<?session_start();

	 //쿠키 재설정 (쿠키를 강화함)
	if(!$_SESSION['_user_session_id_']){

		setcookie("_user_id",		"", 0, "/");
		setcookie("_user_name",		"", 0, "/");
		setcookie("_user_level",	"", 0, "/");		

	}else{

		setcookie("_user_id",		$_SESSION['_user_session_id_'], 0, "/");

	
	}

	########################################################################
	/*
		Template_ 를 이용한 게시판 
		Gboy Board Template_
		제작자 : 강병호
		제작일 : 2004.12.04 ~ 2004.12.10
		연락처 : gboy0713@yahoo.co.kr
		
		템플릿언더바
		Program  : Template_
		Version  : 2.2.3
		Date     : 2004-05-27
		Author   : Hyeong-Gil Park
		Email    : xtac@xtac.net
		Homepage : http://www.xtac.net
		Licence  : LGPL (Freeware)

		본 게시판은 템플릿언더바(Template Underscore)를 이용한 게시판입니다.
		유동적인 스킨 적용과 HTML과 PHP의 분리를 목적으로 하였으며
		디자인작업을 보다 쉽고 빠르게 그리고 유지보수가 용이하게
		할 목적으로 제작 하게 되었습니다.

		추가내용
		2005 04 20 일정관리 추가

																		   */
	#########################################################################


	################################ 초기설정 ###############################
	//자바스크립트 클래스
	include_once ("class/javascript.class.php");
	//기타 클래스
	include_once ("class/function.class.php");
	//환경설정
	include_once ("inc/config.htm");
	//DB 기본 클래스
	include_once ("class/db.class.php");
	//DB 사용 클래스
	include_once ("class/db.class.use.php");
	//Template_ 클래스
	include_once ("class/Template_.class.php");
	//파일 업로드 클래스
	include_once ("class/file.class.php");
	include_once ("class/category.class.php");


	//Template_ 객체 호출
	$tpl = new Template_;


	//로그인 설정
	if(!preg_match("/(^login$|^login_result$)/", $type)){
		//로그인 정보
		$sql  = "select id from ".MEMBER." where level = '1' and ";
		$sql .= "md5(userid) = '".$_COOKIE[str_replace(".","_",$admin_setup[site_domain])."_admin_id"]."' and ";
		$sql .= "(pass) = password('".$_COOKIE[str_replace(".","_",$admin_setup[site_domain])."_admin_pw"]."') ";
		$rs   = $db -> query($sql);

		if($_SERVER["QUERY_STRING"]) $url = urlencode($REQUEST_URI);
		else $url = urlencode("/bbs/admin.htm?type=board_form&mode=board_list");

		if($db -> num_rows($rs) == 0) $javascript->mesg_link("", $PHP_SELF."?type=login&url=".$url);
		//회원 환경설정
		$sql = "select * from ".MEMBER_SETUP;
		$rs  = $db -> query($sql);
		$member_setup = $db -> fetch_array($rs);

	}
	switch($type){
		case "login":
			//템플릿
			$tpl->define(array(
								//"top"		=>	$admin_setup[skin]."/top.htm",
								"body"		=>	$admin_setup[skin]."/login.htm",
								//"tail"		=>	$admin_setup[skin]."/tail.htm"
						 ));
			//기본값 지정
			$tpl->assign(
							array(
									"title"			=> $_GLOBALS_[bbs_version]." 관리자 로그인",
									"bbs_ver"		=> $_GLOBALS_[bbs_version],
									"user_save"		=> $_COOKIE[user_save],
									"user_save_chk"	=> ($_COOKIE[user_save]) ? "checked" : "",
									"url"			=> $_GET[url]
								 )
						);
			//출력
			$tpl->print_("body");
		break;
		//로그인 결과
		case "login_result":
			$sql = "select * from ".MEMBER." where userid = '".$_POST[userid]."'";
			$rs  = $db -> query($sql);
			$row = $db -> fetch_array($rs);
			if($row[level] != "1") $fun->error_msg($_POST[userid]."는 관리자 권한이 아닙니다.");
			if($db -> num_rows($rs) == 0) $fun->error_msg($_POST[userid]." 존재하지 않는 아이디 입니다.");
			
			$sql = "select * from ".$prefix."member where userid = '".$_POST[userid]."' and pass = password('".$_POST[pass]."')";
			$rs  = $db -> query($sql);
			if($db -> num_rows($rs) == 0) $fun->error_msg("비밀번호가 서로 다릅니다.");

			if($_POST[user_save]) setcookie("user_save", $_POST[userid], time() + (86400 * 365), "/");
			$row = $db -> fetch_array($rs);
			//쿠키생성
			setcookie($admin_setup[site_domain]."_admin_id", md5($_POST[userid]), 0, "/");
			setcookie($admin_setup[site_domain]."_admin_pw", ($_POST[pass]), 0, "/");
			setcookie("_user_id",		$_POST[userid], 0, "/");
			setcookie("_user_name",		$row[name], 0, "/");
			setcookie("_user_level",	$row[level], 0, "/");
			session_register("_user_session_id_");
			$_user_session_id_ = $_POST[userid];

			if(!$url) $url = $PHP_SELF."?type=board_form&mode=board_list";
			$javascript->mesg_link("", $url);
		break;
		//로그아웃
		case "logout":
			setcookie($admin_setup[site_domain]."_admin_id", "", 0, "/");
			setcookie($admin_setup[site_domain]."_admin_pw", "", 0, "/");
			setcookie("_user_id",		"", 0, "/");
			setcookie("_user_name",		"", 0, "/");
			setcookie("_user_level",	"", 0, "/");
			session_unregister("_user_session_id_");
			$javascript->mesg_link("", "/");
		break;
		default:
			//템플릿
			$tpl->define(array(
								"top"		=>	$admin_setup[skin]."/top.htm",
								"menu"		=>	$admin_setup[skin]."/menu.htm",
								"body"		=>	$admin_setup[skin]."/index.htm",
								"bottom"	=>	$admin_setup[skin]."/bottom.htm",
								"tail"		=>	$admin_setup[skin]."/tail.htm"
						 ));
			//기본값 지정
			$tpl->assign(
							array(
									"title"			=> $_GLOBALS_[bbs_version]." 관리자",
									"bbs_ver"		=> $_GLOBALS_[bbs_version],
									"user_save"		=> $_COOKIE[user_save],
									"user_save_chk"	=> ($_COOKIE[user_save]) ? "checked" : "",
									"bbs_page"		=> $PHP_SELF,
								 )
						);
			//출력
			$tpl->print_("body");
		break;

		case "insert":
			switch($mode){

				case "category_read":
					$sql = "select * from ".CATEGORY." where code = '$_GET[code]'";
					$rs = $db -> query($sql);
					$row = $db -> fetch_array($rs);
					if($row[category_options] == "") $options = 0;
					else $options = $row[category_options] - 1;
					echo "<script>\n";
					echo "\tvar form = parent.document.category_form;\n";
					echo "\tform[\"category_name[]\"][".($loc-1)."].value = '".$row[category_name]."';\n";
					echo "\tform[\"color[]\"][".($loc-1)."].value = '".$row[color]."';\n";
					echo "\tform[\"category_skin[]\"][".($loc-1)."].options[".($row[category_skin] - 1)."]";
					echo ".selected = true;\n";
					echo "\tform[\"category_options[".($loc-1)."]\"][".$options."].checked = true;\n";
					if($row[image]){
						echo "\tparent.document.images.menu_img".($loc-1).".src = \"data/image/category/".$row[image]."\";\n";
						echo "\tparent.document.all.image_tr".($loc-1).".style.display = \"\";\n";
					}
					echo "\tparent.document.all.new_display_".$loc.".style.display = \"\";\n";
					echo "</script>\n";
				break;
				//카테고리 생성
				case "category_insert":
					$_NEW_POST = $category_fun -> category_array_vars($_POST, ($num - 1));
					$_NEW_POST["code"] = $category_fun -> category_insert(
																			CATEGORY,
																			${"category_" . ($num-1)}, ($num * 3)
																		 );
					$_path = "data/image/category/";
					if($_FILES["image"]["name"][$num-1]){
						list(,$exe) = explode(".", $_FILES["image"]["name"][$num-1]);
						$file_name = $_NEW_POST["code"].".".$exe;
						$file -> File_UPLoad_Move($_FILES["image"]["tmp_name"][$num-1], $_path.$file_name);
						$_NEW_POST["image"] = $file_name;
					}
					$db -> insert(CATEGORY, $_NEW_POST);
					$javascript->mesg_link("", "$PHP_SELF?type=product_form&mode=category&code=$_NEW_POST[code]");
				break;

