git-svn-id: http://xe-core.googlecode.com/svn/trunk@1121 201d5d3c-b55e-5fd7-737f-ddc643e51545

This commit is contained in:
zero 2007-04-13 02:53:36 +00:00
parent 6d6d6c5b8b
commit c2117c1a16
34 changed files with 122 additions and 133 deletions

View file

@ -22,17 +22,17 @@
</tr>
<tr>
<th>{$lang->writer}</th>
<td><div class="member_{$val->member_srl}">{$val->nick_name}</div></td>
<td><div class="member_{$val->member_srl}">{htmlspecialchars($val->nick_name)}</div></td>
</tr>
<!--@if($val->homepage)-->
<tr>
<th>{$lang->homepage}</th>
<td><a href="{$val->homepage}" onclick="winopen('{$val->homepage}'); return false;">{$val->homepage}</a></td>
<td><a href="{$val->homepage}" onclick="winopen('{$val->homepage}'); return false;">{htmlspecialchars($val->homepage)}</a></td>
</tr>
<!--@end-->
<tr>
<th>{$lang->content}</th>
<td height="100" valign="top">{nl2br($val->content)}</td>
<td height="100" valign="top">{$val->content}</td>
</tr>
<tr>
<th>ipaddress</th>

View file

@ -18,11 +18,11 @@
</tr>
<tr>
<th>{$lang->writer}</th>
<td><div class="member_{$source_comment->member_srl}">{$source_comment->nick_name}</div></td>
<td><div class="member_{$source_comment->member_srl}">{htmlspecialchars($source_comment->nick_name)}</div></td>
</tr>
<tr>
<th>{$lang->content}</th>
<td height="100" valign="top">{nl2br($source_comment->content)}</td>
<td height="100" valign="top">{$source_comment->content}</td>
</tr>
</table>
</div>
@ -43,7 +43,7 @@
<!--@if(!$is_logged)-->
<tr>
<th>{$lang->writer}</th>
<td><input type="text" name="nick_name" value="{$comment->nick_name}" /></td>
<td><input type="text" name="nick_name" value="{htmlspecialchars($comment->nick_name)}" /></td>
</tr>
<tr>
<th>{$lang->password}</th>
@ -51,11 +51,11 @@
</tr>
<tr>
<th>{$lang->email_address}</th>
<td><input type="text" name="email_address" value="{$comment->email_address}"/></td>
<td><input type="text" name="email_address" value="{htmlspecialchars($comment->email_address)}"/></td>
</tr>
<tr>
<th>{$lang->homepage}</th>
<td><input type="text" name="homepage" value="{$comment->homepage}" /></td>
<td><input type="text" name="homepage" value="{htmlspecialchars($comment->homepage)}" /></td>
</tr>
<!--@end-->

View file

@ -1,24 +1,6 @@
<!--%import("js/board.js")-->
{$module_info->header_text}
<!-- 게시판 제목/ 설명 -->
<!--@if($module_info->title || $module_info->desc)-->
<div>
<table>
<tr>
<td>{$module_info->title}</td>
</tr>
<!--@if($module_info->desc)-->
<tr>
<td>{nl2br($module_info->desc)}</td>
</tr>
<!--@end-->
</table>
</div>
<!--@end-->
<!-- 게시판 정보 -->
<div>
<!--@if($total_count)-->

View file

@ -44,10 +44,11 @@
<!--@if($grant->is_admin == 'Y')-->
<input type="checkbox" value="{$val->document_srl}" onclick="doAddCart('{$mid}',this)" <!--@if($check_list[$val->document_srl])-->checked="true"<!--@end--> />
<!--@end-->
<!--@if($grant->view)-->
<a href="{getUrl('document_srl',$val->document_srl)}">{$val->title}</a>
<a href="{getUrl('document_srl',$val->document_srl)}">{htmlspecialchars($val->title)}</a>
<!--@else-->
{$val->title}
{htmlspecialchars($val->title)}
<!--@end-->
<!--@if($val->comment_count>0)-->

