0byt3m1n1

Path: /home/cbs/wl/admstr/school/ [ Home ]
File: school_dbQry.php
<?php
/////////////대분류 추가/편집/삭제 기능수행
if($_SERVER[REQUEST_METHOD]=='GET')
{  
	require_once "../include/functions.php"; 
	ScriptErrMsg("잘못된 접근입니다.000");  
	exit; 
}

// 각종 유틸함수
require_once "../../include/browsedb.php";
require_once "$pblcPath/wl/include/dbconn.php";
require_once "$pblcPath/wl/include/functions.php";

$_auth_str = "관리자";
athBrwse($C_Auth_Level,8,$_auth_str,2);

// MySQL 연결
//////////////////////////////////////////////////////////////////////////////////

//$mode=$_GET['mode'];
//$tbl=$_GET['tbl'];

//$id= iconv("utf-8","euc-kr",$_GET['formwho']); 
//$id= iconv("utf-8","euc-kr",$_GET['formsecr']); 


$mode= iconv("utf-8","euc-kr",$_POST['mode']); 
$tbl= iconv("utf-8","euc-kr",$_POST['tbl']);

$code= iconv("utf-8","euc-kr",$_POST['code']);
$idwl_interest= iconv("utf-8","euc-kr",$_POST['idwl_interest']);
$idwl_lecmiddlediv= iconv("utf-8","euc-kr",$_POST['idwl_lecmiddlediv']);
$idwl_lecdetaildiv= iconv("utf-8","euc-kr",$_POST['idwl_lecdetaildiv']);
$name= iconv("utf-8","euc-kr",$_POST['name']);
//$idwl_lecture= iconv("utf-8","euc-kr",$_POST['idwl_lecture']);
$idwl_lectype= iconv("utf-8","euc-kr",$_POST['idwl_lectype']);
$idwl_lecsubject= iconv("utf-8","euc-kr",$_POST['idwl_lecsubject']);
$idwl_publisher= iconv("utf-8","euc-kr",$_POST['idwl_publisher']);
$idwl_teacher= iconv("utf-8","euc-kr",$_POST['idwl_teacher']);
$etc= iconv("utf-8","euc-kr",$_POST['etc']);
$writer= iconv("utf-8","euc-kr",$_POST['writer']);
$pages= iconv("utf-8","euc-kr",$_POST['pages']);
$price= iconv("utf-8","euc-kr",$_POST['price']);
$dcprice= iconv("utf-8","euc-kr",$_POST['dcprice']);
$pubyearmnth_year= iconv("utf-8","euc-kr",$_POST['pubyearmnth_year']);
$pubyearmnth_month= iconv("utf-8","euc-kr",$_POST['pubyearmnth_month']);
$pubyearmnth_day= iconv("utf-8","euc-kr",$_POST['pubyearmnth_day']);
$displayYN= iconv("utf-8","euc-kr",$_POST['displayYN']);

$wl_publisher_idwl_publisher = $idwl_publisher;
$wl_teacher_idwl_teacher = $idwl_teacher;
$wl_lecsubject_idwl_lecsubject = $idwl_lecsubject;
$wl_lectype_idwl_lectype = $idwl_lectype;
//$wl_lecture_idwl_lecture = $idwl_lecture;
$wl_lecdetaildiv_idwl_lecdetaildiv = $idwl_lecdetaildiv;
$wl_lecmiddlediv_idwl_lecmiddlediv = $idwl_lecmiddlediv;
$wl_interest_idwl_interest = $idwl_interest;
$pubyearmnth = $pubyearmnth_year."-".$pubyearmnth_month."-".$pubyearmnth_day;

$register= $C_id;

if ($mode == "realist" && $tbl =="wl_book")
{
		$qryistcheck = "select * from wl_book where code = '$code'";
		$rescheck = mysql_query($qryistcheck, $connect);
		$numcheck = mysql_num_rows($rescheck);
		
