Q&A
  • PHPÇÔ¼ö Q&A
¾È³çÇϼ¼¿ä ÅäÅ«¿¡·¯ Áú¹® µå¸±²¾¿ä
±Û¾´ÀÌ ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§:( ³¯ Â¥ 12-05-07 18:22 Á¶ ȸ 473
°£ÆíURL http://phpschool.com/link/qna_function/355531 º¹»ç

SyntaxHighlight·Î º¸±â

´äº¯Ã¤ÅÃÀ² 100 %
ÇöÀç ȨÆäÀÌÁö¸¦ ¸¸µé¸é¼­ º¸°íÀִµ¥
°Ô½ÃÆÇ¿¡¼­ ±ÛÀ» »èÁ¦Çϴµ¥
ÅäÅ«¿¡·¯·Î »èÁ¦°¡ ¾ÈµÈ´Ù±¸ ³ª¿À³×¿ä.
±×´©º¸µå4À̱¸¿ä

ÀÎÅͳÝÀ¸·Î ºÁºÃÁö¸¸
congif.php ÂÊÀº ÀÌ·¸°Ô
/*
// 081022 : CSRF ¿¡¼­ ÅäÅ« ºñ±³´Â ÀÇ¹Ì ¾øÀ½
// ¼¼¼Ç¿¡ ÀúÀåµÈ ÅäÅ«°ú Æû°ªÀ¸·Î ³Ñ¾î¿Â ÅäÅ«À» ºñ±³ÇÏ¿© Ʋ¸®¸é ¿¡·¯
if ($_POST["token"] && get_session("ss_token") == $_POST["token"])
{
    // ÀÌÀü Æû Àü¼Û ¹Ù·ÎÀü¿¡ ¸¸µé¾îÁø Äí۰¡ ¾ø´Ù¸é ¿¡·¯
    //if (!get_cookie($_POST["token"])) alert_close("ÄíŰ ¿¡·¯");

    // ¸ÂÀ¸¸é ¼¼¼Ç°ú Äí۸¦ Áö¿ö ´Ù½Ã ÀÔ·ÂÆûÀ» ÅëÇØ¼­ µé¾î¿Àµµ·Ï ÇÑ´Ù.
    set_session("ss_token", "");
    set_cookie($_POST["token"], 0, 0);
}
else
{
    alert_close("ÅäÅ« ¿¡·¯");
    exit;
}
*/
ÀÌ·¸°Ô ÁÖ¼®À» ¸ÔÀÌ¶ó±¸ ÇÏ´õ¶ó±¸¿ä
±×·¡¼­ È®ÀÎÇØºÃ´õ´Ï ±×´ë·Î ¸Ô¿©Á® ÀÖ±¸¿ä À½
¾îµð ´Ù¸¥°÷À» ¶Ç ¼öÁ¤ÇؾßÇÒ°÷ÀÌ ÀÖ³ª¿ä?
¹Ø¿¡ ¼Ò½º´Â bbs/delete.phpÀÔ´Ï´Ù.

[ ¡å Áú¹®°ü·Ã Âü°í Source ]

<?
include_once("./_common.php");

if ($is_admin)
{
    if (!($token && get_session("ss_delete_token") == $token)) 
        alert("ÅäÅ« ¿¡·¯·Î »èÁ¦ ºÒ°¡ÇÕ´Ï´Ù.");
}

//$wr = sql_fetch(" select * from $write_table where wr_id = '$wr_id' ");

@include_once("$board_skin_path/delete.head.skin.php");

