M72X2/X2/bbs/poll_update.php



<title>M72X2/X2/bbs/poll_update.php</title>


<div class="header">M72X2/X2/bbs/poll_update.php</div>
<pre>&lt;?php
include_once(&#039;./_common.php&#039;);

if (function_exists(&#039;check_request_origin&#039;)) check_request_origin(G5_BBS_URL);

$po_id = isset($_POST[&#039;po_id&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, $_POST[&#039;po_id&#039;]) : 0;

$po = sql_fetch(&quot; select * from {$g5[&#039;poll_table&#039;]} where po_id = &#039;$po_id&#039; &quot;);
if (! (isset($po[&#039;po_id&#039;]) &amp;&amp; $po[&#039;po_id&#039;]))
    alert(&#039;po_id 값이 제대로 넘어오지 않았습니다.&#039;);

if ($member[&#039;mb_level&#039;] &lt; $po[&#039;po_level&#039;])
    alert_close(&#039;권한 &#039;.$po[&#039;po_level&#039;].&#039; 이상 회원만 투표에 참여하실 수 있습니다.&#039;);

$gb_poll = isset($_POST[&#039;gb_poll&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, $_POST[&#039;gb_poll&#039;]) : 0;
if(!$gb_poll)
    alert_close(&#039;항목을 선택하세요.&#039;);

$post_skin_dir = isset($_POST[&#039;skin_dir&#039;]) ? clean_xss_tags($_POST[&#039;skin_dir&#039;], 1, 1) : &#039;&#039;;
$result_url = G5_BBS_URL.&quot;/poll_result.php?po_id=$po_id&amp;skin_dir={$post_skin_dir}&quot;;

// 레이스 컨디션 방지: MyISAM은 트랜잭션을 지원하지 않으므로,
// WHERE 조건에 중복 검증(FIND_IN_SET)을 포함한 원자적 UPDATE로 처리한다.
// 기존 투표자 목록에 없을 때만 갱신되며, 동시 요청이 와도 DB 서버 레벨에서 직렬화된다.
if ($is_member) {
    $sql = &quot; update {$g5[&#039;poll_table&#039;]}
                set po_cnt{$gb_poll} = po_cnt{$gb_poll} + 1,
                    mb_ids = concat(ifnull(mb_ids, &#039;&#039;), &#039;&quot;.$member[&#039;mb_id&#039;].&quot;,&#039;)
              where po_id = &#039;$po_id&#039;
                and find_in_set(&#039;&quot;.$member[&#039;mb_id&#039;].&quot;&#039;, ifnull(mb_ids, &#039;&#039;)) = 0 &quot;;
} else {
    $sql = &quot; update {$g5[&#039;poll_table&#039;]}
                set po_cnt{$gb_poll} = po_cnt{$gb_poll} + 1,
                    po_ips = concat(ifnull(po_ips, &#039;&#039;), &#039;&quot;.$_SERVER[&#039;REMOTE_ADDR&#039;].&quot;,&#039;)
              where po_id = &#039;$po_id&#039;
                and find_in_set(&#039;&quot;.$_SERVER[&#039;REMOTE_ADDR&#039;].&quot;&#039;, ifnull(po_ips, &#039;&#039;)) = 0 &quot;;
}
sql_query($sql);

if (get_sql_affected_rows() &lt;= 0) {
    alert(addcslashes($po[&#039;po_subject&#039;], &#039;&quot;\\/&#039;).&#039;에 이미 참여하셨습니다.&#039;, $result_url);
}

insert_point($member[&#039;mb_id&#039;], $po[&#039;po_point&#039;], $po[&#039;po_id&#039;] . &#039;. &#039; . cut_str($po[&#039;po_subject&#039;],20) . &#039; 투표 참여 &#039;, &#039;@poll&#039;, $po[&#039;po_id&#039;], &#039;투표&#039;);

//goto_url($g5[&#039;bbs_url&#039;].&#039;/poll_result.php?po_id=&#039;.$po_id.&#039;&amp;amp;skin_dir=&#039;.$skin_dir);
goto_url($result_url);</pre>