				//카테고리 수정
				case "category_modify":
					$_NEW_POST = $category_fun -> category_array_vars($_POST, ($num - 1));
					$_path = "data/image/category/";

					//이미지 삭제
					if($_POST[chk_del][0]){
						$sql = "select * from ".CATEGORY." where code = '".${"category_" . $num}."'";
						$rs  = $db -> query($sql);
						$row = $db -> fetch_array($rs);
						@unlink($_path.$row[image]);
						$_NEW_POST["image"] = " ";
					}
					if($_FILES["image"]["name"][$num-1]){
						list(,$exe) = explode(".", $_FILES["image"]["name"][$num-1]);
						$file_name = ${"category_" . $num}.".".$exe;
						$file -> File_UPLoad_Move($_FILES["image"]["tmp_name"][$num-1], $_path.$file_name);
						$_NEW_POST["image"] = $file_name;
					}
					$db -> update(CATEGORY, $_NEW_POST, "code", array(${"category_" . $num}));
					$javascript->mesg_link("", "$PHP_SELF?type=product_form&mode=category&code=".${"category_" . $num});
				break;

				//카테고리 삭제
				case "category_delete":
					$code = $_POST["category_" . $num];
					$vars[] = substr($code, 0, ($num * 3));
					$fields_name1 = " left(code,". ($num * 3) .") ";
					$fields_name2 = " left(brandcode,". ($num * 3) .") ";
					$db -> delete(CATEGORY, $vars, $fields_name1);
					$db -> delete(BRAND, $vars, $fields_name2);
					exec("rm -rf ".$shopimage_dir["server"].$vars[0]."*");
					$javascript->mesg_link("", "$PHP_SELF?type=product_form&mode=category&code=".$code);
				break;
				
				//카테고리 순위변경
				case "category_loc":
					$category_fun -> category_location($_POST["loc"]);
					$javascript->mesg_link("", "$PHP_SELF?type=product_form&mode=category&code=".${"category_" . $num});
				break;

				//상품저장
				case "brand_write":					

					
					$sql  = "select brandcode from ".BRAND." where left(category, 12) = '".$_POST["category"]."'";
					$sql .= "order by brandcode desc limit 1";
					$rs   = $db -> query($sql);
					$row  = $db -> fetch_array($rs);

					if(!$row[0]) $max_code = $_POST["category"]."0001";
					else{
						$num = substr($row[0],12,4) + 1;
						$new_num = str_repeat("0", 4 - (strlen($num))).$num;
						$max_code = $_POST["category"].$new_num;
					}
					$_POST["photo"] = @implode(",", $fun -> brand_upload("photo", $max_code));			


					if($etc_image_num != 0){
						$_POST["etc_image"] = @implode(",", $fun -> brand_upload("etc_image", $max_code));	
					}
					if(!$_POST["milage"]){
						$par_sellprice = array_shift(explode(",", $_POST["sellprice"]));
						$_POST["milage"] = $par_sellprice*($shop_setup["reserving_price_point"]/100);
					}
					$_POST["product_loc"]	= @implode(",", $_POST["product_loc"]);
					$_POST["brandcode"]		= $max_code;
					//$_POST["content"]		= $web_edit -> insert($_POST["content"]);
				
				
					$db -> insert(BRAND, $_POST,0);
					
				
					$max_location = $db -> select_max_id(BRAND, "location");
					$sql = "update ".BRAND." set location = '$max_location' where brandcode = '$max_code'";
					$rs  = $db -> query($sql);	
					
			
					$javascript->mesg_link($_POST[brandname]." 제품이 등록되었습니다.", "$PHP_SELF?type=product_form&mode=brand_write&code=$max_code");

				break;
				//상품수정
				case "brand_update":
					$_POST["category"] = substr($_POST["category"], 0, 12);
					$_POST["product_loc"] = @implode(",", $_POST["product_loc"]);
					$_POST["brandcode"] = $_POST["code"];
					//이미지 업로드
					$_POST["photo"] = @implode(",", $fun -> brand_upload("photo", $_POST["brandcode"]));
					//기타이미지 업로드
					$_POST["etc_image"] = @implode(",", $fun -> brand_upload("etc_image", $_POST["brandcode"]));
					$sql = "select * from ".BRAND." where brandcode = '$brandcode'";
					$rs  = $db -> query($sql);
					$row = $db -> fetch_array($rs);
					//$_POST["content"] = $web_edit -> update($_POST["content"], $row[content]);
					$db -> update(BRAND, $_POST, "brandcode", array($_POST["brandcode"]));					
				
					$javascript->mesg_link("수정완료", "$PHP_SELF?type=product_form&mode=brand_modify&code=$code&page=$page");
				break;
				case "brand_delete":
					$sql = "delete from ".BRAND." where brandcode='$code'";
					$db  -> query($sql);
					exec("rm -rf ".$shopimage_dir["server"].$code."*");
					$sql = "select * from ".BRAND." where brandcode = '$code'";
					$rs  = $db -> query($sql);
					$row = $db -> fetch_array($rs);
					//$web_edit -> delete($row[content]);
					$url = "$PHP_SELF?type=product_form&mode=brand_search&page=$page$_brand_search";
					$javascript->mesg_link("삭제성공",$url);
				break;

				case "sendmail":			

					if($_POST){	
					
						
						$r_email= explode(',', $_POST[r_email]);
					
						while(@list($k, $v) = each($r_email)){
							if($v) {

								$r_mail = explode("|",$v);
								$receive_mail = $r_mail[0];
								$receive_name = $r_mail[1];								

								$_POST[content] = str_replace('\"','"',$_POST[content]);
							$_POST[content] = str_replace("/SE23/","http://".$_SERVER['HTTP_HOST']."/SE23/",$_POST[content]);

								$fun->mail_fun($receive_mail, $_POST[email], $_POST[name], $_POST[subject], $_POST[content]);
								
							}
						}					
						
					}
					$javascript->mesg_link("메일발송이 완료 되었습니다.","$PHP_SELF?type=member_form&mode=send_mail");
			
					exit;
						
			   break;
				
				
				case "passwd":
					$sql  = "select * from ".MEMBER." where level = '".$_COOKIE[_user_level]."' and ";
					$sql .= "userid = '".$_COOKIE[_user_id]."' and pass = password('".$_POST[pass]."') limit 1";
					$rs   = $db -> query($sql);
					$row  = $db -> fetch_array($rs);
					
					if($db ->num_rows($rs) == 0) $javascript->error_mesg("기존 비밀번호가 틀립니다.");
					
