M72X2/X2/bbs/move_update.php



<title>M72X2/X2/bbs/move_update.php</title>


<div class="header">M72X2/X2/bbs/move_update.php</div>
<pre>&lt;?php
include_once(&#039;./_common.php&#039;);

$act = isset($act) ? strip_tags($act) : &#039;&#039;;
$count_chk_bo_table = (isset($_POST[&#039;chk_bo_table&#039;]) &amp;&amp; is_array($_POST[&#039;chk_bo_table&#039;])) ? count($_POST[&#039;chk_bo_table&#039;]) : 0;

// 게시판 관리자 이상 복사, 이동 가능
if ($is_admin != &#039;board&#039; &amp;&amp; $is_admin != &#039;group&#039; &amp;&amp; $is_admin != &#039;super&#039;)
    alert_close(&#039;게시판 관리자 이상 접근이 가능합니다.&#039;);

if ($sw != &#039;move&#039; &amp;&amp; $sw != &#039;copy&#039;)
    alert(&#039;sw 값이 제대로 넘어오지 않았습니다.&#039;);

if(! $count_chk_bo_table)
    alert(&#039;게시물을 &#039;.$act.&#039;할 게시판을 한개 이상 선택해 주십시오.&#039;, $url);

// 원본 파일 디렉토리
$src_dir = G5_DATA_PATH.&#039;/file/&#039;.$bo_table;

$save = array();
$save_count_write = 0;
$save_count_comment = 0;
$cnt = 0;

$wr_id_list = isset($_POST[&#039;wr_id_list&#039;]) ? preg_replace(&#039;/[^0-9\,]/&#039;, &#039;&#039;, $_POST[&#039;wr_id_list&#039;]) : &#039;&#039;;

$sql = &quot; select distinct wr_num from $write_table where wr_id in ({$wr_id_list}) order by wr_id &quot;;
$result = sql_query($sql);
while ($row = sql_fetch_array($result))
{
    $save[$cnt][&#039;wr_contents&#039;] = array();

    $wr_num = $row[&#039;wr_num&#039;];
    for ($i=0; $i&lt;$count_chk_bo_table; $i++)
    {
        $move_bo_table = isset($_POST[&#039;chk_bo_table&#039;][$i]) ? preg_replace(&#039;/[^a-z0-9_]/i&#039;, &#039;&#039;, $_POST[&#039;chk_bo_table&#039;][$i]) : &#039;&#039;;

        // 취약점 18-0075 참고
        $sql = &quot;select * from {$g5[&#039;board_table&#039;]} where bo_table = &#039;&quot;.sql_real_escape_string($move_bo_table).&quot;&#039; &quot;;
        $move_board = sql_fetch($sql);
        // 존재하지 않다면
        if( !$move_board[&#039;bo_table&#039;] ) continue;

        $move_write_table = $g5[&#039;write_prefix&#039;] . $move_bo_table;

        $src_dir = G5_DATA_PATH.&#039;/file/&#039;.$bo_table; // 원본 디렉토리
        $dst_dir = G5_DATA_PATH.&#039;/file/&#039;.$move_bo_table; // 복사본 디렉토리

        $count_write = 0;
        $count_comment = 0;

        // get_next_num 함수는 mysql 지연시 중복이 될수 있는 문제로 더 이상 사용하지 않습니다.
        // $next_wr_num = get_next_num($move_write_table);
        $next_wr_num = 0;

        $sql2 = &quot; select * from $write_table where wr_num = &#039;$wr_num&#039; order by wr_parent, wr_is_comment, wr_comment desc, wr_id &quot;;
        $result2 = sql_query($sql2);
        while ($row2 = sql_fetch_array($result2))
        {
            $save[$cnt][&#039;wr_contents&#039;][] = $row2[&#039;wr_content&#039;];

            $nick = cut_str($member[&#039;mb_nick&#039;], $config[&#039;cf_cut_name&#039;]);
            if (!$row2[&#039;wr_is_comment&#039;] &amp;&amp; $config[&#039;cf_use_copy_log&#039;]) {
                if(strpos($row2[&#039;wr_option&#039;], &#039;html&#039;) !== false) {
                    $log_tag1 = &#039;&lt;div class=&quot;content_&#039;.$sw.&#039;&quot;&gt;&#039;;
                    $log_tag2 = &#039;&lt;/div&gt;&#039;;
                } else {
                    $log_tag1 = &quot;\n&quot;;
                    $log_tag2 = &#039;&#039;;
                }

