1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
|
<?php
include("./_common.php");
/*_pr($_POST);
_pr($_FILES); exit;*/
$dir = "../save_dir/m_board/file/";
function file_upload($file,$last_idx){
Global $ADMINID, $dir;
if($file['name']!='' && $file['size']>0){
$v = explode(".",$file['name']);
$ext = $v[count($v)-1];
$body_file_name = ".".$ext;
if($body_file_name == ".php" || $body_file_name == ".html" || $body_file_name == ".cgi" || $body_file_name == ".pl" || $body_file_name == ".htm" || $body_file_name == ".php3" || $body_file_name == ".php4") {
return "ext_error";
}
//$filename = $last_idx."-".$ADMINID."-.".$ext;
$filename = $last_idx."-".$file['name'];
copy($file['tmp_name'] ,$dir.$filename);
unlink($file['tmp_name']);
return $filename;
}
}
function file_upload_serial($files,$code){
Global $table, $connect_web;
extract($files);
$filename1 = file_upload($add_file1,$code);
$filename2 = file_upload($add_file2,$code);
$filename3 = file_upload($add_file3,$code);
$filename4 = file_upload($add_file4,$code);
$filename5 = file_upload($add_file5,$code);
$filename6 = file_upload($add_file6,$code);
$filename7 = file_upload($add_file7,$code);
$filename8 = file_upload($add_file8,$code);
$filename9 = file_upload($add_file9,$code);
$filename10 = file_upload($add_file10,$code);
if($filename1=='ext_error' || $filename2=='ext_error' || $filename3=='ext_error' || $filename4=='ext_error' || $filename5=='ext_error' || $filename6=='ext_error' || $filename7=='ext_error' || $filename8=='ext_error' || $filename9=='ext_error' || $filename10=='ext_error'){
?>
<script language="JavaScript">
alert("이 형식의 파일은 업로드 할 수 없습니다.");
history.back();
</script>
<?php
} else {
$add_file_sql = "";
if($filename1!=''){ $add_file_sql .= " , add_file1 = '{$filename1}' "; }
if($filename2!=''){ $add_file_sql .= " , add_file2 = '{$filename2}' "; }
if($filename3!=''){ $add_file_sql .= " , add_file3 = '{$filename3}' "; }
if($filename4!=''){ $add_file_sql .= " , add_file4 = '{$filename4}' "; }
if($filename5!=''){ $add_file_sql .= " , add_file5 = '{$filename5}' "; }
if($filename6!=''){ $add_file_sql .= " , add_file6 = '{$filename6}' "; }
if($filename7!=''){ $add_file_sql .= " , add_file7 = '{$filename7}' "; }
if($filename8!=''){ $add_file_sql .= " , add_file8 = '{$filename8}' "; }
if($filename9!=''){ $add_file_sql .= " , add_file9 = '{$filename9}' "; }
if($filename10!=''){ $add_file_sql .= " , add_file10 = '{$filename10}' "; }
if($add_file_sql!=''){
$sql = "update {$table} set come_from = '' {$add_file_sql} where uid = '$code' ";
_pr($sql);
mysql_query($sql,$connect_web);
}
}
}
$sql = "set names euckr";
mysql_query($sql,$connect_web);
$table = "mBoard_dd_request";
@extract($_POST);
@extract($_FILES);
if($sel_del=='Y'){ // 선택삭제
$uids = "";
foreach($code_idx as $key=>$val){
$uid = $codes[$val];
$sql = "select * from {$table} where uid = '{$uid}' ";
$res = mysql_query($sql,$connect_web);
$info = mysql_fetch_array($res);
for($i=1;$i<=10;$i++){
if($info['add_file'.$i]){
//unlink($dir.$info['add_file'.$i]);
}
}
$sql = "delete from {$table} where uid = '{$uid}' ";
mysql_query($sql,$connect_web);
}
} else if($code!=''){ // 업데이트
for($i=1;$i<=10;$i++){
if($_POST['add_file_del'.$i]=="Y"){
unlink($dir.$_POST['add_file'.$i.'_del_name']);
$sql = "update {$table} set add_file{$i} = '' where uid = '$code' ";
mysql_query($sql,$connect_web);
}
}
$_content = addslashes($content);
$reg_date = strtotime($reg_date);
$sql = " update {$table} set
dd_device = '{$dd_device}', dd_price = '{$dd_price}', dd_day = '{$dd_day}',
dd_company = '{$dd_company}', dd_name = '{$dd_name}', dd_tel = '{$dd_tel}', dd_zipcode = '{$dd_zipcode}',
dd_address = '{$dd_address}', dd_bank = '{$dd_bank}',
admin = '{$admin}', state = '{$state}', memo = '{$memo}'
where uid = '{$code}'
";
mysql_query($insertQry);
mysql_query($sql,$connect_web);
file_upload_serial($_FILES,$code);
} else if($code==''){ // 신규
$_content = addslashes($content);
$reg_date = Time();
$sql = "insert into mBoard_dd_request set
dd_device = '{$dd_device}', dd_price = '{$dd_price}', dd_day = '{$dd_day}',
dd_company = '{$dd_company}', dd_name = '{$dd_name}', dd_tel = '{$dd_tel}', dd_zipcode = '{$dd_zipcode}',
dd_address = '{$dd_address}', dd_bank = '{$dd_bank}',
admin = '{$admin}', state = '{$state}', memo = '{$memo}',
reg_date = '".date("Y-m-d H:i:s",time())."'
";
mysql_query($sql,$connect_web);
$last_idx = mysql_insert_id($connect_web);
}
?>
<script>
document.location.href='m_demo_request.php?<?php echo $qstr;?>';
</script>
|