View file

@ -21,12 +21,12 @@
<tr>
<th>{$lang->title}</th>
<td>{$document->title}</td>
<td>{htmlspecialchars($document->title)}</td>
</tr>
<!--@if($document->homepage)-->
<tr>
<th>{$lang->homepage}</th>
<td><a href="{$document->homepage}" onclick="winopen('{$document->homepage}'); return false;">{$document->homepage}</a></td>
<td><a href="{$document->homepage}" onclick="winopen('{$document->homepage}'); return false;">{htmlspecialchars($document->homepage)}</a></td>
</tr>
<!--@end-->
<tr>
@ -35,7 +35,7 @@
</tr>
<tr>
<th>{$lang->writer}</th>
<td><div class="member_{$document->member_srl}">{$document->nick_name}</div></td>
<td><div class="member_{$document->member_srl}">{htmlspecialchars($document->nick_name)}</div></td>
</tr>
<tr>
<th>{$lang->readed_count}</th>
@ -64,7 +64,7 @@
<!--@if($document->tags)-->
<tr>
<th>{$lang->tag}</th>
<td>{$document->tags}</td>
<td>{htmlspecialchars($document->tags)}</td>
</tr>
<!--@end-->

View file

@ -34,17 +34,17 @@
</tr>
<tr>
<th>{$lang->email_address}</th>
<td><input type="text" name="email_address" value="{$document->email_address}"/></td>
<td><input type="text" name="email_address" value="{htmlspecialchars($document->email_address)}"/></td>
</tr>
<tr>
<th>{$lang->homepage}</th>
<td><input type="text" name="homepage" value="{$document->homepage}" /></td>
<td><input type="text" name="homepage" value="{htmlspecialchars($document->homepage)}" /></td>
</tr>
<!--@end-->
<tr>
<th>{$lang->title}</th>
<td><input type="text" name="title" value="{$document->title}" /></td>
<td><input type="text" name="title" value="{htmlspecialchars($document->title)}" /></td>
</tr>
<tr>
<td>&nbsp;</td>

View file

@ -27,7 +27,7 @@
</tr>
<tr>
<th>{$lang->browser_title}</th>
<td>{$module_info->browser_title}</td>
<td>{htmlspecialchars($module_info->browser_title)}</td>
</tr>
<tr>
<th>{$lang->use_category}</th>
@ -43,15 +43,15 @@
</tr>
<tr>
<th>{$lang->description}</th>
<td>{nl2br($module_info->description)}</td>
<td>{nl2br(htmlspecialchars($module_info->description))}</td>
</tr>
<tr>
<th>{$lang->header_text}</th>
<td>{$module_info->header_text}</td>
<td>{htmlspecialchars($module_info->header_text)}</td>
</tr>
<tr>
<th>{$lang->footer_text}</th>
<td>{$module_info->footer_text}</td>
<td>{htmlspecialchars($module_info->footer_text)}</td>
</tr>
<tr>
<th>{$lang->admin_id}</th>

View file

@ -44,7 +44,7 @@
</tr>
<tr>
<th rowspan="2">{$lang->browser_title}</th>
<td><input type="text" name="browser_title" value="{$module_info->browser_title}" /></td>
<td><input type="text" name="browser_title" value="{htmlspecialchars($module_info->browser_title)}" /></td>
</tr>
<tr>
<td>{$lang->about_browser_title}</td>

View file

@ -28,7 +28,7 @@
<!--@foreach($category_list as $category_srl => $category_info)-->
<tr>
<td>{$category_info->title}</td>
<td>{htmlspecialchars($category_info->title)}</td>
<td>{zdate($category_info->last_update,"Y-m-d H:i:s")}</td>
<td><a href="{getUrl('category_srl',$category_info->category_srl)}">{$lang->cmd_modify}</a></td>
<td><a href="#" onclick="doUpdateCategory('{$category_info->category_srl}','up');return false;">{$lang->cmd_move_up}</a></td>

View file

@ -12,7 +12,7 @@
<div style="margin-bottom:30px">
{$lang->category_title} :
<input type="text" name="category_title" value="{$selected_category->title}" />
<input type="text" name="category_title" value="{htmlspecialchars($selected_category->title)}" />
<input type="submit" value="{$lang->cmd_modify}" />
<input type="button" value="{$lang->cmd_cancel}" onclick="location.href='{getUrl('category_srl','')}'" />
</div>

View file

@ -43,7 +43,7 @@
<!--@end-->
</td>
<td><a href="{getUrl('act','dispBoardAdminBoardInfo','module_srl',$val->module_srl)}">{$val->mid}</a></td>
<td>{$val->browser_title}</td>
<td>{htmlspecialchars($val->browser_title)}</td>
<td>{$val->is_default}</td>
<td>{$val->skin}</td>
<td>{$val->admin_id}</td>

View file

@ -63,10 +63,10 @@
<th <!--@if($val->description)-->rowspan="2"<!--@end-->>{$val->title}</th>
<td>
<!--@if($val->type=="text")-->
<input type="text" name="{$val->name}" value="{$val->value}" />
<input type="text" name="{$val->name}" value="{htmlspecialchars($val->value)}" />
<!--@elseif($val->type=="textarea")-->
<textarea name="{$val->name}">{$val->value}</textarea>
<textarea name="{$val->name}">{htmlspecialchars($val->value)}</textarea>
<!--@elseif($val->type=="select")-->
<select name="{$val->name}">

