 +476,7 @@ function fmember_submit(f)
     return true;
 }
 </script>
-<?php
-run_event('admin_member_form_after', $mb, $w);
 
-include_once('./admin.tail.php');
+<?php
+include_once('./admin.tail.php');
+?>

adm/member_form_update.php

@@ -7,14 +7,11 @@ include_once(G5_LIB_PATH.'/thumbnail.lib.php');
 if ($w == 'u')
     check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$mb_id = isset($_POST['mb_id']) ? trim($_POST['mb_id']) : '';
-$mb_certify_case = isset($_POST['mb_certify_case']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['mb_certify_case']) : '';
-$mb_certify = isset($_POST['mb_certify']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['mb_certify']) : '';
-$mb_zip = isset($_POST['mb_zip']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['mb_zip']) : '';
+$mb_id = trim($_POST['mb_id']);
 
 // 휴대폰번호 체크
 $mb_hp = hyphen_hp_number($_POST['mb_hp']);
@@ -25,101 +22,72 @@ if($mb_hp) {
 }
 
 // 인증정보처리
-if($mb_certify_case && $mb_certify) {
-    $mb_certify = isset($_POST['mb_certify_case']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['mb_certify_case']) : '';
-    $mb_adult = isset($_POST['mb_adult']) ? preg_replace('/[^0-9a-z_]/i', '', $_POST['mb_adult']) : '';
+if($_POST['mb_certify_case'] && $_POST['mb_certify']) {
+    $mb_certify = $_POST['mb_certify_case'];
+    $mb_adult = $_POST['mb_adult'];
 } else {
     $mb_certify = '';
     $mb_adult = 0;
 }
 
-$mb_zip1 = substr($mb_zip, 0, 3);
-$mb_zip2 = substr($mb_zip, 3);
+$mb_zip1 = substr($_POST['mb_zip'], 0, 3);
+$mb_zip2 = substr($_POST['mb_zip'], 3);
 
 $mb_email = isset($_POST['mb_email']) ? get_email_address(trim($_POST['mb_email'])) : '';
 $mb_nick = isset($_POST['mb_nick']) ? trim(strip_tags($_POST['mb_nick'])) : '';
 
 if ($msg = valid_mb_nick($mb_nick))     alert($msg, "", true, true);
 
-$posts = array();
-$check_keys = array(
-'mb_name',
-'mb_homepage',
-'mb_tel',
-'mb_addr1',
-'mb_addr2',
-'mb_addr3',
-'mb_addr_jibeon',
-'mb_signature',
-'mb_leave_date',
-'mb_intercept_date',
-'mb_mailling',
-'mb_sms',
-'mb_open',
-'mb_profile',
-'mb_level'
-);
-
-for($i=1;$i<=10;$i++){
-    $check_keys[] = 'mb_'.$i; 
-}
-
-foreach( $check_keys as $key ){
-    $posts[$key] = isset($_POST[$key]) ? clean_xss_tags($_POST[$key], 1, 1) : '';
-}
-
-$mb_memo = isset($_POST['mb_memo']) ? $_POST['mb_memo'] : '';
-
-$sql_common = "  mb_name = '{$posts['mb_name']}',
+$sql_common = "  mb_name = '{$_POST['mb_name']}',
                  mb_nick = '{$mb_nick}',
                  mb_email = '{$mb_email}',
-                 mb_homepage = '{$posts['mb_homepage']}',
-                 mb_tel = '{$posts['mb_tel']}',
+                 mb_homepage = '{$_POST['mb_homepage']}',
+                 mb_tel = '{$_POST['mb_tel']}',
                  mb_hp = '{$mb_hp}',
                  mb_certify = '{$mb_certify}',
                  mb_adult = '{$mb_adult}',
                  mb_zip1 = '$mb_zip1',
                  mb_zip2 = '$mb_zip2',
-                 mb_addr1 = '{$posts['mb_addr1']}',
-                 mb_addr2 = '{$posts['mb_addr2']}',
-                 mb_addr3 = '{$posts['mb_addr3']}',
-                 mb_addr_jibeon = '{$posts['mb_addr_jibeon']}',
-                 mb_signature = '{$posts['mb_signature']}',
-                 mb_leave_date = '{$posts['mb_leave_date']}',
-                 mb_intercept_date='{$posts['mb_intercept_date']}',
-                 mb_memo = '{$mb_memo}',
-                 mb_mailling = '{$posts['mb_mailling']}',
-                 mb_sms = '{$posts['mb_sms']}',
-                 mb_open = '{$posts['mb_open']}',
-                 mb_profile = '{$posts['mb_profile']}',
-                 mb_level = '{$posts['mb_level']}',
-                 mb_1 = '{$posts['mb_1']}',
-                 mb_2 = '{$posts['mb_2']}',
-                 mb_3 = '{$posts['mb_3']}',
-                 mb_4 = '{$posts['mb_4']}',
-                 mb_5 = '{$posts['mb_5']}',
-                 mb_6 = '{$posts['mb_6']}',
-                 mb_7 = '{$posts['mb_7']}',
-                 mb_8 = '{$posts['mb_8']}',
-                 mb_9 = '{$posts['mb_9']}',
-                 mb_10 = '{$posts['mb_10']}' ";
+                 mb_addr1 = '{$_POST['mb_addr1']}',
+                 mb_addr2 = '{$_POST['mb_addr2']}',
+                 mb_addr3 = '{$_POST['mb_addr3']}',
+                 mb_addr_jibeon = '{$_POST['mb_addr_jibeon']}',
+                 mb_signature = '{$_POST['mb_signature']}',
+                 mb_leave_date = '{$_POST['mb_leave_date']}',
+                 mb_intercept_date='{$_POST['mb_intercept_date']}',
+                 mb_memo = '{$_POST['mb_memo']}',
+                 mb_mailling = '{$_POST['mb_mailling']}',
+                 mb_sms = '{$_POST['mb_sms']}',
+                 mb_open = '{$_POST['mb_open']}',
+                 mb_profile = '{$_POST['mb_profile']}',
+                 mb_level = '{$_POST['mb_level']}',
+                 mb_1 = '{$_POST['mb_1']}',
+                 mb_2 = '{$_POST['mb_2']}',
+                 mb_3 = '{$_POST['mb_3']}',
+                 mb_4 = '{$_POST['mb_4']}',
+                 mb_5 = '{$_POST['mb_5']}',
+                 mb_6 = '{$_POST['mb_6']}',
+                 mb_7 = '{$_POST['mb_7']}',
+                 mb_8 = '{$_POST['mb_8']}',
+                 mb_9 = '{$_POST['mb_9']}',
+                 mb_10 = '{$_POST['mb_10']}' ";
 
 if ($w == '')
 {
     $mb = get_member($mb_id);
-    if (isset($mb['mb_id']) && $mb['mb_id'])
+    if ($mb['mb_id'])
         alert('이미 존재하는 회원아이디입니다.\\nＩＤ : '.$mb['mb_id'].'\\n이름 : '.$mb['mb_name'].'\\n닉네임 : '.$mb['mb_nick'].'\\n메일 : '.$mb['mb_email']);
 
     // 닉네임중복체크
     $sql = " select mb_id, mb_name, mb_nick, mb_email from {$g5['member_table']} where mb_nick = '{$mb_nick}' ";
     $row = sql_fetch($sql);
-    if (isset($row['mb_id']) && $row['mb_id'])
+    if ($row['mb_id'])
         alert('이미 존재하는 닉네임입니다.\\nＩＤ : '.$row['mb_id'].'\\n이름 : '.$row['mb_name'].'\\n닉네임 : '.$row['mb_nick'].'\\n메일 : '.$row['mb_email']);
 
     // 이메일중복체크
     $sql = " select mb_id, mb_name, mb_nick, mb_email from {$g5['member_table']} where mb_email = '{$mb_email}' ";
     $row = sql_fetch($sql);
-    if (isset($row['mb_id']) && $row['mb_id'])
+    if ($row['mb_id'])
         alert('이미 존재하는 이메일입니다.\\nＩＤ : '.$row['mb_id'].'\\n이름 : '.$row['mb_name'].'\\n닉네임 : '.$row['mb_nick'].'\\n메일 : '.$row['mb_email']);
 
     sql_query(" insert into {$g5['member_table']} set mb_id = '{$mb_id}', mb_password = '".get_encrypt_string($mb_password)."', mb_datetime = '".G5_TIME_YMDHIS."', mb_ip = '{$_SERVER['REMOTE_ADDR']}', mb_email_certify = '".G5_TIME_YMDHIS."', {$sql_common} ");
@@ -127,7 +95,7 @@ if ($w == '')
 else if ($w == 'u')
 {
     $mb = get_member($mb_id);
-    if (! (isset($mb['mb_id']) && $mb['mb_id']))
+    if (!$mb['mb_id'])
         alert('존재하지 않는 회원자료입니다.');
 
     if ($is_admin != 'super' && $mb['mb_level'] >= $member['mb_level'])
@@ -137,19 +105,19 @@ else if ($w == 'u')
         alert('최고관리자의 비밀번호를 수정할수 없습니다.');
     }
 
