사용후기에 이미지 첨부 (사용자 화면만 해당)

shop/itemuse.inc.php 를


<?
if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가
?>

<!-- 사용후기 -->
<a name="use"></a>
<div id='item_use' style='display:block;'>
<table width=100% cellpadding=0 cellspacing=0>
<tr><td rowspan=2 width=31 valign=top bgcolor=#BDD3E5><img src='<?=$g4[shop_img_path]?>/item_t02.gif'></td><td height=2 bgcolor=#BDD3E5></td></tr>
<tr><td style='padding:15px;'>
        <table width=100% cellpadding=0 cellspacing=0 border=0>
        <tr>
            <td width=11><img src='<?=$g4[shop_img_path]?>/corner01.gif'></td>
            <td valign=top>
                <table width=100% height=31 cellpadding=0 cellspacing=0 border=0>
                <tr align=center>
                    <td width=40 background='<?=$g4[shop_img_path]?>/box_bg01.gif'>번호</td>
                    <td background='<?=$g4[shop_img_path]?>/box_bg01.gif'>제목</td>
                    <td width=80 background='<?=$g4[shop_img_path]?>/box_bg01.gif'>작성자</td>
                    <td width=100 background='<?=$g4[shop_img_path]?>/box_bg01.gif'>작성일</td>
                    <td width=80 background='<?=$g4[shop_img_path]?>/box_bg01.gif'>평가점수</td>
                </tr>
                </table></td>           
            <td width=11><img src='<?=$g4[shop_img_path]?>/corner02.gif'></td>
        </tr>
        <?
        $sql_common = " from $g4[yc4_item_ps_table] where it_id = '$it[it_id]' and is_confirm = '1' ";

        // 테이블의 전체 레코드수만 얻음
        $sql = " select COUNT(*) as cnt " . $sql_common;
        $row = sql_fetch($sql);
        $use_total_count = $row[cnt];

        $use_total_page  = ceil($use_total_count / $use_page_rows); // 전체 페이지 계산
        if ($use_page == "") $use_page = 1; // 페이지가 없으면 첫 페이지 (1 페이지)
        $use_from_record = ($use_page - 1) * $use_page_rows; // 시작 레코드 구함

        $sql = "select * $sql_common order by is_id desc limit $use_from_record, $use_page_rows ";
        $result = sql_query($sql);
        for ($i=0; $row=sql_fetch_array($result); $i++)
        {
            if ($i > 0)
                echo "<tr><td colspan=3 background='$g4[shop_img_path]/dot_line.gif'></td></tr>";

            $num = $use_total_count - ($use_page - 1) * $use_page_rows - $i;

            $star = get_star($row[is_score]);

            $is_name = get_text($row[is_name]);
            $is_subject = conv_subject($row[is_subject],50,"…");
            $is_content = conv_content($row[is_content],0);

            $is_img = "";
            $itemuse_img = "$g4[path]/data/itemuse/$row[is_id]";
            if (file_exists($itemuse_img))
                $is_img = "<div><img src='$itemuse_img'></div>";

            $is_time = substr($row[is_time], 2, 14);

            echo "
            <tr>
                <td width=11 background='$g4[shop_img_path]/box_bg02.gif'></td>
                <td valign=top>
                    <table width=100% cellpadding=0 cellspacing=0 border=0>
                    <tr align=center>
                        <td width=40 height=25>$num</td>
                        <td align=left>
                            <b><a href='javascript:;' onclick=\"use_menu('is$i')\"><b>$is_subject</b></a></b>
                        <td width=80>$is_name</td>
                        <td width=100>$is_time</td>
                        <td width=80><img src='$g4[shop_img_path]/star{$star}.gif' border=0></td>
                    </tr>
                    </table>
               