View file

@ -31,6 +31,7 @@
// 목록의 loop를 돌면서 mid를 구하기 위한 module_srl값을 구함
$comment_count = count($output->data);
if($comment_count) {
$module_srl_list = array();
foreach($output->data as $key => $val) {
$module_srl = $val->module_srl;
if(!in_array($module_srl, $module_srl_list)) $module_srl_list[] = $module_srl;

View file

@ -27,9 +27,9 @@
<tr>
<td>{$no}</td>
<td><input type="checkbox" name="cart" value="{$val->comment_srl}" /></td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{$module_list[$val->module_srl]->browser_title}</a></td>
<td>{$val->user_name}</td>
<td>{$val->content}</td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{htmlspecialchars($module_list[$val->module_srl]->browser_title)}</a></td>
<td>{htmlspecialchars($val->user_name)}</td>
<td>{cut_str(strip_tags($val->content),50,'...')}</td>
<td>{zdate($val->regdate,"Y-m-d")}</td>
<td><!--@if($val->last_upgdate)-->{zdate($val->last_upgdate,"Y-m-d")}<!--@end--></td>
<td>{$val->ipaddress}</td>

View file

@ -26,9 +26,9 @@
<tr>
<td>{$no}</td>
<td><input type="checkbox" name="cart" value="{$val->document_srl}" /></td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{$module_list[$val->module_srl]->browser_title}</a></td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{htmlspecialchars($module_list[$val->module_srl]->browser_title)}</a></td>
<td>
<a href="#" onclick="window.open('./?document_srl={$val->document_srl}');return false">{$val->title}</a>
<a href="#" onclick="window.open('./?document_srl={$val->document_srl}');return false">{htmlspecialchars($val->title)}</a>
<!--@if($val->comment_count>0)-->
[{$val->comment_count}]
@ -38,7 +38,7 @@
[{$val->trackback_count}]
<!--@end-->
</td>
<td>{$val->user_name}</td>
<td><div class="member_{$val->member_srl}">{htmlspecialchars($val->user_name)}</div></td>
<td>{$val->readed_count}</td>
<td>{$val->voted_count}</td>
<td>{zdate($val->regdate,"Y-m-d")}</td>

View file

@ -30,7 +30,7 @@
<td>{$no}</td>
<td><input type="checkbox" name="cart" value="{$val->file_srl}" /></td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{$module_list[$val->module_srl]->browser_title}</a></td>
<td>{$val->source_filename}</td>
<td>{htmlspecialchars($val->source_filename)}</td>
<td>{$val->file_size}</td>
<td>
<!--@if($val->isvalid=='Y')-->

View file

@ -4,21 +4,21 @@
<table border="1">
<tr>
<th rowspan="2">{$lang->krzip_server_hostname}</th>
<td><input type="text" name="krzip_server_hostname" value="{$config->krzip_server_hostname?$config->krzip_server_hostname:'kr.zip.zeroboard.com'}" />
<td><input type="text" name="krzip_server_hostname" value="{htmlspecialchars($config->krzip_server_hostname?$config->krzip_server_hostname:'kr.zip.zeroboard.com')}" />
</tr>
<tr>
<td>{$lang->about_krzip_server_hostname}</td>
</tr>
<tr>
<th rowspan="2">{$lang->krzip_server_port}</th>
<td><input type="text" name="krzip_server_port" value="{$config->krzip_server_port?$config->krzip_server_port:'80'}" />
<td><input type="text" name="krzip_server_port" value="{htmlspecialchars($config->krzip_server_port?$config->krzip_server_port:'80')}" />
</tr>
<tr>
<td>{$lang->about_krzip_server_port}</td>
</tr>
<tr>
<th rowspan="2">{$lang->krzip_server_query}</th>
<td><input type="text" name="krzip_server_query" value="{$config->krzip_server_query?$config->krzip_server_query:'/server.php?addr3='}" />
<td><input type="text" name="krzip_server_query" value="{htmlspecialchars($config->krzip_server_query?$config->krzip_server_query:'/server.php?addr3=')}" />
</tr>
<tr>
<td>{$lang->about_krzip_server_query}</td>

