|
@@ -608,6 +838,72 @@ $pg_anchor = '
+
+
+
게시판 여분필드 설정
diff --git a/AvocadoEdition_Light/adm/board_form_update.php b/AvocadoEdition_Light/adm/board_form_update.php
index bfef4e7..46662cf 100644
--- a/AvocadoEdition_Light/adm/board_form_update.php
+++ b/AvocadoEdition_Light/adm/board_form_update.php
@@ -110,6 +110,8 @@ $sql_common = " gr_id = '{$_POST['gr_id']}',
bo_use_list_content = '{$_POST['bo_use_list_content']}',
bo_use_email = '{$_POST['bo_use_email']}',
bo_use_cert = '{$_POST['bo_use_cert']}',
+ bo_pass = '{$_POST['bo_pass']}',
+ bo_use_pass = '{$_POST['bo_use_pass']}',
bo_use_sns = '{$_POST['bo_use_sns']}',
bo_table_width = '{$_POST['bo_table_width']}',
bo_subject_len = '{$_POST['bo_subject_len']}',
diff --git a/AvocadoEdition_Light/bbs/password.php b/AvocadoEdition_Light/bbs/password.php
index d1a4187..2c739f1 100644
--- a/AvocadoEdition_Light/bbs/password.php
+++ b/AvocadoEdition_Light/bbs/password.php
@@ -37,6 +37,15 @@ switch ($w) {
$return_url = './board.php?bo_table=' . $bo_table . '&wr_id=' . $wr_id;
}
break;
+ case 'bs':
+ // 비밀번호 창에서 로그인 하는 경우 관리자 또는 자신의 글이면 바로 글보기로 감
+ if ($is_admin)
+ goto_url(G5_HTTP_BBS_URL . '/board.php?bo_table=' . $bo_table);
+ else {
+ $action = https_url(G5_BBS_DIR) . '/password_check.php';
+ $return_url = G5_URL;
+ }
+ break;
default:
alert('w 값이 제대로 넘어오지 않았습니다.');
}
@@ -54,10 +63,14 @@ $sql = " select wr_subject from {$write_table}
$row = sql_fetch($sql);
$g5['title'] = get_text($row['wr_subject']);
+$delete_str = "";
+if ($w == 'x') $delete_str = "댓";
+if ($w == 'u') $g5['title'] = "{$delete_str}글 수정";
+else if ($w == 'd' || $w == 'x') $g5['title'] = "{$delete_str}글 삭제";
-include_once($member_skin_path . '/password.skin.php');
+include_once $member_skin_path . '/password.skin.php';
//if ($board['bo_content_tail']) { echo stripslashes($board['bo_content_tail']); }
//if ($board['bo_include_tail']) { @include ($board['bo_include_tail']); }
-include_once(G5_PATH . '/tail.sub.php');
+include_once G5_PATH . '/tail.sub.php';
diff --git a/AvocadoEdition_Light/bbs/password_check.php b/AvocadoEdition_Light/bbs/password_check.php
index a3d9c15..2432a9f 100644
--- a/AvocadoEdition_Light/bbs/password_check.php
+++ b/AvocadoEdition_Light/bbs/password_check.php
@@ -5,6 +5,11 @@ if ($w == 's') {
$qstr = 'bo_table=' . $bo_table . '&sfl=' . $sfl . '&stx=' . $stx . '&sop=' . $sop . '&wr_id=' . $wr_id . '&page=' . $page;
$wr = get_write($write_table, $wr_id);
+ if (!$wr['wr_password'] && $wr['mb_id']) {
+ if ($mb = get_member($wr['mb_id'])) {
+ $wr['wr_password'] = $mb['mb_password'];
+ }
+ }
if (!check_password($wr_password, $wr['wr_password']))
alert('비밀번호가 틀립니다.');
@@ -15,10 +20,29 @@ if ($w == 's') {
//set_session("ss_secret", "$bo_table|$wr['wr_num']");
set_session($ss_name, TRUE);
+} else if ($w == 'p') {
+ $qstr = 'bo_table=' . $bo_table . '&sfl=' . $sfl . '&stx=' . $stx . '&sop=' . $sop . '&wr_id=' . $wr_id . '&page=' . $page;
+
+ $wr = get_write($write_table, $wr_id);
+
+ if ($wr_password != $wr['wr_protect'])
+ alert('비밀번호가 틀립니다.');
+
+ // 세션에 아래 정보를 저장. 하위번호는 비밀번호없이 보아야 하기 때문임.
