KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/yuchun/admin/Proc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/yuchun/admin/Proc/faq_proc.php
<?include $_SERVER['DOCUMENT_ROOT']."/conf/conf_dir.php";?>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<?
$todayfull = date("YmdHis");
$contents = addslashes($contents); //특수문자db에 들어가게..
$reply_content = addslashes($reply_content); //특수문자db에 들어가게..


$formChk = "view";
$tableName = "faq";
if($is_secret == "") $is_secret ='N';
if($idx){
	if($mode == "proc"){
		$queryupok = "update board_$tableName set contents='$contents', reply_content='$reply_content',modify_date=now()  where no = '$idx'";
		$boardNo = get_db("select no from board_$tableName where no = '$idx'");
		
	}else if($mode == "del"){
		$queryupok = "update board_$tableName set is_delete='Y',modify_date=now() where no = '$idx'";
		$formChk = "list";
	}
	$queryupok_result = mysql_query($queryupok,$db_con);		
	


if($mode == "del"){
	$saveName = "削除";
	$urlchk ="../faq.php";
}else{
	$saveName = "保存";
	$urlchk ="../faq_write.php";
}

}else{
	$query = "INSERT INTO board_$tableName
									(module_no,user_no,user_id,user_name,reg_date,modify_date,is_secret,subject,general_setting,contents,reply_content,files_count,hit,ip)
								VALUES
									('$tableName', '$sessionIDX','$sessionID','$sessionNickname',now(),now(),'$is_secret','$subject','$m_chk','$contents','$reply_content','$file_count','0','$REMOTE_ADDR')";
	
	//echo $query;
	$result = mysql_query($query,$db_con);
	$saveName = "save";
	$urlchk ="../faq.php";
}
?>
<form name="form" method="post" action="<?=$urlchk?>" onsubmit="return validate();" enctype="multipart/form-data">
<input type="hidden" name="mode" value="<?=$mode?>">
<input type="hidden" name="idx" value="<?=$idx?>">
</form>
<script>
alert("<?=$saveName?> OK");
document.form.submit();
</script>

Anon7 - 2021