<?
include $_SERVER['DOCUMENT_ROOT']."/include/config.inc.php";
include $_SERVER['DOCUMENT_ROOT']."/page_inc/top.inc.php";

include $DOCUMENT_ROOT."/lib/file.icon.lib.php";
if( is_file($DOCUMENT_ROOT."/config/board.conf.php") )	include $DOCUMENT_ROOT."/config/board.conf.php";

$TBLB		=	"bbs";
$TBLBA	=	"bbs_answer";
$TBLBC	=	"bbs_category";
$TBLBCC	=	"bbs_chuchun";
$TBLMLT	=	"memberlevel_tbl";

$saveDir = "/data_file/";

$addedQry			=	"&bbs=".$_REQUEST[bbs].
							"&sl_search=".$_REQUEST[sl_search].
							"&keyword=".ue( $_REQUEST[keyword] ).
							"&srch_cate_idx=".$_REQUEST[srch_cate_idx].
							"&PageNo=".$_REQUEST[PageNo];

include $_SERVER["DOCUMENT_ROOT"]."/include/board.inc.php";

// 레벨관련 설정
$sql = "SELECT level, levelicon FROM $TBLMLT ".
		"WHERE levelicon != '' AND levelicon IS NOT NULL";
$level = $objdb->sqlArray( $sql, "level" );

if( $_REQUEST[mode] == "insertAnswer" ) {

	// 모든 변수가 정상적으로 있는지 확인
	$chkInsert = true;
	if( !$_REQUEST[no] ) $chkInsert = false;
	if( !$_REQUEST[ans_writer] ) $chkInsert = false;
	if( !$_REQUEST[ans_passwd] ) $chkInsert = false;
	if( !$_REQUEST[ans_content] ) $chkInsert = false;
	if( !$_REQUEST[bbs] ) $chkInsert = false;

	if( !$chkInsert ) exit;

//	부모글이없으면 댓글등록 방지 by DGOH in 080721
	$sql = "SELECT count(no) FROM $TBLB WHERE no = '".$_REQUEST[no]."' and bbsid = '".$_REQUEST[bbs]."'";
	$cntNo = $objdb->sqlRowOne($sql);
	if(!$cntNo)	exit;

	$sql = "SELECT MAX( no ) FROM $TBLBA";
	$maxno = $objdb->sqlMaxNo( $sql );

	$sql = "INSERT INTO $TBLBA ( ".
			"no, pno, id, writer, passwd, content, bbsid, wdate, level ".
			") VALUES ( ".
			"'".$maxno."', '".$_REQUEST[no]."', '".$_USERID."', '".$_REQUEST[ans_writer]."', '".$_REQUEST[ans_passwd]."', '".$_REQUEST[ans_content]."', '".$_REQUEST[bbs]."', SYSDATE(), '".$_USERLEVELNO."' ".
			")";
	$objdb->sqlExe( $sql );
	$objfunc->reloadParent();
}

else if( $_REQUEST[mode] == "deleteAnswer" ) {
	if( $_USERID ) {
		$sql = "SELECT id FROM $TBLBA ".
				"WHERE bbsid = '".$_REQUEST[bbs]."' AND no = '".$_REQUEST[ans_no]."'";
		$dbid = $objdb->sqlRowOne( $sql );

		if( $_USERID != $dbid ) {
			$objfunc->alert( "삭제할 권한이 없습니다." );
		}
	}

	else {
		if( trim( $_REQUEST[ans_passwd] ) == "" ) {
			$objfunc->alert( "비밀번호가 비었습니다." );
		}

		$sql = "SELECT passwd FROM $TBLBA ".
				"WHERE bbsid = '".$_REQUEST[bbs]."' AND no = '".$_REQUEST[ans_no]."'";
		$dbpasswd = $objdb->sqlRowOne( $sql );

		if( $_REQUEST[ans_passwd] != $dbpasswd && $_REQUEST[ans_passwd] != $_MASTERPASS ) {
			$objfunc->alert( "비밀번호가 틀렸습니다." );
		}
	}

