KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/jaejoong_X/pages/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/jaejoong_X/pages/board_view.php
<?php

	include $_SERVER['DOCUMENT_ROOT']."/conf/conf_dir.php";

	$META_AUTHOR 					= "HEO YOUNG SAENG";
	$META_KEYWORD				= "HEO YOUNG SAENG,CI ENT";
	$META_DISCRIPTION			= "HEO YOUNG SAENG JAPAN OFFICIAL WEB SITE";
	$PAGE_TITLE						= "HEO YOUNG SAENG JAPAN OFFICAL WEB SITE | ホ・ヨンセン";

	$PAGE_GUBUN =	"5";

	include $_SERVER['DOCUMENT_ROOT']."/pages/inc_top.php";
 if($sessionLevel < 10){
  //echo "<script>alert('準備中です.');history.back();</script>";
  echo "<script>parent.location.href = './guide.php'</script>";
  exit;
  }

	if($num){
		$tableName = "free";
		$hit_query = "update board_$tableName set hit = hit+1 where no='$num'";
		$results = mysql_query($hit_query,$db_con);

		$qry = "SELECT * FROM board_$tableName where no='$num'";
		$result= mysql_query($qry,$db_con);
		$row = mysql_fetch_array($result);

		$regDate = substr($row[reg_date],0,10);
		$imgName = get_db("select file_name from files where module_no = '$num' and module_name='$tableName' order by no");
	}
	?>
<script type="text/javascript" src="/sys_css_js/default.js"></script>

 <div id="page_index">
  <a href="default.php">HOME</a> > BOARD
 </div>

 <div id="sub_content_box">

 <table width="100%" class="basic_table">
		<colgroup>
			<col width="10%">
			<col width="70%">
			<col width="20%">
		</colgroup>
 	<thead>
			<th class="title_le">題目</th>
			<th class="title_le2"><?=$row[subject]?></th>
			<th class="title_le">[<?=$row[user_name]?>]<?=$regDate?></th>
  </thead>
		<tbody>
   <tr>
    <td class="img_area" colspan="3">
				<?
     if($row[files_count] != 0){
      $res = "select file_name,original_name,file_type from files where module_no = '$num' and module_name='$tableName' order by no";
      $results= mysql_query($res,$db_con);
      $rows = mysql_fetch_array($results);

     if($rows[file_type] == 'JPG' ||$rows[file_type] == 'jpg' || $rows[file_type] == 'gif' || $rows[file_type] == 'png' || $rows[file_type] == 'bmp'){
      $img_size = GetImageSize("../files/board/".$rows[file_name]);
      $x = $img_size[0];
      $y = $img_size[1];

      if($x < 450){
       $widthX = $x;
      }else{
       $widthX = "65%";
      }
     ?>
			<br><br><img src='/files/board/<?=$rows[file_name]?>' width='<?=$widthX?>' onclick="imgPopup( '/files/board/<?=$rows[file_name]?>','<?=$x?>','<?=$y?>');" style='cursor:hand;'>
		<?
		}else if($rows[file_type] == 'wmv' || $rows[file_type] == 'asf' || $rows[file_type] == 'mov'){
			echo "<br><br><embed SRC='/files/board/".$rows[file_name]."' width='320' height='285' id=player  AUTOSTART=true volume='50%' >";
		}else{
		echo "<strong>添附&nbsp;&nbsp;&nbsp;:</strong>&nbsp;&nbsp;&nbsp;<a href='down.php?filename=$rows[file_name]&orgname=$rows[original_name]' target='hiddenFrame'>$rows[original_name]</a>&nbsp;";
		}
		?>
		<p><?=stripslashes($row[contents])?></p>
		</td>
	</tr>
	<?
		}else{
	?>
	<tr>
		 <td class="txt_area" colspan="3"><?=stripslashes($row[contents])?></td>
	</tr>
	<?}?>
 <tr>
 	<td class="bottom_ri" colspan="3">
			<?	if($sessionLevel == 15 ||$sessionIDX == $row[user_no]){	?>
    <a onclick="javascript:formChange('<?=$row[no]?>','del')" style="CURSOR: pointer" id="btn">■ 削除 ■ &nbsp;&nbsp;&nbsp;</a>
    <a href="./board_write.php?num=<?=$row[no]?>" style="CURSOR: hand" id="btn">■ 修正 ■ &nbsp;&nbsp;&nbsp;</a>
			<?	}	?>
			<a href="./board.php?page=<?=$page?>" id="btn">■ リスト■</a>
  </td>
 </tr>
</table>

<form  name="form" method="post" >
 <input type=hidden name="mode">
 <input type=hidden name="idx">
 <input type=hidden name="cidx">
	<input type=hidden name="tableMode">
	<div style="margin:30px 0 0 0; padding:30px; border:1px solid #ccc">

 <table width="100%" class="basic_table">
 	<colgroup>
  	<col width="15%" />
  	<col width="85%" />
  </colgroup>
  <tbody>
   <tr>
    <th class="com_le_w">	<img src="<?=$IMG_ICON?>btn_comment_img.gif" alt="コメント" /></th>
    <td	class="com_ri_w">	<textarea name="comment" cols="45" rows="3" style="width:600px; height:50px"/><?if(!$sessionIDX){echo"ログインが必要です.";}?></textarea>
     <? if($sessionIDX){ ?>
     <img src="<?=$IMG_ICON?>btn_comment.gif" onclick="commentok('<?=$num?>','<?=$tableName?>');" style="cursor:pointer" alt="書き込み"/>
     <? }else{ ?>
     <img src="<?=$IMG_ICON?>btn_comment.gif" onclick="alert('ログインが必要です.');document.location='<?=$URL_LOGIN?>';" style="cursor:pointer" alt="書き込み"/>
     <? } ?>
   </tr>
    <div id="txtHint">
    <?
    $result = Get_dbres("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$num."' order by order_by desc");
    $total = mysql_affected_rows();

    //echo "<table cellpadding='0' cellspacing='0' border='0' width='100%' style='margin:10px 0 0 0'>";
    for($i=0; $i<$total; $i++) {
    $rows = mysql_fetch_array($result);
    $coDate = substr($rows[reg_date],0,10);
    echo "<tr><th class='com_le_w'>".$rows[user_name]."<br><span style='font-size:8px'>".$coDate."</span>&nbsp;&nbsp;";

    if($sessionLevel == 15 || $sessionIDX == $rows[user_no]){echo"<a href='#'onclick=\"commentdel(".$rows[idx].",".$row[no].",'".$tableName."');\"><img src='".$IMG_ICON."btn_comment_x.gif' alt='デリ―ト' />";
    }
    echo "</th><td class='com_ri_w'>".stripslashes($rows[content])."</td></tr>";
    }

    ?>
    </div>
  </tbody>
 </table>


</div>
</form>


 </div>




<?php
  include"inc_footer.php";
?>
<script type="text/javascript">
	<!--

	function formChange(val,mode){
		if(mode == "del"){
			if(confirm("削除しましょうか?")){

			} else {
				return false;
			}
		}
		document.location='./board_proc.php?num='+val+'&mode='+mode;

	}


	-->
</script>
</body>
</html>

Anon7 - 2021