0byt3m1n1

Path: /home/ecampus/wl/board/ [ Home ]
File: file_del.php
 <? 
 include "../inc/auth.php";
 include "../inc/DBConn.php";
 include "../inc/fnc.php";
 include "../inc/boardactionxtset.php";   

 ?>
  
  <meta http-equiv="Content-Type" content="text/html; charset=euc-kr">
  <meta http-equiv="Content-Type" content="text/html; charset=ks_c_5601-1987">
 <?

	$p_seqNo		= mysql_real_escape_string(replace($_REQUEST["seqNo"]));	//   // 글 번호
	$fileName		= mysql_real_escape_string(replace($_REQUEST["fileName"]));	//   // 파일명
 
  
   
	$sql		= "SELECT  userID FROM wl_board_file WHERE saveName = '$fileName'   ";     
	$RsFile		= mysql_query($sql, $dbconn);
	$RsID 		= mysql_fetch_array($RsFile);
	$Cnt		= mysql_num_rows($RsFile);  

	if ($Cnt > 0){ // DB에 존재한다면..
		//수정권한
		if($userAuth == "A" ){				// 관리자일경우 삭제가능
			$isModify = true;
		}else if($userID == $RsID[userID]){ // 글쓴이가 동일한 경우 삭제가능
			$isModify = true;  
		}else{                              // 불가능.
			$isModify = false;
		}    
		
		if (!$isModify){
			echo "<script>alert('삭제하실 수 없습니다.');</script>";	
			exit; 
		}

		$sql		= "DELETE FROM wl_board_list WHERE saveFile = '$fileName'  ";     
		mysql_query($sql, $dbconn);
	}

	  $uploaddir = '../upload/file/';
	  @unlink ($uploaddir.$fileName); 
 
 ?>
 
<script language="javascript"> 
	parent.file_del("<?=$fileName?>")
</script>