                $row2[&#039;wr_content&#039;] .= &quot;\n&quot;.$log_tag1.&#039;[이 게시물은 &#039;.$nick.&#039;님에 의해 &#039;.G5_TIME_YMDHIS.&#039; &#039;.$board[&#039;bo_subject&#039;].&#039;에서 &#039;.($sw == &#039;copy&#039; ? &#039;복사&#039; : &#039;이동&#039;).&#039; 됨]&#039;.$log_tag2;
            }

            // 게시글 추천, 비추천수
            $wr_good = $wr_nogood = 0;
            if ($sw == &#039;move&#039; &amp;&amp; $i == 0) {
                $wr_good = $row2[&#039;wr_good&#039;];
                $wr_nogood = $row2[&#039;wr_nogood&#039;];
            }

            $sql = &quot; insert into $move_write_table
                        set wr_num = &quot; . ($next_wr_num ? &quot;&#039;$next_wr_num&#039;&quot; : &quot;(SELECT IFNULL(MIN(wr_num) - 1, -1) FROM $move_write_table as sq) &quot;) . &quot;,
                             wr_reply = &#039;{$row2[&#039;wr_reply&#039;]}&#039;,
                             wr_is_comment = &#039;{$row2[&#039;wr_is_comment&#039;]}&#039;,
                             wr_comment = &#039;{$row2[&#039;wr_comment&#039;]}&#039;,
                             wr_comment_reply = &#039;{$row2[&#039;wr_comment_reply&#039;]}&#039;,
                             ca_name = &#039;&quot;.addslashes($row2[&#039;ca_name&#039;]).&quot;&#039;,
                             wr_option = &#039;{$row2[&#039;wr_option&#039;]}&#039;,
                             wr_subject = &#039;&quot;.addslashes($row2[&#039;wr_subject&#039;]).&quot;&#039;,
                             wr_content = &#039;&quot;.addslashes($row2[&#039;wr_content&#039;]).&quot;&#039;,
                             wr_link1 = &#039;&quot;.addslashes($row2[&#039;wr_link1&#039;]).&quot;&#039;,
                             wr_link2 = &#039;&quot;.addslashes($row2[&#039;wr_link2&#039;]).&quot;&#039;,
                             wr_link1_hit = &#039;{$row2[&#039;wr_link1_hit&#039;]}&#039;,
                             wr_link2_hit = &#039;{$row2[&#039;wr_link2_hit&#039;]}&#039;,
                             wr_hit = &#039;{$row2[&#039;wr_hit&#039;]}&#039;,
                             wr_good = &#039;{$wr_good}&#039;,
                             wr_nogood = &#039;{$wr_nogood}&#039;,
                             mb_id = &#039;{$row2[&#039;mb_id&#039;]}&#039;,
                             wr_password = &#039;{$row2[&#039;wr_password&#039;]}&#039;,
                             wr_name = &#039;&quot;.addslashes($row2[&#039;wr_name&#039;]).&quot;&#039;,
                             wr_email = &#039;&quot;.addslashes($row2[&#039;wr_email&#039;]).&quot;&#039;,
                             wr_homepage = &#039;&quot;.addslashes($row2[&#039;wr_homepage&#039;]).&quot;&#039;,
                             wr_datetime = &#039;{$row2[&#039;wr_datetime&#039;]}&#039;,
                             wr_file = &#039;{$row2[&#039;wr_file&#039;]}&#039;,
                             wr_last = &#039;{$row2[&#039;wr_last&#039;]}&#039;,
                             wr_ip = &#039;{$row2[&#039;wr_ip&#039;]}&#039;,
                             wr_1 = &#039;&quot;.addslashes($row2[&#039;wr_1&#039;]).&quot;&#039;,
                             wr_2 = &#039;&quot;.addslashes($row2[&#039;wr_2&#039;]).&quot;&#039;,
                             wr_3 = &#039;&quot;.addslashes($row2[&#039;wr_3&#039;]).&quot;&#039;,
                             wr_4 = &#039;&quot;.addslashes($row2[&#039;wr_4&#039;]).&quot;&#039;,
                             wr_5 = &#039;&quot;.addslashes($row2[&#039;wr_5&#039;]).&quot;&#039;,
                             wr_6 = &#039;&quot;.addslashes($row2[&#039;wr_6&#039;]).&quot;&#039;,
                             wr_7 = &#039;&quot;.addslashes($row2[&#039;wr_7&#039;]).&quot;&#039;,
                             wr_8 = &#039;&quot;.addslashes($row2[&#039;wr_8&#039;]).&quot;&#039;,
                             wr_9 = &#039;&quot;.addslashes($row2[&#039;wr_9&#039;]).&quot;&#039;,
                             wr_10 = &#039;&quot;.addslashes($row2[&#039;wr_10&#039;]).&quot;&#039; &quot;;
            sql_query($sql);

