<?
$sub_menu = "300100";
include_once("./_common.php");

if ($w == 'u')
    check_demo();

auth_check($auth[$sub_menu], "w");

if ($member[mb_password] !== sql_password($_POST['admin_password'])) {
    alert("패스워드가 다릅니다.");
}

if (!$_POST[gr_id]) { alert("그룹 ID는 반드시 선택하세요."); }
if (!$bo_table) { alert("게시판 TABLE명은 반드시 입력하세요."); }
if (!preg_match("/^([A-Za-z0-9_]{1,20})$/", $bo_table)) { alert("게시판 TABLE명은 공백없이 영문자, 숫자, _ 만 사용 가능합니다. (20자 이내)"); }
if (!$_POST[bo_subject]) { alert("게시판 제목을 입력하세요."); }

if ($img = $_FILES[bo_image_head][name]) {
    if (!preg_match("/\.(gif|jpg|png)$/i", $img)) {
        alert("상단 이미지가 gif, jpg, png 파일이 아닙니다.");
    }
}

if ($img = $_FILES[bo_image_tail][name]) {
    if (!preg_match("/\.(gif|jpg|png)$/i", $img)) {
        alert("하단 이미지가 gif, jpg, png 파일이 아닙니다.");
    }
}

$_POST[bo_include_head] = substr($_POST[bo_include_head], 0, 255);
$_POST[bo_include_tail] = substr($_POST[bo_include_tail], 0, 255);

if ($file = $_POST[bo_include_head]) {
    $purl = parse_url($file);
    $file = $purl['path'];
    if (!preg_match("/\.(php|htm[l]?)$/i", $file)) {
        alert("상단 파일 경로가 php, html 파일이 아닙니다.");
    }
    $_POST[bo_include_head] = $file;
}

if ($file = $_POST[bo_include_tail]) {
    $purl = parse_url($file);
    $file = $purl['path'];
    if (!preg_match("/\.(php|htm[l]?)$/i", $file)) {
        alert("하단 파일 경로가 php, html 파일이 아닙니다.");
    }
    $_POST[bo_include_tail] = $file;
}

check_token();

//-- 지음빌더에서 cwin(댓글 새창)은 필수 사용
$_POST[bo_use_comment]	= 1;

$board_path = "$g4[path]/data/file/$bo_table";

// 게시판 디렉토리 생성
@mkdir($board_path, 0707);
@chmod($board_path, 0707);

// 디렉토리에 있는 파일의 목록을 보이지 않게 한다.
$file = $board_path . "/index.php";
$f = @fopen($file, "w");
@fwrite($f, "");
@fclose($f);
@chmod($file, 0606);

//-- SE, 에디터로 인해 <br> 또는 <p> 태그 하나만 생성 됐을 때는 이를 제거 2013. 03.
if(strtolower($_POST[bo_content_head]) == "<br>" || strtolower($_POST[bo_content_head]) == "<p>") $_POST[bo_content_head] = "";
if(strtolower($_POST[bo_content_tail]) == "<br>" || strtolower($_POST[bo_content_tail]) == "<p>") $_POST[bo_content_tail] = "";

// 분류에 & 나 = 는 사용이 불가하므로 2바이트로 바꾼다.
$src_char = array('&', '=');
$dst_char = array('＆', '〓'); 
$bo_category_list = str_replace($src_char, $dst_char, $bo_category_list);

