패치 후 다운로드 토큰 유효시간 오류 .... 채택완료

$nonce = isset($_REQUEST['nonce']) ? preg_replace('/[^0-9a-z\|]/i', '', $_REQUEST['nonce']) : '';

 

if (function_exists('download_file_nonce_is_valid') && !defined('G5_DOWNLOAD_NONCE_CHECK')){

    if(! download_file_nonce_is_valid($nonce, $bo_table, $wr_id)){

        alert('토큰 유효시간이 지났거나 토큰이 유효하지 않습니다.\\n브라우저를 새로고침 후 다시 시도해 주세요.', G5_URL);

    }

}

include_once('./_common.php');

 

// 다운로드 캡차 추가된 부분 시작

 

include_once(G5_CAPTCHA_PATH.'/captcha.lib.php');

 

//error_reporting(E_ALL);

//ini_set("display_errors", 1);

 

// get download policy

list($download_level, $download_limits) = explode(",", $board['bo_9']);

$download_lastdate = $board['bo_10'];

 

// get state

$state = $_REQUEST['state'];

 

// clear download history

$tmp_row = sql_fetch("select IFNULL(DATEDIFF(CURDATE(), '{$download_lastdate}'), 1) as dt");

if($tmp_row['dt'] > 0) {

    $sql = "delete from {$g5['memo_table']} where me_send_mb_id = '@download' and DATE(me_send_datetime)  CURDATE()";

    sql_query($sql);

 

    $sql = "update {$g5['board_table']} set bo_10 = '" . G5_TIME_YMD . "' where bo_table = '{$bo_table}'";

    sql_query($sql);

}

 

// if captcha key is empty

if(empty($state)) {

    // Page ID

    $pid = ($pid) ? $pid : '';

    $at = apms_page_thema($pid);

    include_once(G5_LIB_PATH.'/apms.thema.lib.php');

 

    // 스킨 체크

    list($member_skin_path, $member_skin_url) = apms_skin_thema('member', $member_skin_path, $member_skin_url);

 

    $g5['title'] = '자동수집방지';

 

    include_once(G5_PATH.'/head.sub.php');

    if(!USE_G5_THEME) @include_once(THEMA_PATH.'/head.sub.php');

 

    echo "html, body { background-color: transparent !important; }";

 

    $no = (int)$no;

    $skin_path = $member_skin_path;

    $skin_url = $member_skin_url;

    $action_url = G5_HTTPS_BBS_URL . "/download.php";

    @include_once($board_skin_path.'/download.captcha.skin.php');

 

    include_once(G5_PATH.'/tail.sub.php');

    if(!USE_G5_THEME) @include_once(THEMA_PATH.'/tail.sub.php');

 

    exit;

} elseif($download_level > $member['mb_level']) {

    if (!chk_captcha()) {

        echo "parent.close_download_captcha();";

        alert('자동수집방지에 오류가 발생하였습니다.');

    } else {

        // get IP address

        $ipaddress = '';

        if (getenv('HTTP_CLIENT_IP'))

            $ipaddress = getenv('HTTP_CLIENT_IP');

        else if(getenv('HTTP_X_FORWARDED_FOR'))

            $ipaddress = getenv('HTTP_X_FORWARDED_FOR');

        else if(getenv('HTTP_X_FORWARDED'))

            $ipaddress = getenv('HTTP_X_FORWARDED');

        else if(getenv('HTTP_FORWARDED_FOR'))

            $ipaddress = getenv('HTTP_FORWARDED_FOR');

        else if(getenv('HTTP_FORWARDED'))

           $ipaddress = getenv('HTTP_FORWARDED');

        else if(getenv('REMOTE_ADDR'))

            $ipaddress = getenv('REMOTE_ADDR');

        else

            $ipaddress = 'UNKNOWN';

 

        // check download limits

        if($download_limits > 0) {

            $tmp_row = sql_fetch("

                select count(*) as cnt from {$g5['memo_table']}

                   where me_memo = '$ipaddress'

                       and me_send_mb_id = '@download'

                       and DATE(me_send_datetime) = CURDATE()

            ");

            $download_currents = $tmp_row['cnt'];

            if($download_currents >= $download_limits) {

                alert_close("일일 내려받기 횟수를 초과하였습니다.(" . $download_limits . "회)\\n등업(3등급)하시면 제한하지 않습니다.");

            }

 

            // add download history

            $tmp_row = sql_fetch(" select max(me_id) as max_me_id from {$g5['memo_table']} ");

            $me_id = $tmp_row['max_me_id'] + 1;

            $me_memo = $ipaddress;

            $sql = "

                insert into {$g5['memo_table']} ( me_id, me_recv_mb_id, me_send_mb_id, me_send_datetime, me_read_datetime, me_memo )

                    values ($me_id, '@download', '@download', '" . G5_TIME_YMDHIS . "', '" . G5_TIME_YMDHIS . "', '$me_memo')

            ";

            sql_query($sql);

        }

    }

}

 

// 다운로드 캡차 추가된 부분 끝

 

// clean the output buffer

ob_end_clean();