					$sql  = "update ".MEMBER." set pass = '".$_POST[new_pass]."', userid = '".$_POST[userid]."' ";
					$sql .= "where userid = '".$_COOKIE[_user_id]."'";

					setcookie($admin_setup[site_domain]."_admin_id", md5($_POST[userid]), 0, "/");
					setcookie($admin_setup[site_domain]."_admin_pw", ($_POST[new_pass]), 0, "/");
					setcookie("_user_id",		$_POST[userid], 0, "/");
					setcookie("_user_name",		$row[name], 0, "/");
					setcookie("_user_level",	$row[level], 0, "/");

					$db -> query($sql);

					/*비밀번호 암호화 다시 저장	*/
					mysql_query("update ".MEMBER." set pass = password('".$_POST[new_pass]."') where userid='".$_COOKIE[_user_id]."' ");

					$javascript->mesg_link("변경 완료","$PHP_SELF?type=popup_form&mode=passwd");


				break;

				//아이피 환경설정
				case "ip_setup":
					$sql = "delete from ".IP_DENY_SETUP;
					$rs  = $db -> query($sql);
					$db -> insert(IP_DENY_SETUP, $_POST);
					$javascript->mesg_link("","$PHP_SELF?type=setup_form&mode=site_deny");
				break;
				//아이피 저장
				case "ip_insert":
					$sql = "select * from ".IP_DENY." where trim(ip) = trim('".$_POST[ip]."')";
					$rs  = $db -> query($sql);
					if($db -> num_rows($rs) != 0) $fun->error_msg($_POST[ip]." 이미 등록된 아이피 입니다.");
					$db -> insert(IP_DENY, $_POST);
					$javascript->mesg_link("","$PHP_SELF?type=setup_form&mode=site_deny");
				break;
				//아이피 삭제
				case "ip_delete":
					$sql = "delete from ".IP_DENY." where id = '".$_GET[id]."'";
					$rs  = $db -> query($sql);
					$javascript->mesg_link("","$PHP_SELF?type=setup_form&mode=site_deny");					
				break;
				//아이피 수정
				case "ip_update":
					$db -> update(IP_DENY, $_POST, "id", array($_GET[id]));
					$javascript->mesg_link("","$PHP_SELF?type=setup_form&mode=site_deny");
				break;
				//사이트 환경설정
				case "site_setup":


					mysql_query("alter table ".SITE_SETUP." add s_meta varchar(255)");
					mysql_query("alter table ".SITE_SETUP." add s_title varchar(255)");
					mysql_query("alter table ".SITE_SETUP." add s_desc text");
					mysql_query("alter table ".SITE_SETUP." add s_img varchar(255)");
					mysql_query("alter table ".SITE_SETUP." add s_desc2 text");

					$sql = "delete from ".SITE_SETUP;
					$rs  = $db -> query($sql);
					$db -> insert(SITE_SETUP, $_POST);
					$javascript->mesg_link("","$PHP_SELF?type=setup_form&mode=site_setup");
				break;
				//회원 환경설정
				case "member_site_setup":
					$sql = "select * from ".MEMBER_SETUP;
					$rs  = $db -> query($sql);
					$row = $db -> fetch_array($rs);
					$_POST["member_level"] = $row[member_level];
					$sql = "delete from ".MEMBER_SETUP;
					$rs  = $db -> query($sql);
					$db -> insert(MEMBER_SETUP, $_POST);
					$javascript->mesg_link("","$PHP_SELF?type=member_form&mode=member_site_setup");
				break;
			
				//회원 레벨 이름 변경
				case "member_level_name":
					$sql = "select * from ".MEMBER_SETUP;
					$rs  = $db -> query($sql);
					$row = $db -> fetch_array($rs);
					$exp = explode(",", $row[member_level]);
					while(list($k, $v) = each($exp)){
						if($_GET["key"] == $k) $arr[] = trim($_GET[member_name]);
						else $arr[] = trim($v); 
					}
					$member_level_name = @implode(",", $arr);
					$sql = "update ".MEMBER_SETUP." set member_level = '".$member_level_name."'";
					$rs  = $db -> query($sql);					
					$javascript->mesg_link("","$PHP_SELF?type=member_form&mode=member_site_setup");
				break;
				//회원 신규등록
				case "member_site_insert":
					//등록 불가 아이디
					$exp = explode(",", trim($member_setup["member_nouserid"]));
					if(in_array($_POST[userid], $exp)){
						$javascript->error_mesg($_POST[userid]."는 등록 불가 아이디 입니다.");
					}
					$sql = "select * from ".MEMBER." where userid = '".$_POST["userid"]."'";
					$rs  = $db -> query($sql);
					if($db -> num_rows($rs) != 0) $javascript->error_mesg($_POST[userid]."는 이미 사용중 입니다.");
					$sql  = "select * from ".MEMBER." where ssn1 = '".$_POST[ssn1]."' and ";
					$sql .= "ssn2 = '".$_POST[ssn2]."'";
					$rs   = $db -> query($sql);
					if($db -> num_rows($rs) != 0) $javascript->error_mesg("이미 사용중인 주민등록 번호 입니다.");
					$_POST[ip] = $REMOTE_ADDR;
					$db -> insert(MEMBER, $_POST);
					
					/*비밀번호 암호화 다시 저장	*/
					mysql_query("update ".MEMBER." set pass = password('".$_POST[pass]."') where userid='".$_POST[userid]."' ");

					$javascript->mesg_link("","$PHP_SELF?type=member_form&mode=member_write");
				break;
				//회원 수정
				case "member_site_update":
					$db -> update(MEMBER, $_POST, "userid", array($_POST[old_userid]));
					
					/*비밀번호 암호화 다시 저장	*/
					mysql_query("update ".MEMBER." set pass = password('".$_POST[pass]."') where userid='".$_POST[old_userid]."' ");

					
					$sql = "select * from ".MEMBER." where level = '1'";
					$rs  = $db -> query($sql);
					if($db -> num_rows($rs) == 0){
						$sql = "update ".MEMBER." set level = '1' where userid = '".$_POST[userid]."'";
						$rs  = $db -> query($sql);
						//$msg  = $_POST
						$msg .= "관리자 레벨이 존재하지 않게 됩니다.\\n\\n".$_POST[userid]."를 강제로 관리자로 지정 ";
						$msg .= "하였습니다.";
					}	
					$javascript->mesg_link($msg,"$PHP_SELF?type=member_form&mode=member_modify&userid=".$userid);

				break;
				//회원 삭제
				case "member_site_delete":
					$sql = "delete from ".MEMBER." where userid = '".$_GET[userid]."'";
					$rs  = $db -> query($sql);
					$javascript->mesg_link($msg,"$PHP_SELF?type=member_form&mode=member_list&page=$page$search");
				break;

				//게시판 환경설정
				case "board_write": case "board_update":

					//수정일 경우 자료를 삭제한다.
					if($mode == "board_update"){


						if($new_mode == 1){

							$_POST[code] = $_POST[new_code];
							$_POST[bbs_name] = $_POST[new_bbs_name];							
							$_msg_ = "새로운 게시판 생성";
							$_code_ = $_POST[code];

						}else{
							
							$sql = "delete from ".BBS_SETUP." where code = '".$_POST[code]."'";
							$rs  = $db -> query($sql);
							$_msg_ = "수정";
							$_code_ = $_POST[code];

						}

					}else $_msg_ = "생성";
					