-    if ($mb_id === $member['mb_id'] && $_POST['mb_level'] != $mb['mb_level'])
+    if ($_POST['mb_id'] == $member['mb_id'] && $_POST['mb_level'] != $mb['mb_level'])
         alert($mb['mb_id'].' : 로그인 중인 관리자 레벨은 수정 할 수 없습니다.');
 
     // 닉네임중복체크
     $sql = " select mb_id, mb_name, mb_nick, mb_email from {$g5['member_table']} where mb_nick = '{$mb_nick}' and mb_id <> '$mb_id' ";
     $row = sql_fetch($sql);
-    if (isset($row['mb_id']) && $row['mb_id'])
+    if ($row['mb_id'])
         alert('이미 존재하는 닉네임입니다.\\nＩＤ : '.$row['mb_id'].'\\n이름 : '.$row['mb_name'].'\\n닉네임 : '.$row['mb_nick'].'\\n메일 : '.$row['mb_email']);
 
     // 이메일중복체크
     $sql = " select mb_id, mb_name, mb_nick, mb_email from {$g5['member_table']} where mb_email = '{$mb_email}' and mb_id <> '$mb_id' ";
     $row = sql_fetch($sql);
-    if (isset($row['mb_id']) && $row['mb_id'])
+    if ($row['mb_id'])
         alert('이미 존재하는 이메일입니다.\\nＩＤ : '.$row['mb_id'].'\\n이름 : '.$row['mb_name'].'\\n닉네임 : '.$row['mb_nick'].'\\n메일 : '.$row['mb_email']);
 
     if ($mb_password)
@@ -157,7 +125,7 @@ else if ($w == 'u')
     else
         $sql_password = "";
 
-    if (isset($passive_certify) && $passive_certify)
+    if ($passive_certify)
         $sql_certify = " , mb_email_certify = '".G5_TIME_YMDHIS."' ";
     else
         $sql_certify = "";
@@ -175,13 +143,13 @@ else
 if( $w == '' || $w == 'u' ){
 
     $mb_dir = substr($mb_id,0,2);
-    $mb_icon_img = get_mb_icon_name($mb_id).'.gif';
 
     // 회원 아이콘 삭제
-    if (isset($del_mb_icon) && $del_mb_icon)
-        @unlink(G5_DATA_PATH.'/member/'.$mb_dir.'/'.$mb_icon_img);
+    if ($del_mb_icon)
+        @unlink(G5_DATA_PATH.'/member/'.$mb_dir.'/'.$mb_id.'.gif');
 
     $image_regex = "/(\.(gif|jpe?g|png))$/i";
+    $mb_icon_img = $mb_id.'.gif';
 
     // 아이콘 업로드
     if (isset($_FILES['mb_icon']) && is_uploaded_file($_FILES['mb_icon']['tmp_name'])) {
@@ -228,7 +196,7 @@ if( $w == '' || $w == 'u' ){
     $mb_img_dir .= substr($mb_id,0,2);
 
     // 회원 이미지 삭제
-    if (isset($del_mb_img) && $del_mb_img)
+    if ($del_mb_img)
         @unlink($mb_img_dir.'/'.$mb_icon_img);
 
     // 아이콘 업로드
@@ -268,6 +236,5 @@ if( $w == '' || $w == 'u' ){
     }
 }
 
-run_event('admin_member_form_update', $w, $mb_id);
-
-goto_url('./member_form.php?'.$qstr.'&amp;w=u&amp;mb_id='.$mb_id, false);
+goto_url('./member_form.php?'.$qstr.'&amp;w=u&amp;mb_id='.$mb_id, false);
+?>

adm/member_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "200100";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $sql_common = " from {$g5['member_table']} ";
 
@@ -70,25 +70,25 @@ $colspan = 16;
 <div class="local_ov01 local_ov">
     <?php echo $listall ?>
     <span class="btn_ov01"><span class="ov_txt">총회원수 </span><span class="ov_num"> <?php echo number_format($total_count) ?>명 </span></span>
-    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01" data-tooltip-text="차단된 순으로 정렬합니다.&#xa;전체 데이터를 출력합니다."> <span class="ov_txt">차단 </span><span class="ov_num"><?php echo number_format($intercept_count) ?>명</span></a>
-    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01" data-tooltip-text="탈퇴된 순으로 정렬합니다.&#xa;전체 데이터를 출력합니다."> <span class="ov_txt">탈퇴  </span><span class="ov_num"><?php echo number_format($leave_count) ?>명</span></a>
+    <a href="?sst=mb_intercept_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">차단 </span><span class="ov_num"><?php echo number_format($intercept_count) ?>명</span></a>
+    <a href="?sst=mb_leave_date&amp;sod=desc&amp;sfl=<?php echo $sfl ?>&amp;stx=<?php echo $stx ?>" class="btn_ov01"> <span class="ov_txt">탈퇴  </span><span class="ov_num"><?php echo number_format($leave_count) ?>명</span></a>
 </div>
 
 <form id="fsearch" name="fsearch" class="local_sch01 local_sch" method="get">
 
 <label for="sfl" class="sound_only">검색대상</label>
 <select name="sfl" id="sfl">
-    <option value="mb_id"<?php echo get_selected($sfl, "mb_id"); ?>>회원아이디</option>
-    <option value="mb_nick"<?php echo get_selected($sfl, "mb_nick"); ?>>닉네임</option>
-    <option value="mb_name"<?php echo get_selected($sfl, "mb_name"); ?>>이름</option>
-    <option value="mb_level"<?php echo get_selected($sfl, "mb_level"); ?>>권한</option>
-    <option value="mb_email"<?php echo get_selected($sfl, "mb_email"); ?>>E-MAIL</option>
-    <option value="mb_tel"<?php echo get_selected($sfl, "mb_tel"); ?>>전화번호</option>
-    <option value="mb_hp"<?php echo get_selected($sfl, "mb_hp"); ?>>휴대폰번호</option>
-    <option value="mb_point"<?php echo get_selected($sfl, "mb_point"); ?>>포인트</option>
-    <option value="mb_datetime"<?php echo get_selected($sfl, "mb_datetime"); ?>>가입일시</option>
-    <option value="mb_ip"<?php echo get_selected($sfl, "mb_ip"); ?>>IP</option>
-    <option value="mb_recommend"<?php echo get_selected($sfl, "mb_recommend"); ?>>추천인</option>
+    <option value="mb_id"<?php echo get_selected($_GET['sfl'], "mb_id"); ?>>회원아이디</option>
+    <option value="mb_nick"<?php echo get_selected($_GET['sfl'], "mb_nick"); ?>>닉네임</option>
+    <option value="mb_name"<?php echo get_selected($_GET['sfl'], "mb_name"); ?>>이름</option>
+    <option value="mb_level"<?php echo get_selected($_GET['sfl'], "mb_level"); ?>>권한</option>
+    <option value="mb_email"<?php echo get_selected($_GET['sfl'], "mb_email"); ?>>E-MAIL</option>
+    <option value="mb_tel"<?php echo get_selected($_GET['sfl'], "mb_tel"); ?>>전화번호</option>
+    <option value="mb_hp"<?php echo get_selected($_GET['sfl'], "mb_hp"); ?>>휴대폰번호</option>
+    <option value="mb_point"<?php echo get_selected($_GET['sfl'], "mb_point"); ?>>포인트</option>
+    <option value="mb_datetime"<?php echo get_selected($_GET['sfl'], "mb_datetime"); ?>>가입일시</option>
+    <option value="mb_ip"<?php echo get_selected($_GET['sfl'], "mb_ip"); ?>>IP</option>
+    <option value="mb_recommend"<?php echo get_selected($_GET['sfl'], "mb_recommend"); ?>>추천인</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -330,4 +330,5 @@ function fmemberlist_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/member_list_delete.php

@@ -4,7 +4,7 @@ include_once("./_common.php");
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, "d");
+auth_check($auth[$sub_menu], "d");
 
 check_admin_token();
 
@@ -33,4 +33,5 @@ for ($i=0; $i<count($chk); $i++)
 if ($msg)
     echo "<script type='text/javascript'> alert('$msg'); </script>";
 
-goto_url("./member_list.php?$qstr");
+goto_url("./member_list.php?$qstr");
+?>

adm/member_list_update.php

@@ -4,54 +4,44 @@ include_once('./_common.php');
 
 check_demo();
 
-if (! (isset($_POST['chk']) && is_array($_POST['chk']))) {
+if (!count($_POST['chk'])) {
     alert($_POST['act_button']." 하실 항목을 하나 이상 체크하세요.");
 }
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$mb_datas = array();
-$msg = '';
-
 if ($_POST['act_button'] == "선택수정") {
 
     for ($i=0; $i<count($_POST['chk']); $i++)
     {
         // 실제 번호를 넘김
-        $k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
-        
-        $post_mb_certify = (isset($_POST['mb_certify'][$k]) && $_POST['mb_certify'][$k]) ? clean_xss_tags($_POST['mb_certify'][$k], 1, 1, 20) : '';
-        $post_mb_level = isset($_POST['mb_level'][$k]) ? (int) $_POST['mb_level'][$k] : 0;
-        $post_mb_intercept_date = (isset($_POST['mb_intercept_date'][$k]) && $_POST['mb_intercept_date'][$k]) ? clean_xss_tags($_POST['mb_intercept_date'][$k], 1, 1, 8) : '';
-        $post_mb_mailling = isset($_POST['mb_mailling'][$k]) ? (int) $_POST['mb_mailling'][$k] : 0;
-        $post_mb_sms = isset($_POST['mb_sms'][$k]) ? (int) $_POST['mb_sms'][$k] : 0;
-        $post_mb_open = isset($_POST['mb_open'][$k]) ? (int) $_POST['mb_open'][$k] : 0;
+        $k = $_POST['chk'][$i];
 