	$sql = "DELETE FROM $TBLBA ".
			"WHERE bbsid = '".$_REQUEST[bbs]."' AND no = '".$_REQUEST[ans_no]."'";
	$objdb->sqlExe( $sql );

	$objfunc->reloadParent();
}

$sql = "SELECT no, memberid, passwd, clipfile, refno FROM $TBLB ".
		"WHERE no = '".$_REQUEST[no]."' AND bbsid = '".$_REQUEST[bbs]."'";
$row = $objdb->sqlRow( $sql );
$dbno			=	$row[no];
$dbpasswd	=	$row[passwd];
$dbclipfile		=	$row[clipfile];
$dbrefno		=	$row[refno];

// no 에 해당하는 데이타가 없으면 강제로 리스트로 보낸다.
if( !$dbno ) {
	$objfunc->goUrl( "bbsList.html?bbs=".$_REQUEST[bbs] );
}

if( $dbrefno ) {
	$sql = "SELECT passwd FROM $TBLB ".
			"WHERE no = '".$dbrefno."' AND bbsid = '".$bbs."'";
	$refpasswd = $objdb->sqlRowone( $sql );
}

if( $mode == "check" && $check != "ok" ) {
	if( !( $passwd == $dbpasswd || ( $refpasswd && $passwd == $refpasswd ) || $passwd == $_MASTERPASS ) ) {
		$objfunc->alertBack( "비밀번호가 틀렸습니다." );
	}
}

if( $dbprivread == "y" && empty( $_USERID ) ) {
	LoginRedirect( $_SERVER["PHP_SELF"]."?no=".$no."&bbs=".$bbs."&PageNo=".$PageNo );
}

if( $dbchkboardlock == "y" ) {
	$sql = "SELECT memberid, chklock FROM $TBLB ".
			"WHERE no = '".$no."' AND bbsid = '".$bbs."'";
	$row = $objdb->sqlRow( $sql );
	$dbchklock		=	$row[chklock];
	$dbmemberid		=	$row[memberid];
	if( $dbchklock == "y" && $mode != "check" && !( $_USERID && $_USERID == $dbmemberid ) ) {
		$objfunc->goUrl( "bbsPw.html?bbs=".$bbs."&no=".$no."&type=check&PageNo=".$PageNo );
	}
}

if( !eregi( $PHP_SELF, $HTTP_REFERER ) ) {
	$sql = "UPDATE $TBLB SET ".
			"readnum = readnum + 1 ".
			"WHERE no = '".$no."' AND bbsid = '".$bbs."'";
	$objdb->sqlExe( $sql );
}

$sql = "SELECT * FROM $TBLBC ".
		"WHERE bbsid = '".$_REQUEST[bbs]."' ".
		"ORDER BY sortno";
$dataCate = $objdb->sqlArray( $sql );

foreach( $dataCate as $k => $data ) {
	$nameCate[$data[cate_idx]] = $data[cate_name];
}

?>

<?php

$newdate = date( "Y-m-d H:i:s", mktime( date( 'H' ) - $dbnewperiod, date( 'i' ), date( 's' ), date( 'm' ), date( 'd' ), date( 'Y' ) ) );

$sql = "SELECT ".
		"title, writer, writer_img, htmlcheck, DATE_FORMAT( wdate, '%Y.%m.%d' ) AS wdate, content, clipfile, refno, chunum, readnum, sortno, chkbold, title_color, memberid, memberlevel, admin_write, cate_idx, g_code ".
		"FROM $TBLB ".
		"WHERE no = '".$_REQUEST[no]."' AND bbsid = '".$_REQUEST[bbs]."'";
$row = $objdb->sqlRow( $sql );