$sql_common = " gr_id               = '$_POST[gr_id]',
                bo_subject          = '$_POST[bo_subject]',
                bo_admin            = '$_POST[bo_admin]',
                bo_list_level       = '$_POST[bo_list_level]',
                bo_read_level       = '$_POST[bo_read_level]',
                bo_write_level      = '$_POST[bo_write_level]',
                bo_reply_level      = '$_POST[bo_reply_level]',
                bo_comment_level    = '$_POST[bo_comment_level]',
                bo_html_level       = '$_POST[bo_html_level]',
                bo_link_level       = '$_POST[bo_link_level]',
                bo_trackback_level  = '$_POST[bo_trackback_level]',
                bo_count_modify     = '$_POST[bo_count_modify]',
                bo_count_delete     = '$_POST[bo_count_delete]',
                bo_upload_level     = '$_POST[bo_upload_level]',
                bo_download_level   = '$_POST[bo_download_level]',
                bo_read_point       = '$_POST[bo_read_point]',
                bo_write_point      = '$_POST[bo_write_point]',
                bo_comment_point    = '$_POST[bo_comment_point]',
                bo_download_point   = '$_POST[bo_download_point]',
                bo_use_category     = '$_POST[bo_use_category]',
                bo_category_list    = '$_POST[bo_category_list]',
                bo_disable_tags     = '$_POST[bo_disable_tags]',
                bo_use_sideview     = '$_POST[bo_use_sideview]',
                bo_use_file_content = '$_POST[bo_use_file_content]',
                bo_use_secret       = '$_POST[bo_use_secret]',
                bo_use_dhtml_editor = '$_POST[bo_use_dhtml_editor]',
                bo_use_rss_view     = '$_POST[bo_use_rss_view]',
                bo_use_comment      = '$_POST[bo_use_comment]',
                bo_use_good         = '$_POST[bo_use_good]',
                bo_use_nogood       = '$_POST[bo_use_nogood]',
                bo_use_name         = '$_POST[bo_use_name]',
                bo_use_signature    = '$_POST[bo_use_signature]',
                bo_use_ip_view      = '$_POST[bo_use_ip_view]',
                bo_use_trackback    = '$_POST[bo_use_trackback]',
                bo_use_list_view    = '$_POST[bo_use_list_view]',
                bo_use_list_content = '$_POST[bo_use_list_content]',
                bo_use_email        = '$_POST[bo_use_email]',
                bo_table_width      = '$_POST[bo_table_width]',
                bo_subject_len      = '$_POST[bo_subject_len]',
                bo_page_rows        = '$_POST[bo_page_rows]',
                bo_new              = '$_POST[bo_new]',
                bo_hot              = '$_POST[bo_hot]',
                bo_image_width      = '$_POST[bo_image_width]',
                bo_skin             = '$_POST[bo_skin]',
                bo_include_head     = '$_POST[bo_include_head]',
                bo_include_tail     = '$_POST[bo_include_tail]',
                bo_content_head     = '$_POST[bo_content_head]',
                bo_content_tail     = '$_POST[bo_content_tail]',
                bo_insert_content   = '$_POST[bo_insert_content]',
                bo_gallery_cols     = '$_POST[bo_gallery_cols]',
                bo_upload_count     = '$_POST[bo_upload_count]',
                bo_upload_size      = '$_POST[bo_upload_size]',
                bo_reply_order      = '$_POST[bo_reply_order]',
                bo_use_search       = '$_POST[bo_use_search]',
                bo_order_search     = '$_POST[bo_order_search]',
                bo_write_min        = '$_POST[bo_write_min]',
                bo_write_max        = '$_POST[bo_write_max]',
                bo_comment_min      = '$_POST[bo_comment_min]',
                bo_comment_max      = '$_POST[bo_comment_max]',
                bo_sort_field       = '$_POST[bo_sort_field]',
                bo_1_subj           = '$_POST[bo_1_subj]',
                bo_2_subj           = '$_POST[bo_2_subj]',
                bo_3_subj           = '$_POST[bo_3_subj]',
                bo_4_subj           = '$_POST[bo_4_subj]',
                bo_5_subj           = '$_POST[bo_5_subj]',
                bo_6_subj           = '$_POST[bo_6_subj]',
                bo_7_subj           = '$_POST[bo_7_subj]',
                bo_8_subj           = '$_POST[bo_8_subj]',
                bo_9_subj           = '$_POST[bo_9_subj]',
                bo_10_subj          = '$_POST[bo_10_subj]',
                bo_1                = '$_POST[bo_1]',
                bo_2                = '$_POST[bo_2]',
                bo_3                = '$_POST[bo_3]',
                bo_4                = '$_POST[bo_4]',
                bo_5                = '$_POST[bo_5]',
                bo_6                = '$_POST[bo_6]',
                bo_7                = '$_POST[bo_7]',
                bo_8                = '$_POST[bo_8]',
                bo_9                = '$_POST[bo_9]',
                bo_10               = '$_POST[bo_10]' ";

if ($bo_image_head_del) {
    @unlink("$board_path/$bo_image_head_del");
    $sql_common .= " , bo_image_head = '' ";
}

if ($bo_image_tail_del) {
    @unlink("$board_path/$bo_image_tail_del");
    $sql_common .= " , bo_image_tail = '' ";
}

if ($_FILES[bo_image_head][name]) {
    //$bo_image_head_urlencode = urlencode($_FILES[bo_image_head][name]);
    $bo_image_head_urlencode = $bo_table."_head_".time();
    $sql_common .= " , bo_image_head = '$bo_image_head_urlencode' ";
}

if ($_FILES[bo_image_tail][name]) {
    //$bo_image_tail_urlencode = urlencode($_FILES[bo_image_tail][name]);
    $bo_image_tail_urlencode = $bo_table."_tail_".time();
    $sql_common .= " , bo_image_tail = '$bo_image_tail_urlencode' ";
}

if ($w == "") {
    $row = sql_fetch(" select count(*) as cnt from $g4[board_table] where bo_table = '$bo_table' ");
    if ($row[cnt])
        alert("{$bo_table} 은(는) 이미 존재하는 TABLE 입니다.");