View file

@ -26,7 +26,7 @@
<tr>
<td>{$no+1}</td>
<td>{$val->layout}</td>
<td><a href="#" onclick="location.href='{getUrl('act','dispLayoutAdminMenu','layout_srl',$val->layout_srl)}';return false;">{$val->title}</a></td>
<td><a href="#" onclick="location.href='{getUrl('act','dispLayoutAdminMenu','layout_srl',$val->layout_srl)}';return false;">{htmlspecialchars($val->title)}</a></td>
<td>{zdate($val->regdate,"Y-m-d")}</td>
<td><a href="#" onclick="doDeleteLayout('{$val->layout_srl}');return false;">{$lang->cmd_delete}</a></td>
</tr>

View file

@ -45,16 +45,16 @@
<col width="*" />
<tr>
<th>{$lang->title}</th>
<td><input type="text" name="title" value="{$layout_info->layout_title}" /></td>
<td><input type="text" name="title" value="{htmlspecialchars($layout_info->layout_title)}" /></td>
</tr>
<!--@foreach($layout_info->extra_var as $id => $var)-->
<tr>
<th rowspan="2">{$var->name}</th>
<!--@if($var->type == "text")-->
<td><input type="text" name="{$id}" value="{$var->value}" /></td>
<td><input type="text" name="{$id}" value="{htmlspecialchars($var->value)}" /></td>
<!--@elseif($var->type == "textarea")-->
<td><textarea name="{$id}">{$var->value}</textarea></td>
<td><textarea name="{$id}">{htmlspecialchars($var->value)}</textarea></td>
<!--@elseif($var->type == "select")-->
<td>

View file

@ -455,10 +455,12 @@
**/
function procMemberAdminInsertConfig() {
// 기본 정보를 받음
$args = Context::gets('enable_join','redirect_url','agreement','image_name','image_mark', 'image_name_max_width', 'image_name_max_height','image_mark_max_width','image_mark_max_height');
$args = Context::gets('enable_join','redirect_url','content','image_name','image_mark', 'image_name_max_width', 'image_name_max_height','image_mark_max_width','image_mark_max_height');
if($args->enable_join!='Y') $args->enable_join = 'N';
if($args->image_name!='Y') $args->image_name = 'N';
if($args->image_mark!='Y') $args->image_mark = 'N';
$args->agreement = $args->content;
unset($args->content);
// module Controller 객체 생성하여 입력
$oModuleController = &getController('module');

View file

@ -401,6 +401,11 @@
$skin_list = $oModuleModel->getSkins($this->module_path);
Context::set('skin_list', $skin_list);
// 에디터를 받음
$oEditorModel = &getModel('editor');
$editor = $oEditorModel->getEditor(0, false, true);
Context::set('editor', $editor);
// 템플릿 파일 지정
$this->setTemplateFile('member_config');
}

View file

@ -11,11 +11,11 @@
</tr>
<tr>
<th>{$lang->user_name}</th>
<td>{$member_info->user_name}</td>
<td>{htmlspecialchars($member_info->user_name)}</td>
</tr>
<tr>
<th>{$lang->nick_name}</th>
<td>{$member_info->nick_name}</td>
<td>{htmlspecialchars($member_info->nick_name)}</td>
</tr>
<!--@if($member_info->image_name->src)-->
<tr>
@ -31,11 +31,11 @@
<!--@end-->
<tr>
<th>{$lang->homepage}</th>
<td><!--@if($member_info->homepage)--><a href="#" onclick="winopen('{$member_info->homepage}'); return false;">{$member_info->homepage}</a><!--@end--></td>
<td><!--@if($member_info->homepage)--><a href="#" onclick="winopen('{htmlspecialchars($member_info->homepage)}'); return false;">{htmlspecialchars($member_info->homepage)}</a><!--@end--></td>
</tr>
<tr>
<th>{$lang->blog}</th>
<td><!--@if($member_info->blog)--><a href="#" onclick="winopen('{$member_info->blog}'); return false;">{$member_info->blog}</a><!--@end--></td>
<td><!--@if($member_info->blog)--><a href="#" onclick="winopen('{htmlspecialchars($member_info->blog)}'); return false;">{htmlspecialchars($member_info->blog)}</a><!--@end--></td>
</tr>
<tr>
<th>{$lang->birthday}</th>
@ -58,18 +58,18 @@
<!--@if($extend_form_list)-->
<!--@foreach($extend_form_list as $key => $val)-->
<tr>
<th>{$val->column_title}</th>
<th>{htmlspecialchars($val->column_title)}</th>
<td>
<!--@if($val->column_type=='tel')-->
{$val->value[0]} - {$val->value[1]} - {$val->value[2]}
{htmlspecialchars($val->value[0])} - {htmlspecialchars($val->value[1])} - {htmlspecialchars($val->value[2])}
<!--@elseif($val->column_type=='kr_zip')-->
{$val->value[0]} {$val->value[1]}
{$val->value[0]} {htmlspecialchars($val->value[1])}
<!--@elseif($val->column_type=='checkbox')-->
{implode(",",$val->value)}
{htmlspecialchars(implode(",",$val->value))}
<!--@elseif($val->column_type=='date')-->
{zdate($val->value, "Y-m-d")}
<!--@else-->
{$val->value}
{htmlspecialchars($val->value)}
<!--@end-->
</td>
</tr>