$dbtitle			=	$row[title];
$dbwriter			=	$row[writer];
$dbhtmlcheck		=	$row[htmlcheck];
$dbwdate			=	$row[wdate];
$dbcontent		=	$row[content];
$dbclipfile			=	$row[clipfile];
$dbrefno			=	$row[refno];
$dbreadnum		=	$row[readnum];
$dbchunum		=	$row[chunum];
$dbsortno			=	$row[sortno];
$dbmemberid		=	$row[memberid];
$dbmemberlevel	=	$row[memberlevel];
$dbchkbold		=	$row[chkbold];
$dbtitle_color	=	$row[title_color];
$admin_write		=	$row[admin_write];
$cate_idx			=	$row[cate_idx];

if( $dbchkbold == "y" )			$dbtitle = "<B>".$dbtitle."</B>";
if( $dbtitle_color )				$dbtitle = "<font color='".$dbtitle_color."'>".$dbtitle."</font>";

if( $keyword ) {
	switch( $sl_search ) {
		case "title" :
			$dbtitle = keywordReplace( $keyword, $dbtitle );
			break;
		case "writer" :
			$dbwriter = keywordReplace( $keyword, $dbwriter );
			break;
		case "content" :
			if( $dbhtmlcheck != "y" ) {
				$dbcontent = keywordReplace( $keyword, $dbcontent );
			}
			break;
	}
}

if( $_BBS_ADMINIMG_CHK == "y" && $admin_write && is_file( $DOCUMENT_ROOT."/menu_image/".$_BBS_ADMINIMG ) ) {
	$dbwriter = make_img( "/menu_image/".$_BBS_ADMINIMG, 80, 30 );
}

// 레벨아이콘
if( $dbmemberlevel && !$admin_write ) {
	$dbwriter = make_img( "/menu_image/".$level[$dbmemberlevel][levelicon], 14, 14 )." ".$dbwriter;
}
?>

<?
$code = $row['g_code'];
include 'bbsGood.inc.html';
?>

<style type="text/css">
.formbox {border:0;width:580px;height:48px;font-size:11px;font-family:돋움;background-color:#ffffff;border:#D6D4D5 1px solid;}
<!--
.style3 {font-size: 11px}
.style4 {
	font-size: 12px;
	font-weight: bold;
	color: #444444;
}
.style5 {font-size: 12px}
.style6 {
	font-size: 13px;
	color: #FF8600;
}
.style7 {
	font-size: 13px;
	font-weight: bold;
	color: #FF8600;
}
-->
</style>
<script>
function insertAnswer( f ) {

<? if( !$_USERID ) { ?>
	if( f.ans_writer.value == "" ) {
		alert( "작성자를 입력하세요." );
		f.ans_writer.focus();
		return false;
	}

	if( f.ans_passwd.value == "" ) {
		alert( "비밀번호를 입력하세요." );
		f.ans_passwd.focus();
		return false;
	}
	<? } ?>

	if( f.ans_content.value == "" ) {
		alert( "댓글을 입력하세요." );
		f.ans_content.focus();
		return false;
	}

	return true;
}

function deleteAnswer( ansno ) {
	<? if( $_USERID ) { ?>
	deleteAnswerSubmit( ansno );
	<? } else { ?>
	deleteAnswerByPasswd( ansno );
	<? } ?>
}

function deleteAnswerByPasswd( ansno ) {
	var f = document.forms["deleteAnswerForm_" + ansno];
	var tr = document.getElementById( "deleteCommentTR_" + ansno );

	if( tr.style.display == "none" ) {
		tr.style.display = "";
		f.ans_passwd.focus();
	}
	else {
		tr.style.display = "none";
	}
}

function deleteAnswerSubmit( ansno ) {
	var f = document.forms["deleteAnswerForm_" + ansno];
	
	if( confirm( '정말 삭제하시겠습니까?' ) ) {
		f.mode.value = "deleteAnswer";
		
		f.submit();
	}
}
</script>

<table width="728" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <TD  valign="top">
<?include ($_SERVER["DOCUMENT_ROOT"]."/config/user_left.inc.php");?>
</TD>
    <td valign="top" style="padding:0 0 0 10">
	<?php include ($_SERVER["DOCUMENT_ROOT"]."/shopuser/etc/bbs_design.html");?>