                    <div id='is$i' style='display:none;'>
                    <table width=100% cellpadding=0 cellspacing=0 border=0>
                    <tr>
                        <td style='padding:10px;' class=lh>
                            {$is_content}
                            {$is_img}
                        </td>
                    </tr>
                    <tr>
                        <td align=right height=30>
                            <textarea id='tmp_is_id{$i}' style='display:none;'>{$row[is_id]}</textarea>
                            <textarea id='tmp_is_name{$i}' style='display:none;'>{$row[is_name]}</textarea>
                            <textarea id='tmp_is_subject{$i}' style='display:none;'>{$row[is_subject]}</textarea>
                            <textarea id='tmp_is_content{$i}' style='display:none;'>{$row[is_content]}</textarea>";

            if ($row[mb_id] == $member[mb_id])
            {
                echo "<a href='javascript:itemuse_update({$i});'><span class=small><b>수정</b></span></a>&nbsp;";
                echo "<a href='javascript:itemuse_delete(fitemuse_password{$i}, {$i});'><span class=small><b>삭제</b></span></a>&nbsp;";
            }

            echo "
                        </td>
                    </tr>
                    <!-- 사용후기 삭제 패스워드 입력 폼 -->
                    <tr id='itemuse_password{$i}' style='display:none;'>
                        <td align=right height=30>
                            <form name='fitemuse_password{$i}' method='post' action='./itemuseupdate.php' autocomplete=off style='padding:0px;'>
                            <input type=hidden name=w value=''>
                            <input type=hidden name=is_id value=''>
                            <input type=hidden name=it_id value='{$it[it_id]}'>
                            패스워드 : <input type=password class=ed name=is_password required itemname='패스워드'>
                            <input type=image src='{$g4[shop_img_path]}/btn_confirm.gif' border=0 align=absmiddle></a>
                            </form>
                        </td>
                    </tr>
                    </table>
                    </div></td>
                <td width=11 background='$g4[shop_img_path]/box_bg03.gif'>&nbsp;</td></tr>
            </tr>
            ";
        }

        if (!$i)
        {
            echo "
            <tr>
                <td width=11 background='$g4[shop_img_path]/box_bg02.gif'></td>
                <td height=100 align=center class=lh>
                    이 상품에 대한 사용후기가 아직 없습니다.<br>
                    사용후기를 작성해 주시면 다른 분들께 많은 도움이 됩니다.</td>
                <td width=11 background='$g4[shop_img_path]/box_bg03.gif'>&nbsp;</td></tr>
            </tr>";
        }

        $use_pages = get_paging(10, $use_page, $use_total_page, "./item.php?it_id=$it_id&$qstr&use_page=", "#use");
        if ($use_pages)
        {
            echo "<tr><td colspan=3 background='$g4[shop_img_path]/dot_line.gif'></td></tr>";
            echo "<tr>";
            echo "<td width=11 background='$g4[shop_img_path]/box_bg02.gif'></td>";
            echo "<td height=22 align=center>$use_pages</td>";
            echo "<td width=11 background='$g4[shop_img_path]/box_bg03.gif'>&nbsp;</td></tr>";
            echo "</tr>";
        }
        ?>
        <tr>
            <td width=11><img src='<?=$g4[shop_img_path]?>/corner03.gif'></td>
            <td width=100% background='<?=$g4[shop_img_path]?>/box_bg04.gif'></td>
            <td width=11><img src='<?=$g4[shop_img_path]?>/corner04.gif'></td>
        </tr>
        </table>
       
       
       
        <table width=100% cellpadding=0 cellspacing=0>
        <tr><td colspan=2 height=35>* 이 상품을 사용해 보셨다면 사용후기를 써 주십시오.
            <input type=image src='<?="$g4[shop_img_path]/btn_story.gif"?>' onclick="itemuse_insert();" align=absmiddle></td></tr>
        </table>

        <!-- 사용후기 폼 -->
        <div id=itemuse style='display:none;'>
        <form name="fitemuse" method="post" onsubmit="return fitemuse_submit(this);" autocomplete=off style="padding:0px;" enctype="multipart/form-data">
        <input type=hidden name=w value=''>
        <input type=hidden name=token value='<?=$token?>'>
        <input type=hidden name=is_id value=''>
        <input type=hidden name=it_id value='<?=$it[it_id]?>'>
        <table width=100% cellpadding=0 cellspacing=0 border=0>
        <tr><td height=2 bgcolor=#6EA7D3 colspan=2></td></tr>

        <? if (!$is_member) { ?>
        <tr bgcolor=#fafafa>
            <td height=30 align=right>이름&nbsp;</td>
            <td>&nbsp;<input type="text" name="is_name" class=ed maxlength=20 minlength=2 required itemname="이름"></td></tr>
        <tr bgcolor=#fafafa>
            <td height=30 align=right>패스워드&nbsp;</td>
            <td>&nbsp;<input type="password" name="is_password" class=ed maxlength=20 minlength=3 required itemname="패스워드">
                <span class=small>패스워드는 최소 3글자 이상 입력하십시오.</span></td></tr>
        <? } ?>