					$sql = "select * from ".BBS_SETUP." where code = '".$_POST[code]."'";
					$rs  = $db -> query($sql);
					if($db->num_rows($rs)!=0){
						$javascript->error_mesg($_POST[code]." 는 존재하는 게시판 코드입니다.");
					}
					$db -> insert(BBS_SETUP, $_POST);


					$msg = ($_POST[code]." 게시판 ".$_msg_."이 완료 되었습니다.");
					$javascript->mesg_link($msg,"$PHP_SELF?type=board_form&mode=$mode&code=".$_code_);
				break;

				//게시판 삭제
				case "board_delete":					
					$sql = "delete from ".BBS_SETUP." where code = '$code'";
					$rs  = $db -> query($sql);
					$sql = "delete from ".BBS." where code = '$code'";
					$rs  = $db -> query($sql);
					$javascript->mesg_link($msg,"$PHP_SELF?type=board_form&mode=board_list");
				break;
				//게시판 전체 환경설정
				case "board_setup":
					$sql = "delete from ".BBS_CONFIG;
					$rs  = $db -> query($sql);
					$db -> insert(BBS_CONFIG, $_POST);
					$javascript->mesg_link($msg,"$PHP_SELF?type=board_form&mode=board_setup");
				break;
				//팝업창 등록
				case "popup_write":
					if(is_array($_FILES)){
						if(!is_dir("./data/popup/")) mkdir("./bbs/popup/", 0777);
						$_FILE_ = $file -> multi_upload($_FILES, "file");
						for($i = 0 ; $i < sizeof($_FILE_) ; $i++){
							$_P["filename"][$i] = $file -> file_upload($_FILE_[$i],"./data/popup/",time());
						}
						$_POST["file"] = @implode(",", $_P["filename"]);
					}
					$_POST["start_date"] = $start_date." ".$_POST[s_hour].":".$_POST[s_min].":00";
					$_POST["end_date"]   = $end_date." ".$_POST[e_hour].":".$_POST[e_min].":00";

					$in_id = $db -> insert(POPUP, $_POST);

					$sql  = "update ".POPUP." set start_date = '".$_POST["start_date"]."', ";
					$sql .= "end_date = '".$_POST["end_date"]."' where id = $in_id";
					$rs  = $db -> query($sql);
					$javascript->mesg_link("","$PHP_SELF?type=popup_form&mode=popup_list");
				break;
				//팝업창 수정
				case "popup_update":
					if(is_array($_FILES)){
						if(!is_dir("./data/popup/")) mkdir("./data/popup/", 0777);
						$_FILE_ = $file -> multi_upload($_FILES, "file");
						for($i = 0 ; $i < sizeof($_FILE_) ; $i++){
							$_P["filename"][$i] = $file -> file_upload($_FILE_[$i],"./data/popup/", time());
						}
						$_POST["file"] = @implode(",", $_P["filename"]);
					}
					$_POST["start_date"] = $_POST["start_date"]." ".$_POST[s_hour].":".$_POST[s_min].":00";
					$_POST["end_date"]   = $_POST["end_date"]." ".$_POST[e_hour].":".$_POST[e_min].":00";
					$db -> update(POPUP, $_POST, "id", array($id));
					$javascript->mesg_link("","$PHP_SELF?type=popup_form&mode=popup_update&id=$id");
				break;
				//팝업창 삭제
				case "popup_delete":

					$sql = "select * from ".POPUP." where id = '$id'";
					$rs  = $db -> query($sql);
					$row = $db -> fetch_array($rs);

					@unlink("./data/popup/".$row['file']);

					$sql = "delete from ".POPUP." where id = '$id'";
					$rs  = $db -> query($sql);
					$javascript->mesg_link("","$PHP_SELF?type=popup_form&mode=popup_list");
				break;			
			
			}
		break;
		
		case "setup_form":		case "member_form":		case "board_form":
		case "math_form":		case "popup_form":		case "board_setup":	
		case "product_form":   case "order_form":

			//관리자 공통 설정
			if(!$page) $page = 1;
			$search = "&part=$part&word=".urlencode($word);

			//회원 수정일경우 같은 폼을 쓴다
			if($mode == "member_modify") $page_mode = "member_write";

			//게시판 정보수정일 경우 같은 폼을 쓴다.
			else if($mode == "board_update") $page_mode = "board_write";

			//팝업창 정보 수정일 경우
			else if($mode == "popup_update") $page_mode = "popup_write";
			else if($mode == "brand_modify") $page_mode = "brand_write";
			
			else $page_mode = $mode;

			//템플릿
			$tpl->define(array(
								"top"		=>	$admin_setup[skin]."/top.htm",
								"menu"		=>	$admin_setup[skin]."/menu.htm",
								"body"		=>	$admin_setup[skin]."/$page_mode.htm",
								"bottom"	=>	$admin_setup[skin]."/bottom.htm",
								"tail"		=>	$admin_setup[skin]."/tail.htm"
						 ));
			//메뉴 설정
			while(list($key, $value) = each($_PAGE_LOCATION_[$type])){
				$loop1[0]["title"] = array_shift(explode("|", $value));
				$loop2 = &$loop1[0]["item"];
				reset($_PAGE_LOCATION_[$type]);
				while(list($k, $v) = each($_PAGE_LOCATION_[$type])){
					list(, $name, $get_type) = explode("|", $v);
					if($get_type == "N"){
						$loop2[] = array(             
											"name"	=>	$name,
											"link"	=>	$PHP_SELF."?type=$type&mode=$k" 
										);
					}
				}
				break;
			}
			$tpl->assign('title_menu', $loop1);
			$location = $fun->page_location($_SERVER["QUERY_STRING"]);
			//기본값 지정
			$tpl->assign(
							array(
									"title"			=> $_GLOBALS_[bbs_version]." ".$location,
									"bbs_ver"		=> $_GLOBALS_[bbs_version],
									"type"			=> $type,
									"mode"			=> $mode,
									"page"			=> $page,
									"word"			=> $word,
									"part"			=> $part,
									"search"		=> $search,
									"page_location"	=> $location
								 )
						);
				//환경설정
				$sql = "select * from ".SITE_SETUP;
				$rs  = $db -> query($sql);
				$ros = $db -> fetch_array($rs);
				$tpl -> assign(array("saup_company"	=> $ros[saup_company]));
				switch($mode){
					//아이피 설정
					case "site_deny":
						//환경설정
						$sql = "select * from ".IP_DENY_SETUP;
						$rs  = $db -> query($sql);
						$row = $db -> fetch_array($rs);