if ($is_admin == "super") // ÃÖ°í°ü¸®ÀÚ Åë°ú
    ;
else if ($is_admin == "group") { // ±×·ì°ü¸®ÀÚ
    $mb = get_member($write[mb_id]);
    if ($member[mb_id] != $group[gr_admin]) // ÀÚ½ÅÀÌ °ü¸®ÇÏ´Â ±×·ìÀΰ¡?
        alert("ÀÚ½ÅÀÌ °ü¸®ÇÏ´Â ±×·ìÀÇ °Ô½ÃÆÇÀÌ ¾Æ´Ï¹Ç·Î »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");
    else if ($member[mb_level] < $mb[mb_level]) // ÀÚ½ÅÀÇ ·¹º§ÀÌ Å©°Å³ª °°´Ù¸é Åë°ú
        alert("ÀÚ½ÅÀÇ ±ÇÇѺ¸´Ù ³ôÀº ±ÇÇÑÀÇ È¸¿øÀÌ ÀÛ¼ºÇÑ ±ÛÀº »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");
} else if ($is_admin == "board") { // °Ô½ÃÆÇ°ü¸®ÀÚÀ̸é
    $mb = get_member($write[mb_id]);
    if ($member[mb_id] != $board[bo_admin]) // ÀÚ½ÅÀÌ °ü¸®ÇÏ´Â °Ô½ÃÆÇÀΰ¡?
        alert("ÀÚ½ÅÀÌ °ü¸®ÇÏ´Â °Ô½ÃÆÇÀÌ ¾Æ´Ï¹Ç·Î »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");
    else if ($member[mb_level] < $mb[mb_level]) // ÀÚ½ÅÀÇ ·¹º§ÀÌ Å©°Å³ª °°´Ù¸é Åë°ú
        alert("ÀÚ½ÅÀÇ ±ÇÇѺ¸´Ù ³ôÀº ±ÇÇÑÀÇ È¸¿øÀÌ ÀÛ¼ºÇÑ ±ÛÀº »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");
} else if ($member[mb_id]) {
    if ($member[mb_id] != $write[mb_id])
        alert("ÀÚ½ÅÀÇ ±ÛÀÌ ¾Æ´Ï¹Ç·Î »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");
} else {
    if ($write[mb_id])
        alert("·Î±×ÀÎ ÈÄ »èÁ¦Çϼ¼¿ä.", "./login.php?url=".urlencode("./board.php?bo_table=$bo_table&wr_id=$wr_id"));
    else if (sql_password($wr_password) != $write[wr_password])
        alert("ÆÐ½º¿öµå°¡ Ʋ¸®¹Ç·Î »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù."); 
}

$len = strlen($write[wr_reply]);
if ($len < 0) $len = 0; 
$reply = substr($write[wr_reply], 0, $len);

// ¿ø±Û¸¸ ±¸ÇÑ´Ù.
$sql = " select count(*) as cnt from $write_table
          where wr_reply like '$reply%'
            and wr_id <> '$write[wr_id]'
            and wr_num = '$write[wr_num]'
            and wr_is_comment = 0 ";
$row = sql_fetch($sql);
if ($row[cnt] && !$is_admin)
    alert("ÀÌ ±Û°ú °ü·ÃµÈ ´äº¯±ÛÀÌ Á¸ÀçÇϹǷΠ»èÁ¦ ÇÒ ¼ö ¾ø½À´Ï´Ù.\\n\\n¿ì¼± ´äº¯±ÛºÎÅÍ »èÁ¦ÇÏ¿© ÁֽʽÿÀ.");

// ÄÚ¸àÆ® ´Þ¸° ¿ø±ÛÀÇ »èÁ¦ ¿©ºÎ
$sql = " select count(*) as cnt from $write_table
          where wr_parent = '$wr_id'
            and mb_id <> '$member[mb_id]'
            and wr_is_comment = 1 ";
$row = sql_fetch($sql);
if ($row[cnt] >= $board[bo_count_delete] && !$is_admin)
    alert("ÀÌ ±Û°ú °ü·ÃµÈ ÄÚ¸àÆ®°¡ Á¸ÀçÇϹǷΠ»èÁ¦ ÇÒ ¼ö ¾ø½À´Ï´Ù.\\n\\nÄÚ¸àÆ®°¡ {$board[bo_count_delete]}°Ç ÀÌ»ó ´Þ¸° ¿ø±ÛÀº »èÁ¦ÇÒ ¼ö ¾ø½À´Ï´Ù.");


// »ç¿ëÀÚ ÄÚµå ½ÇÇà
@include_once("$board_skin_path/delete.skin.php");


// ³ª¶ó¿À¸§´Ô ¼öÁ¤ : ¿ø±Û°ú ÄÚ¸àÆ®¼ö°¡ Á¤»óÀûÀ¸·Î ¾÷µ¥ÀÌÆ® µÇÁö ¾Ê´Â ¿À·ù¸¦ Àâ¾Æ Áּ̽À´Ï´Ù.
//$sql = " select wr_id, mb_id, wr_comment from $write_table where wr_parent = '$write[wr_id]' order by wr_id ";
$sql = " select wr_id, mb_id, wr_is_comment from $write_table where wr_parent = '$write[wr_id]' order by wr_id ";
$result = sql_query($sql);
while ($row = sql_fetch_array($result)) 
{
    // ¿ø±ÛÀ̶ó¸é
    if (!$row[wr_is_comment]) 
    {
        // ¿ø±Û Æ÷ÀÎÆ® »èÁ¦
        if (!delete_point($row[mb_id], $bo_table, $row[wr_id], '¾²±â'))
            insert_point($row[mb_id], $board[bo_write_point] * (-1), "$board[bo_subject] $row[wr_id] ±Û»èÁ¦");