-        $mb_datas[] = $mb = get_member($_POST['mb_id'][$k]);
+        $mb = get_member($_POST['mb_id'][$k]);
 
-        if (! (isset($mb['mb_id']) && $mb['mb_id'])) {
+        if (!$mb['mb_id']) {
             $msg .= $mb['mb_id'].' : 회원자료가 존재하지 않습니다.\\n';
         } else if ($is_admin != 'super' && $mb['mb_level'] >= $member['mb_level']) {
             $msg .= $mb['mb_id'].' : 자신보다 권한이 높거나 같은 회원은 수정할 수 없습니다.\\n';
         } else if ($member['mb_id'] == $mb['mb_id']) {
             $msg .= $mb['mb_id'].' : 로그인 중인 관리자는 수정 할 수 없습니다.\\n';
         } else {
-            if($post_mb_certify)
-                $mb_adult = isset($_POST['mb_adult'][$k]) ? (int) $_POST['mb_adult'][$k] : 0;
+            if($_POST['mb_certify'][$k])
+                $mb_adult = (int) $_POST['mb_adult'][$k];
             else
                 $mb_adult = 0;
 
             $sql = " update {$g5['member_table']}
-                        set mb_level = '".$post_mb_level."',
-                            mb_intercept_date = '".sql_real_escape_string($post_mb_intercept_date)."',
-                            mb_mailling = '".$post_mb_mailling."',
-                            mb_sms = '".$post_mb_sms."',
-                            mb_open = '".$post_mb_open."',
-                            mb_certify = '".sql_real_escape_string($post_mb_certify)."',
+                        set mb_level = '".sql_real_escape_string($_POST['mb_level'][$k])."',
+                            mb_intercept_date = '".sql_real_escape_string($_POST['mb_intercept_date'][$k])."',
+                            mb_mailling = '".sql_real_escape_string($_POST['mb_mailling'][$k])."',
+                            mb_sms = '".sql_real_escape_string($_POST['mb_sms'][$k])."',
+                            mb_open = '".sql_real_escape_string($_POST['mb_open'][$k])."',
+                            mb_certify = '".sql_real_escape_string($_POST['mb_certify'][$k])."',
                             mb_adult = '{$mb_adult}'
-                        where mb_id = '".sql_real_escape_string($mb['mb_id'])."' ";
+                        where mb_id = '".sql_real_escape_string($_POST['mb_id'][$k])."' ";
             sql_query($sql);
         }
     }
@@ -61,9 +51,9 @@ if ($_POST['act_button'] == "선택수정") {
     for ($i=0; $i<count($_POST['chk']); $i++)
     {
         // 실제 번호를 넘김
-        $k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
+        $k = $_POST['chk'][$i];
 
-        $mb_datas[] = $mb = get_member($_POST['mb_id'][$k]);
+        $mb = get_member($_POST['mb_id'][$k]);
 
         if (!$mb['mb_id']) {
             $msg .= $mb['mb_id'].' : 회원자료가 존재하지 않습니다.\\n';
@@ -84,6 +74,5 @@ if ($msg)
     //echo '<script> alert("'.$msg.'"); </script>';
     alert($msg);
 
-run_event('admin_member_list_update', $_POST['act_button'], $mb_datas);
-
-goto_url('./member_list.php?'.$qstr);
+goto_url('./member_list.php?'.$qstr);
+?>

adm/menu_form.php

@@ -8,8 +8,7 @@ if ($is_admin != 'super')
 $g5['title'] = '메뉴 추가';
 include_once(G5_PATH.'/head.sub.php');
 
-$new = isset($_GET['new']) ? clean_xss_tags($_GET['new'], 1, 1) : '';
-$code = isset($_GET['code']) ? preg_replace('/[^0-9a-zA-Z]/', '', $_GET['code']) : '';
+$code = isset($code) ? preg_replace('/[^0-9a-zA-Z]/', '', strip_tags($code)) : '';
 
 // 코드
 if($new == 'new' || !$code) {
@@ -160,11 +159,11 @@ function add_menu_list(name, link, code)
     list += "<option value=\"0\">사용안함</option>";
     list += "</select>";
     list += "</td>";
-    list += "<td class=\"td_mng\">";
+    list += "<td class=\"td_mngsmall\">";
     <?php if($new == 'new') { ?>
-    list += "<button type=\"button\" class=\"btn_add_submenu btn_03\">추가</button>\n";
+    list += "<button type=\"button\" class=\"btn_add_submenu btn\">추가</button>";
     <?php } ?>
-    list += "<button type=\"button\" class=\"btn_del_menu btn_02\">삭제</button>";
+    list += "<button type=\"button\" class=\"btn_del_menu btn\">삭제</button>";
     list += "</td>";
     list += "</tr>";
 
@@ -175,10 +174,10 @@ function add_menu_list(name, link, code)
     else
         $menu_last = $menulist.find("tr.menu_list:last");
 
-	if($menu_last.length > 0) {
+	if($menu_last.size() > 0) {
         $menu_last.after(list);
     } else {
-        if($menulist.find("#empty_menu_list").length > 0)
+        if($menulist.find("#empty_menu_list").size() > 0)
             $menulist.find("#empty_menu_list").remove();
 
         $menulist.find("table tbody").append(list);
@@ -194,4 +193,5 @@ function add_menu_list(name, link, code)
 </script>
 
 <?php
-include_once(G5_PATH.'/tail.sub.php');
+include_once(G5_PATH.'/tail.sub.php');
+?>

adm/menu_form_search.php

@@ -4,8 +4,6 @@ include_once('./_common.php');
 if ($is_admin != 'super')
     die('최고관리자만 접근 가능합니다.');
 
-$type = isset($_REQUEST['type']) ? preg_replace('/[^0-9a-z_]/i', '', $_REQUEST['type']) : '';
-
 switch($type) {
     case 'group':
         $sql = " select gr_id as id, gr_subject as subject
@@ -26,7 +24,9 @@ switch($type) {
         $sql = '';
         break;
 }
+?>
 
+<?php
 if($sql) {
     $result = sql_query($sql);
 
@@ -55,10 +55,10 @@ if($sql) {
                 $link = G5_BBS_URL.'/group.php?gr_id='.$row['id'];
                 break;
             case 'board':
-                $link = get_pretty_url($row['id']);
+                $link = G5_BBS_URL.'/board.php?bo_table='.$row['id'];
                 break;
             case 'content':
-                $link = get_pretty_url(G5_CONTENT_DIR, $row['id']);
+                $link = G5_BBS_URL.'/content.php?co_id='.$row['id'];
                 break;
             default:
                 $link = '';
@@ -123,4 +123,4 @@ if($sql) {
     <button type="button" id="add_manual" class="btn_submit btn">추가</button>
     <button type="button" class="btn_02 btn" onclick="window.close();">창닫기</button>
 </div>
-<?php } // end if;
+<?php } ?>

adm/menu_list.php

@@ -31,7 +31,6 @@ $g5['title'] = "메뉴설정";
 include_once('./admin.head.php');
 
 $colspan = 7;
-$sub_menu_info = '';
 ?>
 
 <div class="local_desc01 local_desc">
@@ -144,14 +143,14 @@ $(function() {
             return false;
 
         var $tr = $(this).closest("tr");
-        if($tr.find("td.sub_menu_class").length > 0) {
+        if($tr.find("td.sub_menu_class").size() > 0) {
             $tr.remove();
         } else {
             var code = $(this).closest("tr").find("input[name='code[]']").val().substr(0, 2);
             $("tr.menu_group_"+code).remove();
         }
 
-        if($("#menulist tr.menu_list").length < 1) {
+        if($("#menulist tr.menu_list").size() < 1) {
             var list = "<tr id=\"empty_menu_list\"><td colspan=\"<?php echo $colspan; ?>\" class=\"empty_table\">자료가 없습니다.</td></tr>\n";
             $("#menulist table tbody").append(list);
         } else {
@@ -216,4 +215,5 @@ function fmenulist_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/menu_list_update.php

@@ -21,15 +21,11 @@ for ($i=0; $i<$count; $i++)
 {
     $_POST = array_map_deep('trim', $_POST);
     
-    if(preg_match('/^javascript/i', preg_replace('/[ ]{1,}|[\t]/', '', $_POST['me_link'][$i]))){
-        $_POST['me_link'][$i] = G5_URL;
-    }
-
-    $_POST['me_link'][$i] = is_array($_POST['me_link']) ? clean_xss_tags(clean_xss_attributes(preg_replace('/[ ]{2,}|[\t]/', '', $_POST['me_link'][$i]), 1)) : '';
+    $_POST['me_link'][$i] = is_array($_POST['me_link']) ? clean_xss_tags($_POST['me_link'][$i], 1) : '';
 
