OLDBOY/skin/board/backup/write_update.skin.php



<title>OLDBOY/skin/board/backup/write_update.skin.php</title>


<div class="header">OLDBOY/skin/board/backup/write_update.skin.php</div>
<pre>﻿&lt;?php
if (!defined(&#039;_GNUBOARD_&#039;)) exit; // 개별 실행 방지

// ── 1. 변수 정제 (XSS 방지) ──────────────────────────────────
$x2_ver  = isset($_POST[&#039;x2_ver&#039;])  ? clean_xss_tags(trim($_POST[&#039;x2_ver&#039;]))  : &#039;&#039;;
$x2_ca2  = isset($_POST[&#039;x2_ca2&#039;])  ? clean_xss_tags(trim($_POST[&#039;x2_ca2&#039;]))  : &#039;&#039;;
$x2_ca3  = isset($_POST[&#039;x2_ca3&#039;])  ? clean_xss_tags(trim($_POST[&#039;x2_ca3&#039;]))  : &#039;&#039;;
$x2_ca4  = isset($_POST[&#039;x2_ca4&#039;])  ? clean_xss_tags(trim($_POST[&#039;x2_ca4&#039;]))  : &#039;&#039;;

// 토글 스위치 (hidden + checkbox 쌍 → 마지막 값 사용)
$x2_top   = (isset($_POST[&#039;x2_top&#039;])   &amp;&amp; $_POST[&#039;x2_top&#039;]   == &#039;1&#039;) ? &#039;1&#039; : &#039;0&#039;;
$x2_label = (isset($_POST[&#039;x2_label&#039;]) &amp;&amp; $_POST[&#039;x2_label&#039;] == &#039;1&#039;) ? &#039;1&#039; : &#039;0&#039;;
$x2_ok    = (isset($_POST[&#039;x2_ok&#039;])    &amp;&amp; $_POST[&#039;x2_ok&#039;]    == &#039;1&#039;) ? &#039;1&#039; : &#039;0&#039;;
$x2_set   = (isset($_POST[&#039;x2_set&#039;])   &amp;&amp; $_POST[&#039;x2_set&#039;]   == &#039;1&#039;) ? &#039;1&#039; : &#039;0&#039;;

// 메모
$x2_memo       = isset($_POST[&#039;x2_memo&#039;])       ? sql_real_escape_string($_POST[&#039;x2_memo&#039;])       : &#039;&#039;;
$x2_memo_clean = (isset($_POST[&#039;x2_memo_clean&#039;]) &amp;&amp; $_POST[&#039;x2_memo_clean&#039;] == &#039;1&#039;) ? &#039;1&#039; : &#039;0&#039;;
$x2_txt        = isset($_POST[&#039;x2_txt&#039;])        ? sql_real_escape_string($_POST[&#039;x2_txt&#039;])        : &#039;&#039;;

// ── 2. 날짜/시간 커스텀 업데이트 ─────────────────────────────
$add_sql = &quot;&quot;;
if (!empty($_POST[&#039;wr_date_custom&#039;]) &amp;&amp; !empty($_POST[&#039;wr_time_custom&#039;])) {
    $custom_datetime = preg_replace(&#039;/[^0-9\-: ]/&#039;, &#039;&#039;, &quot;{$_POST[&#039;wr_date_custom&#039;]} {$_POST[&#039;wr_time_custom&#039;]}&quot;);
    $add_sql = &quot; , wr_datetime = &#039;{$custom_datetime}&#039; &quot;;
}

// ── 3. 업데이트 쿼리 ─────────────────────────────────────────
$sql = &quot; UPDATE {$write_table}
            SET x2_ver        = &#039;{$x2_ver}&#039;,
                x2_ca2        = &#039;{$x2_ca2}&#039;,
                x2_ca3        = &#039;{$x2_ca3}&#039;,
                x2_ca4        = &#039;{$x2_ca4}&#039;,
                x2_top        = &#039;{$x2_top}&#039;,
                x2_label      = &#039;{$x2_label}&#039;,
                x2_ok         = &#039;{$x2_ok}&#039;,
                x2_set        = &#039;{$x2_set}&#039;,
                x2_memo       = &#039;{$x2_memo}&#039;,
                    x2_memo_clean = &#039;{$x2_memo_clean}&#039;,
                    x2_txt        = &#039;{$x2_txt}&#039;
                {$add_sql}
          WHERE wr_id = &#039;{$wr_id}&#039; &quot;;

sql_query($sql);
?&gt;
</pre>