        // ¾÷·ÎµåµÈ ÆÄÀÏÀÌ ÀÖ´Ù¸é ÆÄÀÏ»èÁ¦
        $sql2 = " select * from $g4[board_file_table] where bo_table = '$bo_table' and wr_id = '$row[wr_id]' ";
        $result2 = sql_query($sql2);
        while ($row2 = sql_fetch_array($result2))
            @unlink("$g4[path]/data/file/$bo_table/$row2[bf_file]");
            
        // ÆÄÀÏÅ×À̺í Çà »èÁ¦
        sql_query(" delete from $g4[board_file_table] where bo_table = '$bo_table' and wr_id = '$row[wr_id]' ");

        $count_write++;
    } 
    else 
    {
        // ÄÚ¸àÆ® Æ÷ÀÎÆ® »èÁ¦
        if (!delete_point($row[mb_id], $bo_table, $row[wr_id], 'ÄÚ¸àÆ®'))
            insert_point($row[mb_id], $board[bo_comment_point] * (-1), "$board[bo_subject] {$write[wr_id]}-{$row[wr_id]} ÄÚ¸àÆ®»èÁ¦");

        $count_comment++;
    }
}

// °Ô½Ã±Û »èÁ¦
sql_query(" delete from $write_table where wr_parent = '$write[wr_id]' ");

// ÃֱٰԽù° »èÁ¦
sql_query(" delete from $g4[board_new_table] where bo_table = '$bo_table' and wr_parent = '$write[wr_id]' ");

// ½ºÅ©·¦ »èÁ¦
sql_query(" delete from $g4[scrap_table] where bo_table = '$bo_table' and wr_id = '$write[wr_id]' ");

// °øÁö»çÇ× »èÁ¦
$notice_array = explode("\n", trim($board[bo_notice]));
$bo_notice = "";
for ($k=0; $k<count($notice_array); $k++)
    if ((int)$write[wr_id] != (int)$notice_array[$k])
        $bo_notice .= $notice_array[$k] . "\n";
$bo_notice = trim($bo_notice);
sql_query(" update $g4[board_table] set bo_notice = '$bo_notice' where bo_table = '$bo_table' ");

// ±Û¼ýÀÚ °¨¼Ò
if ($count_write > 0 || $count_comment > 0)
    sql_query(" update $g4[board_table] set bo_count_write = bo_count_write - '$count_write', bo_count_comment = bo_count_comment - '$count_comment' where bo_table = '$bo_table' ");

@include_once("$board_skin_path/delete.tail.skin.php");

goto_url("./board.php?bo_table=$bo_table&page=$page" . $qstr);
?>

Àüü´ñ±Û¼ö 3

  • ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§ºÒ·®Çлý¢â 12-05-07 18:24

    ¼Ò½ºº¸±â

  • ¿À·ù¸¦ º¸¿©ÁÖ¼¼¿ä
  • ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§±×³× 12-05-08 03:45

    ¼Ò½ºº¸±â

  • if ($is_admin)
    {
        if (!($token && get_session("ss_delete_token") == $token))
            alert("ÅäÅ« ¿¡·¯·Î »èÁ¦ ºÒ°¡ÇÕ´Ï´Ù.");
    }

    ÀÌ ±¸¹® ºÐ¼®ÇØ º¸¼¼¿ä
    ¼³¸¶ ÀÌ °£´ÜÇÑ if ±¸¹® ºÐ¼®ÀÌ ¾È µÇ½Ã¸é... °ï¶õ...
    Ã¥À» Çϳª »ç¼Å¼­ º¸¼Å¾ß ÇÒ µí Çϳ׿ä
  • ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§:( 12-05-08 09:38