View file

@ -26,19 +26,19 @@
<tr>
<th>{$lang->user_id}</th>
<td>
{$member_info->user_id}
{htmlspecialchars($member_info->user_id)}
</td>
</tr>
<tr>
<th>{$lang->user_name}</th>
<td>
{$member_info->user_name}
{htmlspecialchars($member_info->user_name)}
</td>
</tr>
<tr>
<th rowspan="2">{$lang->nick_name}</th>
<td>
<input type="text" name="nick_name" value="{$member_info->nick_name}" />
<input type="text" name="nick_name" value="{htmlspecialchars($member_info->nick_name)}" />
</td>
</tr>
<tr>
@ -47,7 +47,7 @@
<tr>
<th>{$lang->email_address}</th>
<td>
<input type="text" name="email_address" value="{$member_info->email_address}" />
<input type="text" name="email_address" value="{htmlspecialchars($member_info->email_address)}" />
</td>
</tr>
<!--@if($member_config->image_name == 'Y')-->
@ -81,7 +81,7 @@
<tr>
<th rowspan="2">{$lang->homepage}</th>
<td>
<input type="text" name="homepage" value="{$member_info->homepage}" />
<input type="text" name="homepage" value="{htmlspecialchars($member_info->homepage)}" />
</td>
</tr>
<tr>
@ -90,7 +90,7 @@
<tr>
<th rowspan="2">{$lang->blog}</th>
<td>
<input type="text" name="blog" value="{$member_info->blog}" />
<input type="text" name="blog" value="{htmlspecialchars($member_info->blog)}" />
</td>
</tr>
<tr>
@ -146,30 +146,30 @@
<!--@if($val->required=='Y')-->
*
<!--@end-->
{$val->column_title}
{htmlspecialchars($val->column_title)}
</th>
<td>
<!-- 일반 text -->
<!--@if($val->column_type == 'text')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- 홈페이지 주소 -->
<!--@elseif($val->column_type == 'homepage')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- Email 주소 -->
<!--@elseif($val->column_type == 'email_address')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- 전화번호 -->
<!--@elseif($val->column_type == 'tel')-->
<input type="text" name="{$val->column_name}" value="{$val->value[0]}" size="4" />-
<input type="text" name="{$val->column_name}" value="{$val->value[1]}" size="4" />-
<input type="text" name="{$val->column_name}" value="{$val->value[2]}" size="4" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[0])}" size="4" />-
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[1])}" size="4" />-
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[2])}" size="4" />
<!-- textarea -->
<!--@elseif($val->column_type == 'textarea')-->
<textarea name="{$val->column_name}">{$val->value}</textarea>
<textarea name="{$val->column_name}">{htmlspecialchars($val->value)}</textarea>
<!-- 다중 선택 -->
<!--@elseif($val->column_type == 'checkbox')-->
@ -206,12 +206,12 @@
</div>
<div>
<input type="text" name="{$val->column_name}" value="{$val->value[1]}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[1])}" />
</div>
<!-- 일본 주소 검색 -->
<!--@elseif($val->column_type == 'jp_zip')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- 날자 입력 -->
<!--@elseif($val->column_type == 'date')-->

View file

@ -59,14 +59,14 @@
</tr>
<tr>
<th rowspan="2">{$lang->column_name}</th>
<td><input type="text" name="column_name" value="{$join_form->column_name}" /></td>
<td><input type="text" name="column_name" value="{htmlspecialchars($join_form->column_name)}" /></td>
</tr>
<tr>
<td>{$lang->about_column_name}</td>
</tr>
<tr>
<th rowspan="2">{$lang->column_title}</th>
<td><input type="text" name="column_title" value="{$join_form->column_title}" /></td>
<td><input type="text" name="column_title" value="{htmlspecialchars($join_form->column_title)}" /></td>
</tr>
<tr>
<td>{$lang->about_column_title}</td>
@ -87,7 +87,7 @@
</tr>
<tr>
<th rowspan="2">{$lang->description}</th>
<td><textarea name="description">{$join_form->description}</textarea></td>
<td><textarea name="description">{htmlspecialchars($join_form->description)}</textarea></td>
</tr>
<tr>
<td>{$lang->about_form_description}</td>