	<table width="718" border="0" cellspacing="0" cellpadding="0">
      <tr>
           <td background="/user_img/product/top_bg.gif" height="40" align="center">
	<table width="698" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td align="left">
		<table width="0" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td><img src="/user_img/product/tit_icon.gif" width="13" height="13"></td>
            <td style="padding-left:10"><span class="style4"><?= $dbtitle ?></span></td>
          </tr>
        </table>
          </td>
        <td align="right">
		<table width="0" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td><span class="style5">조회수 :</span> <span class="style7"><?= $dbreadnum ?></span></td>
          </tr>
        </table>
		</td>
      </tr>
    </table>
	</td>
      </tr>
      <tr>
        <td background="/user_img/product/img_bg.gif" style="background-repeat:repeat-y">
		<table width="718" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td align="center">
	<table width="698" border="0" cellspacing="0" cellpadding="0">
	<tr><td height="10"></td></tr>
  <tr>
    <td align="right"><span class="style5"><?= space2br( $dbwdate ) ?></span></td>
  </tr>
  <tr><td height="10"></td></tr>
</table>
</td>
  </tr>
  <tr>
    <td align="center"><?= $objfunc->htmlText( $dbcontent, $dbhtmlcheck ) ?></td>
  </tr>
  <tr>
    <td>&nbsp;</td>
  </tr>
  <tr>
	<td>&nbsp;</td>
  </tr>

<? if( ( $dbprivanswer == "y" && $_USERID ) || !in_array( $dbprivanswer, array( "a", "y" ) ) ) { ?>

<!-- 댓글쓰기 테블 -->
<tr>
	<td align="center">
	<table width="698" border="0" cellspacing="0" cellpadding="0" background="/user_img/product/bg.gif" height="110">
	<tr>
		<td align="center" valign="bottom" style="padding-bottom:22;">
			<table width="648" border="0" cellspacing="0" cellpadding="0">
			<form name="insertAnswerForm" method=post onSubmit="return insertAnswer( this );" target=exeFrame>
			<? if( $_USERID) { ?>
			<input type="hidden" name="ans_writer" value="<?= htmlText( $_USERNICKNAME ) ?>">
			<input type="hidden" name="ans_passwd" value="<?= $_USERPASS ?>">
			<? } else { ?>
			<tr>
				<td colspan="3" align="right" style="padding:0 0 3 0">
				작성자 <input type="text" name="ans_writer" class="inputbox">
				비밀번호 <input type="password" name="ans_passwd" class="inputbox">
				</td>
			</tr>
			<?}?>
			<tr>
			<td style="padding-top:3;">
			<table width="0" border="0" cellspacing="0" cellpadding="0">
			<tr>
                <td width="579"><textarea name="ans_content" class="formbox" onClick="this.select">다른 사람을 함부로 비방하거나 명예를 훼손하는 댓글은 쓰지 말아주세요.</textarea></td>
				<td width="4"></td>
				<td width="65"><input type="image" border="0" src="/user_img/product/button.gif" width="65" height="48"></td>
				<input type="hidden" name="bbs" value="<?= $bbs ?>">
				<input type="hidden" name="no" value="<?= $no ?>">
				<input type="hidden" name="PageNo" value="<?= $PageNo ?>">
				<input type="hidden" name="mode" value="insertAnswer">
				</tr>
				</table>
				</td>
			</tr>
			</form>
			</table>
		</td>
	</tr>
	</table>
	</td>
</tr>
<!-- 댓글쓰기 테블 끝 -->
<? } ?>
  <tr>
    <td align="center" style="padding-top:30"><img src="/user_img/product/line02.gif" width="698" height="2"></td>
  </tr>
  <tr>
    <td align="center" style="padding-top:15">
<!-- 댓글보기 테블 -->
	<table width="698" border="0" cellspacing="0" cellpadding="0">
<?
$sql = "SELECT * FROM $TBLBA ".
		"WHERE pno = '".$_REQUEST[no]."' AND bbsid = '".$_REQUEST[bbs]."' ".
		"ORDER BY no desc" ;
$rs = $objdb->sqlResult( $sql );
while( $row = $objdb->sqlFetch( $rs ) ) {
	$dbans_no		=	$row[no];
	$dbid				=	$row[id];
	$dbwriter		=	$row[writer];
	$dbcontent		=	$row[content];
	$dbwdate		=	$row[wdate];
	$admin_write	=	$row[admin_write];
	$dblevel			=	$row[level];