            $insert_id = sql_insert_id();
            
            if ($next_wr_num === 0) {
                $tmp = sql_fetch(&quot;select wr_num from $move_write_table where wr_id = &#039;$insert_id&#039;&quot;);
                $next_wr_num = $tmp[&#039;wr_num&#039;];
            }

            // 코멘트가 아니라면
            if (!$row2[&#039;wr_is_comment&#039;])
            {
                $save_parent = $insert_id;

                $sql3 = &quot; select * from {$g5[&#039;board_file_table&#039;]} where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$row2[&#039;wr_id&#039;]}&#039; order by bf_no &quot;;
                $result3 = sql_query($sql3);
                for ($k=0; $row3 = sql_fetch_array($result3); $k++)
                {
                    $copy_file_name = &#039;&#039;;
                    
                    if ($row3[&#039;bf_file&#039;])
                    {
                        // 원본파일을 복사하고 퍼미션을 변경
                        // 제이프로님 코드제안 적용

                        $copy_file_name = $row3[&#039;bf_file&#039;];

                        if($bo_table === $move_bo_table){
                            if(preg_match(&#039;/_copy(\d+)?_(\d+)_/&#039;, $copy_file_name, $match)){

                                $number = isset($match[1]) ? (int) $match[1] : 0;
                                $replace_str = &#039;_copy&#039;.($number + 1).&#039;_&#039;.$insert_id.&#039;_&#039;;
                                $copy_file_name = preg_replace(&#039;/_copy(\d+)?_(\d+)_/&#039;, $replace_str, $copy_file_name);
                            } else {
                                $copy_file_name = $row2[&#039;wr_id&#039;].&#039;_copy_&#039;.$insert_id.&#039;_&#039;.$row3[&#039;bf_file&#039;];
                            }
                        }

                        $is_exist_file = is_file($src_dir.&#039;/&#039;.$row3[&#039;bf_file&#039;]) &amp;&amp; file_exists($src_dir.&#039;/&#039;.$row3[&#039;bf_file&#039;]);
                        if( $is_exist_file ){
                            @copy($src_dir.&#039;/&#039;.$row3[&#039;bf_file&#039;], $dst_dir.&#039;/&#039;.$copy_file_name);
                            @chmod($dst_dir.&#039;/&#039;.$row3[&#039;bf_file&#039;], G5_FILE_PERMISSION);
                        }

                        $row3 = run_replace(&#039;bbs_move_update_file&#039;, $row3, $copy_file_name, $bo_table, $move_bo_table, $insert_id);
                    }