    $sql = " insert into $g4[board_table]
                set bo_table = '$bo_table',
                    bo_count_write = '0',
                    bo_count_comment = '0',
                    $sql_common ";
    sql_query($sql);

    // 게시판 테이블 생성
    $file = file("./sql_write.sql");
    $sql = implode($file, "\n");

    $create_table = $g4[write_prefix] . $bo_table;

    // sql_board.sql 파일의 테이블명을 변환
    $source = array("/__TABLE_NAME__/", "/;/");
    $target = array($create_table, "");
    $sql = preg_replace($source, $target, $sql);
    sql_query($sql, FALSE);
} else if ($w == "u") {
    // 게시판의 글 수
    $sql = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_is_comment = 0 ";
    $row = sql_fetch($sql);
    $bo_count_write = $row[cnt];

    // 게시판의 코멘트 수
    $sql = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_is_comment = 1 ";
    $row = sql_fetch($sql);
    $bo_count_comment = $row[cnt];

    // 글수 조정
    if ($proc_count) {
        // 원글을 얻습니다.
        $sql = " select wr_id from $g4[write_prefix]$bo_table where wr_is_comment = 0 ";
        $result = sql_query($sql);
        for ($i=0; $row=sql_fetch_array($result); $i++) {
            // 코멘트수를 얻습니다.
            $sql2 = " select count(*) as cnt from $g4[write_prefix]$bo_table where wr_parent = '$row[wr_id]' and wr_is_comment = 1 ";
            $row2 = sql_fetch($sql2);

            sql_query(" update $g4[write_prefix]$bo_table set wr_comment = '$row2[cnt]' where wr_id = '$row[wr_id]' ");
        }
    }

    // 공지사항에는 등록되어 있지만 실제 존재하지 않는 글 아이디는 삭제합니다.
    $bo_notice = "";
    $lf = "";
    if ($board[bo_notice]) {
        $tmp_array = explode("\n", $board[bo_notice]);
        for ($i=0; $i<count($tmp_array); $i++) {
            $tmp_wr_id = trim($tmp_array[$i]);
            $row = sql_fetch(" select count(*) as cnt from $g4[write_prefix]$bo_table where wr_id = '$tmp_wr_id' ");
            if ($row[cnt]) 
            {
                $bo_notice .= $lf . $tmp_wr_id;
                $lf = "\n";
            }
        }
    }

    $sql = " update $g4[board_table]
                set bo_notice = '$bo_notice',
                    bo_count_write = '$bo_count_write',
                    bo_count_comment = '$bo_count_comment',
                    $sql_common
              where bo_table = '$bo_table' ";
    sql_query($sql);

	//-- 모바일 스킨
	sql_query("update $zmb[table_board_config] set db_value='$m_skin' where db_table='$bo_table' and db_variable='m_skin'");
}