     $code    = is_array($_POST['code']) ? strip_tags($_POST['code'][$i]) : '';
     $me_name = is_array($_POST['me_name']) ? strip_tags($_POST['me_name'][$i]) : '';
-    $me_link = (preg_match('/^javascript/i', $_POST['me_link'][$i]) || preg_match('/script:/i', $_POST['me_link'][$i])) ? G5_URL : strip_tags(clean_xss_attributes($_POST['me_link'][$i]));
+    $me_link = (preg_match('/^javascript/i', $_POST['me_link'][$i]) || preg_match('/script:/i', $_POST['me_link'][$i])) ? G5_URL : strip_tags($_POST['me_link'][$i]);
     
     if(!$code || !$me_name || !$me_link)
         continue;
@@ -72,6 +68,5 @@ for ($i=0; $i<$count; $i++)
     sql_query($sql);
 }
 
-run_event('admin_menu_list_update');
-
-goto_url('./menu_list.php');
+goto_url('./menu_list.php');
+?>

adm/newwinform.php

@@ -3,29 +3,17 @@ $sub_menu = '100310';
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, "w");
+auth_check($auth[$sub_menu], "w");
 
-$nw_id = isset($_REQUEST['nw_id']) ? preg_replace('/[^0-9]/', '', $_REQUEST['nw_id']) : 0;
-$nw = array(
-'nw_begin_time'=>'',
-'nw_end_time'=>'',
-'nw_subject'=>'',
-'nw_content'=>'',
-'nw_division'=>'',
-);
+$nw_id = preg_replace('/[^0-9]/', '', $nw_id);
 
 $html_title = "팝업레이어";
-
-// 팝업레이어 테이블에 쇼핑몰, 커뮤니티 인지 구분하는 여부 필드 추가
-$sql = " ALTER TABLE `{$g5['new_win_table']}` ADD `nw_division` VARCHAR(10) NOT NULL DEFAULT 'both' ";
-sql_query($sql, false);
-
 if ($w == "u")
 {
     $html_title .= " 수정";
     $sql = " select * from {$g5['new_win_table']} where nw_id = '$nw_id' ";
     $nw = sql_fetch($sql);
-    if (! (isset($nw['nw_id']) && $nw['nw_id'])) alert("등록된 자료가 없습니다.");
+    if (!$nw['nw_id']) alert("등록된 자료가 없습니다.");
 }
 else
 {
@@ -60,19 +48,6 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
         <col>
     </colgroup>
     <tbody>
-    <tr>
-        <th scope="row"><label for="nw_division">구분</label></th>
-        <td>
-            <?php echo help("커뮤니티에 표시될 것인지 쇼핑몰에 표시될 것인지를 설정합니다."); ?>
-            <select name="nw_division" id="nw_division">
-                <option value="comm"<?php echo get_selected($nw['nw_division'], 'comm'); ?>>커뮤니티</option>
-                <?php if (defined('G5_USE_SHOP') && G5_USE_SHOP) { ?>
-                <option value="both"<?php echo get_selected($nw['nw_division'], 'both', true); ?>>커뮤니티와 쇼핑몰</option>
-                <option value="shop"<?php echo get_selected($nw['nw_division'], 'shop'); ?>>쇼핑몰</option>
-                <?php } ?>
-            </select>
-        </td>
-    </tr>
     <tr>
         <th scope="row"><label for="nw_device">접속기기</label></th>
         <td>
@@ -171,4 +146,5 @@ function frmnewwin_check(f)
 </script>
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/newwinformupdate.php

@@ -2,57 +2,29 @@
 $sub_menu = '100310';
 include_once('./_common.php');
 
-$nw_id = isset($_REQUEST['nw_id']) ? preg_replace('/[^0-9]/', '', $_REQUEST['nw_id']) : 0;
-
 if ($w == "u" || $w == "d")
     check_demo();
 
 if ($w == 'd')
-    auth_check_menu($auth, $sub_menu, "d");
+    auth_check($auth[$sub_menu], "d");
 else
-    auth_check_menu($auth, $sub_menu, "w");
+    auth_check($auth[$sub_menu], "w");
 
 check_admin_token();
 
-$nw_subject = isset($_POST['nw_subject']) ? strip_tags(clean_xss_attributes($_POST['nw_subject'])) : '';
-$posts = array();
+$nw_subject = isset($_POST['nw_subject']) ? strip_tags($_POST['nw_subject']) : '';
 
-$check_keys = array(
-'nw_device'=>'str',
-'nw_division'=>'str',
-'nw_begin_time'=>'str',
-'nw_end_time'=>'str',
-'nw_disable_hours'=>'int',
-'nw_left'=>'int',
-'nw_top'=>'int',
-'nw_height'=>'int',
-'nw_width'=>'int',
-'nw_content'=>'text',
-'nw_content_html'=>'text',
-);
-
-foreach($check_keys as $key=>$val){
-    if($val === 'int'){
-        $posts[$key] = isset($_POST[$key]) ? (int) $_POST[$key] : 0;
-    } else if ($val === 'str') {
-        $posts[$key] = isset($_POST[$key]) ? clean_xss_tags($_POST[$key], 1, 1) : 0;
-    } else {
-        $posts[$key] = isset($_POST[$key]) ? trim($_POST[$key]) : 0;
-    }
-}
-
-$sql_common = " nw_device = '{$posts['nw_device']}',
-                nw_division = '{$posts['nw_division']}',
-                nw_begin_time = '{$posts['nw_begin_time']}',
-                nw_end_time = '{$posts['nw_end_time']}',
-                nw_disable_hours = '{$posts['nw_disable_hours']}',
-                nw_left = '{$posts['nw_left']}',
-                nw_top = '{$posts['nw_top']}',
-                nw_height = '{$posts['nw_height']}',
-                nw_width = '{$posts['nw_width']}',
+$sql_common = " nw_device = '{$_POST['nw_device']}',
+                nw_begin_time = '{$_POST['nw_begin_time']}',
+                nw_end_time = '{$_POST['nw_end_time']}',
+                nw_disable_hours = '{$_POST['nw_disable_hours']}',
+                nw_left = '{$_POST['nw_left']}',
+                nw_top = '{$_POST['nw_top']}',
+                nw_height = '{$_POST['nw_height']}',
+                nw_width = '{$_POST['nw_width']}',
                 nw_subject = '{$nw_subject}',
-                nw_content = '{$posts['nw_content']}',
-                nw_content_html = '{$posts['nw_content_html']}' ";
+                nw_content = '{$_POST['nw_content']}',
+                nw_content_html = '{$_POST['nw_content_html']}' ";
 
 if($w == "")
 {
@@ -79,4 +51,5 @@ if ($w == "d")
 else
 {
     goto_url("./newwinform.php?w=u&nw_id=$nw_id");
-}
+}
+?>

adm/newwinlist.php

@@ -2,7 +2,7 @@
 $sub_menu = '100310';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, "r");
+auth_check($auth[$sub_menu], "r");
 
 if( !isset($g5['new_win_table']) ){
     die('<meta charset="utf-8">/data/dbconfig.php 파일에 <strong>$g5[\'new_win_table\'] = G5_TABLE_PREFIX.\'new_win\';</strong> 를 추가해 주세요.');
@@ -14,7 +14,6 @@ if(!sql_query(" DESCRIBE {$g5['new_win_table']} ", false)) {
     } else {
        $query_cp = sql_query(" CREATE TABLE IF NOT EXISTS `{$g5['new_win_table']}` (
                       `nw_id` int(11) NOT NULL AUTO_INCREMENT,
-                      `nw_division` varchar(10) NOT NULL DEFAULT 'both',
                       `nw_device` varchar(10) NOT NULL DEFAULT 'both',
                       `nw_begin_time` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
                       `nw_end_time` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
@@ -115,4 +114,5 @@ $result = sql_query($sql);
 
 
 <?php
-include_once (G5_ADMIN_PATH.'/admin.tail.php');
+include_once (G5_ADMIN_PATH.'/admin.tail.php');
+?>

adm/phpinfo.php

@@ -4,6 +4,7 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
-phpinfo();
+phpinfo();
+?>

adm/point_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "200200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $sql_common = " from {$g5['point_table']} ";
 
@@ -84,8 +84,8 @@ else
 <form name="fsearch" id="fsearch" class="local_sch01 local_sch" method="get">
 <label for="sfl" class="sound_only">검색대상</label>
 <select name="sfl" id="sfl">
-    <option value="mb_id"<?php echo get_selected($sfl, "mb_id"); ?>>회원아이디</option>
-    <option value="po_content"<?php echo get_selected($sfl, "po_content"); ?>>내용</option>
+    <option value="mb_id"<?php echo get_selected($_GET['sfl'], "mb_id"); ?>>회원아이디</option>
+    <option value="po_content"<?php echo get_selected($_GET['sfl'], "po_content"); ?>>내용</option>
 </select>
 <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
 <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -131,7 +131,7 @@ else
 
         $link1 = $link2 = '';
         if (!preg_match("/^\@/", $row['po_rel_table']) && $row['po_rel_table']) {
-            $link1 = '<a href="'.get_pretty_url($row['po_rel_table'], $row['po_rel_id']).'" target="_blank">';
+            $link1 = '<a href="'.G5_BBS_URL.'/board.php?bo_table='.$row['po_rel_table'].'&amp;wr_id='.$row['po_rel_id'].'" target="_blank">';
             $link2 = '</a>';
         }
 
