Ghazascanner_2019runbot

/home/sanchung/public_html/admin/message/process.php

<?
session_start();

//환경 설정 파일
include "$_SERVER[DOCUMENT_ROOT]/admin/_setup.php";

$member_id = $_SESSION[MEMBER_ID];

switch($mode){

case"categoryadd":

$sql = "select * from message_addrbook where id='$member_id' && category='$category' ";
	$row = mysql_fetch_array(mysql_query($sql));

if($row) $lib->alert_back("이미 사용중인 그룹명입니다.");

$sql = "insert into message_addrbook(id, category, wdate) values('$member_id', '$category', now() )";
	mysql_query($sql);

echo"<script>
	opener.location.reload();
	location.replace('./add2.htm');
	</script>";

break;

case"categoryedit":

$sql = "select * from message_addrbook where id='$member_id' && category='$category' && num!='$num' ";
	$row = mysql_fetch_array(mysql_query($sql));

if($row) $lib->alert_back("이미 사용중인 그룹명입니다.");

$sql = " update message_addrbook set category='$category' where id='$member_id' && num='$num' ";
	mysql_query($sql);

$sql = " update message_address set category='$category' where id='$member_id' && category='$oldname' ";
	mysql_query($sql);

echo"<script>
	opener.location.reload();
	self.close();
	</script>";

break;

case"categorydel":

$sql = "delete from message_address where id='$member_id' && category='$category' ";
	mysql_query($sql);

$sql = "delete from message_addrbook where id='$member_id' && category='$category' ";
	mysql_query($sql);

echo"<script>
	location.replace('./address.htm');
	</script>";

break;

case"groupsend":

$sql = "select * from message_address where id='$member_id' && category='$category' ";
	$res = mysql_query($sql);
	$i = 0;
	while($row = mysql_fetch_array($res)){
		$ids[$i] = $row[mid];
	$i++;
	}

if($ids) $memid = implode(",", $ids);

echo"<form name='form' method='post' action='./message.htm'>
	<input type='hidden' name='memid' value='$memid'>
	</form>
	<script>
	form.submit();
	</script>
	";

break;

case"peradd":

$sql = "select num from message_address where id='$member_id' && mid='$id'  ";
	$row = mysql_fetch_array(mysql_query($sql));
	if($row) $lib->alert_back("주소록에 등록된 회원입니다.");

$sql = "select name, userid, email from yts_member where userid='$id' ";
	$row = mysql_fetch_array(mysql_query($sql));

$sql = "insert into message_address(id, category, mid, name, hp, email, office, memo, wdate) values('$member_id', '$category', '$id', '$row[name]', '$hp', '$row[email]', '$row[officename]', '$memo', now() )";
	mysql_query($sql);

echo"<script>
	opener.location.reload();
	location.replace('./add1.htm');
	</script>";

break;

case"delete";

if($category) $addsql = " && category='$category' ";

for($i=0; $i<sizeof($mid); $i++){
		$sql = "delete from message_address where id='$member_id' && mid='$mid[$i]' $addsql ";
		mysql_query($sql);
	}

echo"<script>
	location.replace('./address.htm');
	</script>";

break;

case"message_send":

$member_id = $_SESSION[MEMBER_ID];
	$member_name = $_SESSION[MEMBER_NAME];
	$member_email = $_SESSION[MEMBER_EMAIL];

$tid = explode(",", $memid);

//if($upfile_size > 0 && $upfile_name) $addfile = file_upload_rename($upfile, $upfile_name, $upfile_size, "./data/", mktime() );

for($i=0; $i<sizeof($tid); $i++){

if(!$tid[$i]) continue;

$sql = "select * from adw_member where userid='$tid[$i]'";
		$row = mysql_fetch_array(mysql_query($sql));

$rec_name = ($tid[$i] == "admin" && !$row[userid]) ? "관리자" : $row[name];

$sql = "insert into message(send_id, send_name, send_mail, send_date, rec_id, rec_name, rec_mail, subject, content, addfile) values(";
		$sql .= "'$member_id', '$member_name', '$member_email', now(), '$tid[$i]', '$rec_name', '$row[email]', '$subject', '$memo', '$addfile') ";

mysql_query($sql);

}

$lib->alert_go("메세지 발송을 완료 하였습니다. ", "./my2.htm");

break;

case"send_del":

$sql = "select rec_del, addfile from message where num='$num'";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[rec_del] == "Y"){
		if($row[addfile] && is_file("./data/$row[addfile]")) @unlink("./data/$row[addfile]");

$sql = "delete from message where num='$num' ";
	} else $sql = "update message set send_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "../?amode=member_send_list&page=$page");

break;

case"rec_del":

$sql = "select send_del, addfile from message where num='$num' ";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[send_del] == "Y"){
		if($row[addfile] && is_file("./data/$row[addfile]")) @unlink("./data/$row[addfile]");

$sql = "delete from message where num='$num' ";
	} else $sql = "update message set rec_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "../?amode=member_get_list&page=$page");

break;

case"rec_del_u":

$sql = "select send_del, addfile from message where num='$num' ";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[send_del] == "Y"){
		if($row[addfile] && is_file("./data/$row[addfile]")) @unlink("./data/$row[addfile]");

$sql = "delete from message where num='$num' ";
	} else $sql = "update message set rec_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "./my1.htm?page=$page");

break;

case"send_del_s":

$sql = "select rec_del from message where num='$num'";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[rec_del] == "Y") $sql = "delete from message where num='$num' ";
	else $sql = "update message set send_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "./my2.htm");

break;

case"send_del_s":

$sql = "select rec_del from message where num='$num'";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[rec_del] == "Y") $sql = "delete from message where num='$num' ";
	else $sql = "update message set send_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "./my1.htm");

break;

case"rec_del_s":

$sql = "select send_del from message where num='$num' ";
	$row = mysql_fetch_array(mysql_query($sql));

if($row[send_del] == "Y") $sql = "delete from message where num='$num' ";
	else $sql = "update message set rec_del='Y' where num='$num' ";

mysql_query($sql);

$lib->alert_go("메세지 삭제를 완료 하였습니다. ", "./my1.htm");

break;

}

@Ghazascanner_2019runbot

Ghazascanner File Manager