    ¼Ò½ºº¸±â

  • Çæ,,, ¤·¤Ó·²¼ö°¡,,
    °¨»çÇÕ´Ï´Ù Àü ¿Ö ´©°¡¹¹¶ó°í¾ÈÇϸé À߾Ⱥ¸ÀÌÁÒ ¹ÌÄ¡°Ù³×¿ä¤Ì¤Ð¤Ð
    ¹«Æ°°¨»çÇÕ´Ï´Ù !
  • °Ô½Ã¹° 130,515°Ç RSS
¹øÈ£´äº¯Á¦¸ñ±Û¾´À̳¯Â¥Á¶È¸
°øÁö - [Çʵ¶»çÇ×]Q&A °Ô½ÃÆÇ ±ÔÄ¢ [51] Àα⠱â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§Ä¿ÇÇÇÑÀÜ 08-10-01 144748
130,515 ´äº¯ÁøÇà ¿å ÇÊÅ͸µ Áú¹® µå¸³´Ï´Ù [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§²Ù¼õ2 13-05-24 20
130,514 ´äº¯ÁøÇà ¹Ýº¹¹® ¾È¿¡¼­ÀÇ id°ª ±¸ºÐ¿¡ ´ëÇØ Áú¹® µå¸³´Ï´Ù µµ¿ÍÁÖ¼¼¿ä ¤Ð¡¦ [2] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§altls 13-05-23 19
130,513 ¹Ì´äº¯ xe ¿¡¼­ php Ãâ·Â Áú¹®ÀÔ´Ï´Ù. »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§¾ß¸¶µ¹±â 13-05-23 35
130,512 ´äº¯ÁøÇà ½Ã°£¹®Àǵ帳´Ï´Ù [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§ÇÇÄ¡Æ÷¿¡º¸ 13-05-23 18
130,511 ´äº¯ÁøÇà php, mysql ¿¬µ¿ ½Ã db¿¡ ÇÑ±Û ÀúÀåÀÌ ¾ÈµË´Ï´Ù.. [1] »õ±Û ÷ºÎÆÄÀÏ ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§hshshs 13-05-23 24
130,510 ´äº¯ÁøÇà php exec Áú¹®µå¸³´Ï´Ù.. [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§rectangle 13-05-23 24
130,509 ¹Ì´äº¯ php pdf·Î ÃßÃâÇÒ떄... »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§ÀÛÀº´« 13-05-23 23
130,508 ´äº¯¿Ï·á ƯÁ¤ ³²Àº ³¯Â¥¸¦ ±¸ÇÏ´Â ¹æ¹ý Áú¹®ÀÔ´Ï´Ù [4] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§avoca 13-05-23 26
130,507 ´äº¯¿Ï·á º¯¼ö¸í º¯°æÇϱâ... [3] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§¶ó¿ÂÁ¦³ª 13-05-23 23
130,506 ´äº¯ÁøÇà À¥ÆäÀÌÁö¿¡ ³»¿ëÀ» pdf·Î ´Ù¿î·Îµå Áú¹®ÀÔ´Ï´Ù. [3] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§Âü¿ÀÀÏ 13-05-23 25
130,505 ´äº¯¿Ï·á php exec ÀÔ´Ï´Ù..¤Ð¤Ð [11] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§rectangle 13-05-23 70
130,504 ´äº¯¿Ï·á curl·Î ¹Þ¾Æ¿Â ¹®ÀÚµ¥ÀÌÅÍ¿¡ ´ëÇÑ Á¤±Ô½Ä Áú¹® [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§½ÅÀç 13-05-23 35
130,503 ´äº¯ÁøÇà php Çѱ۱úÁüÇö»ó [2] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§Ä®·Î¸®¹Ù 13-05-23 48
130,502 ´äº¯¿Ï·á apns Áú¹®ÀÔ´Ï´Ù. [2] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§qeist 13-05-23 25
130,501 ´äº¯ÁøÇà phpº¯¼ö °ª³Ñ±â´Â µ¥¿¡¼­ Áú¹®ÀÖ½À´Ï´Ù. ÀÌÆ²Â° °í¹ÎÁßÀÌ¿¡¿ä ¾Ë¡¦ [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§altls 13-05-23 65
130,500 ´äº¯¿Ï·á php exec [3] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§rectangle 13-05-23 37
130,499 - °Ô½Ã¹°ÀÌ »è.Á¦. µÇ¾ú½À´Ï´Ù. [1] »õ±Û ¾ß¸¶µ¹±â 13-05-23 33
130,498 ´äº¯ÁøÇà ÇÑ±Û ÀÎÄÚµù ¹®Á¦ [2] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§ºÒÄ£ÀýÇÑÇ϶ó´ë¸® 13-05-23 58
130,497 ´äº¯¿Ï·á php ÆÄÀÏ ¾÷·Îµå °æ·Î¿¡ ´ëÇØ [2] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§À̳ª¶óÇлý 13-05-23 31
130,496 ´äº¯ÁøÇà Ajax json Å©·Î½ºµµ¸ÞÀο¡ ´ëÇÑ Áú¹®ÀÔ´Ï´Ù. [1] »õ±Û ±â¼ú·¹º§Ä¿¹Â´ÏƼ·¹º§½É½ÉÇ®ÀÌII 13-05-23 28
 
12345678910