@@ -190,7 +190,7 @@ else
     <input type="hidden" name="sst" value="<?php echo $sst ?>">
     <input type="hidden" name="sod" value="<?php echo $sod ?>">
     <input type="hidden" name="page" value="<?php echo $page ?>">
-    <input type="hidden" name="token" value="<?php echo isset($token) ? $token : ''; ?>">
+    <input type="hidden" name="token" value="<?php echo $token ?>">
 
     <div class="tbl_frm01 tbl_wrap">
         <table>
@@ -248,4 +248,5 @@ function fpointlist_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/point_list_delete.php

@@ -4,11 +4,11 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'd');
+auth_check($auth[$sub_menu], 'd');
 
 check_admin_token();
 
-$count = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
+$count = count($_POST['chk']);
 if(!$count)
     alert($_POST['act_button'].' 하실 항목을 하나 이상 체크하세요.');
 
@@ -57,4 +57,5 @@ for ($i=0; $i<$count; $i++)
     sql_query($sql);
 }
 
-goto_url('./point_list.php?'.$qstr);
+goto_url('./point_list.php?'.$qstr);
+?>

adm/point_update.php

@@ -2,14 +2,14 @@
 $sub_menu = "200200";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
-$mb_id = isset($_POST['mb_id']) ? strip_tags(clean_xss_attributes($_POST['mb_id'])) : '';
-$po_point = isset($_POST['po_point']) ? strip_tags(clean_xss_attributes($_POST['po_point'])) : 0;
-$po_content = isset($_POST['po_content']) ? strip_tags(clean_xss_attributes($_POST['po_content'])) : '';
-$expire = isset($_POST['po_expire_term']) ? preg_replace('/[^0-9]/', '', $_POST['po_expire_term']) : '';
+$mb_id = strip_tags($_POST['mb_id']);
+$po_point = strip_tags($_POST['po_point']);
+$po_content = strip_tags($_POST['po_content']);
+$expire = preg_replace('/[^0-9]/', '', $_POST['po_expire_term']);
 
 $mb = get_member($mb_id);
 
@@ -21,4 +21,5 @@ if (($po_point < 0) && ($po_point * (-1) > $mb['mb_point']))
 
 insert_point($mb_id, $po_point, $po_content, '@passive', $mb_id, $member['mb_id'].'-'.uniqid(''), $expire);
 
-goto_url('./point_list.php?'.$qstr);
+goto_url('./point_list.php?'.$qstr);
+?>

adm/poll_delete.php

@@ -4,17 +4,17 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'd');
+auth_check($auth[$sub_menu], 'd');
 
 check_admin_token();
 
-$count = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
+$count = count($_POST['chk']);
 
 if(!$count)
     alert('삭제할 투표목록을 1개이상 선택해 주세요.');
 
 for($i=0; $i<$count; $i++) {
-    $po_id = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
+    $po_id = $_POST['chk'][$i];
 
     $sql = " delete from {$g5['poll_table']} where po_id = '$po_id' ";
     sql_query($sql);
@@ -23,4 +23,5 @@ for($i=0; $i<$count; $i++) {
     sql_query($sql);
 }
 
-goto_url('./poll_list.php?'.$qstr);
+goto_url('./poll_list.php?'.$qstr);
+?>

adm/poll_form.php

@@ -2,15 +2,9 @@
 $sub_menu = "200900";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 $po_id = isset($po_id) ? (int) $po_id : 0;
-$po = array(
-'po_subject'=>'',
-'po_etc'=>'',
-'po_level'=>'',
-'po_point'=>'',
-);
 
 $html_title = '투표';
 if ($w == '')
@@ -43,7 +37,7 @@ include_once('./admin.head.php');
     <tbody>
     <tr>
         <th scope="row"><label for="po_subject">투표 제목<strong class="sound_only">필수</strong></label></th>
-        <td><input type="text" name="po_subject" value="<?php echo get_sanitize_input($po['po_subject']); ?>" id="po_subject" required class="required frm_input" size="80" maxlength="125"></td>
+        <td><input type="text" name="po_subject" value="<?php echo $po['po_subject'] ?>" id="po_subject" required class="required frm_input" size="80" maxlength="125"></td>
     </tr>
 
     <?php
@@ -54,8 +48,7 @@ include_once('./admin.head.php');
             $sound_only = '<strong class="sound_only">필수</strong>';
         }
 
-        $po_poll = isset($po['po_poll'.$i]) ? get_text($po['po_poll'.$i]) : '';
-        $po_cnt = isset($po['po_cnt'.$i]) ? get_text($po['po_cnt'.$i]) : 0;
+        $po_poll = get_text($po['po_poll'.$i]);
     ?>
 
     <tr>
@@ -63,7 +56,7 @@ include_once('./admin.head.php');
         <td>
             <input type="text" name="po_poll<?php echo $i ?>" value="<?php echo $po_poll ?>" id="po_poll<?php echo $i ?>" <?php echo $required ?> class="frm_input <?php echo $required ?>" maxlength="125">
             <label for="po_cnt<?php echo $i ?>">항목 <?php echo $i ?> 투표수</label>
-            <input type="text" name="po_cnt<?php echo $i ?>" value="<?php echo $po_cnt; ?>" id="po_cnt<?php echo $i ?>" class="frm_input" size="3">
+            <input type="text" name="po_cnt<?php echo $i ?>" value="<?php echo $po['po_cnt'.$i] ?>" id="po_cnt<?php echo $i ?>" class="frm_input" size="3">
        </td>
     </tr>
 
@@ -118,4 +111,5 @@ include_once('./admin.head.php');
 </form>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/poll_form_update.php

@@ -6,7 +6,7 @@ $w = $_POST['w'];
 if ($w == 'u' || $w == 'd')
     check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
@@ -40,7 +40,7 @@ foreach( $_POST as $key=>$value ){
     if( empty($value) ) continue;
 
     if( in_array($key, $check_keys) ) {
-        $_POST[$key] = strip_tags(clean_xss_attributes($value));
+        $_POST[$key] = strip_tags($value);
     }
 }
 
@@ -99,4 +99,5 @@ sql_query(" update {$g5['config_table']} set cf_max_po_id = '{$row['max_po_id']}
 if ($w == 'd')
     goto_url('./poll_list.php?'.$qstr);
 else
-    goto_url('./poll_form.php?w=u&po_id='.$po_id.'&'.$qstr);
+    goto_url('./poll_form.php?w=u&po_id='.$po_id.'&'.$qstr);
+?>

adm/poll_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "200900";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $sql_common = " from {$g5['poll_table']} ";
 
@@ -59,7 +59,7 @@ $colspan = 7;
 <div class="sch_last">
     <label for="sfl" class="sound_only">검색대상</label>
     <select name="sfl" id="sfl">
-        <option value="po_subject"<?php echo get_selected($sfl, "po_subject"); ?>>제목</option>
+        <option value="po_subject"<?php echo get_selected($_GET['sfl'], "po_subject"); ?>>제목</option>
     </select>
     <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
     <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -154,4 +154,5 @@ $(function() {
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/popular_list.php

@@ -2,7 +2,7 @@
 $sub_menu = "300300";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 // 체크된 자료 삭제
 if (isset($_POST['chk']) && is_array($_POST['chk'])) {
@@ -79,8 +79,8 @@ var list_delete_php = 'popular_list.php';
 <div class="sch_last">
     <label for="sfl" class="sound_only">검색대상</label>
     <select name="sfl" id="sfl">
-        <option value="pp_word"<?php echo get_selected($sfl, "pp_word"); ?>>검색어</option>
-        <option value="pp_date"<?php echo get_selected($sfl, "pp_date"); ?>>등록일</option>
+        <option value="pp_word"<?php echo get_selected($_GET['sfl'], "pp_word"); ?>>검색어</option>
+        <option value="pp_date"<?php echo get_selected($_GET['sfl'], "pp_date"); ?>>등록일</option>
     </select>
     <label for="stx" class="sound_only">검색어<strong class="sound_only"> 필수</strong></label>
     <input type="text" name="stx" value="<?php echo $stx ?>" id="stx" required class="required frm_input">
@@ -94,7 +94,7 @@ var list_delete_php = 'popular_list.php';
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>">
 <input type="hidden" name="stx" value="<?php echo $stx ?>">
 <input type="hidden" name="page" value="<?php echo $page ?>">
-<input type="hidden" name="token" value="<?php echo isset($token) ? $token : ''; ?>">
+<input type="hidden" name="token" value="<?php echo $token ?>">
 
 <div class="tbl_head01 tbl_wrap">
     <table>
@@ -167,4 +167,5 @@ $(function() {
 </script>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/popular_rank.php