        <tr bgcolor=#fafafa>
            <td width=100 height=30 align=right>제목&nbsp;</td>
            <td>&nbsp;<input type="text" name="is_subject" style="width:90%;" class=ed required itemname="제목"></td></tr>
        <tr bgcolor=#fafafa>
            <td align=right>내용&nbsp;</td>
            <td>&nbsp;<textarea name="is_content" rows="7" style="width:90%;" class=ed required itemname="내용"></textarea></td></tr>
        <tr bgcolor=#fafafa>
            <td height=30 align=right>평가&nbsp;</td>
            <td>
                <input type=radio name=is_score value='10' checked><img src='<?=$g4[shop_img_path]?>/star5.gif' align=absmiddle>
                <input type=radio name=is_score value='8'><img src='<?=$g4[shop_img_path]?>/star4.gif' align=absmiddle>
                <input type=radio name=is_score value='6'><img src='<?=$g4[shop_img_path]?>/star3.gif' align=absmiddle>
                <input type=radio name=is_score value='4'><img src='<?=$g4[shop_img_path]?>/star2.gif' align=absmiddle>
                <input type=radio name=is_score value='2'><img src='<?=$g4[shop_img_path]?>/star1.gif' align=absmiddle></td></tr>
        <tr bgcolor=#fafafa>
            <td width=100 height=30 align=right>이미지&nbsp;</td>
            <td>&nbsp;<input type="file" name="is_img"></td></tr>
        <tr bgcolor=#fafafa>
            <td align=right><img id='kcaptcha_image_use' /></td>
            <td>
                &nbsp;<input type='text' name='is_key' class='ed' required itemname='자동등록방지용 코드'>
                &nbsp;* 왼쪽의 자동등록방지 코드를 입력하세요.</td></tr>
        <tr><td height=2 bgcolor=#6ea7d3 colspan=2></td></tr>
        <tr><td colspan=2 align=right height=30><input type=image src='<?=$g4[shop_img_path]?>/btn_confirm.gif' border=0></a></td></tr>
        </table>
        </form>
        <br><br>
        </div>
    </td>
</tr>
<tr><td colspan=2 height=1></td></tr>
</table>
</div>

<script type="text/javascript">
function fitemuse_submit(f)
{
    if (!f.is_img.value.match(/\.(gif|jpg|png)$/i) && f.is_img.value)
    {
        alert("이미지 파일이 아닙니다. (gif, jpg, png 파일만 가능)");
        f.is_img.focus();
        return false;
    }

    if (hex_md5(f.is_key.value) != md5_norobot_key) {
        alert('자동등록방지용 코드가 맞지 않습니다.');
        f.is_key.select();
        return false;
    }

    f.action = "itemuseupdate.php"
    return true;
}

function itemuse_insert()
{
    /*
    if (!g4_is_member) {
        alert("로그인 하시기 바랍니다.");
        return;
    }
    */

    var f = document.fitemuse;
    var id = document.getElementById('itemuse');

    id.style.display = 'block';

    f.w.value = '';
    f.is_id.value = '';
    if (!g4_is_member)
    {
        f.is_name.value = '';
        f.is_name.readOnly = false;
        f.is_password.value = '';
    }
    f.is_subject.value = '';
    f.is_content.value = '';
}

function itemuse_update(idx)
{
    var f = document.fitemuse;
    var id = document.getElementById('itemuse');

    id.style.display = 'block';

    f.w.value = 'u';
    f.is_id.value = document.getElementById('tmp_is_id'+idx).value;
    if (!g4_is_member)
    {
        f.is_name.value = document.getElementById('tmp_is_name'+idx).value;
        f.is_name.readOnly = true;
    }
    f.is_subject.value = document.getElementById('tmp_is_subject'+idx).value;
    f.is_content.value = document.getElementById('tmp_is_content'+idx).value;
}

function itemuse_delete(f, idx)
{
    var id = document.getElementById('itemuse');

    f.w.value = 'd';
    f.is_id.value = document.getElementById('tmp_is_id'+idx).value;

