} else { if ($member[mb_id]) { if ($member[mb_id] != $write[mb_id]) { alert("자신의 글이 아니므로 삭제할 수 없습니다."); } } else { if (sql_password($wr_password) != $write[wr_password]) { alert("패스워드가 틀립니다."); } } } } } $len = strlen($write[wr_comment_reply]); if ($len < 0) { $len = 0; } $comment_reply = substr($write[wr_comment_reply], 0, $len); $sql = " select count(*) as cnt from {$write_table}\n where wr_comment_reply like '{$comment_reply}%'\n and wr_id <> '{$comment_id}'\n and wr_parent = '{$write['wr_parent']}'\n and wr_comment = '{$write['wr_comment']}'\n and wr_is_comment = 1 "; $row = sql_fetch($sql); if ($row[cnt] && !$is_admin) { alert("이 코멘트와 관련된 답변코멘트가 존재하므로 삭제 할 수 없습니다."); } mw_delete_row($board, $write); // 사용자 코드 실행 @(include_once "{$board_skin_path}/delete_comment.skin.php"); // 4.1 @(include_once "{$board_skin_path}/delete_comment.tail.skin.php"); $url = mw_bbs_path("./board.php?bo_table={$bo_table}&wr_id={$write['wr_parent']}&cwin={$cwin}&page={$page}" . $qstr); goto_url($url); exit;
$str = preg_replace("/\\[\\<a\\s.*href\\=\"(http|https|ftp|mms)\\:\\/\\/([^[:space:]]+)\\.(mp3|wma|wmv|asf|asx|mpg|mpeg)\".*\\<\\/a\\>\\]/i", "<script>doc_write(obj_movie('\$1://\$2.\$3'));</script>", $str); // FLASH XSS 공격에 의해 주석 처리 //$str = preg_replace("/\[\<a\s.*href\=\"(http|https|ftp)\:\/\/([^[:space:]]+)\.(swf)\".*\<\/a\>\]/i", "<script>doc_write(flash_movie('$1://$2.$3'));</script>", $str); // 검색시 적용안되는 문제 //$str = preg_replace("/\[\<a\s*href\=\"(http|https|ftp)\:\/\/([^[:space:]]+)\.(gif|png|jpg|jpeg|bmp)\"\s*[^\>]*\>[^\s]*\<\/a\>\]/i", "<img src='$1://$2.$3' id='target_resize_image[]' onclick='image_window(this);'>", $str); $str = preg_replace("/\\[\\<a\\s*href\\=\"(http|https|ftp)\\:\\/\\/([^[:space:]]+)\\.(gif|png|jpg|jpeg|bmp)\"\\s*[^\\>]*\\>.*\\<\\/a\\>\\]/iUs", "<img src='\$1://\$2.\$3' id='target_resize_image[]' onclick='image_window(this);'>", $str); $str = preg_replace("/\\[\\<a\\s*href\\=\"(http|https|ftp)\\:\\/\\/([^[:space:]]+)\\.(gif|png|jpg|jpeg|bmp)\\]\"\\s*[^\\>]*\\>.*\\]\\<\\/a\\>/iUs", "<img src='\$1://\$2.\$3' id='target_resize_image[]' onclick='image_window(this);'>", $str); $str = preg_replace_callback("/\\[code\\](.*)\\[\\/code\\]/iU", "_preg_callback", $str); $row[content] = $str; if (!$mw_basic['cf_time_comment']) { $mw_basic['cf_time_comment'] = "Y-m-d (w) H:i"; } $row['datetime2'] = mw_get_date($row['wr_datetime'], $mw_basic['cf_time_comment']); $row['datetime_sns'] = mw_get_date($row['wr_datetime'], 'sns'); if ($row[del_link]) { $row[del_link] = mw_bbs_path($row[del_link]); } $row[content] = preg_replace("/(\\[@[^\\]]+\\])/iUs", "<span style='font-weight:bold;'>\\1</span>", $row[content]); if ($mw_basic['cf_rate_level'] && $row['wr_rate'] > 0) { ob_start(); ?> <div id="star_rate_<?php echo $row['wr_id']; ?> " style="margin:0 0 10px 0;"></div> <script> $(document).ready(function () { $("#star_rate_<?php echo $row['wr_id']; ?> ").mw_star_rate({
$reply_href = mw_bbs_path($reply_href); } if ($delete_href) { $delete_href = mw_bbs_path($delete_href); } if ($prev_part_href) { $prev_part_href = mw_bbs_path($prev_part_href); } if ($next_part_href) { $next_part_href = mw_bbs_path($next_part_href); } if ($prev_href) { $prev_href = mw_bbs_path($prev_href); } if ($next_href) { $next_href = mw_bbs_path($next_href); } if ($mw['config']['cf_seo_url']) { //$mw_basic['cf_umz'] = null; //$mw_basic['cf_shorten'] = 1; $list_href = mw_seo_url($bo_table, 0); if ($page) { $list_href .= '?page=' . $page; } if ($search_href) { $search_href = mw_seo_url($bo_table, 0, "&page={$page}" . $qstr); } if ($prev_part_href) { $prev_part_href = mw_seo_bbs_path($prev_part_href); } if ($next_part_href) {