						$tpl->assign(
										array(
												"ip_deny_use1"	=> ($row[ip_deny_use] == 1) ? "checked" : "",
												"ip_deny_use2"	=> ($row[ip_deny_use] == 2) ? "checked" : "",
												"mesg"			=> $row[mesg]
											 )
									);
						//수정일 경우
						if($_GET[id]){
							$sql = "select * from ".IP_DENY." where id = '".$_GET[id]."'";
							$rs  = $db -> query($sql);
							$row = $db -> fetch_array($rs);
							$tpl->assign(
											array(
													"ip"		=>	$row[ip],
													"deny_mesg"	=>	$row[deny_mesg],
													"form_page"	=>	$PHP_SELF."?type=insert&mode=ip_update&id=$id"
												 )
										);
						}else $tpl->assign("form_page",$PHP_SELF."?type=insert&mode=ip_insert");
						//목록출력
						$sql = "select * from ".IP_DENY." order by id desc";
						$rs  = $db -> query($sql);
						$total = $db -> num_rows($rs);
						$tpl->assign("total", $total);			
						while($row = $db -> fetch_array($rs)){
							$loop[] = array(
											"j"			=> $total,
											"ip"		=> $row[ip],
											"id"		=> $row[id],
											"wdate"		=> $row[wdate],
											"deny_mesg"	=> $row[deny_mesg]
										   );
							$total --;
						}
						$tpl->assign("row", $loop);
					break;
					//사이트 환경설정
					case "site_setup":
						//환경설정
						$sql = "select * from ".SITE_SETUP;
						$rs  = $db -> query($sql);
						$row = $db -> fetch_array($rs);
						if($row[site_use] == "1") $site_use1 = "checked";
						else if(!$row[site_use])  $site_use1 = "checked";
						$tpl->assign(
										array(
												"domain"		=> $row[domain],
												"site_use1"		=> $site_use1,
												"site_gongsa_mesg"	=> $row[site_gongsa_mesg],
												"site_end_mesg"	=> $row[site_end_mesg],
												"site_use2"		=> ($row[site_use] == 2) ? "checked" : "",
												"site_use3"		=> ($row[site_use] == 3) ? "checked" : "",
												"saup_company"	=> $row[saup_company],
												"saup_ceo"		=> $row[saup_ceo],
												"saup_num"		=> $row[saup_num],
												"saup_zip1"		=> $row[saup_zip1],
												"saup_zip2"		=> $row[saup_zip2],
												"saup_adr"		=> $row[saup_adr],
												"saup_uptae"	=> $row[saup_uptae],
												"saup_jong"		=> $row[saup_jong],
												"site_tel"		=> $row[site_tel],
												"site_fax"		=> $row[site_fax],
												"site_email"	=> $row[site_email],
												
												"s_meta"		=> $row[s_meta],
												"s_title"		=> $row[s_title],
												"s_desc"		=> $row[s_desc],
												"s_img"		=> $row[s_img],
												"s_desc2"		=> $row[s_desc2],

												"damdang"		=> $row[damdang],
												"damdang_tel"	=> $row[damdang_tel],
												"damdang_htel"	=> $row[damdang_htel],
												"damdang_email"	=> $row[damdang_email]
											 )
									);
					break;
					//회원 환경 설정
					case "member_site_setup":
						$level_exp = explode(",", $member_setup[member_level]);
						while(list($k, $v) = each($level_exp)) $loop[] = array("v"	=> $v, "k" => ($k+1));
						$tpl->assign("member_level", $loop);


						$tpl->assign(
						array(
								"member_join_use1"	=> $fun->check_fun($member_setup[member_join_use], 1, true),
								"member_join_use2"	=> $fun->check_fun($member_setup[member_join_use], 2),
								"member_not_mesg"	=> $member_setup[member_not_mesg],
								"auto_result1"		=> $fun->check_fun($member_setup[auto_result], 1, true),
								"auto_result2"		=> $fun->check_fun($member_setup[auto_result], 2),
								"member_yak"		=> $member_setup[member_yak],
								"member_nouserid"	=> $member_setup[member_nouserid],
								"join_mail1"		=> $fun->check_fun($member_setup[join_mail], 1, true),
								"join_mail2"		=> $fun->check_fun($member_setup[join_mail], 2),
								"join_mail_text"	=> $member_setup[join_mail_text]
							 )
						);

					break;
					//회원 아이디 조회
					case "id_search":
						$sql = "select * from ".MEMBER." where trim(userid) = trim('".$_GET[userid]."')";
						$rs  = $db -> query($sql);
						$row = $db -> fetch_array($rs);
						if($db -> num_rows($rs) != 0) 
							$mesg = "<font color=red>".$_GET[userid]." 는 이미 사용중입니다.";
						else
							$mesg = "<font color=blue>".$_GET[userid]." 는 사용이 가능합니다.";
						$tpl -> assign(
										array(
												"userid"	=>	$_GET[userid],
												"mesg"		=>	$mesg
											 )
									  );
					break;
					//우편번호 검색
					case "addr_search":
						if($_POST[addr]){
							$tpl->assign("addr", $_POST[addr]);
							$sql  = "select * from ".ZIPCODE." where concat(addr2,addr3,addr4) ";
							$sql .= "LIKE '%".$_POST[addr]."%' ";
							$sql .= "order by code asc";
							$rs   = $db -> query($sql);
							$row  = $db -> fetch_array($rs);							
							while($row = $db -> fetch_array($rs)){
								$loop[] = array(
												"code"	=>	$row[code],
												"addr"	=>	$row[addr1]." ".$row[addr2]." ".$row[addr3]." ",
												"addr4"	=>	$row[addr4]
											   );
							}
							$tpl->assign("row", $loop);
						}
					break;
					//회원 신규 등록 & 회원 정보 수정
					case "member_write":	case "member_modify":					
						$level  = $fun -> select(explode(",", $member_setup[member_level]), true);
						$result = $fun -> select($admin_setup[member_status]);
						if($mode == "member_modify"){
							$sql = "select * from ".MEMBER." where userid = '".$_GET[userid]."'";
							$rs  = $db -> query($sql);
							$row = $db -> fetch_array($rs);
							$tpl->assign(
											array(
													"page_type"	 => ($mode == "member_modify") ? "update" : "insert",
													"old_userid" => $row[userid],
													"userid"	 => $row[userid],
													"pass"		 => $row[pass],
													"pass2"		 => $row[pass],
													"name"		 => $row[name],
													"ssn1"		 => $row[ssn1],
													"ssn2"		 => $row[ssn2],
													"zip1"		 => $row[zip1],
													"zip2"		 => $row[zip2],
													"addr"		 => $row[addr],
													"addr1"		 => $row[addr1],
													"tel1"		 => $row[tel1],
													"tel2"		 => $row[tel2],
													"tel3"		 => $row[tel3],
													"htel1"		 => $row[htel1],
													"htel2"		 => $row[htel2],
													"htel3"		 => $row[htel3],
													"email"		 => $row[email],
													"content"	 => $row[content],
													"level"		 => $level,
													"result"	 => $result,
													"row_level"  => $row[level],
													"row_result" => $row[result],
													"memo"		 => $row[memo],

													"year"		 => $row[year],
													"company"	 => $row[company],
												 )
										);
						}else{
							$tpl->assign("level", $level);
							$tpl->assign("result", $result);
						}
					break;
					//회원 리스트
					case "member_list":
						$part	= ($part != "") ? $part : "all";
						$level	= ($level != "") ? $level : "all";
						$result	= ($result != "") ? $result : "all";
						$sdate = ($sdate) ? $sdate : "2005-01-01";
						$edate = ($edate) ? $edate : date("Y-m-d");
						$loop_level  = $fun -> select(explode(",", $member_setup[member_level]), true);