    if (g4_is_member)
    {
        if (confirm("삭제하시겠습니까?"))
            f.submit();
    }
    else
    {
        id.style.display = 'none';
        document.getElementById('itemuse_password'+idx).style.display = 'block';
    }
}
</script>
<!-- 사용후기 end -->



shop/itemuseupdate.php 를

<?
include_once("./_common.php");

if ($w == '' || $w == 'u')
{
    $key = get_session("captcha_keystring");
    if (!($key && $key == $_POST[is_key])) {
        session_unregister("captcha_keystring");
        alert("정상적인 접근이 아닌것 같습니다.");
    }

    if (!$is_member)
    {
        if (!trim($_POST[is_name])) alert("이름을 입력하여 주십시오.");
        if (!trim($_POST[is_password])) alert("패스워드를 입력하여 주십시오.");
    }
    else
    {
        $is_name = $member[mb_name];
        $is_password = $member[mb_password];
    }

    if (!trim($_POST[is_subject])) alert("제목을 입력하여 주십시오.");
    if (!trim($_POST[is_content])) alert("내용을 입력하여 주십시오.");

    $is_password = sql_password($is_password);
}

$url = "./item.php?it_id=$it_id";

if ($w == '')
{
    $sql = " select max(is_id) as max_is_id from $g4[yc4_item_ps_table] ";
    $row = sql_fetch($sql);
    $max_is_id = $row[max_is_id];

    $sql = " select max(is_id) as max_is_id from $g4[yc4_item_ps_table]
              where it_id = '$it_id'
                and mb_id = '$member[mb_id]' ";
    $row = sql_fetch($sql);
    if ($row[max_is_id] && $row[max_is_id] == $max_is_id)
        alert("같은 상품에 대하여 계속해서 평가하실 수 없습니다.");

    $sql = "insert $g4[yc4_item_ps_table]
               set it_id = '$it_id',
                   mb_id = '$member[mb_id]',
                   is_score = '$is_score',
                   is_name = '$is_name',
                   is_password = '$is_password',
                   is_subject = '$is_subject',
                   is_content = '$is_content',
                   is_time = '$g4[time_ymdhis]',
                   is_ip = '$_SERVER[REMOTE_ADDR]' ";
    if (!$default[de_item_ps_use])
        $sql .= ", is_confirm = '1' ";
    sql_query($sql);

    $is_id = mysql_insert_id();

    $itemuse_path = "$g4[path]/data/itemuse";
    @mkdir($itemuse_path);
    @chmod($itemuse_path, 0707);
   
    if ($_FILES[is_img][name])
        upload_file($_FILES[is_img][tmp_name], $is_id, $itemuse_path);

    if ($default[de_item_ps_use])
        alert("평가하신 글은 관리자가 확인한 후에 표시됩니다.", $url);
    else
        goto_url($url);
}
else if ($w == 'u')
{
    $sql = " select is_password from $g4[yc4_item_ps_table] where is_id = '$is_id' ";
    $row = sql_fetch($sql);
    if ($row[is_password] != $is_password)
        alert("패스워드가 틀리므로 수정하실 수 없습니다.");

    $sql = " update $g4[yc4_item_ps_table]
                set is_subject = '$is_subject',
                    is_content = '$is_content',
                    is_score = '$is_score'
              where is_id = '$is_id' ";
    sql_query($sql);

    goto_url($url);
}
else if ($w == 'd')
{
    if ($is_member)
    {
        $sql = " select count(*) as cnt from $g4[yc4_item_ps_table] where mb_id = '$member[mb_id]' and is_id = '$is_id' ";
        $row = sql_fetch($sql);
        if (!$row[cnt])
            alert("자신의 사용후기만 삭제하실 수 있습니다.");
    }
    else
    {
        $is_password = sql_password($is_password);

        $sql = " select is_password from $g4[yc4_item_ps_table] where is_id = '$is_id' ";
        $row = sql_fetch($sql);
        if ($row[is_password] != $is_password)
            alert("패스워드가 틀리므로 삭제하실 수 없습니다.");
    }

    $sql = " delete from $g4[yc4_item_ps_table] where mb_id = '$member[mb_id]' and is_id = '$is_id' ";
    sql_query($sql);

    goto_url($url);
}
?>

로 수정합니다.