ZIP/X2/extend/g5_54version_update.extend.php



<title>ZIP/X2/extend/g5_54version_update.extend.php</title>


<div class="header">ZIP/X2/extend/g5_54version_update.extend.php</div>
<pre>&lt;?php
if (!defined(&#039;_GNUBOARD_&#039;)) exit; // 개별 페이지 접근 불가

add_event(&#039;memo_list&#039;, &#039;g54_user_memo_insert&#039;, 10, 3);
add_event(&#039;password_is_wrong&#039;, &#039;g54_check_bbs_password&#039;, 10, 3);
add_replace(&#039;invalid_password&#039;, &#039;g54_return_invalid_password&#039;, 10, 3);

function g54_return_invalid_password($bool, $type, $wr){
    if($type === &#039;write&#039; &amp;&amp; $bool === false &amp;&amp; $wr[&#039;wr_password&#039;] &amp;&amp; isset($_POST[&#039;wr_password&#039;])) {
        if(G5_STRING_ENCRYPT_FUNCTION === &#039;create_hash&#039; &amp;&amp; (strlen($wr[&#039;wr_password&#039;]) === G5_MYSQL_PASSWORD_LENGTH || strlen($wr[&#039;wr_password&#039;]) === 16)) {
            if( sql_password($_POST[&#039;wr_password&#039;]) === $wr[&#039;wr_password&#039;] ){
                $bool = true;
            }
        }
    }

    return $bool;
}

function g54_check_bbs_password($type, $wr, $qstr=&#039;&#039;){
    if($type === &#039;bbs&#039; &amp;&amp; (isset($wr[&#039;wr_password&#039;]) &amp;&amp; $wr[&#039;wr_password&#039;]) &amp;&amp; isset($_POST[&#039;wr_password&#039;])) {

        global $bo_table, $w;

        if(G5_STRING_ENCRYPT_FUNCTION === &#039;create_hash&#039; &amp;&amp; (strlen($wr[&#039;wr_password&#039;]) === G5_MYSQL_PASSWORD_LENGTH || strlen($wr[&#039;wr_password&#039;]) === 16)) {
            if( sql_password($_POST[&#039;wr_password&#039;]) === $wr[&#039;wr_password&#039;] ){
                if ($w == &#039;s&#039;) {
                    $ss_name = &#039;ss_secret_&#039;.$bo_table.&#039;_&#039;.$wr[&#039;wr_num&#039;];
                    set_session($ss_name, TRUE);
                } else if ($w == &#039;sc&#039;){
                    $ss_name = &#039;ss_secret_comment_&#039;.$bo_table.&#039;_&#039;.$wr[&#039;wr_id&#039;];
                    set_session($ss_name, TRUE);
                }
                goto_url(short_url_clean(G5_HTTP_BBS_URL.&#039;/board.php?&#039;.$qstr));
            }
        }
    }
}

function g54_user_memo_insert($kind, $unkind, $page=1){
    global $g5, $is_member, $member;

    if( ! $is_member || $kind !== &#039;send&#039; ) return;

    $sql = &quot; select count(*) as cnt from {$g5[&#039;memo_table&#039;]} where me_send_mb_id = &#039;{$member[&#039;mb_id&#039;]}&#039; and me_type = &#039;recv&#039; and me_send_ip = &#039;&#039; &quot;;
    $row = sql_fetch($sql);

    if ( !$row[&#039;cnt&#039;] ) return;

    $sql = &quot; select count(*) as cnt from {$g5[&#039;memo_table&#039;]} where me_send_mb_id = &#039;{$member[&#039;mb_id&#039;]}&#039; and me_type = &#039;send&#039; &quot;;
    $row2 = sql_fetch($sql);

    if( $row[&#039;cnt&#039;] &amp;&amp; ! $row2[&#039;cnt&#039;] ){
        $sql = &quot; select * from {$g5[&#039;memo_table&#039;]} where me_send_mb_id = &#039;{$member[&#039;mb_id&#039;]}&#039; and me_type = &#039;recv&#039; &quot;;
        $result = sql_query($sql);

        while ($row = sql_fetch_array($result))
        {
            $sql = &quot; insert into {$g5[&#039;memo_table&#039;]} ( me_recv_mb_id, me_send_mb_id, me_send_datetime, me_read_datetime, me_memo, me_send_id, me_type ) values ( &#039;&quot;.addslashes($row[&#039;me_recv_mb_id&#039;]).&quot;&#039;, &#039;&quot;.addslashes($row[&#039;me_send_mb_id&#039;]).&quot;&#039;, &#039;&quot;.addslashes($row[&#039;me_send_datetime&#039;]).&quot;&#039;, &#039;&quot;.addslashes($row[&#039;me_read_datetime&#039;]).&quot;&#039;, &#039;&quot;.addslashes($row[&#039;me_memo&#039;]).&quot;&#039;, &#039;&quot;.$row[&#039;me_id&#039;].&quot;&#039;, &#039;send&#039; ) &quot;;

            sql_query($sql);
        }

        $sql = &quot; update {$g5[&#039;memo_table&#039;]} set me_send_ip = &#039;{$_SERVER[&#039;REMOTE_ADDR&#039;]}&#039; where me_send_mb_id = &#039;{$member[&#039;mb_id&#039;]}&#039; and me_type = &#039;recv&#039; and me_send_ip = &#039;&#039; &quot;;

        sql_query($sql);
    }

}</pre>