@@ -2,10 +2,7 @@
 $sub_menu = "300400";
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
-
-$fr_date = isset($_REQUEST['fr_date']) ? $_REQUEST['fr_date'] : '';
-$to_date = isset($_REQUEST['to_date']) ? $_REQUEST['to_date'] : '';
+auth_check($auth[$sub_menu], 'r');
 
 if (empty($fr_date) || ! preg_match("/^[0-9]{4}-(0[1-9]|1[0-2])-(0[1-9]|[1-2][0-9]|3[0-1])$/", $fr_date) ) $fr_date = G5_TIME_YMD;
 if (empty($to_date) || ! preg_match("/^[0-9]{4}-(0[1-9]|1[0-2])-(0[1-9]|[1-2][0-9]|3[0-1])$/", $to_date) ) $to_date = G5_TIME_YMD;
@@ -67,7 +64,7 @@ $(function(){
 <input type="hidden" name="sfl" value="<?php echo $sfl ?>">
 <input type="hidden" name="stx" value="<?php echo $stx ?>">
 <input type="hidden" name="page" value="<?php echo $page ?>">
-<input type="hidden" name="token" value="<?php echo isset($token) ? $token : ''; ?>">
+<input type="hidden" name="token" value="<?php echo $token ?>">
 
 <div class="tbl_head01 tbl_wrap">
     <table>
@@ -108,5 +105,8 @@ $(function(){
 
 <?php
 echo get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, "{$_SERVER['SCRIPT_NAME']}?$qstr&amp;page=");
+?>
 
-include_once('./admin.tail.php');
+<?php
+include_once('./admin.tail.php');
+?>

adm/qa_config.php

@@ -3,7 +3,7 @@ $sub_menu = "300500";
 include_once('./_common.php');
 include_once(G5_EDITOR_LIB);
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $g5['title'] = '1:1문의 설정';
 include_once ('./admin.head.php');
@@ -133,7 +133,7 @@ if(!isset($qaconfig['qa_include_head'])) {
         <tr>
             <th scope="row"><label for="qa_title">타이틀<strong class="sound_only">필수</strong></label></th>
             <td>
-                <input type="text" name="qa_title" value="<?php echo get_sanitize_input($qaconfig['qa_title']); ?>" id="qa_title" required class="required frm_input" size="40">
+                <input type="text" name="qa_title" value="<?php echo $qaconfig['qa_title'] ?>" id="qa_title" required class="required frm_input" size="40">
                 <a href="<?php echo G5_BBS_URL; ?>/qalist.php" class="btn_frmline">1:1문의 바로가기</a>
             </td>
         </tr>
@@ -141,7 +141,7 @@ if(!isset($qaconfig['qa_include_head'])) {
             <th scope="row"><label for="qa_category">분류<strong class="sound_only">필수</strong></label></th>
             <td>
                 <?php echo help('분류와 분류 사이는 | 로 구분하세요. (예: 질문|답변) 첫자로 #은 입력하지 마세요. (예: #질문|#답변 [X])') ?>
-                <input type="text" name="qa_category" value="<?php echo get_sanitize_input($qaconfig['qa_category']); ?>" id="qa_category" required class="required frm_input" size="70">
+                <input type="text" name="qa_category" value="<?php echo $qaconfig['qa_category'] ?>" id="qa_category" required class="required frm_input" size="70">
             </td>
         </tr>
         <tr>
@@ -184,21 +184,21 @@ if(!isset($qaconfig['qa_include_head'])) {
             <th scope="row"><label for="qa_send_number">SMS 발신번호</label></th>
             <td>
                 <?php echo help('SMS 알림 전송시 발신번호로 사용됩니다.'); ?>
-                <input type="text" name="qa_send_number" value="<?php echo get_sanitize_input($qaconfig['qa_send_number']); ?>" id="qa_send_number" class="frm_input"  size="30">
+                <input type="text" name="qa_send_number" value="<?php echo $qaconfig['qa_send_number'] ?>" id="qa_send_number" class="frm_input"  size="30">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="qa_admin_hp">관리자 휴대폰번호</label></th>
             <td>
                 <?php echo help('관리자 휴대폰번호를 입력하시면 문의글 등록시 등록하신 번호로 SMS 알림이 전송됩니다.<br>SMS 알림을 사용하지 않으시면 알림이 전송되지 않습니다.'); ?>
-                <input type="text" name="qa_admin_hp" value="<?php echo get_sanitize_input($qaconfig['qa_admin_hp']); ?>" id="qa_admin_hp" class="frm_input"  size="30">
+                <input type="text" name="qa_admin_hp" value="<?php echo $qaconfig['qa_admin_hp'] ?>" id="qa_admin_hp" class="frm_input"  size="30">
             </td>
         </tr>
         <tr>
             <th scope="row"><label for="qa_admin_email">관리자 이메일</label></th>
             <td>
                 <?php echo help('관리자 이메일을 입력하시면 문의글 등록시 등록하신 이메일로 알림이 전송됩니다.'); ?>
-                <input type="text" name="qa_admin_email" value="<?php echo get_sanitize_input($qaconfig['qa_admin_email']); ?>" id="qa_admin_email" class="frm_input"  size="50">
+                <input type="text" name="qa_admin_email" value="<?php echo $qaconfig['qa_admin_email'] ?>" id="qa_admin_email" class="frm_input"  size="50">
             </td>
         </tr>
         <tr>
@@ -306,7 +306,7 @@ if(!isset($qaconfig['qa_include_head'])) {
         <tr>
             <th scope="row"><label for="qa_insert_content">글쓰기 기본 내용</label></th>
             <td>
-                <textarea id="qa_insert_content" name="qa_insert_content" rows="5"><?php echo html_purifier($qaconfig['qa_insert_content']); ?></textarea>
+                <textarea id="qa_insert_content" name="qa_insert_content" rows="5"><?php echo $qaconfig['qa_insert_content'] ?></textarea>
             </td>
         </tr>
         <?php for ($i=1; $i<=5; $i++) { ?>
@@ -396,4 +396,5 @@ function fqaconfigform_submit(f)
 </script>
 
 <?php
-include_once ('./admin.tail.php');
+include_once ('./admin.tail.php');
+?>

adm/qa_config_update.php

@@ -4,7 +4,7 @@ include_once('./_common.php');
 
 check_demo();
 
-auth_check_menu($auth, $sub_menu, 'w');
+auth_check($auth[$sub_menu], 'w');
 
 check_admin_token();
 
@@ -12,12 +12,6 @@ $error_msg = '';
 
 $qaconfig = get_qa_config();
 
-$check_keys = array('qa_title', 'qa_category', 'qa_skin', 'qa_mobile_skin', 'qa_use_email', 'qa_req_email', 'qa_use_hp', 'qa_req_hp', 'qa_use_sms', 'qa_send_number', 'qa_admin_hp', 'qa_admin_email', 'qa_subject_len', 'qa_mobile_subject_len', 'qa_page_rows', 'qa_mobile_page_rows', 'qa_image_width', 'qa_upload_size');
-
-foreach($check_keys as $key){
-	$$key = $_POST[$key] = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : '';
-}
-
 $qa_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_head, 0, 255));
 $qa_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($qa_include_tail, 0, 255));
 
@@ -56,22 +50,9 @@ if( $qa_include_tail && ! is_include_path_check($qa_include_tail, 1) ){
     $error_msg = '/data/file/ 또는 /data/editor/ 포함된 문자를 하단 파일 경로에 포함시킬수 없습니다.';
 }
 
-if( function_exists('filter_input_include_path') ){
-    $qa_include_head = filter_input_include_path($qa_include_head);
-    $qa_include_tail = filter_input_include_path($qa_include_tail);
-}
-
-// 분류에 & 나 = 는 사용이 불가하므로 2바이트로 바꾼다.
-$src_char = array('&', '=');
-$dst_char = array('＆', '〓');
-$qa_category = str_replace($src_char, $dst_char, $_POST['qa_category']);
-
-//https://github.com/gnuboard/gnuboard5/commit/f5f4925d4eb28ba1af728e1065fc2bdd9ce1da58 에 따른 조치
-$qa_category = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*]/", "", $qa_category);
-
 $sql = " update {$g5['qa_config_table']}
             set qa_title                = '{$_POST['qa_title']}',
-                qa_category             = '{$qa_category}',
+                qa_category             = '{$_POST['qa_category']}',
                 qa_skin                 = '{$_POST['qa_skin']}',
                 qa_mobile_skin          = '{$_POST['qa_mobile_skin']}',
                 qa_use_email            = '{$_POST['qa_use_email']}',
@@ -115,4 +96,5 @@ if($error_msg){
     alert($error_msg, './qa_config.php');
 } else {
     goto_url('./qa_config.php');
-}
+}
+?>

adm/safe_check.php

@@ -13,4 +13,5 @@ function social_log_file_delete($second=0){
             unlink($social_log_file);
         }
     }
-}
+}
+?>

adm/sendmail_test.php

@@ -2,7 +2,7 @@
 $sub_menu = '100300';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 if (!$config['cf_email_use'])
     alert('환경설정에서 \'메일발송 사용\'에 체크하셔야 메일을 발송할 수 있습니다.');
@@ -72,4 +72,5 @@ if (isset($_POST['email'])) {
 </section>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/service.php

@@ -2,58 +2,48 @@
 $sub_menu = '100400';
 include_once('./_common.php');
 
-auth_check_menu($auth, $sub_menu, 'r');
+auth_check($auth[$sub_menu], 'r');
 
 $g5['title'] = '부가서비스';
 include_once('./admin.head.php');
 ?>
 
 <div class="local_desc02 local_desc">
-    <p>아래의 서비스들은 영카트에서 이미 지원하는 기능으로 별도의 개발이 필요 없으며 서비스 신청후 바로 사용 할수 있습니다.</p>
+    <p>아래의 서비스들은 그누보드에서 이미 지원하는 기능으로 별도의 개발이 필요 없으며 서비스 신청후 바로 사용 할수 있습니다.</p>
 </div>
 
