<%@ Language=VBScript %> <% Dim idx, userId, userName, userAge, subject, contents, branchCode Dim fileName1, fileSize1, fileName2, fileSize2, fileName3, fileSize3 Dim file1_del, file2_del, file3_del Dim UploadForm, SQL, RS, tableName, listFile, objImage Dim thumbnailWidth, thumbnailHeight Dim UploadPathThumbnail Dim FilePath1, FilePath2, SourceFileName Dim mode, msg Dim adm_idx, adm_date, adm_hit, i tableName = "TB_CSCENTER_GIFT" '### DB Å×À̺í¸í listFile = "cscenter02.asp" '### ¸®½ºÆ® ÆÄÀϸí Set UploadForm = Server.CreateObject("DEXT.FileUpload") UploadForm.AutoMakeFolder = True 'UploadForm.DefaultPath = "E:\WIN_SERVER\002_uni114.co.kr\www\data\" & tableName UploadForm.DefaultPath = PathDir&"\data\" & tableName FilePath2 = UploadForm.DefaultPath & "\thumbnail\" Set objImage = Server.CreateObject("DEXT.ImageProc") thumbnailWidth = 226 '½æ³×ÀÏ À̹ÌÁö °¡·ÎÅ©±â thumbnailHeight = 160 '½æ³×ÀÏ À̹ÌÁö ¼¼·ÎÅ©±â '³Ñ¾î¿Â °ª º¯¼ö¿¡ ¹Þ±â idx = Trim(UploadForm("idx")) mode = Trim(UploadForm("mode")) userId = Session("user_id") userName = Trim(UploadForm("userName")) userAge = 0 subject = Trim(UploadForm("subject")) : subject = InjectionDefender(subject) contents = UploadForm("contents") : contents = InjectionDefender(contents) branchCode = "" Call UserAuth(userId) '### Á¢±Ù ±ÇÇÑ Ã¼Å© '### À̹ÌÁö ÆÄÀÏÀÌ ¾Æ´Ï¸é ÆÄÀÏ »èÁ¦ÇÏ°í ¿¡·¯ ó¸®ÇÏ´Â ÇÔ¼ö ### Sub NotImage() UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.Write "" Response.End End Sub Select Case mode Case "edit" '¼öÁ¤ ########################################################## msg = "¼öÁ¤" '### ÆÄÀÏ »èÁ¦ ÇÔ¼ö (DB ¼öÁ¤) ### Sub FileDel(idx, fileNo) SQL = "UPDATE " & tableName SQL = SQL & " SET fileName" & fileNo & " = '' " SQL = SQL & ", fileSize" & fileNo & " = 0 " SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) End Sub file1_del = Trim(UploadForm("file1_del")) file2_del = Trim(UploadForm("file2_del")) file3_del = Trim(UploadForm("file3_del")) 'üũµÈ ÆÄÀÏ »èÁ¦ SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") fileName3 = RS("fileName3") If file1_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 UploadForm.DeleteFile FilePath2 & fileName1 Call FileDel(idx, 1) End If If file2_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 UploadForm.DeleteFile FilePath2 & fileName2 Call FileDel(idx, 2) End If If file3_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3 UploadForm.DeleteFile FilePath2 & fileName3 Call FileDel(idx, 3) End If ' Before ¾÷·Îµå1 UploadPath = UploadForm("files")(1).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(1).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®1 UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen END If ' After ¾÷·Îµå2 UploadPath = UploadForm("files")(2).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(2).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®2 'UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen END IF ' After ¾÷·Îµå3 UploadPath = UploadForm("files")(3).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(3).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®2 'UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName3 = UploadForm("files")(3).LastSavedFileName fileSize3 = UploadForm("files")(3).FileLen END IF 'À̹ÌÁö ÆÄÀÏÀÌ ¾Æ´Ï¸é ÆÄÀÏÀ» »èÁ¦ ÇÏ°í ¿¡·¯Ã³¸® ÇÑ´Ù. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() : 'DB ¼öÁ¤ SQL = "UPDATE " & tableName SQL = SQL & " SET userAge = '" & userAge & "'" SQL = SQL & ", branchCode = '" & branchCode & "'" SQL = SQL & ", subject = '" & subject & "'" SQL = SQL & ", contents = '" & contents & "'" If fileSize1 > 0 Then SQL = SQL & ", fileName1 = '" & fileName1 & "'" SQL = SQL & ", fileSize1 = " & fileSize1 End If If fileSize2 > 0 Then SQL = SQL & ", fileName2 = '" & fileName2 & "'" SQL = SQL & ", fileSize2 = " & fileSize2 End If If fileSize3 > 0 Then SQL = SQL & ", fileName3 = '" & fileName3 & "'" SQL = SQL & ", fileSize3 = " & fileSize3 End If SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "del" '»èÁ¦ ########################################################## msg = "»èÁ¦" 'ÆÄÀÏ »èÁ¦ SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") fileName3 = RS("fileName3") If fileName1 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 UploadForm.DeleteFile FilePath2 & fileName1 End If If fileName2 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 UploadForm.DeleteFile FilePath2 & fileName2 End If If fileName3 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3 UploadForm.DeleteFile FilePath2 & fileName3 End If 'DB »èÁ¦ If Session("admin_div") > 0 Then SQL = "DELETE " & tableName & " WHERE idx=" & idx Else SQL = "DELETE " & tableName & " WHERE idx=" & idx & " and userId='"&Session("user_id")&"'" End If Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "insert" 'Ãß°¡ ########################################################## msg = "µî·Ï" ' ¿øº» ¾÷·Îµå1 UploadPath = UploadForm("files")(1).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(1).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®1 UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen END If ' ¿øº» ¾÷·Îµå2 UploadPath = UploadForm("files")(2).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(2).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®2 'UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen END If ' ¿øº» ¾÷·Îµå3 UploadPath = UploadForm("files")(3).Save IF "" <> UploadPath THEN objImage.SetSourceFile( UploadPath ) SourceFileName = UploadForm("files")(3).FileNameWithoutExt FilePath1 = FilePath2 & SourceFileName & ".jpg" ' ½æ³×ÀÏ Ã³¸®2 'UploadPathThumbnail = objImage.SaveasThumbnail( FilePath1, thumbnailWidth, thumbnailHeight, True ) fileName3 = UploadForm("files")(3).LastSavedFileName fileSize3 = UploadForm("files")(3).FileLen END IF 'À̹ÌÁö ÆÄÀÏÀÌ ¾Æ´Ï¸é ÆÄÀÏÀ» »èÁ¦ ÇÏ°í ¿¡·¯Ã³¸® ÇÑ´Ù. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() : 'DB ÀúÀå SQL = "INSERT INTO " & tableName & " (userId, userName, userAge, subject, contents, fileName1, fileSize1, fileName2, fileSize2, fileName3, fileSize3, writeDate, hit, branchCode) " SQL = SQL & " VALUES ('" & userId & "', '" & userName & "', " & userAge & ", '" & subject & "', '" & contents & "', '" & fileName1 & "', '" & fileSize1 & "', '" & fileName2 & "', '" & fileSize2 & "', '" & fileName3 & "', '" & fileSize3 & "', GETDATE(), 0, '" & branchCode & "')" Dbcon.Execute(SQL) Case "adm" '°ü¸® - ³¯Â¥/Á¶È¸¼ö ¾÷µ¥ÀÌÆ® ########################################################## Call CheckAuth("sojujan", mode) '### Á¢±Ù ±ÇÇÑ Ã¼Å© msg = "³¯Â¥\/Á¶È¸¼ö ¾÷µ¥ÀÌÆ®¸¦" adm_idx = Trim(UploadForm("adm_idx")) adm_date = Trim(UploadForm("adm_date")) adm_hit = Trim(UploadForm("adm_hit")) adm_idx = Split(adm_idx, ", ") adm_date = Split(adm_date, ", ") adm_hit = Split(adm_hit, ", ") For i = 0 To UBound(adm_idx) 'DB ¼öÁ¤ SQL = "UPDATE " & tableName SQL = SQL & " SET writeDate = '" & adm_date(i) & "'" SQL = SQL & ", hit = '" & adm_hit(i) & "'" SQL = SQL & " WHERE idx = " & adm_idx(i) Dbcon.Execute(SQL) Next Case Else msg = "½ÇÆÐ" End Select 'ó¸® ¿Ï·á(°ø¿ë) ########################################################## Set objImage = Nothing Set UploadForm = Nothing Response.Write "" Response.End %>