						$loop_result = $fun -> select($admin_setup[member_status]);
						$loop_part   = $fun -> select(
														array(
																"name"		=>	"성명",
																"userid"	=>	"아이디",
																"ssn"		=>	"주민등록번호",
																"tel"		=>	"일반전화",
																"htel"		=>	"휴대폰",
																"addr"		=>	"주소",
																"memo"		=>	"관리자메모"
															 )
													 );
						$tpl -> assign(
										array(
												"sdate"		=> $sdate,
												"edate"		=> $edate,
												"level"		=> $loop_level,
												"result"	=> $loop_result,
												"part"		=> $loop_part
											 )
									  );

						if($level != "all") $sql_ .= " and level = '$level' ";
						if($result != "all") $sql_ .= " and result = '$result' ";

						if($part == "tel") $par_part = " concat(tel1,'-',tel2,'-',tel3) ";
						else if($part == "htel") $par_part = " concat(htel1,'-',htel2,'-',htel3) ";
						else if($part == "ssn") $par_part = " concat(ssn1,'-',ssn2) ";
						else $par_part = $part;


						if($word){
							if($part == "all"){
								$sql_ .= " and (";
								$sql_ .= " name LIKE '%$word%' or ";
								$sql_ .= " userid LIKE '%$word%' or ";
								$sql_ .= " addr LIKE '%$word%' or ";
								$sql_ .= " concat(ssn1,'-',ssn2) LIKE '%$word%' or ";
								$sql_ .= " concat(tel1,'-',tel2,'-',tel3) LIKE '%$word%' or ";
								$sql_ .= " concat(htel1,'-',htel2,'-',htel3) LIKE '%$word%' or ";
								$sql_ .= " memo LIKE '%$word%' ";
								$sql_ .= " ) ";
							}else $sql_ .= " and $par_part LIKE '%$word%' ";
						}

						if($sdate && $edate){
							
							$sql_ .= " and left(replace(wdate, '-',''), 8) ";
							
							$sql_ .= " between replace('$sdate', '-','') and ";

							$sql_ .= " replace('$edate', '-','') ";

						}

						$where = " where 1 $sql_ order by id desc";
						list($rs,$total,$totalpage,$j,$page) = $db->select_list_page(MEMBER,$where,$page,20);
						
						$search .= "&type=$type&mode=$mode&result=$result&level=$level&sdate=$sdate&edate=$edate";

						$pageing = $fun -> page_fun($totalpage, $total, $page, $search, 20);
						$tpl->assign(array("pageing" => $pageing));
						while($row = $db -> fetch_array($rs)){
							$row_level  = array_slice(explode(",", $member_setup[member_level]), ($row[level]-1), 1);
							$row_result = array_slice($admin_setup[member_status], ($row[result]-1), 1);
							$loop[] = array(
											"j"			=> $j,
											"name"		=> $row[name],
											"mailing"	=> $row[mailing],
											"userid"	=> $row[userid],
											"pass"		=> $row[pass],
											"tel"		=> $row[tel1]."-".$row[tel2]."-".$row[tel3],
											"email"		=> $fun->autolink($row[email]),
											"email1"	=> $row[email],
											"level"		=> $row_level[0],
											"result"	=> $row_result[0],
											"wdate"		=> date("y/m/d", strtotime($row[wdate]))		
											);
							$j--;
						}
						$tpl->assign("row", $loop);
					break;
					
					case "board_setup":
						$sql = "select * from ".BBS_CONFIG;
						$rs  = $db -> query($sql);
						$row = $db -> fetch_array($rs);
						$tpl->assign(array("bbs_path" => $row[bbs_path]));
					break;
					case "board_write": case "board_update":

						if($mode == "board_update"){
							if(!$code) $fun->error_msg("코드가 없습니다.");
							$sql = "select * from ".BBS_SETUP." where code = '".$_GET[code]."'";
							$rs  = $db -> query($sql);
							$row = $db -> fetch_array($rs);
							$tpl->assign(array("readonly" => "readonly"));
						}

						//디자인 스킨
						exec("ls -1 _template/bbs/", $skin_dir);


						$loop_part   = $fun -> select($skin_dir);
						$level = explode(",", $member_setup[member_level]);
						krsort($level);
						//권한설정
						$loop_list_level	= $fun -> select($level, true);
						$loop_read_level	= $fun -> select($level, true);
						$loop_write_level	= $fun -> select($level, true);
						$loop_memo_level	= $fun -> select($level, true);
						$bbs_list_l = $row[bbs_list_level];
						$bbs_read_l = $row[bbs_read_level];
						$bbs_write_l = $row[bbs_write_level];
						$bbs_memo_l = $row[bbs_memo_level];

						$fileno_exe = "php,html,htm,php3,phtml,inc,asp,pl";
						$tpl->assign(
								array(
									"code"					=> $row[code],
									"bbs_name"				=> $row[bbs_name],
									"table_size"			=> ($row[table_size]) ? $row[table_size] : "800",
									"bbs_type1"				=> $fun->check_fun($row[bbs_type], 1, true),
									"bbs_type2"				=> $fun->check_fun($row[bbs_type], 2),
									"bbs_use1"				=> $fun->check_fun($row[bbs_use], 1, true),
									"bbs_use2"				=> $fun->check_fun($row[bbs_use], 2),
									"memo_use1"				=> $fun->check_fun($row[memo_use], 1, true),
									"memo_use2"				=> $fun->check_fun($row[memo_use], 2),
									"reply_use1"			=> $fun->check_fun($row[reply_use], 1, true),
									"reply_use2"			=> $fun->check_fun($row[reply_use], 2),
									"lin_use1"				=> $fun->check_fun($row[in_use], 1, true),
									"lin_use2"				=> $fun->check_fun($row[in_use], 2),
									"file_use1"				=> $fun->check_fun($row[file_use], 1),
									"file_use2"				=> $fun->check_fun($row[file_use], 2, true),
									"filenum"				=> ($row[filenum]) ? $row[filenum] : "1",
									"fileno_exe"			=> ($row[fileno_exe]) ? $row[fileno_exe] : $fileno_exe,
									"read_list1"			=> $fun->check_fun($row[read_list], 1, true),
									"read_list2"			=> $fun->check_fun($row[read_list], 2),
									"subject_limit"			=> ($row[subject_limit]) ? $row[subject_limit] : "45", 
									"pagesize"				=> ($row[pagesize]) ? $row[pagesize] : "20",
									"pagelimit"				=> ($row[pagelimit]) ? $row[pagelimit] : "10",
									"secret_use1"			=> $fun->check_fun($row[secret_use], 1),
									"secret_use2"			=> $fun->check_fun($row[secret_use], 2, true),
									"member_use1"			=> $fun->check_fun($row[member_use], 1),
									"member_use2"			=> $fun->check_fun($row[member_use], 2, true),
									"date_format"			=> ($row[date_format]) ? $row[date_format] : "Y/m/d",
									"search_use1"			=> $fun->check_fun($row[search_use], 1, true),
									"search_use2"			=> $fun->check_fun($row[search_use], 2),
									"newicon_use1"			=> $fun->check_fun($row[newicon_use], 1, true),
									"newicon_use2"			=> $fun->check_fun($row[newicon_use], 2),
									"newicon_day"			=> ($row[newicon_day]) ? $row[newicon_day] : "3",
									"newicon1"				=> $fun->check_fun($row[newicon], 1, true),
									"newicon2"				=> $fun->check_fun($row[newicon], 2),
									"newicon3"				=> $fun->check_fun($row[newicon], 3),
									"newicon4"				=> $fun->check_fun($row[newicon], 4),
									"homepage_use1"			=> $fun->check_fun($row[homepage_use], 1, true),
									"homepage_use2"			=> $fun->check_fun($row[homepage_use], 2),
									"email_use1"			=> $fun->check_fun($row[email_use], 1, true),
									"email_use2"			=> $fun->check_fun($row[email_use], 2),
									"reply_mail_use1"		=> $fun->check_fun($row[reply_mail_use],1),
									"reply_mail_use2"		=> $fun->check_fun($row[reply_mail_use],2, true),
									"new_admin_mail_use1"	=> $fun->check_fun($row[new_admin_mail_use],1),
									"new_admin_mail_use2"	=> $fun->check_fun($row[new_admin_mail_use],2,true),
									"bbs_admin"				=> $row[bbs_admin],
									"td"					=> ($row[td]) ? $row[td] : 3,
									"skin"					=> $loop_part,
									"bbs_list_level"		=> $loop_list_level,
									"bbs_read_level"		=> $loop_read_level,
									"bbs_write_level"		=> $loop_write_level,
									"bbs_memo_level"		=> $loop_memo_level,
									"filter_use1"			=> $fun->check_fun($row[filter_use],1),
									"filter_use2"			=> $fun->check_fun($row[filter_use],2,true),
									"filter"				=> $row[filter],
									"category_use1"			=> $fun->check_fun($row[category_use],1),
									"category_use2"			=> $fun->check_fun($row[category_use],2,true),
									"category_use"			=> $row[category_use],
									"category"				=> $row[category],
									"top_html"				=> $row[top_html],
									"bottom_html"			=> $row[bottom_html],
							