                    $sql = &quot; insert into {$g5[&#039;board_file_table&#039;]}
                                set bo_table = &#039;$move_bo_table&#039;,
                                     wr_id = &#039;$insert_id&#039;,
                                     bf_no = &#039;{$row3[&#039;bf_no&#039;]}&#039;,
                                     bf_source = &#039;&quot;.addslashes($row3[&#039;bf_source&#039;]).&quot;&#039;,
                                     bf_file = &#039;$copy_file_name&#039;,
                                     bf_download = &#039;{$row3[&#039;bf_download&#039;]}&#039;,
                                     bf_content = &#039;&quot;.addslashes($row3[&#039;bf_content&#039;]).&quot;&#039;,
                                     bf_fileurl = &#039;&quot;.addslashes($row3[&#039;bf_fileurl&#039;]).&quot;&#039;,
                                     bf_thumburl = &#039;&quot;.addslashes($row3[&#039;bf_thumburl&#039;]).&quot;&#039;,
                                     bf_storage = &#039;&quot;.addslashes($row3[&#039;bf_storage&#039;]).&quot;&#039;,
                                     bf_filesize = &#039;{$row3[&#039;bf_filesize&#039;]}&#039;,
                                     bf_width = &#039;{$row3[&#039;bf_width&#039;]}&#039;,
                                     bf_height = &#039;{$row3[&#039;bf_height&#039;]}&#039;,
                                     bf_type = &#039;{$row3[&#039;bf_type&#039;]}&#039;,
                                     bf_datetime = &#039;{$row3[&#039;bf_datetime&#039;]}&#039; &quot;;
                    sql_query($sql);

                    if ($sw == &#039;move&#039; &amp;&amp; $row3[&#039;bf_file&#039;])
                        $save[$cnt][&#039;bf_file&#039;][$k] = $src_dir.&#039;/&#039;.$row3[&#039;bf_file&#039;];
                }

                $count_write++;

                if ($sw == &#039;move&#039; &amp;&amp; $i == 0)
                {
                    // 스크랩 이동
                    sql_query(&quot; update {$g5[&#039;scrap_table&#039;]} set bo_table = &#039;$move_bo_table&#039;, wr_id = &#039;$save_parent&#039; where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$row2[&#039;wr_id&#039;]}&#039; &quot;);

                    // 최신글 이동
                    sql_query(&quot; update {$g5[&#039;board_new_table&#039;]} set bo_table = &#039;$move_bo_table&#039;, wr_id = &#039;$save_parent&#039;, wr_parent = &#039;$save_parent&#039; where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$row2[&#039;wr_id&#039;]}&#039; &quot;);

                    // 추천데이터 이동
                    sql_query(&quot; update {$g5[&#039;board_good_table&#039;]} set bo_table = &#039;$move_bo_table&#039;, wr_id = &#039;$save_parent&#039; where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$row2[&#039;wr_id&#039;]}&#039; &quot;);
                }
            }
            else
            {
                $count_comment++;

                if ($sw == &#039;move&#039;)
                {
                    // 최신글 이동
                    sql_query(&quot; update {$g5[&#039;board_new_table&#039;]} set bo_table = &#039;$move_bo_table&#039;, wr_id = &#039;$insert_id&#039;, wr_parent = &#039;$save_parent&#039; where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$row2[&#039;wr_id&#039;]}&#039; &quot;);
                }
            }

            sql_query(&quot; update $move_write_table set wr_parent = &#039;$save_parent&#039; where wr_id = &#039;$insert_id&#039; &quot;);

            if ($sw == &#039;move&#039;)
                $save[$cnt][&#039;wr_id&#039;] = $row2[&#039;wr_parent&#039;];

            $cnt++;

            run_event(&#039;bbs_move_copy&#039;, $row2, $move_bo_table, $insert_id, $next_wr_num, $sw);
        }

        sql_query(&quot; update {$g5[&#039;board_table&#039;]} set bo_count_write = bo_count_write + &#039;$count_write&#039; where bo_table = &#039;$move_bo_table&#039; &quot;);
        sql_query(&quot; update {$g5[&#039;board_table&#039;]} set bo_count_comment = bo_count_comment + &#039;$count_comment&#039; where bo_table = &#039;$move_bo_table&#039; &quot;);

        delete_cache_latest($move_bo_table);
    }

    $save_count_write += $count_write;
    $save_count_comment += $count_comment;
}

delete_cache_latest($bo_table);

if ($sw == &#039;move&#039;)
{
    $save_cnt = count($save);
    for ($i=0; $i&lt;$save_cnt; $i++)
    {
        if( isset($save[$i][&#039;bf_file&#039;]) &amp;&amp; $save[$i][&#039;bf_file&#039;] ){
            $bf_file_cnt = count($save[$i][&#039;bf_file&#039;]);
            for ($k=0; $k&lt;$bf_file_cnt; $k++) {
                $del_file = run_replace(&#039;delete_file_path&#039;, clean_relative_paths($save[$i][&#039;bf_file&#039;][$k]), $save[$i]);

                if ( is_file($del_file) &amp;&amp; file_exists($del_file) ){
                    @unlink($del_file);
                }
                
