KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/www/board/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //home/queenjbs/www/board/qnaview.html
					<h2><?=$titlePathName?></h2>
					<?
					if($idx){
						$hit_query = "update board_$tableName set hit = hit+1 where no='$idx'";
						$results = mysql_query($hit_query,$db_con);

						$qry = "SELECT * FROM board_$tableName where no='$idx'";
						$result= mysql_query($qry,$db_con);
						$row = mysql_fetch_array($result);

						$regDate = substr($row[reg_date],0,10);
						$imgName = get_db("select file_name from files where module_no = '$idx' and module_name='$tableName' order by no");
					}
					?>
                    <table cellspacing="0" cellpadding="0" class="table_ro_view" width="100%">
						<tr>
                            <th height="20px" style="padding:7px 10px 7px 0; background:#f5f5f5">
                            	<table cellpadding="0" cellspacing="0" style="margin:0; padding:0;">
                                	<tr>
                                    	<th width="50px" style="border:0; padding:0">&nbsp;&nbsp;&nbsp;題目&nbsp;&nbsp;&nbsp;:</th>
                                        <td style="border:0; padding:0"><?=$row[subject]?></td>
                                    </tr>
                                </table>
							</th>
							<td style="padding:0 10px 0 0; vertical-align:middle; background:#f5f5f5" align="right">
							<?if($sessionLevel == 15){?>
								ID : <b><a href="javascript:memberView('<?=$row[user_no]?>')"><font color=blue><?=$row[user_id]?></font></a>
							<?}else{?>
								ニックネーム : <b><?=$row[user_name]?>
							<?}?>
								</b>&nbsp;date:<?=$regDate?></td>
                        </tr>
						<tr>
                            <!--th scope="row">내용</th-->
                            <td width="520" height="200px" colspan=2 class="content_view"><?=stripslashes($row[contents])?></td>
                        </tr>
						<?
							if($row[files_count] != 0){
								$res = "select file_name,original_name,file_type from files where module_no = '$idx' and module_name='$tableName' order by no";
								$results= mysql_query($res,$db_con);
								$rows = mysql_fetch_array($results);
						?>
						<tr>
                            <td id="table_ro_view_td_nopadd" colspan=2><strong>添附&nbsp;&nbsp;&nbsp;:</strong>&nbsp;&nbsp;&nbsp;
							<?
							echo "<a href='down.php?filename=$rows[file_name]&orgname=$rows[original_name]' target='hiddenFrame'>$rows[original_name]</a>&nbsp;";
							if($rows[file_type] == 'jpg' || $rows[file_type] == 'gif' || $rows[file_type] == 'png' || $rows[file_type] == 'bmp'){
								echo "<br><br><img src='/files/board/".$rows[file_name]."' width='60%'>";
							}
							?>
							</td>
                        </tr>
						<?
							}
						?>
					</table>
					
                    <table cellpadding="0" cellspacing="0" border="0" width="100%" style="margin:10px 0 0 0" >
                        <tr>
                            <td align="right">
								<?if(($sessionLevel == 15 && ($tabs=1 || $tabs=2 || $tabs=3)) ||  ($sessionID == $row[user_id] && ($tabs == 2||$tabs == 7||$tabs == 8)) || ($sessionID == $row[user_id] && $sessionLevel == 3 && $tabs == 2) || $sessionID == $row[user_id]){?>
								<a onclick="javascript:formChange('<?=$row[no]?>','del')" style="CURSOR: hand" id="btn">■ 削除 ■ &nbsp;&nbsp;&nbsp;</a>
								<a onclick="javascript:formChange('<?=$row[no]?>','write')" style="CURSOR: hand" id="btn">■ 修正 ■ &nbsp;&nbsp;&nbsp;</a>
								<?}?>
                                <a onclick="javascript:formChange('','list')" style="CURSOR: hand" id="btn">■ リスト ■</a>
                            </td>
                        </tr>
                    </table>
					<?if($sessionLevel == 15){?>
					<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:30px 0 0 0;border:1px solid #ccc" >
                        <tr align="center">
							<td width="60" height="70" align="right"><img src="/images/comment_img.gif" alt="コメント" /></td>
                            <td >
								<textarea name="comment" cols=45 rows=3 style="width:475px; height:50px"/><?if(!$sessionIDX){echo"ログインが必要です.";}?></textarea>
                            </td>
							<td width="60" align="left" valign="middle">
								<?if($sessionIDX){?>
								<img src="/images/comment_btn.gif" onclick="commentok('<?=$idx?>','<?=$tableName?>');showCustomer('<?=$idx?>','<?=$tableName?>')" style="cursor:hand" alt="書き込み"/>
								<?}else{?>
								<img src="/images/comment_btn.gif" onclick="alert('ログインが必要です.');window.location.href('/member/?tab=12&tabs=1');" style="cursor:hand" alt="書き込み"/>
								<?}?>
                            </td>
                        </tr>
					</table>
					<?}?>
					<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:30px 0 0 0;border:1px solid #ccc" >
						<tr>
							<td colspan=3 style="padding:10px">
							<div id="txtHint">
							<?
							$result = Get_dbres("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$idx."' order by order_by desc");
							$total = mysql_affected_rows();

							echo "<table cellpadding='0' cellspacing='0' border='0' width='100%' style='margin:10px 0 0 0'>";
							for($i=0; $i<$total; $i++) {
							$rows = mysql_fetch_array($result);
							$coDate = substr($rows[reg_date],0,10);
							echo "<tr><td style='border-top:1px dotted #444;width:100px; padding:5px;'>".$rows[user_name]."<br><span style='font-size:8px'>".$coDate."</span>&nbsp;&nbsp;&nbsp;&nbsp;";
							
							if($sessionIDX == $rows[user_no]){echo"<a onclick=\"commentdel(".$rows[idx].");showCustomer('".$idx."','".$tableName."')\" style='cursor:hand'><img src='/images/comment_x.gif' alt='デリ―ト' />";
							}
							echo "</td><td style='border-top:1px dotted #444;'>".stripslashes($rows[content])."</a></td></tr>";
							}
							echo"</table>";
							?>
							</div></td>
						</tr>
                    </table>
					
					

Anon7 - 2021