0byt3m1n1

Path: /home/ecampus/wl/swfupload_old/ [ Home ]
File: upload.php
<?
require_once "../include/dbconn.php";
require_once "../include/browsedb.php";
require_once "../include/functions.php";
?>
<?/*
<script>
var swfu; 
window.onload = function() {     
	swfu = new SWFUpload( {         
		upload_script : "/upload.php?id=someid",         
		target : "SWFUploadTarget",         
		flash_path : "/jscripts/SWFUpload/SWFUpload.swf",         
		allowed_filesize : 30720,    // 30 MB         
		allowed_filetypes : "*.*",         
		allowed_filetypes_description : "All files...",         
		browse_link_innerhtml : "Browse",         
		upload_link_innerhtml : "Upload queue",         
		browse_link_class : "swfuploadbtn browsebtn",         
		upload_link_class : "swfuploadbtn uploadbtn",         
		flash_loaded_callback : 'swfu.flashLoaded',         
		upload_file_queued_callback : "fileQueued",         
		upload_file_start_callback : 'uploadFileStart',         
		upload_progress_callback : 'uploadProgress',         
		upload_file_complete_callback : 'uploadFileComplete',         
		upload_file_cancel_callback : 'uploadFileCancelled',         
		upload_queue_complete_callback : 'uploadQueueComplete',         
		upload_error_callback : 'uploadError',         
		upload_cancel_callback : 'uploadCancel',         
		auto_upload : false     }); 
};
</script>
*/?>
<?php if (is_uploaded_file($_FILES['Filedata']['tmp_name']))
{
		/*
		$sqlTpesSch = "select * from mge_tapes where mge_lecture_model_idlecture='$idlecture' and tpeNmbr='$tpeNmbrT[$k]'";     
		$queryTpesSch=mysql_query($sqlTpesSch, $connect);
		$tpesArry = mysql_fetch_array($queryTpesSch);
		$tpesRwsSch = mysql_num_rows($queryTpesSch);	
		//echo "tpesRwsSch::".$tpesRwsSch."<BR>";
		if ($tpesRwsSch>0) 
		{
			######### 강의자료 ########## 
			$tpefile[$k]=$_FILES['tpefile_u']['name'][$k]; 
			$tpefileSize[$k]=$_FILES['tpefile_u']['type'][$k]; 
			$tpefileType[$k]=$_FILES['tpefile_u']['size'][$k]; 
			//echo "tpefile:::".$tpefile[$k]."<br>";
			//echo "k:::".$k."<br>";
			if (eregi("php|php3|htm|html|js|exe|phtml|inc|jsp|asp|swf",$tpefile[$k])) 
			{
			    add_errmsg("실행파일(php,php3,htm,html,js,exe,phtml,inc,jsp,asp,swf...)은 등록 할 수 없습니다.");
			}
			
			$save_dir = "./lecData";
			//echo "save::".$save_dir;
			
			if(is_uploaded_file($_FILES["tpefile_u"]["tmp_name"][$k]))
			{
			                $mktime=mktime();
			                $tpefile[$k]=$mktime."_".$tpefile[$k];
			                $dest[$k] = $save_dir."/".$tpefile[$k];
			                //echo "dest:".$dest[$k]."<br>";
			                if(!move_uploaded_file($_FILES['tpefile_u']['tmp_name'][$k], $dest[$k]))
			                {
			                    die("파일을 지정한 디렉토리에 저장하는데 실패했습니다.");      
			                }
			                $tpefileUpd[$k] = ", tpefile='".$tpefile[$k]."' , tpefileSize='".$tpefileSize[$k]."' , tpefileType='".$tpefileType[$k]."'";
			}
			else 
			{
				$tpefileUpd[$k] = "";
			}
			//echo "tpefileUpd::".$tpefileUpd."<br>";
			######### 강의자료 끝########## 
			////echo "tpeHowlongT[k]::".$tpeHowlongT[$k]."<BR>";
			$queryTpsUp="update mge_tapes SET  
			mge_charger_idcharger='$mge_charger_idchargerT[$k]' , 
			mge_lecture_model_mge_lecture_idlecture='$mge_lecture_model_mge_lecture_idlectureT[$k]' , 
			mge_lecture_model_idlecture='$mge_lecture_model_idlectureT[$k]' , 
			tpeHowlong='$tpeHowlongT[$k]' , 
			title='$titleT[$k]' , 
			data_2='$data_2T[$k]' , 
			tpeEtc='$tpeEtcT[$k]' 	
			$tpefileUpd[$k]	
			where mge_lecture_model_idlecture='$idlecture' and tpeNmbr='$tpeNmbrT[$k]'";
			