View file

@ -14,7 +14,7 @@
<input type="hidden" name="member_srl" value="{$member_srl}" />
<input type="hidden" name="content" value="{htmlspecialchars($member_info->signature)}" />
<!--@if($member_info->member_srl)-->
<input type="hidden" name="user_id" value="{$member_info->user_id}" />
<input type="hidden" name="user_id" value="{htmlspecialchars($member_info->user_id)}" />
<!--@end-->
<div>
@ -25,7 +25,7 @@
<th rowspan="2">{$lang->user_id}</th>
<td>
<!--@if($member_info->member_srl)-->
{$member_info->user_id}
{htmlspecialchars($member_info->user_id)}
<!--@else-->
<input type="text" name="user_id" value="" />
<!--@end-->
@ -43,7 +43,7 @@
<tr>
<th rowspan="2">{$lang->user_name}</th>
<td>
<input type="text" name="user_name" value="{$member_info->user_name}" />
<input type="text" name="user_name" value="{htmlspecialchars($member_info->user_name)}" />
</td>
</tr>
<tr>
@ -52,7 +52,7 @@
<tr>
<th rowspan="2">{$lang->nick_name}</th>
<td>
<input type="text" name="nick_name" value="{$member_info->nick_name}" />
<input type="text" name="nick_name" value="{htmlspecialchars($member_info->nick_name)}" />
</td>
</tr>
<tr>
@ -61,13 +61,13 @@
<tr>
<th>{$lang->email_address}</th>
<td>
<input type="text" name="email_address" value="{$member_info->email_address}" />
<input type="text" name="email_address" value="{htmlspecialchars($member_info->email_address)}" />
</td>
</tr>
<tr>
<th rowspan="2">{$lang->homepage}</th>
<td>
<input type="text" name="homepage" value="{$member_info->homepage}" />
<input type="text" name="homepage" value="{htmlspecialchars($member_info->homepage)}" />
</td>
</tr>
<tr>
@ -76,7 +76,7 @@
<tr>
<th rowspan="2">{$lang->blog}</th>
<td>
<input type="text" name="blog" value="{$member_info->blog}" />
<input type="text" name="blog" value="{htmlspecialchars($member_info->blog)}" />
</td>
</tr>
<tr>
@ -172,31 +172,31 @@
<td>
<!-- 일반 text -->
<!--@if($val->column_type == 'text')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- 홈페이지 주소 -->
<!--@elseif($val->column_type == 'homepage')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- Email 주소 -->
<!--@elseif($val->column_type == 'email_address')-->
<input type="text" name="{$val->column_name}" value="{$val->value}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<!-- 전화번호 -->
<!--@elseif($val->column_type == 'tel')-->
<input type="text" name="{$val->column_name}" value="{$val->value[0]}" size="4" />-
<input type="text" name="{$val->column_name}" value="{$val->value[1]}" size="4" />-
<input type="text" name="{$val->column_name}" value="{$val->value[2]}" size="4" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[0])}" size="4" />-
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[1])}" size="4" />-
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[2])}" size="4" />
<!-- textarea -->
<!--@elseif($val->column_type == 'textarea')-->
<textarea name="{$val->column_name}">{$val->value}</textarea>
<textarea name="{$val->column_name}">{htmlspecialchars($val->value)}</textarea>
<!-- 다중 선택 -->
<!--@elseif($val->column_type == 'checkbox')-->
<!--@if($val->default_value)-->
<!--@foreach($val->default_value as $v)-->
<input type="checkbox" name="{$val->column_name}" value="{$v}" <!--@if(is_array($val->value)&&in_array($v, $val->value))-->checked="true"<!--@end-->/> {$v}
<input type="checkbox" name="{$val->column_name}" value="{htmlspecialchars($v)}" <!--@if(is_array($val->value)&&in_array($v, $val->value))-->checked="true"<!--@end-->/> {$v}
<!--@end-->
<!--@end-->
@ -213,7 +213,7 @@
<!-- 한국 주소 검색 -->
<!--@elseif($val->column_type == 'kr_zip')-->
<div id="zone_address_1_{$val->column_name}" style="display:<!--@if($val->value[0])-->inline<!--@else-->none<!--@end-->;">
<input type="text" name="{$val->column_name}" value="{$val->value[0]}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[0])}" />
<input type="button" value="{$lang->cmd_cancel}" onclick="doHideKrZipList('{$val->column_name}'); return false;" />
</div>
<div id="zone_address_list_{$val->column_name}" style="display:none">
@ -227,7 +227,7 @@
</div>
<div>
<input type="text" name="{$val->column_name}" value="{$val->value[1]}" />
<input type="text" name="{$val->column_name}" value="{htmlspecialchars($val->value[1])}" />
</div>
<!-- 일본 주소 검색 -->
@ -236,7 +236,7 @@
<!-- 날자 입력 -->
<!--@elseif($val->column_type == 'date')-->
<input type="hidden" name="{$val->column_name}" id="date_{$val->column_name}" value="{$val->value}" />
<input type="hidden" name="{$val->column_name}" id="date_{$val->column_name}" value="{htmlspecialchars($val->value)}" />
<span id="str_{$val->column_name}">{zdate($val->value,"Y-m-d")}</span>
[<a href="#" onclick="open_calendar('{$val->column_name}','{$val->value}');return false;">{$lang->cmd_open_calendar}</a>]
@ -245,7 +245,7 @@
</td>
</tr>
<tr>
<td>{$val->description}</td>
<td>{htmlspecialchars($val->description)}</td>
</tr>
<!--@end-->
<!--@end-->

