Tryag File Manager

/home/egg.eemo.co.kr/public_html/super5/ads_main_set_do.php

<?
session_cache_limiter('no-cache, must-revalidate');
session_start();

header("Pragma: no-cache");   
header("Cache-Control: no-cache,must-revalidate");   
header("Content-Type: text/html; charset=utf-8");

include_once("dbconn.php");
include_once("lib.php");

foreach($_GET as $key => $value) {
	${$key}=mysql_real_escape_string(trim($value));
}

foreach($_POST as $key => $value) {
	${$key}=mysql_real_escape_string(trim($value));
}

ini_set('max_execution_time',86400);

$result=mysql_query("select * from main_ads where 1 order by seq asc ") or die();
while($rs=mysql_fetch_array($result)) {
	${"re_name".$rs[seq]}=$rs[re_name];
	${"org_name".$rs[seq]}=$rs[org_name];
	${"vlink".$rs[seq]}=$rs[vlink];
	${"cont".$rs[seq]}=$rs[cont];
	${"sdate".$rs[seq]}=$rs[sdate];
	${"edate".$rs[seq]}=$rs[edate];
}

$uploadFolder="upload";
$uploadFolder2="/home/nonga.eemo.co.kr/public_html/www/upload";
$uploadFolder3="/home/ltman.eemo.co.kr/public_html/www/upload";

foreach ($_FILES as $k => $v) {
	$TempFile = $v['tmp_name'];
	$SaveFile = $v['name'];   
	$FileSize = $v['size'];
	
	if($SaveFile) {
		$exp_vv=explode("_",$k);
		$nn=$exp_vv[1];

${"re_name".$nn}="main_ads_".time()."_".$nn.".".file_ext($SaveFile);
		${"org_name".$nn}=$SaveFile;

$FullPath=$uploadFolder."/".${"re_name".$nn};
		$FullPath2=$uploadFolder2."/".${"re_name".$nn};
		$FullPath3=$uploadFolder3."/".${"re_name".$nn};

//echo ${"re_name".$nn}."<br>";

if(NoExtFile("php|html|htm|htaccess|inc|jsp|phtml",$SaveFile)) {
			if(move_uploaded_file($TempFile, $FullPath)) {
			}

if(copy($FullPath, $FullPath2)) {
			}

if(copy($FullPath, $FullPath3)) {
			}
		}
		
	}
}

$result=mysql_query("select * from main_ads where 1 order by seq asc ") or die();
while($rs=mysql_fetch_array($result)) {
	if(${"del_".$rs[seq]}=='1') {
		mysql_query("update main_ads set re_name='', org_name='', vlink='' , sdate='', edate='' where seq='{$rs[seq]}' ") or die();
	} else {
		$vv_re_name=${"re_name".$rs[seq]};
		$vv_org_name=${"org_name".$rs[seq]};
		$vv_link=${"vlink_".$rs[seq]};
		$vv_cont=${"cont_".$rs[seq]};
		$vv_sdate=${"sdate_".$rs[seq]};
		$vv_edate=${"edate_".$rs[seq]};

mysql_query("update main_ads set re_name='$vv_re_name', org_name='$vv_org_name', vlink='$vv_link', sdate='$vv_sdate', edate='$vv_edate'  where seq='{$rs[seq]}' ") or die();
	}
}

?>
{"rst" : "1"}