<%
Dim idx, branchCode, categoryNo, subject, contents
Dim userId, userName, userAge, grade, best, categoryB
Dim fileName1, fileSize1, fileName2, fileSize2, fileName3, fileSize3
Dim file1_del, file2_del, file3_del
Dim UploadForm, SQL, RS, tableName, listFile
Dim mode, msg
Dim adm_idx, adm_date, adm_hit, i
Call AdminAuth() '사용권한 체크(관리자가 아니면 접근불가)
returnurl = "/new/mbr/login.asp?returnUrl=/new/customer/customer05_write.asp"
If session("user_id") = "" Then
RESPONSE.WRITE ExecJavaAlert2("로그인후 이용해주세요.",returnurl)
RESPONSE.END
End If
tableName = "TB_REVIEW" '### DB 테이블명
listFile = "customer05.asp" '### 리스트 파일명
Set UploadForm = Server.CreateObject("DEXT.FileUpload")
UploadForm.AutoMakeFolder = True
'UploadForm.DefaultPath = "E:\WIN_SERVER\002_uni114.co.kr\www\data\" & tableName
UploadForm.DefaultPath = PathDir&"\data\" & tableName
'넘어온 값 변수에 받기
idx = Trim(UploadForm("idx"))
mode = Trim(UploadForm("mode"))
userId = Session("user_id")
'userName = Session("user_name")
userName = Trim(UploadForm("userName"))
userAge = Trim(UploadForm("userAge"))
grade = Trim(UploadForm("grade"))
best = Trim(UploadForm("best")) : If best <> "Y" Then best = "N" :
categoryB = Trim(UploadForm("categoryB"))
branchCode = Trim(UploadForm("branchCode"))
categoryNo = Trim(UploadForm("categoryNo"))
subject = Trim(UploadForm("subject")) : subject = InjectionDefender(subject)
contents = UploadForm("contents") : contents = InjectionDefender(contents)
'### 이미지 파일이 아니면 파일 삭제하고 에러 처리하는 함수 ###
Sub NotImage()
UploadForm.DeleteAllSavedFiles
Set UploadForm = Nothing
Response.Write ""
Response.End
End Sub
Select Case mode
Case "edit" '수정 ##########################################################
msg = "수정"
'### 파일 삭제 함수 (DB 수정) ###
Sub FileDel(idx, fileNo)
SQL = "UPDATE " & tableName
SQL = SQL & " SET fileName" & fileNo & " = '' "
SQL = SQL & ", fileSize" & fileNo & " = 0 "
SQL = SQL & " WHERE idx = " & idx
Dbcon.Execute(SQL)
End Sub
file1_del = Trim(UploadForm("file1_del"))
file2_del = Trim(UploadForm("file2_del"))
file3_del = Trim(UploadForm("file3_del"))
'체크된 파일 삭제
SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx
Set RS = Dbcon.Execute(SQL)
fileName1 = RS("fileName1")
fileName2 = RS("fileName2")
fileName3 = RS("fileName3")
If file1_del = "Y" Then
UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1
Call FileDel(idx, 1)
End If
If file2_del = "Y" Then
UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2
Call FileDel(idx, 2)
End If
If file3_del = "Y" Then
UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3
Call FileDel(idx, 3)
End If
'첨부파일 업로드
For Each item In UploadForm("files")
item.Save, False
Next
'에러 발생시 업로드 된 파일 삭제.
IF Err THEN
Response.Write Err.number & "
" & Err.source & "
" & Err.description
UploadForm.DeleteAllSavedFiles
Set UploadForm = Nothing
Response.End
END If
fileName1 = UploadForm("files")(1).LastSavedFileName
fileSize1 = UploadForm("files")(1).FileLen
fileName2 = UploadForm("files")(2).LastSavedFileName
fileSize2 = UploadForm("files")(2).FileLen
fileName3 = UploadForm("files")(3).LastSavedFileName
fileSize3 = UploadForm("files")(3).FileLen
'이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다.