									"html_edit_use1"		=> $fun->check_fun($row[html_edit_use],1),
									"html_edit_use2"		=> $fun->check_fun($row[html_edit_use],2,true),
								 )
								);
					break;
					//게시판 리스트
					case "board_list":
						list($rs,$total,$totalpage,$j,$page) = $db->select_list_page(BBS_SETUP,$where,$page,999);
						while($row = $db -> fetch_array($rs)){
							$sql = "select count(id) from ".BBS." where code = '$row[code]' and memo = 0";
							$rsc = $db -> query($sql);
							$roc = $db -> fetch_array($rsc);
							$loop[] = array(
											"j"				=> $j,
											"code"			=> $row[code],
											"bbs_name"		=> $row[bbs_name],
											"skin"			=> $row[skin],
											"bbs_type"		=> ($row[bbs_type] == 1) ? "게시판" : "겔러리",
											"bbs_admin"		=> $row[bbs_admin],
											"total_num"		=> number_format($roc[0]),
											"wdate"			=> date("y/m/d", strtotime($row[wdate]))		
											);
							$j--;
						}
						$tpl->assign("row", $loop);						

					break;

					//시간별
					case "math_hour":
						$year  = ($year) ? $year : date("Y");
						$month = ($month) ? $month : date("m");
						$day   = ($day) ? $day : date("d");
						$sql  = "select left(wdate,13),count(id),hour(wdate),ip, wdate from ".MATH." where ";
						$sql .= "year(wdate) = '$year' and month(wdate) = '$month' and ";
						$sql .= "dayofmonth(wdate) = '$day' group by left(wdate,13)";
						$rs  = $db -> query($sql);
						while($row = $db -> fetch_array($rs)) $db_array[$row[2]] = $row[1];
						//년
						for($i = "2005" ; $i <= date("Y") ; $i++) $year_array[$i] = $i;
						$loop_year = $fun -> select($year_array);
						//월
						for($i = 1 ; $i <= 12 ; $i++) $month_array[$i] = $i;
						$loop_month  = $fun -> select($month_array);
						//일
						for($i = 1 ; $i <= date("t", mktime(0,0,0,$month,1,$year)) ; $i++) $day_array[$i] = $i;
						$loop_day  = $fun -> select($day_array);
						//시간자료
						for($i = 0 ; $i <= 23 ; $i++){
							if($db_array[$i]) $array[$i] = $db_array[$i];
							else $array[$i] = 0;
						}
						$gd_url  = "class/grp.class.php?grp_data=Hour@".@implode(",", $array);
						$gd_url .= "@gold@Hour Count Graph@count@Hour";
						$tpl->assign(
										array(
												"year"		=>	$loop_year,
												"month"		=>	$loop_month,
												"day"		=>	$loop_day,
												"gd_url"	=>	$gd_url
											 )
									);
						$sql  = "select left(wdate,13),hour(wdate),ip, wdate, referer from ".MATH." where ";
						$sql .= "year(wdate) = '$year' and month(wdate) = '$month' and ";
						$sql .= "dayofmonth(wdate) = '$day'";
						$rs  = $db -> query($sql);
						$total_count = array_sum($array);
						$tpl->assign(
										array(
												"hour_date"		=>	$year."년 ".$month."월 ".$day."일",
												"total_count"	=>	number_format($total_count)
											 )
									);
						while($row = $db -> fetch_array($rs)){
							$loop[] = array(
											"wdate"			=> $row[3],
											"hour"			=> (strlen($row[1]) == 1) ? "0".$row[1] : $row[1],
											"ip"			=> $row[2],
											"referer"		=> $row[4]
											);
							$j--;
						}
						$tpl->assign("row", $loop);	
					break;

					// 통계
					case "math_day":
						$year  = ($year) ? $year : date("Y");
						$month = ($month) ? $month : date("m");
						$sql  = "select left(wdate,10),count(id),dayofmonth(wdate),ip, wdate from ".MATH." where ";
						$sql .= "year(wdate) = '$year' and month(wdate) = '$month' group by left(wdate,10)";
						$rs  = $db -> query($sql);
						while($row = $db -> fetch_array($rs)) $db_array[$row[2]] = $row[1];
						for($i = "2005" ; $i <= date("Y") ; $i++) $year_array[$i] = $i;
						$loop_year = $fun -> select($year_array);
						for($i = 1 ; $i <= 12 ; $i++) $month_array[$i] = $i;
						$loop_month  = $fun -> select($month_array);
						for($i = 1 ; $i <= date("t", mktime(0,0,0,$month,1,$year)) ; $i++){
							if($db_array[$i]) $array[$i] = $db_array[$i];
							else $array[$i] = 0;
						}
						$gd_url  = "class/grp.class.php?grp_data=Day@".@implode(",", $array)."@gold";
						$gd_url .= "@Day Count Graph@Count@Day";
						$tpl->assign(
										array(
												"year"		=>	$loop_year,
												"month"		=>	$loop_month,
												"gd_url"	=>	$gd_url
											 )
									);

					break;
					// 통계
					case "math_month":
						$year  = ($year) ? $year : date("Y");
						$sql  = "select left(wdate,7),count(id),month(wdate) from ".MATH." where ";
						$sql .= "year(wdate) = '$year' group by left(wdate,7)";
						$rs  = $db -> query($sql);
						while($row = $db -> fetch_array($rs)) $db_array[$row[2]] = $row[1];
						for($i = "2005" ; $i <= date("Y") ; $i++) $year_array[$i] = $i;
						$loop_year = $fun -> select($year_array);
						for($i = 1 ; $i <= 12 ; $i++){
							if($db_array[$i]) $array[$i] = $db_array[$i];
							else $array[$i] = 0;
						}
						$gd_url  = "class/grp.class.php?grp_data=Month@".@implode(",", $array)."@gold";
						$gd_url .= "@Month Count Graph@Count@Month";
						$tpl->assign(
										array(
												"year"		=>	$loop_year,
												"gd_url"	=>	$gd_url
											 )
									);

					break;
					// 접속 주소별 통계
					case "math_referer":
					
						if(!$year) $year = date("Y");
						if(!$month) $month = date("m");
						if(!$day) $day = date("d");

						if(!$eyear) $eyear = date("Y");
						if(!$emonth) $emonth = date("m");
						if(!$eday) $eday = date("d");

						//시작일
						for($i = "2005" ; $i <= date("Y") ; $i++) $year_array[$i] = $i;
						$loop_year = $fun -> select($year_array);
						for($i = 1 ; $i <= 12 ; $i++) $month_array[$i] = $i;
						$loop_month  = $fun -> select($month_array);
						for($i = 1 ; $i <= 31 ; $i++) $day_array[$i] = $i;
						$loop_day  = $fun -> select($day_array);