			  $resultTpsUp = mysql_query($queryTpsUp,$connect);
				if (!$resultTpsUp) 
				{      
				   echo mysql_errno().":".mysql_error();
				}
		}
		else 
		{
			$queTpsIst = "insert into mge_tapes (idmge_tapes, mge_charger_idcharger, mge_lecture_model_mge_lecture_idlecture, mge_lecture_model_idlecture, tpeNmbr, tpeHowlong, title, data_2, tpeEtc) 
			                    values ('$idmge_tapes' ,'$mge_charger_idchargerT[$k]' ,'$mge_lecture_model_mge_lecture_idlectureT[$k]' ,'$mge_lecture_model_idlectureT[$k]' ,'$tpeNmbrT[$k]' ,'$tpeHowlongT[$k]' ,'$titleT[$k]' ,'$data_2T[$k]' ,'$tpeEtcT[$k]')";
			$resultTpsIst = mysql_query($queTpsIst,$connect);
			
			if (!$resultTpsIst)
			{      
			   echo mysql_errno().":".mysql_error();
			}
		}	 
		*/
		
		$random=date("Ymdhis").rand(1000000,9999999);
		$tpefileType = substr($_FILES['Filedata']['name'],-4); //.(쩜)포함
		
		if (!move_uploaded_file($_FILES['Filedata']['tmp_name'], "./uploads/".$random.$tpefileType)) 
		{
			 $img1 ="파일을 지정한 디렉토리에 저장하는데 실패했습니다.";      
		}
		
		$code=$code;
		$queCde = "select * from wl_menu where code='$code'";
		$resultCde = mysql_query($queCde,$connect);	
		$numbersCde = mysql_num_rows($resultCde);
		
		if ($kind == "img1")//index2.php에서 지정한 param 값임
		{
			$img1="/uploads/".$random.$tpefileType;
			if($numbersCde > 0)
			{
				$queTpsIst ="update wl_menu SET img1='$img1' where code='$code'";
			} 
			else 
			{
				$queTpsIst = "
				insert into wl_menu ( 
				idwl_menu, 
				wl_interest_idwl_interest, 
				wl_menu_place_idwl_menuplace, 
				code, 
				name, 
				displayorder, 
				addr, 
				img1, 
				img2, 
				displayYN, 
				register, 
				regdate 
				) values ( 
				'$idwl_menu' 
				,'$wl_interest_idwl_interest' 
				,'$wl_menu_place_idwl_menuplace' 
				,'$code' 
				,'$name' 
				,'$displayorder' 
				,'$addr' 
				,'$img1' 
				,'$img2' 
				,'$displayYN' 
				,'$register' 
				,'$regdate' 
				)			
				";							
			}
		}
		elseif ($kind == "img2") //index2.php에서 지정한 param 값임
		{
			$img2="/uploads/".$random.$tpefileType;
			if($numbersCde > 0)
			{
				$queTpsIst ="update wl_menu SET img2='$img2' where code='$code'";
			} 
			else 
			{
				$queTpsIst = "
				insert into wl_menu ( 
				idwl_menu, 
				wl_interest_idwl_interest, 
				wl_menu_place_idwl_menuplace, 
				code, 
				name, 
				displayorder, 
				addr, 
				img1, 
				img2, 
				displayYN, 
				register, 
				regdate 
				) values ( 
				'$idwl_menu' 
				,'$wl_interest_idwl_interest' 
				,'$wl_menu_place_idwl_menuplace' 
				,'$code' 
				,'$name' 
				,'$displayorder' 
				,'$addr' 
				,'$img1' 
				,'$img2' 
				,'$displayYN' 
				,'$register' 
				,'$regdate' 
				)			
				";							
			}		
		}

			
	$resultTpsIst = mysql_query($queTpsIst,$connect);		
	return 'success';
}
else 
{     
	die('Fail'); 
} 
?>