<% Dim idx, userId, userName, subject, contents, kind Dim fileName1, fileSize1, fileName2, fileSize2 Dim file1_del, file2_del Dim UploadForm, SQL, RS, tableName, listFile Dim mode, msg Dim adm_idx, adm_date, adm_hit, i Dim branchs, period tableName = "TB_EVENT" '### DB 테이블명 listFile = "event.asp" '### 리스트 파일명 Set UploadForm = Server.CreateObject("DEXT.FileUpload") UploadForm.AutoMakeFolder = True UploadForm.DefaultPath = PathDir&"\data\" & tableName '넘어온 값 변수에 받기 idx = Trim(UploadForm("idx")) mode = Trim(UploadForm("mode")) userId = Trim(UploadForm("userId")) userName = Trim(UploadForm("userName")) subject = Trim(UploadForm("subject")) : subject = InjectionDefender(subject) contents = UploadForm("contents") : contents = InjectionDefender(contents) branchs = Trim(UploadForm("branchs")) : If branchs = "" Then branchs = "U000" : period = Trim(UploadForm("period")) kind = Trim(UploadForm("kind")) Call CheckAuth(userId, mode) '### 접근 권한 체크 '### 이미지 파일이 아니면 파일 삭제하고 에러 처리하는 함수 ### Sub NotImage() UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.Write "" Response.End End Sub Select Case mode Case "edit" '수정 ########################################################## msg = "수정" '### 파일 삭제 함수 (DB 수정) ### Sub FileDel(idx, fileNo) SQL = "UPDATE " & tableName SQL = SQL & " SET fileName" & fileNo & " = '' " SQL = SQL & ", fileSize" & fileNo & " = 0 " SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) End Sub file1_del = Trim(UploadForm("file1_del")) file2_del = Trim(UploadForm("file2_del")) '체크된 파일 삭제 SQL = "SELECT fileName1, fileName2 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") If file1_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 Call FileDel(idx, 1) End If If file2_del = "Y" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 Call FileDel(idx, 2) End If '첨부파일 업로드 For Each item In UploadForm("files") item.Save, False Next '에러 발생시 업로드 된 파일 삭제. IF Err THEN Response.Write Err.number & "
" & Err.source & "
" & Err.description UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.End END If fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen '이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : 'DB 수정 SQL = "UPDATE " & tableName SQL = SQL & " SET subject = '" & subject & "'" SQL = SQL & ", contents = '" & contents & "'" SQL = SQL & ", branchs = '" & branchs & "'" SQL = SQL & ", period = '" & period & "'" SQL = SQL & ", kind = '" & kind & "'" If fileSize1 > 0 Then SQL = SQL & ", fileName1 = '" & fileName1 & "'" SQL = SQL & ", fileSize1 = " & fileSize1 End If If fileSize2 > 0 Then SQL = SQL & ", fileName2 = '" & fileName2 & "'" SQL = SQL & ", fileSize2 = " & fileSize2 End If SQL = SQL & " WHERE idx = " & idx Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "del" '삭제 ########################################################## msg = "삭제" '파일 삭제 SQL = "SELECT fileName1, fileName2 FROM " & tableName & " WHERE idx=" & idx Set RS = Dbcon.Execute(SQL) fileName1 = RS("fileName1") fileName2 = RS("fileName2") If fileName1 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName1 : If fileName2 <> "" Then UploadForm.DeleteFile UploadForm.DefaultPath & "\" & fileName2 : 'DB 삭제 SQL = "DELETE " & tableName & " WHERE idx=" & idx Dbcon.Execute(SQL) RS.Close Set RS = Nothing Case "insert" '추가 ########################################################## msg = "등록" '첨부파일 업로드 For Each item In UploadForm("files") item.Save, False Next '에러 발생시 업로드 된 파일 삭제. IF Err THEN Response.Write Err.number & "
" & Err.source & "
" & Err.description UploadForm.DeleteAllSavedFiles Set UploadForm = Nothing Response.Write "" Response.End END If fileName1 = UploadForm("files")(1).LastSavedFileName fileSize1 = UploadForm("files")(1).FileLen fileName2 = UploadForm("files")(2).LastSavedFileName fileSize2 = UploadForm("files")(2).FileLen '이미지 파일이 아니면 파일을 삭제 하고 에러처리 한다. If fileSize1 > 0 And UploadForm("files")(1).IsImageItem() = False Then Call NotImage() : If fileSize2 > 0 And UploadForm("files")(2).IsImageItem() = False Then Call NotImage() : 'DB 저장 SQL = "INSERT INTO " & tableName & " (userId, userName, subject, contents, fileName1, fileSize1, fileName2, fileSize2, writeDate, hit, branchs, period, kind) " SQL = SQL & " VALUES ('" & userId & "', '" & userName & "', '" & subject & "', '" & contents & "', '" & fileName1 & "', " & fileSize1 & ", '" & fileName2 & "', " & fileSize2 & ", GETDATE(), 0, '" & branchs & "', '" & period & "', '" & kind & "')" Dbcon.Execute(SQL) Case Else msg = "실패" End Select '처리 완료(공용) ########################################################## Set UploadForm = Nothing Response.Write "" Response.End %>