+ //$ss_name = 'ss_secret.'_'.$bo_table.'_'.$wr_id';
+ $ss_name = 'ss_secret_' . $bo_table . '_' . $wr['wr_num'];
+ //set_session("ss_secret", "$bo_table|$wr[wr_num]");
+ set_session($ss_name, TRUE);
+
} else if ($w == 'sc') {
$qstr = 'bo_table=' . $bo_table . '&sfl=' . $sfl . '&stx=' . $stx . '&sop=' . $sop . '&wr_id=' . $wr_id . '&page=' . $page;
$wr = get_write($write_table, $wr_id);
+ if (!$wr['wr_password'] && $wr['mb_id']) {
+ if ($mb = get_member($wr['mb_id'])) {
+ $wr['wr_password'] = $mb['mb_password'];
+ }
+ }
if (!check_password($wr_password, $wr['wr_password']))
alert('비밀번호가 틀립니다.');
@@ -28,6 +52,15 @@ if ($w == 's') {
//set_session("ss_secret", "$bo_table|$wr['wr_num']");
set_session($ss_name, TRUE);
+} else if ($w == 'bs') {
+ $qstr = 'bo_table=' . $bo_table . '&sfl=' . $sfl . '&stx=' . $stx . '&sop=' . $sop . '&wr_id=' . $wr_id . '&page=' . $page;
+ $bo = sql_fetch("select bo_pass from {$g5['board_table']} where bo_table='{$bo_table}'");
+ $pw = get_encrypt_string($bo['bo_pass']);
+ if (!check_password($wr_password, $pw)) {
+ alert('비밀번호가 틀립니다.');
+ }
+
+ set_session('bo_pass_' . $bo_table, true); //@230623 세션 저장 방식 변경
} else
alert('w 값이 제대로 넘어오지 않았습니다.');
diff --git a/AvocadoEdition_Light/bbs/write_comment_update.php b/AvocadoEdition_Light/bbs/write_comment_update.php
index 19a908a..80efd47 100644
--- a/AvocadoEdition_Light/bbs/write_comment_update.php
+++ b/AvocadoEdition_Light/bbs/write_comment_update.php
@@ -136,44 +136,44 @@ if ($w == 'c') // 댓글 입력
//$wr_subject = get_text(stripslashes($wr['wr_subject']));
- $sql = " insert into $write_table
- set ca_name = '{$wr['ca_name']}',
- wr_option = '$wr_secret',
- wr_num = '{$wr['wr_num']}',
- wr_reply = '',
- wr_parent = '$wr_id',
- wr_is_comment = 1,
- wr_comment = '$tmp_comment',
- wr_comment_reply = '$tmp_comment_reply',
- wr_subject = '$wr_subject',
- wr_content = '$wr_content',
- mb_id = '$mb_id',
- wr_password = '$wr_password',
- wr_name = '$wr_name',
- wr_email = '$wr_email',
- wr_homepage = '$wr_homepage',
- wr_datetime = '" . G5_TIME_YMDHIS . "',
- wr_last = '',
- wr_ip = '{$_SERVER['REMOTE_ADDR']}',
+ $sql = "INSERT INTO $write_table
+ SET ca_name = '{$wr['ca_name']}',
+ wr_option = '$wr_secret',
+ wr_num = '{$wr['wr_num']}',
+ wr_reply = '',
+ wr_parent = '$wr_id',
+ wr_is_comment = 1,
+ wr_comment = '$tmp_comment',
+ wr_comment_reply = '$tmp_comment_reply',
+ wr_subject = '$wr_subject',
+ wr_content = '$wr_content',
+ mb_id = '$mb_id',
+ wr_password = '$wr_password',
+ wr_name = '$wr_name',
+ wr_email = '$wr_email',
+ wr_homepage = '$wr_homepage',
+ wr_datetime = '" . G5_TIME_YMDHIS . "',
+ wr_last = '',
+ wr_ip = '{$_SERVER['REMOTE_ADDR']}',
- ch_id = '{$character['ch_id']}',
- ch_side = '{$character['ch_side']}',
- ch_class = '{$character['ch_class']}',
+ ch_id = '{$character['ch_id']}',
+ ch_side = '{$character['ch_side']}',
+ ch_class = '{$character['ch_class']}',
- wr_noname = '$wr_noname',
+ wr_noname = '$wr_noname',
- ti_id = '{$character['ch_title']}',
+ ti_id = '{$character['ch_title']}',
- wr_1 = '$wr_1',
- wr_2 = '$wr_2',
- wr_3 = '$wr_3',
- wr_4 = '$wr_4',
- wr_5 = '$wr_5',
- wr_6 = '$wr_6',
- wr_7 = '$wr_7',
- wr_8 = '$wr_8',
- wr_9 = '$wr_9',
- wr_10 = '$wr_10' ";
+ wr_1 = '$wr_1',
+ wr_2 = '$wr_2',
+ wr_3 = '$wr_3',
+ wr_4 = '$wr_4',
+ wr_5 = '$wr_5',
+ wr_6 = '$wr_6',
+ wr_7 = '$wr_7',
+ wr_8 = '$wr_8',
+ wr_9 = '$wr_9',
+ wr_10 = '$wr_10' ";
sql_query($sql);
$comment_id = sql_insert_id();
@@ -314,23 +314,23 @@ if ($w == 'c') // 댓글 입력
if ($wr_secret)
$sql_secret = " , wr_option = '$wr_secret' ";
- $sql = " update $write_table
- set wr_subject = '$wr_subject',
- wr_content = '$wr_content',
- wr_1 = '$wr_1',
- wr_2 = '$wr_2',
- wr_3 = '$wr_3',
- wr_4 = '$wr_4',
- wr_5 = '$wr_5',
- wr_6 = '$wr_6',
- wr_7 = '$wr_7',
- wr_8 = '$wr_8',
- wr_9 = '$wr_9',
- wr_10 = '$wr_10',
- wr_option = '$wr_option'
- $sql_ip
- $sql_secret
- where wr_id = '$comment_id' ";
+ $sql = "UPDATE $write_table
+ SET wr_subject = '$wr_subject',
+ wr_content = '$wr_content',
+ wr_1 = '$wr_1',
+ wr_2 = '$wr_2',
+ wr_3 = '$wr_3',
+ wr_4 = '$wr_4',
+ wr_5 = '$wr_5',
+ wr_6 = '$wr_6',
+ wr_7 = '$wr_7',
+ wr_8 = '$wr_8',
+ wr_9 = '$wr_9',
+ wr_10 = '$wr_10',
+ wr_option = '$wr_option'
+ $sql_ip
+ $sql_secret
+ WHERE wr_id = '$comment_id' ";
sql_query($sql);
}
|