Tryag File Manager

/home/ltman.eemo.co.kr/public_html/www/user_farm_profile_do.php

<?
session_cache_limiter('no-cache, must-revalidate');
session_start();

header("Pragma: no-cache");   
header("Cache-Control: no-cache,must-revalidate");   
header("Content-Type: text/html; charset=utf-8");

include_once("dbconn.php");
include_once("lib.php");

foreach($_GET as $key => $value) {
	${$key}=mysql_real_escape_string(trim($value));
}

foreach($_POST as $key => $value) {
	${$key}=mysql_real_escape_string(trim($value));
}

ini_set('max_execution_time',86400);

$rs_farm=RS("select * from farm where no='$farm_no' ");

$file_crn_rename=$rs_farm[file_crn_rename];
$file_crn_orgame=$rs_farm[file_crn_orgame];

$uploadFolder="upload";

foreach ($_FILES as $k => $v) {
	$TempFile = $v['tmp_name'];
	$SaveFile = $v['name'];   
	$FileSize = $v['size'];
	
	if($SaveFile) {

if($k=="ufile1") {

$file_crn_rename="crm_"."".$farm_no.".".file_ext($SaveFile);
			$file_crn_orgame=$SaveFile;			
			$FullPath=$uploadFolder."/".$file_crn_rename;

if(NoExtFile("php|html|htm|htaccess|inc|jsp|phtml",$SaveFile)) {
				if(move_uploaded_file($TempFile, $FullPath)) {
				}
			}
		}
	}
}

$arr_rst=array();

$vv2=str_replace("-","",$farm_org_number);

$is_rs2=RS("select * from farm where no != '$farm_no' and REPLACE(farm_org_number,'-','')='$vv2' ");

if($is_rs2[no]) {
	$arr_rst['rst']='farm_double';
	echo json_encode($arr_rst);
	exit;
}

$query="update farm 
			set 
				farm_org_number='$farm_org_number',
				is_company_reg_number='$is_company_reg_number',
				file_crn_rename='$file_crn_rename',
				file_crn_orgame='$file_crn_orgame',
				farm_name='$farm_name',
				addr='$farm_addr',
				addr2='$farm_addr2',
				tel='$farm_tel',
				fax='$farm_fax',
				email='$farm_email',
				lat='$farm_lat',
				lon='$farm_lon',
				sido='$farm_sido',
				sigungu='$farm_sigungu',
				agree_chk_ads='$agree_chk_ads',
				agree_chk_email='$agree_chk_email',
				crn_auth_req_type='$crn_auth_req_type',
				bank_info='$bank_info',
				bank_account='$bank_account' 
			where no='$farm_no' 
		";
mysql_query($query) or die(mysql_error());

$arr_rst['rst']='1';
echo json_encode($arr_rst);
?>