If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() :
If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() :
If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() :
'DB 수정
SQL = "UPDATE " & tableName
SQL = SQL & " SET categoryNo = " & categoryNo
SQL = SQL & ", branchCode = '" & branchCode & "'"
SQL = SQL & ", userName = '" & userName & "'"
SQL = SQL & ", userAge = " & userAge
SQL = SQL & ", subject = '" & subject & "'"
SQL = SQL & ", contents = '" & contents & "'"
SQL = SQL & ", grade = '" & grade & "'"
SQL = SQL & ", best = '" & best & "'"
SQL = SQL & ", categoryB = '" & categoryB & "'"
If fileSize1 > 0 Then
SQL = SQL & ", fileName1 = '" & fileName1 & "'"
SQL = SQL & ", fileSize1 = " & fileSize1
End If
If fileSize2 > 0 Then
SQL = SQL & ", fileName2 = '" & fileName2 & "'"
SQL = SQL & ", fileSize2 = " & fileSize2
End If
If fileSize3 > 0 Then
SQL = SQL & ", fileName3 = '" & fileName3 & "'"
SQL = SQL & ", fileSize3 = " & fileSize3
End If
SQL = SQL & " WHERE idx = " & idx
Dbcon.Execute(SQL)
RS.Close
Set RS = Nothing
Case "del" '삭제 ##########################################################
msg = "삭제"
'파일 삭제
SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx
Set RS = Dbcon.Execute(SQL)
fileName1 = RS("fileName1")
fileName2 = RS("fileName2")
fileName3 = RS("fileName3")
If fileName1 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 :
If fileName2 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 :
If fileName3 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3 :
'DB 삭제
If Session("admin_div") > 0 Then
SQL = "DELETE " & tableName & " WHERE idx=" & idx
Else
SQL = "DELETE " & tableName & " WHERE idx=" & idx & " and userId='"&Session("user_id")&"'"
End If
Dbcon.Execute(SQL)
'코멘트 삭제
SQL = "DELETE " & tableName & "_COMMENT WHERE reviewIdx = " & idx
Dbcon.Execute(SQL)
RS.Close
Set RS = Nothing
Case "insert" '추가 ##########################################################
msg = "등록"
'첨부파일 업로드
For Each item In UploadForm("files")
item.Save, False
Next
'에러 발생시 업로드 된 파일 삭제.
IF Err THEN
Response.Write Err.number & "
" & Err.source & "
" & Err.description
UploadForm.DeleteAllSavedFiles
Set UploadForm = Nothing
Response.Write ""
Response.End
END If
fileName1 = UploadForm("files")(1).LastSavedFileName
fileSize1 = UploadForm("files")(1).FileLen
fileName2 = UploadForm("files")(2).LastSavedFileName
fileSize2 = UploadForm("files")(2).FileLen
fileName3 = UploadForm("files")(3).LastSavedFileName
fileSize3 = UploadForm("files")(3).FileLen
'이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다.
If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() :
If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() :
If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() :
'DB 저장
SQL = "INSERT INTO " & tableName & " (userId, userName, userAge, branchCode, categoryNo, subject, contents, fileName1, fileSize1, fileName2, fileSize2, fileName3, fileSize3, writeDate, hit, grade, best, categoryB) "
SQL = SQL & " VALUES ('" & userId & "', '" & userName & "', " & userAge & ", '" & branchCode & "', " & categoryNo & ", '" & subject & "', '" & contents & "', '" & fileName1 & "', " & fileSize1 & ", '" & fileName2 & "', " & fileSize2 & ", '" & fileName3 & "', " & fileSize3 & ", GETDATE(), 0, " & grade & ", '" & best & "', '" & categoryB & "')"
Dbcon.Execute(SQL)
Case "adm" '관리 - 날짜/조회수 업데이트 ##########################################################
Call CheckAuth("sojujan", mode) '### 접근 권한 체크
msg = "날짜\/조회수 업데이트를"
adm_idx = Trim(UploadForm("adm_idx"))
adm_date = Trim(UploadForm("adm_date"))
adm_hit = Trim(UploadForm("adm_hit"))
adm_idx = Split(adm_idx, ", ")
adm_date = Split(adm_date, ", ")
adm_hit = Split(adm_hit, ", ")
For i = 0 To UBound(adm_idx)
'DB 수정
SQL = "UPDATE " & tableName
SQL = SQL & " SET writeDate = '" & adm_date(i) & "'"
SQL = SQL & ", hit = '" & adm_hit(i) & "'"
SQL = SQL & " WHERE idx = " & adm_idx(i)
Dbcon.Execute(SQL)
Next
Case Else
msg = "실패"
End Select
'처리 완료(공용) ##########################################################
Set UploadForm = Nothing
Response.Write ""
Response.End
%>