	$dateArr = explode( " ", $dbwdate );

	if( $_BBS_ADMINIMG_CHK == "y" && $admin_write && is_file( $DOCUMENT_ROOT."/menu_image/".$_BBS_ADMINIMG ) ) {
		$dbwriter = make_img( "/menu_image/".$_BBS_ADMINIMG, 80, 30 );
	}

	// 레벨아이콘
	if( $dblevel && !$admin_write ) {
		$dbwriter = make_img( "/menu_image/".$level[$dblevel][levelicon], 14, 14 )." ".$dbwriter;
	}
?>
	  <tr>
        <td>
		<table width="698" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td width="122"><span class="style6"><?=$dbwriter?></span></td>
        <td></td>
        <td width="586" align="right"><span class="style5"><?=$dateArr[0]?></span>&nbsp;<span class="style5"><?=$dateArr[1]?></span></td>
      </tr>
      <tr>
        <td colspan="3" height="20">
		<table width="698" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td><span class="style5"><?= $objfunc->htmlText( $dbcontent, "n" ) ?></span></td>
    <td align="right"><a href="javascript:deleteAnswer( '<?= $dbans_no ?>' );" title="댓글삭제"><img src="/user_img/product/box.gif" width="15" height="15"></a></td>
  </tr>
	<TR id=deleteCommentTR_<?= $dbans_no ?> style="display:none;">
			<TD colspan=7 align=right class=red>
			<form name="deleteAnswerForm_<?= $dbans_no ?>" onSubmit="return false;" target=exeFrame>
			삭제를 위한 비밀번호 입력 - <input type=password name="ans_passwd" class="box imedisabled">
			<a href="javascript:deleteAnswerSubmit( <?= $dbans_no ?> );"><font class=red>[삭제]</font></a>
			<input type=hidden name=bbs value="<?= $_REQUEST[bbs] ?>">
			<input type=hidden name=ans_no value="<?= $dbans_no ?>">
			<input type=hidden name=mode>
			</form>
			</TD>
		</TR>
</table>

        </tr>
		<tr>
		<td align="center" colspan="3"><img src="/user_img/product/dot.gif" width="698" height="1" vspace="5"></td>
		</tr>
    </table>
	</td>
      </tr>
<?}?>
   </table>
<!-- 댓글보기 테블 끝 -->
   </td>
  </tr>
  <tr>
    <td><img src="/user_img/product/bot_2.gif" width="718" height="20"></td>
  </tr>
</table>
</td>
 </tr>
 <tr><td align="right" style="padding:5 0 0 0;"><a href="/user_page/product.html?<?=$_SERVER["QUERY_STRING"]?>"><img src="/user_img/product/catego.gif" width="72" height="19"></a></td>
 </tr>
 </table>
</td>
</tr>
</table>

<BR><BR>
<?
include $_SERVER['DOCUMENT_ROOT']."/page_inc/bottom.inc.php";
?>