View file

@ -23,7 +23,7 @@
</tr>
<!--@foreach($form_list as $no => $val)-->
<tr>
<td>{$val->column_title}</td>
<td>{htmlspecialchars($val->column_title)}</td>
<td>{$val->column_name}</td>
<td>{$lang->column_type_list[$val->column_type]}</td>
<td>{$val->is_active}</td>

View file

@ -2,6 +2,7 @@
<!--%import("filter/insert_config.xml")-->
<form action="./" method="get" onsubmit="return procFilter(this, insert_config)">
<input type="hidden" name="content" value="{htmlspecialchars($config->agreement)}" />
<table border="1">
<tr>
<th>{$lang->skin}</th>
@ -51,7 +52,7 @@
</tr>
<tr>
<th rowspan="2">{$lang->agreement}</th>
<td><textarea name="agreement">{$config->agreement}</textarea></td>
<td>{$editor}</td>
</tr>
<tr>
<td>{$lang->about_agreement}</td>

View file

@ -10,15 +10,15 @@
<table>
<tr>
<th>{$lang->user_id}</th>
<td>{$member_info->user_id}</td>
<td>{htmlspecialchars($member_info->user_id)}</td>
</tr>
<tr>
<th>{$lang->user_name}</th>
<td>{$member_info->user_name}</td>
<td>{htmlspecialchars($member_info->user_name)}</td>
</tr>
<tr>
<th>{$lang->nick_name}</th>
<td>{$member_info->nick_name}</td>
<td>{htmlspecialchars($member_info->nick_name)}</td>
</tr>
<tr>
<th>{$lang->image_name}</th>
@ -62,15 +62,15 @@
</tr>
<tr>
<th>{$lang->email_address}</th>
<td>{$member_info->email_address}</td>
<td>{htmlspecialchars($member_info->email_address)}</td>
</tr>
<tr>
<th>{$lang->homepage}</th>
<td><!--@if($member_info->homepage)--><a href="#" onclick="winopen('{$member_info->homepage}'); return false;">{$member_info->homepage}</a><!--@end--></td>
<td><!--@if($member_info->homepage)--><a href="#" onclick="winopen('{$member_info->homepage}'); return false;">{htmlspecialchars($member_info->homepage)}</a><!--@end--></td>
</tr>
<tr>
<th>{$lang->blog}</th>
<td><!--@if($member_info->blog)--><a href="#" onclick="winopen('{$member_info->blog}'); return false;">{$member_info->blog}</a><!--@end--></td>
<td><!--@if($member_info->blog)--><a href="#" onclick="winopen('{$member_info->blog}'); return false;">{htmlspecialchars($member_info->blog)}</a><!--@end--></td>
</tr>
<tr>
<th>{$lang->birthday}</th>
@ -107,18 +107,18 @@
<!--@if($extend_form_list)-->
<!--@foreach($extend_form_list as $key => $val)-->
<tr>
<th>{$val->column_title}</th>
<th>{htmlspecialchars($val->column_title)}</th>
<td>
<!--@if($val->column_type=='tel')-->
{$val->value[0]} - {$val->value[1]} - {$val->value[2]}
{htmlspecialchars($val->value[0])} - {htmlspecialchars($val->value[1])} - {htmlspecialchars($val->value[2])}
<!--@elseif($val->column_type=='kr_zip')-->
{$val->value[0]} {$val->value[1]}
{htmlspecialchars($val->value[0])} {htmlspecialchars($val->value[1])}
<!--@elseif($val->column_type=='checkbox')-->
{implode(",",$val->value)}
{htmlspecialchars(implode(",",$val->value))}
<!--@elseif($val->column_type=='date')-->
{zdate($val->value, "Y-m-d")}
<!--@else-->
{$val->value}
{htmlspecialchars($val->value)}
<!--@end-->
</td>
</tr>
@ -126,7 +126,7 @@
<!--@end-->
<tr>
<th>{$lang->description}</th>
<td>{$member_info->description}</td>
<td>{htmlspecialchars($member_info->description)}</td>
</tr>
<tr>
<td colspan="2">

