M72X2/X2/adm/boardgroup_form_update.php



<title>M72X2/X2/adm/boardgroup_form_update.php</title>


<div class="header">M72X2/X2/adm/boardgroup_form_update.php</div>
<pre>&lt;?php
$sub_menu = &quot;300200&quot;;
require_once &#039;./_common.php&#039;;

if ($w == &#039;u&#039;) {
    check_demo();
}

auth_check_menu($auth, $sub_menu, &#039;w&#039;);

if ($is_admin != &#039;super&#039; &amp;&amp; $w == &#039;&#039;) {
    alert(&#039;최고관리자만 접근 가능합니다.&#039;);
}

check_admin_token();

$gr_id = isset($_POST[&#039;gr_id&#039;]) ? $_POST[&#039;gr_id&#039;] : &#039;&#039;;

if (!preg_match(&quot;/^([A-Za-z0-9_]{1,10})$/&quot;, $gr_id)) {
    alert(&#039;그룹 ID는 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (10자 이내)&#039;);
}

if (empty($gr_subject)) {
    alert(&#039;그룹 제목을 입력하세요.&#039;);
}

$posts = array();

$check_keys = array(
    &#039;gr_subject&#039; =&gt; &#039;&#039;,
    &#039;gr_device&#039; =&gt; &#039;&#039;,
    &#039;gr_admin&#039; =&gt; &#039;&#039;,
);

for ($i = 1; $i &lt;= 10; $i++) {
    $check_keys[&#039;gr_&#039; . $i . &#039;_subj&#039;]   = isset($_POST[&#039;gr_&#039; . $i . &#039;_subj&#039;]) ? $_POST[&#039;gr_&#039; . $i . &#039;_subj&#039;] : &#039;&#039;;
    $check_keys[&#039;gr_&#039; . $i]           = isset($_POST[&#039;gr_&#039; . $i]) ? $_POST[&#039;gr_&#039; . $i] : &#039;&#039;;
}

foreach ($check_keys as $key =&gt; $value) {
    if ($key === &#039;gr_subject&#039;) {
        $posts[$key] = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : &#039;&#039;;
    } else {
        $posts[$key] = isset($_POST[$key]) ? $_POST[$key] : &#039;&#039;;
    }
}

$sql_common = &quot; gr_subject = &#039;{$posts[&#039;gr_subject&#039;]}&#039;,
                gr_device = &#039;{$posts[&#039;gr_device&#039;]}&#039;,
                gr_admin  = &#039;{$posts[&#039;gr_admin&#039;]}&#039;,
                gr_1_subj = &#039;{$posts[&#039;gr_1_subj&#039;]}&#039;,
                gr_2_subj = &#039;{$posts[&#039;gr_2_subj&#039;]}&#039;,
                gr_3_subj = &#039;{$posts[&#039;gr_3_subj&#039;]}&#039;,
                gr_4_subj = &#039;{$posts[&#039;gr_4_subj&#039;]}&#039;,
                gr_5_subj = &#039;{$posts[&#039;gr_5_subj&#039;]}&#039;,
                gr_6_subj = &#039;{$posts[&#039;gr_6_subj&#039;]}&#039;,
                gr_7_subj = &#039;{$posts[&#039;gr_7_subj&#039;]}&#039;,
                gr_8_subj = &#039;{$posts[&#039;gr_8_subj&#039;]}&#039;,
                gr_9_subj = &#039;{$posts[&#039;gr_9_subj&#039;]}&#039;,
                gr_10_subj = &#039;{$posts[&#039;gr_10_subj&#039;]}&#039;,
                gr_1 = &#039;{$posts[&#039;gr_1&#039;]}&#039;,
                gr_2 = &#039;{$posts[&#039;gr_2&#039;]}&#039;,
                gr_3 = &#039;{$posts[&#039;gr_3&#039;]}&#039;,
                gr_4 = &#039;{$posts[&#039;gr_4&#039;]}&#039;,
                gr_5 = &#039;{$posts[&#039;gr_5&#039;]}&#039;,
                gr_6 = &#039;{$posts[&#039;gr_6&#039;]}&#039;,
                gr_7 = &#039;{$posts[&#039;gr_7&#039;]}&#039;,
                gr_8 = &#039;{$posts[&#039;gr_8&#039;]}&#039;,
                gr_9 = &#039;{$posts[&#039;gr_9&#039;]}&#039;,
                gr_10 = &#039;{$posts[&#039;gr_10&#039;]}&#039; &quot;;
if (isset($_POST[&#039;gr_use_access&#039;])) {
    $sql_common .= &quot;, gr_use_access = &#039;{$_POST[&#039;gr_use_access&#039;]}&#039; &quot;;
} else {
    $sql_common .= &quot;, gr_use_access = &#039;&#039; &quot;;
}

if ($w == &#039;&#039;) {
    $sql = &quot; select count(*) as cnt from {$g5[&#039;group_table&#039;]} where gr_id = &#039;{$gr_id}&#039; &quot;;
    $row = sql_fetch($sql);
    if ($row[&#039;cnt&#039;]) {
        alert(&#039;이미 존재하는 그룹 ID 입니다.&#039;);
    }

    $sql = &quot; insert into {$g5[&#039;group_table&#039;]}
                set gr_id = &#039;{$gr_id}&#039;,
                     {$sql_common} &quot;;
    sql_query($sql);
} elseif ($w == &quot;u&quot;) {
    $sql = &quot; update {$g5[&#039;group_table&#039;]}
                set {$sql_common}
                where gr_id = &#039;{$gr_id}&#039; &quot;;
    sql_query($sql);
} else {
    alert(&#039;제대로 된 값이 넘어오지 않았습니다.&#039;);
}

run_event(&#039;admin_boardgroup_form_update&#039;, $gr_id, $w);

goto_url(&#039;./boardgroup_form.php?w=u&amp;amp;gr_id=&#039; . $gr_id . &#039;&amp;amp;&#039; . $qstr);
</pre>