안카메라.exe를 첨부파일에 넣고 돌렸는데 저렇게된다
뭐가 문제인지 도대체 모르겠다.. 우선
download.php 코드
<? session_start(); ?>
<?
$userid=$_SESSION["userid"];
$upload_dir="./data/";
$real_name=$_GET["real_name"];
$show_name=$_GET["show_name"];
$file_type=$_GET["file_type"];
if(!$userid) {
echo("
<script>
window.alert('로그인 후 이용해 주세요.')
history.go(-1)
</script>
");
exit;
}
$file_path = "./data/".$real_name;
if( file_exists($file_path) )
{
$fp = fopen($file_path,"rb");
if( $file_type )
{
Header("Content-type: application/force-download");
Header("Content-Length: ".filesize($file_path));
Header("Content-Dis attachment; filename=$show_name");
Header("Content-Transfer-Encoding: binary");
Header("Content-Description: File Transfer");
header("Expires: 0");
}
else
{
if(eregi("(MSIE 5.0|MSIE 5.1|MSIE 5.5|MSIE 6.0 | MSIE 11.0)", $HTTP_USER_AGENT))
{
Header("Content-type: application/force-download");
Header("Content-Length: ".filesize($file_path));
Header("Content-Dis attachment; filename=$show_name");
Header("Content-Transfer-Encoding: binary");
Header("Expires: 0");
}
else
{
Header("Content-type: file/unknown");
Header("Content-Length: ".filesize($file_path));
Header("Content-Dis attachment; filename=$show_name");
Header("Content-Transfer-Encoding: binary");
Header("Expires: 0");
}
}
if(!fpassthru($fp))
fclose($fp);
}
?>
혹시 모르니 insert 코드까지 넣는다(이건문제없는거같음;)
<?@session_start();
$userid = $_SESSION['userid'];
if(!$userid) {
echo("
<script>
window.alert('로그인 후 이용해 주세요.')
history.go(-1)
</script>
");
exit;
}
$regist_day = date("Y-m-d (H:i)"); // 현재의 '년-월-일-시-분'을 저장
// 다중 파일 업로드
$files = $_FILES["upfile"];
$count = count($files["name"]);
$upload_dir = './data/';
for ($i=0; $i<$count; $i++)
{
$upfile_name[$i] = $files["name"][$i];
$upfile_tmp_name[$i] = $files["tmp_name"][$i];
$upfile_type[$i] = $files["type"][$i];
$upfile_size[$i] = $files["size"][$i];
$upfile_error[$i] = $files["error"][$i];
$file = explode(".", $upfile_name[$i]);
$file_name = $file[0];
$file_ext = $file[1];
if (!$upfile_error[$i])
{
$new_file_name = date("Y_m_d_H_i_s");
$new_file_name = $new_file_name."_".$i;
$copied_file_name[$i] = $new_file_name.".".$file_ext;
$uploaded_file[$i] = $upload_dir.$copied_file_name[$i];
if( $upfile_size[$i] > 5000000 ) {
echo("
<script>
alert('업로드 파일 크기가 지정된 용량(5MB)을 초과합니다!<br>파일 크기를 체크해주세요! ');
history.go(-1)
</script>
");
exit;
}
if (!move_uploaded_file($upfile_tmp_name[$i], $uploaded_file[$i]) )
{
echo("
<script>
alert('파일을 지정한 디렉토리에 복사하는데 실패했습니다.');
history.go(-1)
</script>
");
exit;
}
}
}
include "../lib/dbconn.php"; // dconn.php 파일을 불러옴
if ($mode=="modify")
{
$num_checked = count($_POST['del_file']);
$position = $_POST['del_file'];
for($i=0; $i<$num_checked; $i++) // delete checked item
{
$index = $position[$i];
$del_ok[$index] = "y";
}
$sql = "select * from $table where num=$num"; // get target record
$result = mysql_query($sql);
$row = mysql_fetch_array($result);
for ($i=0; $i<$count; $i++) // update DB with the value of file input box
{
$field_org_name = "file_name_".$i;
$field_real_name = "file_copied_".$i;
$org_name_value = $upfile_name[$i];
$org_real_value = $copied_file_name[$i];
if ($del_ok[$i] == "y")
{
$delete_field = "file_copied_".$i;
$delete_name = $row[$delete_field];
$delete_path = "./data/".$delete_name;
unlink($delete_path);
$sql = "update $table set $field_org_name = '$org_name_value', $field_real_name = '$org_real_value' where num=$num";
mysql_query($sql, $connect); // $sql 에 저장된 명령 실행
}
else
{
if (!$upfile_error[$i])
{
$sql = "update $table set $field_org_name = '$org_name_value', $field_real_name = '$org_real_value' where num=$num";
mysql_query($sql, $connect); // $sql 에 저장된 명령 실행
}
}
}
$sql = "update $table set subject='$subject', content='$content' where num=$num";
mysql_query($sql, $connect); // $sql 에 저장된 명령 실행
}
else
{
$sql = "insert into $table (id, name, nick, subject, content, regist_day, hit, ";
$sql .= " file_name_0, file_name_1, file_name_2, file_type_0, file_type_1, file_type_2, file_copied_0, file_copied_1, file_copied_2) ";
$sql .= " values('$userid', '$username', '$usernick', '$subject', '$content', '$regist_day', 0, ";
$sql .= " '$upfile_name[0]', '$upfile_name[1]', '$upfile_name[2]', '$upfile_type[0]', '$upfile_type[1]', '$upfile_type[2]', ";
$sql .= " '$copied_file_name[0]', '$copied_file_name[1]','$copied_file_name[2]')";
mysql_query($sql, $connect); // $sql 에 저장된 명령 실행
}
mysql_close(); // DB 연결 끊기
echo "
<script>
location.href = 'list.php?table=$table&page=$page';
</script>
";
?>
지혜좀 주세요
듸질래?