                // 썸네일 파일 삭제, 먼지손 님 코드 제안
                delete_board_thumbnail($bo_table, basename($save[$i][&#039;bf_file&#039;][$k]));
            }
        }
        
        $wr_contents_cnt = count($save[$i][&#039;wr_contents&#039;]);
        for ($k=0; $k&lt;$wr_contents_cnt; $k++){
            delete_editor_thumbnail($save[$i][&#039;wr_contents&#039;][$k]);
        }

        sql_query(&quot; delete from $write_table where wr_parent = &#039;{$save[$i][&#039;wr_id&#039;]}&#039; &quot;);
        sql_query(&quot; delete from {$g5[&#039;board_new_table&#039;]} where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$save[$i][&#039;wr_id&#039;]}&#039; &quot;);
        sql_query(&quot; delete from {$g5[&#039;board_file_table&#039;]} where bo_table = &#039;$bo_table&#039; and wr_id = &#039;{$save[$i][&#039;wr_id&#039;]}&#039; &quot;);
    }

    // 공지사항이 이동되는 경우의 처리 begin
    $arr = array();
    $sql = &quot; select bo_notice from {$g5[&#039;board_table&#039;]} where bo_table = &#039;{$bo_table}&#039; &quot;;
    $row = sql_fetch($sql);
    $arr_notice = explode(&#039;,&#039;, $row[&#039;bo_notice&#039;]);
    $arr_notice_cnt = count($arr_notice);
    for ($i=0; $i&lt;$arr_notice_cnt; $i++) {
        $move_id = (int)$arr_notice[$i];
        // 게시판에 wr_id 가 있다면 이동한게 아니므로 bo_notice 에 다시 넣음
        $row2 = sql_fetch(&quot; select count(*) as cnt from $write_table where wr_id = &#039;{$move_id}&#039; &quot;);
        if ($row2[&#039;cnt&#039;]) {
            $arr[] = $move_id;
        }
        $bo_notice = implode(&#039;,&#039;, $arr);
    }
    // 공지사항이 이동되는 경우의 처리 end

    sql_query(&quot; update {$g5[&#039;board_table&#039;]} set bo_notice = &#039;{$bo_notice}&#039;, bo_count_write = bo_count_write - &#039;$save_count_write&#039;, bo_count_comment = bo_count_comment - &#039;$save_count_comment&#039; where bo_table = &#039;$bo_table&#039; &quot;);
}

$msg = &#039;해당 게시물을 선택한 게시판으로 &#039;.$act.&#039; 하였습니다.&#039;;
$opener_href  = get_pretty_url($bo_table,&#039;&#039;,&#039;&amp;amp;page=&#039;.$page.&#039;&amp;amp;&#039;.$qstr);
$opener_href1 = str_replace(&#039;&amp;amp;&#039;, &#039;&amp;&#039;, $opener_href);

run_event(&#039;bbs_move_update&#039;, $bo_table, $chk_bo_table, $wr_id_list, $opener_href);
?&gt;
&lt;meta http-equiv=&quot;content-type&quot; content=&quot;text/html; charset=utf-8&quot;&gt;
&lt;script&gt;
alert(&quot;&lt;?php echo $msg; ?&gt;&quot;);
opener.document.location.href = &quot;&lt;?php echo $opener_href1; ?&gt;&quot;;
window.close();
&lt;/script&gt;
&lt;noscript&gt;
&lt;p&gt;
    &lt;?php echo $msg; ?&gt;
&lt;/p&gt;
&lt;a href=&quot;&lt;?php echo $opener_href; ?&gt;&quot;&gt;돌아가기&lt;/a&gt;
&lt;/noscript&gt;</pre>