 <div class="service_wrap">
-    <div class="sevice_1 svc_card">
-        <h3>신용카드 전자결제 서비스<br><span>(계좌이체, 가상계좌 결제 포함)</span></h3>
-        <p>이곳을 통하여 가입하시면 신용카드 결제를 국내 최저 수수료인 3.2%에 이용 할 수 있습니다. 영카트를 사용하지 않아도 이 수수료를 적용 받을 수 있습니다. 아래 가입을 희망하시는 회사의 로고를 클릭하시면 가입페이지로 이동합니다.</p>
-
-        <ul>
-            <li><a href="http://sir.kr/main/service/p_pg.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_01.jpg" alt="KCP 신용카드 전자결제 신청하기"></a></li>
-            <li ><a href="http://sir.kr/main/service/lg_pg.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_02.jpg?v2" alt="토스페이먼츠 전자결제 신청하기"></a></li>
-            <li class="last"><a href="http://sir.kr/main/service/inicis_pg.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_06.jpg" alt="KG 이니시스 전자결제 신청하기"></a></li>
-        </ul>
-    </div>
-    <div class="sevice_1 svc_phone">
+    <div class="sevice_1">
+        <img src="<?php echo G5_ADMIN_URL ?>/img/service_img1.jpg" alt="휴대폰 본인확인 서비스" class="svc_img">
         <h3>휴대폰 본인확인 서비스</h3>
         <p>정보통신망법 23조 2항(주민등록번호의 사용제한)에 따라 기존 주민등록번호 기반의 인증서비스 이용이 불가합니다. 주민등록번호 대체수단으로 최소한의 정보(생년월일, 휴대폰번호, 성별)를 입력받아 본인임을 확인하는 인증수단 입니다</p>
 
         <ul>
             <li><a href="http://sir.kr/main/service/p_cert.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_01.jpg" alt="KCP 휴대폰 본인확인 신청하기"></a></li>
-            <li><a href="http://sir.kr/main/service/lg_cert.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_02.jpg?v2" alt="유플러스 휴대폰 본인확인 신청하기"></a></li>
-            <li class="last"><a href="http://sir.kr/main/service/b_cert.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_03.jpg" alt="오케이네임 휴대폰대체인증 신청하기"></a></li>
-
+            <li><a href="http://sir.kr/main/service/lg_cert.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_02.jpg" alt="LG유플러스 휴대폰대체인증 신청하기"></a></li>
+            <li class="last"><a href="http://sir.kr/main/service/b_cert.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_03.jpg" alt="OKname 휴대폰 본인확인 신청하기"></a></li>
         </ul>
     </div>
-    <div class="sevice_1 svc_ipin">
+    <div class="sevice_1">
+        <img src="<?php echo G5_ADMIN_URL ?>/img/service_img2.jpg" alt="아이핀 본인확인 서비스" class="svc_img">
         <h3>아이핀 본인확인 서비스</h3>
-        <p>정부가 주관하는 주민등록번호 대체 수단으로 본인의 개인정보를 아이핀 사이트에 한번만 발급해 놓고, 이후부터는 아이디와 패스워드 만으로 본인임을 확인하는 인증수단 입니다. </p>
-
-            <h4><a href="http://sir.kr/main/service/b_ipin.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_04.jpg" alt="오케이네임 아이핀 본인확인 신청하기"></a></h4>
+        <p>정부가 주관하는 주민등록번호 대체 수단으로 본인의 개인정보를 아이핀 사이트에 한번만 발급해 놓고, 이후부터는 아이디와 패스워드 만으로
+        본인임을 확인하는 인증수단 입니다.</p>
 
+       <h4><a href="http://sir.kr/main/service/b_ipin.php" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_04.jpg" alt="OKname 아이핀 본인확인 신청하기"></a></h4>
     </div>
-
-
-    <div class="service_2">
-        <div class="svc_ri svc_sms">
+    <div class="sevice_2">
+            <div class="svc_sms">
                 <div class="svc_a">
                     <h3>SMS 문자 서비스</h3>
-                    <p>주문이나 배송시에 상점운영자 또는 고객에게 휴대폰으로 단문메세지 (최대 한글 40자, 영문 80자)를 발송합니다.</p>
+                    <p>사이트 관리자 또는 회원이 다른 회원의 <br>휴대폰으로 단문메세지(최대 한글 40자, 영문 80자)를 발송할 수 있습니다.</p>
                 </div>
-                <div class="svc_btn2"><a href="http://icodekorea.com/res/join_company_fix_a.php?sellid=sir2" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_05.jpg" alt="아이코드 SMS 서비스 신청하기"></a></div>
-        </div>
+                <div class="svc_btn"><a href="http://icodekorea.com/res/join_company_fix_a.php?sellid=sir2" target="_blank"><img src="<?php echo G5_ADMIN_URL ?>/img/svc_btn_05.jpg" alt="아이코드 SMS 서비스 신청하기"></a></div>
+            </div>
 
     </div>
 </div>
 
 <?php
-include_once('./admin.tail.php');
+include_once('./admin.tail.php');
+?>

adm/session_file_delete.php

@@ -57,4 +57,5 @@ include_once("./admin.head.php");
 ?>
 
 <?php
-include_once("./admin.tail.php");
+include_once("./admin.tail.php");
+?>

adm/shop_admin/_common.php

@@ -1,12 +0,0 @@
-<?php
-define('G5_IS_ADMIN', true);
-define('G5_IS_SHOP_ADMIN_PAGE', true);
-include_once ('../../common.php');
-
-if (!defined('G5_USE_SHOP') || !G5_USE_SHOP)
-    die('<p>쇼핑몰 설치 후 이용해 주십시오.</p>');
-
-include_once(G5_ADMIN_PATH.'/admin.lib.php');
-include_once('./admin.shop.lib.php');
-
-check_order_inicis_tmps();

