<% Dim idx, userId, userName, subject, contents, gotopage Dim sex, area, job, age, tel, route Dim fileName1, fileSize1 Dim file1_del Dim UploadForm, SQL, RS, tableName, listFile Dim mode, msg Dim adm_idx, adm_date, adm_hit, i If Session("admin_div") <> "1" Then Response.Write "" Response.End End If tableName = "TB_MODEL" '### DB 테이블명 Set UploadForm = Server.CreateObject("DEXT.FileUpload") UploadForm.AutoMakeFolder = True 'UploadForm.DefaultPath = "E:\WIN_SERVER\002_uni114.co.kr\www\data\" & tableName UploadForm.DefaultPath = PathDir&"\data\" & tableName '넘어온 값 변수에 받기 idx = Trim(UploadForm("idx")) mode = Trim(UploadForm("mode")) userId = Trim(UploadForm("userId")) userName = Trim(UploadForm("userName")) subject = userName 'contents = UploadForm("contents") : contents = InjectionDefender(contents) sex = Trim(UploadForm("sex")) area = Trim(UploadForm("area")) job = Trim(UploadForm("job")) age = Trim(UploadForm("age")) tel = Trim(UploadForm("tel")) route = Trim(UploadForm("route")) gotopage = Trim(UploadForm("gotopage")) If gotopage = "" Then gotopage = 1 Else gotopage = Cint(gotopage) End If listFile = "model.asp?gotopage=" & gotopage '### 리스트 파일명 Call CheckAuth(userId, mode) '### 접근 권한 체크 '### 이미지 파일이 아니면 파일 삭제하고 에러 처리하는 함수 ### Sub NotImage() UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.Write "" Response.End End Sub Select Case mode Case "edit" '수정 ########################################################## msg = "수정" '### 파일 삭제 함수 (DB 수정) ### Sub FileDel(idx, fileNo) SQL = "UPDATE " & tableName SQL = SQL & " SET fileName" & fileNo & " = '' " SQL = SQL & ", fileSize" & fileNo & " = 0 " SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) End Sub file1_del = Trim(UploadForm("file1_del")) file2_del = Trim(UploadForm("file2_del")) file3_del = Trim(UploadForm("file3_del")) '체크된 파일 삭제 SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") fileName3 = RS("fileName3") If file1_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 Call FileDel(idx, 1) End If If file2_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 Call FileDel(idx, 1) End If If file3_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3 Call FileDel(idx, 1) End If '첨부파일 업로드 For Each item In UploadForm("files") item.Save, False Next '에러 발생시 업로드 된 파일 삭제. IF Err THEN Response.Write Err.number & "
" & Err.source & "
" & Err.description UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.End END If fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen fileName3 = UploadForm("files")(3).LastSavedFileName fileSize3 = UploadForm("files")(3).FileLen '이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() : 'DB 수정 SQL = "UPDATE " & tableName SQL = SQL & " SET subject = '" & subject & "'" SQL = SQL & ", sex = '" & sex & "'" SQL = SQL & ", area = '" & area & "'" SQL = SQL & ", job = '" & job & "'" SQL = SQL & ", age = '" & age & "'" SQL = SQL & ", tel = '" & tel & "'" SQL = SQL & ", route = '" & route & "'" SQL = SQL & ", contents = '" & contents & "'" If fileSize1 > 0 Then SQL = SQL & ", fileName1 = '" & fileName1 & "'" SQL = SQL & ", fileSize1 = " & fileSize1 End If SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "del" '삭제 ########################################################## msg = "삭제" '파일 삭제 SQL = "SELECT fileName1, fileName2, fileName3 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") fileName3 = RS("fileName3") If fileName1 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 : If fileName2 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 : If fileName3 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName3 : 'DB 삭제 SQL = "DELETE " & tableName & " WHERE idx=" & idx Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "insert" '추가 ########################################################## msg = "등록" '첨부파일 업로드 For Each item In UploadForm("files") item.Save, False Next '에러 발생시 업로드 된 파일 삭제. IF Err THEN Response.Write Err.number & "
" & Err.source & "
" & Err.description UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.Write "" Response.End END If fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen fileName3 = UploadForm("files")(3).LastSavedFileName fileSize3 = UploadForm("files")(3).FileLen '이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : If fileSize3 > 0 And UploadForm("files")(3).IsImageItem() = False Then Call NotImage() : 'DB 저장 SQL = "INSERT INTO " & tableName & " (userId, userName, subject, sex, area, job, age, tel, fileName1, fileSize1, fileName2, fileSize2, fileName3, fileSize3, writeDate, hit) " SQL = SQL & " VALUES ('" & userId & "', '" & userName & "', '" & subject & "', '" & sex & "', '" & area & "', '" & job & "', '" & age & "', '" & tel & "', '" & fileName1 & "', " & fileSize1 & ", '" & fileName2 & "', " & fileSize2 & ", '" & fileName3 & "', " & fileSize3 & ", GETDATE(), 0)" Dbcon.Execute(SQL) 'Response.write SQL Case Else msg = "실패" End Select '처리 완료(공용) ########################################################## Set UploadForm = Nothing Response.Write "" Response.End %>