// 같은 그룹내 게시판 동일 옵션 적용
$s = "";
if ($chk_admin) $s .= " , bo_admin = '$bo_admin' ";
if ($chk_list_level) $s .= " , bo_list_level = '$bo_list_level' ";
if ($chk_read_level) $s .= " , bo_read_level = '$bo_read_level' ";
if ($chk_write_level) $s .= " , bo_write_level = '$bo_write_level' ";
if ($chk_reply_level) $s .= " , bo_reply_level = '$bo_reply_level' ";
if ($chk_comment_level) $s .= " , bo_comment_level = '$bo_comment_level' ";
if ($chk_link_level) $s .= " , bo_link_level = '$bo_link_level' ";
if ($chk_upload_level) $s .= " , bo_upload_level = '$bo_upload_level' ";
if ($chk_download_level) $s .= " , bo_download_level = '$bo_download_level' ";
if ($chk_html_level) $s .= " , bo_html_level = '$bo_html_level' ";
if ($chk_trackback_level) $s .= " , bo_trackback_level = '$bo_trackback_level' ";
if ($chk_count_modify) $s .= " , bo_count_modify = '$bo_count_modify' ";
if ($chk_count_delete) $s .= " , bo_count_delete = '$bo_count_delete' ";
if ($chk_read_point) $s .= " , bo_read_point = '$bo_read_point' ";
if ($chk_write_point) $s .= " , bo_write_point = '$bo_write_point' ";
if ($chk_comment_point) $s .= " , bo_comment_point = '$bo_comment_point' ";
if ($chk_download_point) $s .= " , bo_download_point = '$bo_download_point' ";
if ($chk_category_list) {
    $s .= " , bo_category_list = '$bo_category_list' ";
    $s .= " , bo_use_category = '$bo_use_category' ";
}
if ($chk_use_sideview) $s .= " , bo_use_sideview = '$bo_use_sideview' ";
if ($chk_use_file_content) $s .= " , bo_use_file_content = '$bo_use_file_content' ";
if ($chk_use_comment) $s .= " , bo_use_comment = '$bo_use_comment' ";
if ($chk_use_secret) $s .= " , bo_use_secret = '$bo_use_secret' ";
if ($chk_use_dhtml_editor) $s .= " , bo_use_dhtml_editor = '$bo_use_dhtml_editor' ";
if ($chk_use_rss_view) $s .= " , bo_use_rss_view = '$bo_use_rss_view' ";
if ($chk_use_good) $s .= " , bo_use_good = '$bo_use_good' ";
if ($chk_use_nogood) $s .= " , bo_use_nogood = '$bo_use_nogood' ";
if ($chk_use_name) $s .= " , bo_use_name = '$bo_use_name' ";
if ($chk_use_signature) $s .= " , bo_use_signature = '$bo_use_signature' ";
if ($chk_use_ip_view) $s .= " , bo_use_ip_view = '$bo_use_ip_view' ";
if ($chk_use_trackback) $s .= " , bo_use_trackback = '$bo_use_trackback' ";
if ($chk_use_list_view) $s .= " , bo_use_list_view = '$bo_use_list_view' ";
if ($chk_use_list_content) $s .= " , bo_use_list_content = '$bo_use_list_content' ";
if ($chk_use_email) $s .= " , bo_use_email = '$bo_use_email' ";
if ($chk_skin) $s .= " , bo_skin = '$bo_skin' ";
if ($chk_gallery_cols) $s .= " , bo_gallery_cols = '$bo_gallery_cols' ";
if ($chk_table_width) $s .= " , bo_table_width = '$bo_table_width' ";
if ($chk_page_rows) $s .= " , bo_page_rows = '$bo_page_rows' ";
if ($chk_subject_len) $s .= " , bo_subject_len = '$bo_subject_len' ";
if ($chk_new) $s .= " , bo_new = '$bo_new' ";
if ($chk_hot) $s .= " , bo_hot = '$bo_hot' ";
if ($chk_image_width) $s .= " , bo_image_width = '$bo_image_width' ";
if ($chk_reply_order) $s .= " , bo_reply_order = '$bo_reply_order' ";
if ($chk_disable_tags) $s .= " , bo_disable_tags = '$bo_disable_tags' ";
if ($chk_sort_field) $s .= " , bo_sort_field = '$bo_sort_field' ";
if ($chk_write_min) $s .= " , bo_write_min = '$bo_write_min' ";
if ($chk_write_max) $s .= " , bo_write_max = '$bo_write_max' ";
if ($chk_comment_min) $s .= " , bo_comment_min = '$bo_comment_min' ";
if ($chk_comment_max) $s .= " , bo_comment_max = '$bo_comment_max' ";
if ($chk_upload_count) $s .= " , bo_upload_count = '$bo_upload_count' ";
if ($chk_upload_size) $s .= " , bo_upload_size = '$bo_upload_size' ";
if ($chk_include_head) $s .= " , bo_include_head = '$bo_include_head' ";
if ($chk_include_tail) $s .= " , bo_include_tail = '$bo_include_tail' ";
if ($chk_content_head) $s .= " , bo_content_head = '$bo_content_head' ";
if ($chk_content_tail) $s .= " , bo_content_tail = '$bo_content_tail' ";
if ($chk_insert_content) $s .= " , bo_insert_content = '$bo_insert_content' ";
if ($chk_use_search) $s .= " , bo_use_search = '$bo_use_search' ";
if ($chk_order_search) $s .= " , bo_order_search = '$bo_order_search' ";
for ($i=1; $i<=10; $i++) {
    if ($_POST["chk_{$i}"]) {
        $s .= " , bo_{$i}_subj = '".$_POST["bo_{$i}_subj"]."' ";
        $s .= " , bo_{$i} = '".$_POST["bo_{$i}"]."' ";
    }
}

if ($s) {
        $sql = " update $g4[board_table]
                    set bo_table = bo_table
                        {$s}
                  where gr_id = '$gr_id' ";
        sql_query($sql);
}


if ($_FILES[bo_image_head][name]) { 
    $bo_image_head_path = "$board_path/$bo_image_head_urlencode";
    move_uploaded_file($_FILES[bo_image_head][tmp_name], $bo_image_head_path);
    chmod($bo_image_head_path, 0606);
}

if ($_FILES[bo_image_tail][name]) { 
    $bo_image_tail_path = "$board_path/$bo_image_tail_urlencode";
    move_uploaded_file($_FILES[bo_image_tail][tmp_name], $bo_image_tail_path);
    chmod($bo_image_tail_path, 0606);
}

goto_url("./board_form.php?w=u&bo_table=$bo_table&$qstr");
?>