adm/shop_admin/admin.shop.lib.php

@@ -1,221 +0,0 @@
-<?php
-if (!defined('_GNUBOARD_')) exit;
-
-// 상품옵션별재고 또는 상품재고에 더하기
-function add_io_stock($it_id, $ct_qty, $io_id="", $io_type=0)
-{
-    global $g5;
-
-    if($io_id) {
-        $sql = " update {$g5['g5_shop_item_option_table']}
-                    set io_stock_qty = io_stock_qty + '{$ct_qty}'
-                    where it_id = '{$it_id}'
-                      and io_id = '{$io_id}'
-                      and io_type = '{$io_type}' ";
-    } else {
-        $sql = " update {$g5['g5_shop_item_table']}
-                    set it_stock_qty = it_stock_qty + '{$ct_qty}'
-                    where it_id = '{$it_id}' ";
-    }
-    return sql_query($sql);
-}
-
-
-// 상품옵션별재고 또는 상품재고에서 빼기
-function subtract_io_stock($it_id, $ct_qty, $io_id="", $io_type=0)
-{
-    global $g5;
-
-    if($io_id) {
-        $sql = " update {$g5['g5_shop_item_option_table']}
-                    set io_stock_qty = io_stock_qty - '{$ct_qty}'
-                    where it_id = '{$it_id}'
-                      and io_id = '{$io_id}'
-                      and io_type = '{$io_type}' ";
-    } else {
-        $sql = " update {$g5['g5_shop_item_table']}
-                    set it_stock_qty = it_stock_qty - '{$ct_qty}'
-                    where it_id = '{$it_id}' ";
-    }
-    return sql_query($sql);
-}
-
-
-// 주문과 장바구니의 상태를 변경한다.
-function change_status($od_id, $current_status, $change_status)
-{
-    global $g5;
-
-    $sql = " update {$g5['g5_shop_order_table']} set od_status = '{$change_status}' where od_id = '{$od_id}' and od_status = '{$current_status}' ";
-    sql_query($sql, true);
-
-    $sql = " update {$g5['g5_shop_cart_table']} set ct_status = '{$change_status}' where od_id = '{$od_id}' and ct_status = '{$current_status}' ";
-    sql_query($sql, true);
-}
-
-
-// 주문서에 입금시 update
-function order_update_receipt($od_id)
-{
-    global $g5;
-
-    $sql = " update {$g5['g5_shop_order_table']} set od_receipt_price = od_misu, od_misu = 0, od_receipt_time = '".G5_TIME_YMDHIS."' where od_id = '$od_id' and od_status = '입금' ";
-    return sql_query($sql);
-}
-
-
-// 주문서에 배송시 update
-function order_update_delivery($od_id, $mb_id, $change_status, $delivery)
-{
-    global $g5;
-
-    if($change_status != '배송')
-        return;
-
-    $sql = " update {$g5['g5_shop_order_table']} set od_delivery_company = '{$delivery['delivery_company']}', od_invoice = '{$delivery['invoice']}', od_invoice_time = '{$delivery['invoice_time']}' where od_id = '$od_id' and od_status = '준비' ";
-    sql_query($sql);
-
-    $sql = " select * from {$g5['g5_shop_cart_table']} where od_id = '$od_id' ";
-    $result = sql_query($sql);
-
-    for ($i=0; $row=sql_fetch_array($result); $i++)
-    {
-        // 재고를 사용하지 않았다면
-        $stock_use = $row['ct_stock_use'];
-
-        if(!$row['ct_stock_use'])
-        {
-            // 재고에서 뺀다.
-            subtract_io_stock($row['it_id'], $row['ct_qty'], $row['io_id'], $row['io_type']);
-            $stock_use = 1;
-
-            $sql = " update {$g5['g5_shop_cart_table']} set ct_stock_use  = '$stock_use' where ct_id = '{$row['ct_id']}' ";
-            sql_query($sql);
-        }
-    }
-}
-
-// 처리내용 SMS
-function conv_sms_contents($od_id, $contents)
-{
-    global $g5, $config, $default;
-
-    $sms_contents = '';
-
-    if ($od_id && $config['cf_sms_use'] == 'icode')
-    {
-        $sql = " select od_id, od_name, od_invoice, od_receipt_price, od_delivery_company
-                    from {$g5['g5_shop_order_table']} where od_id = '$od_id' ";
-        $od = sql_fetch($sql);
-
-        $sms_contents = $contents;
-        $sms_contents = str_replace("{이름}", $od['od_name'], $sms_contents);
-        $sms_contents = str_replace("{입금액}", number_format($od['od_receipt_price']), $sms_contents);
-        $sms_contents = str_replace("{택배회사}", $od['od_delivery_company'], $sms_contents);
-        $sms_contents = str_replace("{운송장번호}", $od['od_invoice'], $sms_contents);
-        $sms_contents = str_replace("{주문번호}", $od['od_id'], $sms_contents);
-        $sms_contents = str_replace("{회사명}", $default['de_admin_company_name'], $sms_contents);
-    }
-
-    return stripslashes($sms_contents);
-}
-
-function pg_setting_check($is_print=false){
-	global $g5, $config, $default, $member;
-
-	$msg = '';
-	$pg_msg = '';
-
-	if( $default['de_card_test'] ){
-		if( $default['de_pg_service'] === 'kcp' && $default['de_kcp_mid'] && $default['de_kcp_site_key'] ){
-			$pg_msg = 'NHN KCP';
-		} else if ( $default['de_pg_service'] === 'lg' && $config['cf_lg_mid'] && $config['cf_lg_mert_key'] ){
-			$pg_msg = 'LG유플러스';
-		} else if ( $default['de_pg_service'] === 'inicis' && $default['de_inicis_mid'] && $default['de_inicis_sign_key'] ){
-			$pg_msg = 'KG이니시스';
-		}
-	}
-
-    if( function_exists('is_use_easypay') && is_use_easypay('global_nhnkcp') ){
-        if(!extension_loaded('soap') || !class_exists('SOAPClient')) {
-            $msg .= '<script>'.PHP_EOL;
-            $msg .= 'alert("PHP SOAP 확장모듈이 설치되어 있지 않습니다.\n모바일 쇼핑몰 결제 때 사용되오니 SOAP 확장 모듈을 설치하여 주십시오.\nNHN_KCP (네이버페이) 모바일결제가 되지 않습니다.");'.PHP_EOL;
-            $msg .= '</script>'.PHP_EOL;
-        }
-    }
-
-	if( $pg_msg ){
-		$pg_test_conf_link = G5_ADMIN_URL.'/shop_admin/configform.php#de_card_test1';
-		$msg .= '<div class="admin_pg_notice od_test_caution">(주의!) '.$pg_msg.' 결제의 결제 설정이 현재 테스트결제 로 되어 있습니다.<br>테스트결제시 실제 결제가 되지 않으므로, 쇼핑몰 운영중이면 반드시 실결제로 설정하여 운영하셔야 합니다.<br>아래 링크를 클릭하여 실결제로 설정하여 운영해 주세요.<br><a href="'.$pg_test_conf_link.'" class="pg_test_conf_link">'.$pg_test_conf_link.'</a></div>';
-	}
-	
-	if( $is_print ){
-		echo $msg;
-	} else{
-		return $msg;
-	}
-}
-
-function check_order_inicis_tmps(){
-    global $g5, $config, $default, $member;
-
-    $admin_cookie_time = get_cookie('admin_visit_time');
-
-    if( ! $admin_cookie_time ){
-
-        if( $default['de_pg_service'] === 'inicis' && empty($default['de_card_test']) ){
-            $sql = " select * from {$g5['g5_shop_inicis_log_table']} where P_TID <> '' and P_TYPE in ('CARD', 'ISP', 'BANK') and P_MID <> '' and P_STATUS = '00' and is_mail_send = 0 and substr(P_AUTH_DT, 1, 14) < '".date('YmdHis', strtotime('-3 minutes', G5_SERVER_TIME))."' ";
-
-            $result = sql_query($sql, false);
-            
-            if( !$result ){
-                return;
-            }
-
-            $mail_msg = '';
-
-            for($i=0;$row=sql_fetch_array($result);$i++){
-                
-                $oid = $row['oid'];
-                $p_tid = $row['P_TID'];
-                $p_mid = strtolower($tmps['P_MID']);
-
-                if( in_array($p_mid, array('iniescrow0', 'inipaytest')) ) continue;
-
-                $sql = "update {$g5['g5_shop_inicis_log_table']} set is_mail_send = 1 where oid = '".$oid."' and P_TID = '".$p_tid."' ";
-                sql_query($sql);
-
-                $sql = " select od_id from {$g5['g5_shop_order_table']} where od_id = '$oid' and od_tno = '$p_tid' ";
-                $tmp = sql_fetch($sql);
-
-                if( $tmp['od_id'] ) continue;
-
-                $sql = " select pp_id from {$g5['g5_shop_personalpay_table']} where pp_id = '$oid' and pp_tno = '$p_tid' ";
-                $tmp = sql_fetch($sql);
-
-                if( $tmp['pp_id'] ) continue;
-
-                $mail_msg .= '<a href="'.G5_ADMIN_URL.'/shop_admin/inorderform.php?od_id='.$oid.'" target="_blank" >미완료 발생 주문번호 : '.$oid.'</a><br><br>';
-                
-            }
-            
-            if( $mail_msg ){
-                include_once(G5_LIB_PATH.'/mailer.lib.php');
-
-                $mails = array_unique(array($member['mb_email'], $config['cf_admin_email']));
-
-                foreach($mails as $mail_address){
-                    if (!preg_match("/([0-9a-zA-Z_-]+)@([0-9a-zA-Z_-]+)\.([0-9a-zA-Z_-]+)/", $mail_address)) continue;
-
-                    mailer($member['mb_nick'], $member['mb_email'], $mail_address, $config['cf_title'].' 사이트 미완료 주문 알림', '이니시스를 통해 결제한 주문건 중에서 미완료 주문이 발생했습니다.<br><br>발생된 원인으로는 장바구니 금액와 실결제 금액이 맞지 않는 경우, 네트워크 오류, 프로그램 오류, 알수 없는 오류 등이 있습니다.<br><br>아래 내용과 실제 주문내역, 이니시스 상점 관리자 에서 결제된 내용을 확인하여 조치를 취해 주세요.<br><br>'.$mail_msg, 0);
-                }
-            }
-        }
-
-        if( $default['de_pg_service'] == 'lg' && function_exists('check_log_folder') ){
-            check_log_folder(G5_LGXPAY_PATH.'/lgdacom/log');
-        }
-
-        set_cookie('admin_visit_time', G5_SERVER_TIME, 3600);   //1시간 간격으로 체크
-    }
-}   //end function check_order_inicis_tmps;

adm/shop_admin/ajax.ca_id.php

@@ -1,16 +0,0 @@
-<?php
-include_once('./_common.php');
-
-$ca_id = isset($_POST['ca_id']) ? trim($_POST['ca_id']) : '';
-if (preg_match("/[^0-9a-z]/i", $ca_id)) {
-    die("{\"error\":\"분류코드는 영문자 숫자 만 입력 가능합니다.\"}");
-}
-
-$sql = " select ca_name from {$g5['g5_shop_category_table']} where ca_id = '{$ca_id}' ";
-$row = sql_fetch($sql);
-if (isset($row['ca_name']) && $row['ca_name']) {
-    $ca_name = addslashes($row['ca_name']);
-    die("{\"error\":\"이미 등록된 분류코드 입니다.\\n\\n분류명 : {$ca_name}\"}");
-}
-
-die("{\"error\":\"\"}"); // 정상;

adm/shop_admin/ajax.it_id.php

@@ -1,15 +0,0 @@
-<?php
-include_once('./_common.php');
-
-$it_id = isset($_POST['it_id']) ? trim($_POST['it_id']) : '';
-if (preg_match("/[^\w\-]/", $it_id)) { // \w : 0-9 A-Z a-z _
-    die("{\"error\":\"상품코드는 영문자 숫자 _ - 만 입력 가능합니다.\"}");
-}
-
-$row = get_shop_item($it_id, true);
-if (isset($row['it_name']) && $row['it_name']) {
-    $it_name = addslashes($row['it_name']);
-    die("{\"error\":\"이미 등록된 상품코드 입니다.\\n\\n상품명 : {$it_name}\"}");
-}
-
-die("{\"error\":\"\"}"); // 정상;