		if ($numcheck>0)
		{
			$queMnu = "
						update wl_book SET wl_publisher_idwl_publisher='$wl_publisher_idwl_publisher' , 
						wl_teacher_idwl_teacher='$wl_teacher_idwl_teacher' , 
						wl_lecsubject_idwl_lecsubject='$wl_lecsubject_idwl_lecsubject' , 
						wl_lectype_idwl_lectype='$wl_lectype_idwl_lectype' , 
						wl_lecture_idwl_lecture='$wl_lecture_idwl_lecture' , 
						wl_lecdetaildiv_idwl_lecdetaildiv='$wl_lecdetaildiv_idwl_lecdetaildiv' , 
						wl_lecmiddlediv_idwl_lecmiddlediv='$wl_lecmiddlediv_idwl_lecmiddlediv' , 
						wl_interest_idwl_interest='$wl_interest_idwl_interest' , 
						name='$name' , 
						register='$register' , 
						regdate= now() , 
						pubyearmnth='$pubyearmnth' , 
						price='$price' , 
						dcprice='$dcprice' , 
						dcrate='$dcrate' , 
						writer='$writer' , 
						etc='$etc' , 
						pages='$pages' , 
						displayYN='$displayYN'
						where
						code = '$code'
			";
		}
		else 
		{
			$queMnu = "
				insert into wl_book ( 
				idwl_book, 
				wl_publisher_idwl_publisher, 
				wl_teacher_idwl_teacher, 
				wl_lecsubject_idwl_lecsubject, 
				wl_lectype_idwl_lectype, 
				wl_lecture_idwl_lecture, 
				wl_lecdetaildiv_idwl_lecdetaildiv, 
				wl_lecmiddlediv_idwl_lecmiddlediv, 
				wl_interest_idwl_interest, 
				code, 
				name, 
				register, 
				regdate, 
				pubyearmnth, 
				price, 
				dcprice, 
				dcrate, 
				writer, 
				etc, 
				pages, 
				displayYN 
				) values ( 
				 '$idwl_book' 
				,'$wl_publisher_idwl_publisher' 
				,'$wl_teacher_idwl_teacher' 
				,'$wl_lecsubject_idwl_lecsubject' 
				,'$wl_lectype_idwl_lectype' 
				,'$wl_lecture_idwl_lecture' 
				,'$wl_lecdetaildiv_idwl_lecdetaildiv' 
				,'$wl_lecmiddlediv_idwl_lecmiddlediv' 
				,'$wl_interest_idwl_interest' 
				,'$code' 
				,'$name' 
				,'$register' 
				,now() 
				,'$pubyearmnth' 
				,'$price' 
				,'$dcprice' 
				,'$dcrate' 
				,'$writer' 
				,'$etc' 
				,'$pages' 
				,'$displayYN' 
				)	
			";
		}
		$resMnu = mysql_query($queMnu,$connect);	
		if(!$resMnu){$ment = "저장실패!";}else{$ment = "저장성공";}
}
elseif ($mode == "realedit" && $tbl =="wl_publisher")
{
		$queryTst = "
						update wl_book SET wl_publisher_idwl_publisher='$wl_publisher_idwl_publisher' , 
						wl_teacher_idwl_teacher='$wl_teacher_idwl_teacher' , 
						wl_lecsubject_idwl_lecsubject='$wl_lecsubject_idwl_lecsubject' , 
						wl_lectype_idwl_lectype='$wl_lectype_idwl_lectype' , 
						wl_lecture_idwl_lecture='$wl_lecture_idwl_lecture' , 
						wl_lecdetaildiv_idwl_lecdetaildiv='$wl_lecdetaildiv_idwl_lecdetaildiv' , 
						wl_lecmiddlediv_idwl_lecmiddlediv='$wl_lecmiddlediv_idwl_lecmiddlediv' , 
						wl_interest_idwl_interest='$wl_interest_idwl_interest' , 
						name='$name' , 
						register='$register' , 
						regdate=now() , 
						pubyearmnth='$pubyearmnth' , 
						price='$price' , 
						dcprice='$dcprice' , 
						dcrate='$dcrate' , 
						writer='$writer' , 
						etc='$etc' , 
						pages='$pages' , 
						displayYN='$displayYN'
						where
						code = '$code'
					";
		
		$resultTst = mysql_query($queryTst,$connect);	
		if(!$resultTst){$ment = "저장실패!".$queryTst;}else{$ment = "저장성공";}
}
elseif ($mode == "delete" && $tbl =="wl_book")
{
		delcheck($idwl_book,$tbl,$connect,$database);	
		//$queryTst = "delete from wl_publisher where idwl_publisher ='$idwl_publisher'"; //실제로 삭제할 경우 이것을 바꿔해제할 것
		$queryTst = "update wl_book SET delete_2='Y' where idwl_book = '$idwl_book'"; //실제로 삭제할 경우 이것을 바꿔해제할 것
		
		$resultTst = mysql_query($queryTst,$connect);
		
		if(!$resultTst){$ment = "저장실패!";}else{$ment = "저장성공";}
}	
////////////////////////////////////////////////////
header("Content-Type: text/xml; charset=euc-kr");
echo("<?xml version=\"1.0\" encoding=\"euc-kr\"?>\n");
echo "<list keywordpublisherfrm=\"connection\">";

echo "<int1>";

	echo "<status1><![CDATA[";
	echo $ment;
	echo "]]></status1>";	
	
	echo "<status2><![CDATA[";
	echo $code;
	echo "]]></status2>";	
	
	echo "<status9><![CDATA[";
	echo "]]></status9>";	
	
	
echo "</int1>";

echo "</list>";

mysql_close($connect);
?>