View file

@ -24,9 +24,9 @@
<!--@foreach($member_list as $no => $val)-->
<tr>
<td>{$val->member_srl}</td>
<td><a href="{getUrl('act','dispMemberAdminInfo','member_srl',$val->member_srl)}">{$val->user_id}</a></td>
<td>{$val->user_name}</td>
<td><div class="member_{$val->member_srl}">{$val->nick_name}</div></td>
<td><a href="{getUrl('act','dispMemberAdminInfo','member_srl',$val->member_srl)}">{htmlspecialchars($val->user_id)}</a></td>
<td>{htmlspecialchars($val->user_name)}</td>
<td><div class="member_{$val->member_srl}">{htmlspecialchars($val->nick_name)}</div></td>
<td>{$val->allow_mailing}</td>
<td>{$val->denied}</td>
<td>{zdate($val->regdate,"Y-m-d")}</td>

View file

@ -100,7 +100,7 @@
$skin_vars->colorset = $skin_info->colorset[0]->name;
// 변수 정리후 query 실행
$args->module_srl = getNextSequence();
if(!$args->module_srl) $args->module_srl = getNextSequence();
$args->skin_vars = serialize($skin_vars);
$output = executeQuery('module.insertModule', $args);
if(!$output->toBool()) {

View file

@ -28,9 +28,6 @@
if($args->module_srl) {
$oModuleModel = &getModel('module');
$module_info = $oModuleModel->getModuleInfoByModuleSrl($args->module_srl);
// 만약 원래 모듈이 없으면 새로 입력하기 위한 처리
if($module_info->module_srl != $args->module_srl) unset($args->module_srl);
}
// module 모듈의 controller 객체 생성
@ -40,7 +37,7 @@
if($args->is_default=='Y') $oModuleController->clearDefaultModule();
// module_srl의 값에 따라 insert/update
if(!$args->module_srl) {
if($module_info->module_srl != $args->module_srl) {
$output = $oModuleController->insertModule($args);
$msg_code = 'success_registed';
} else {

View file

@ -40,7 +40,7 @@
</tr>
<tr>
<th rowspan="2">{$lang->browser_title}</th>
<td><input type="text" name="browser_title" value="{$module_info->browser_title}" /></td>
<td><input type="text" name="browser_title" value="{htmlspecialchars($module_info->browser_title)}" /></td>
</tr>
<tr>
<td>{$lang->about_browser_title}</td>

View file

@ -25,7 +25,7 @@
<tr>
<td>{$no}</td>
<td><input type="checkbox" name="cart" value="{$val->poll_index_srl}" /></td>
<td><a href="#" onclick="winopen('./?document_srl={$val->upload_target_srl}'); return false;"/>{$val->title}</a></td>
<td><a href="#" onclick="winopen('./?document_srl={$val->upload_target_srl}'); return false;"/>{htmlspecialchars($val->title)}</a></td>
<td>{$val->checkcount}</td>
<td>{$val->poll_count}</td>
<td>{zdate($val->regdate,"Y-m-d H:i")}</td>

View file

@ -26,8 +26,8 @@
<td rowspan="2">{$no}</td>
<td rowspan="2"><input type="checkbox" name="cart" value="{$val->trackback_srl}" /></td>
<td><a href="#" onclick="window.open('./?mid={$val->mid}');return false">{$module_list[$val->module_srl]->browser_title}</a></td>
<td><a href="#" onclick="window.open('{$val->url}');return false;">{$val->blog_name}</a></td>
<td>{$val->title}</td>
<td><a href="#" onclick="window.open('{$val->url}');return false;">{htmlspecialchars($val->blog_name)}</a></td>
<td>{htmlspecialchars($val->title)}</td>
<td>{zdate($val->regdate,"Y-m-d")}</td>
<td>{$val->ipaddress}</td>
<td rowspan="2"><a href="#" onclick="window.open('./?document_srl={$val->document_srl}&amp;#trackback_{$val->trackback_srl}');return false">{$lang->cmd_move}</a></td>