						//종료일
						for($i = "2005" ; $i <= date("Y") ; $i++) $eyear_array[$i] = $i;
						$loop_eyear = $fun -> select($eyear_array);
						for($i = 1 ; $i <= 12 ; $i++) $emonth_array[$i] = $i;
						$loop_emonth  = $fun -> select($emonth_array);
						for($i = 1 ; $i <= 31 ; $i++) $eday_array[$i] = $i;
						$loop_eday  = $fun -> select($eday_array);


						$startday = strtotime("$year-$month-$day 00:00:00");
						$endday   = strtotime("$eyear-$emonth-$eday 23:59:59");

						$tpl->assign(
										array(
												"year"		=>	$loop_year,
												"month"		=>	$loop_month,
												"day"		=>	$loop_day,
												"eyear"		=>	$loop_eyear,
												"emonth"	=>	$loop_emonth,
												"eday"		=>	$loop_eday,
												"startday"	=>	$startday,
												"endday"	=>	$endday
											 )
									);

						//전체 카운터
						$sql  = "select count(*) from ".MATH." where ";
						$sql .= "unix_timestamp(wdate) between $startday and $endday ";
						$rs   = $db -> query($sql);
						$row  = $db -> fetch_array($rs);
						$total = $row[0];


						$sql  = "select count(id) as count, ";
						$sql .= "replace(substring_index(substring_index(referer,'http://',-1),'/',1),'www.','') ";
						$sql .= "as domain ";
						$sql .= "from ".MATH." where unix_timestamp(wdate) between $startday and $endday ";
						$sql .= "group by domain ";
						$sql .= "order by count desc";
						
						$rs   = $db -> query($sql);
						
						$j = 1;
						while($row = $db -> fetch_array($rs)){
							$percent = round(($row[count]/$total)*100,1);
							$loop[] = array(
												"j"			=>	$j,
												"domain"	=>	($row[domain]) ? $row[domain] : "북마크",
												"count"		=>	$row[count],
												"percent"	=>	$percent
										   );
						$j++;
						}
						$tpl->assign("row", $loop);
	
					break;
					// 접속 주소별 통계
					case "math_referer_read":
						if($domain == "북마크") $domain = "";
						$sql  = "select left(wdate,13),hour(wdate),ip, wdate, referer from ".MATH." where ";
						$sql .= "unix_timestamp(wdate) between $startday and $endday and ";

						$sql .= "replace(substring_index(substring_index(referer,'http://',-1),'/',1),'www.','') ";
						$sql .= " = '$domain' ";
						$rs  = $db -> query($sql);
						$total_count = $db -> num_rows($rs);
						$tpl->assign(
										array(
												"sdate"		=>	date("Y년 m월 d일", $startday),
												"edate"		=>	date("Y년 m월 d일", $endday),
												"total_count"	=>	number_format($total_count)
											 )
									);
						while($row = $db -> fetch_array($rs)){
							$loop[] = array(
											"wdate"			=> $row[3],
											"hour"			=> (strlen($row[1]) == 1) ? "0".$row[1] : $row[1],
											"ip"			=> $row[2],
											"referer"		=> $row[4]
											);
							$j--;
						}
						$tpl->assign("row", $loop);	
					break;
					case "popup_write":	case "popup_update":
						if($mode == "popup_update"){
							$sql = "select * from ".POPUP." where id = '$id'";
							$rs  = $db -> query($sql);
							$row = $db -> fetch_array($rs);
							$msg = "수정";
						}else $msg = "등록";
						$s_hour = ($row[start_date]) ? substr($row[start_date],11,2) : date("H");
						$s_min	= ($row[start_date]) ? substr($row[start_date],14,2) : date("i");					
						$e_hour = ($row[end_date]) ? substr($row[end_date],11,2) : date("H");
						$e_min	= ($row[end_date]) ? substr($row[end_date],14,2) : date("i");
						for($i = 1 ; $i <= 23 ; $i++) $hour_array[$i] = $i;
						$loop_hour  = $fun -> select($hour_array);
						for($i = 1 ; $i <= 60 ; $i++) $min_array[$i] = $i;
						$loop_min  = $fun -> select($min_array);
						$start_date = ($row[start_date]) ? substr($row[start_date],0,10) : date("Y-m-d");
						$end_date = ($row[end_date]) ? substr($row[end_date],0,10) : date("Y-m-d",time()+(86400 * 7));
						$tpl->assign(
									array(
											"id"			=>	$_GET[id],
											"msg"			=>	$msg,
											"subject"		=>	$row[subject],
											"use_1"			=>	$fun -> check_fun($row[use_], "Y", true),
											"use_2"			=>	$fun -> check_fun($row[use_], "V"),
											"height"		=>	$row[height],
											"width"			=>	$row[width],
											"top_"			=>	$row[top_],
											"left_"			=>	$row[left_],
											"scroll1"		=>	$fun -> check_fun($row[scroll], "Y"),
											"scroll2"		=>	$fun -> check_fun($row[scroll], "N", true),
											"start_date"	=>	$start_date,
											"s_hour"		=>	$loop_hour,
											"s_min"			=>	$loop_min,
											"end_date"		=>	$end_date,
											"e_hour"		=>	$loop_hour,
											"e_min"			=>	$loop_min,
											"img_file"		=>  $row[file],
											"today1"		=>	$fun -> check_fun($row[today], "Y", true),
											"today2"		=>	$fun -> check_fun($row[today], "N"),
											"content"		=>	$row[content]
										 )
									);

					break;
					//팝업 목록
					case "popup_list":
						list($rs,$total,$totalpage,$j,$page) = $db->select_list_page(POPUP,$where,$page,999);
						while($row = $db -> fetch_array($rs)){
							$loop[] = array(
											"j"			 => $j,
											"subject"	 => $fun->cutting($row[subject],80),
											"width"		 => $row[width],
											"height"	 => $row[height],
											"use_"		 => $row[use_],
											"id"		 => $row[id],
											"start_date" =>	date("Y/m/d",strtotime($row[start_date])),
											"end_date"	 =>	date("Y/m/d",strtotime($row[end_date]))
											);
							$j--;
						}
						$tpl->assign("row", $loop);	
					break;
				
					
					//비밀번호 변경
					case "passwd":
						$sql  = "select * from ".MEMBER." where level = '".$_COOKIE[_user_level]."' and ";
						$sql .= "userid = '".$_COOKIE[_user_id]."' limit 1";
						$rs   = $db -> query($sql);
						$row  = $db -> fetch_array($rs);
						$tpl->assign(
									array(
											"userid"		=> $row[userid]
										  )
									 );
					break;


					case "orderlist":
						$loop_part   = $fun -> select(
														array(
																"name"		=>	"성명",
																"email"		=>	"이메일",															
																"memo"		=>	"관리자메모"
															 )
													 );
						$tpl -> assign(
										array(
												"part"		=> $loop_part
											 )
									  );
						if($word){
							if($part == "all"){
								$sql_ .= " and (";
								$sql_ .= " name LIKE '%$word%' or ";								
								$sql_ .= " email LIKE '%$word%' or ";						
								$sql_ .= " memo LIKE '%$word%' ";
								$sql_ .= " ) ";
							}else $sql_ .= " and $part LIKE '%$word%' ";
						}

						if($_GET[get_mode]) $sql_ .= " and get_mode='".$_GET[get_mode]."'";
						$where = " where 1 $sql_ order by id desc";
						list($rs,$total,$totalpage,$j,$page) = $db->select_list_page(ORDER,$where,$page,20);
						$search .= "&type=$type&mode=$mode&get_mode=$get_mode";
						$pageing = $fun -> page_fun($totalpage, $total, $page, $search, 20);
						$tpl->assign(array("pageing" => $pageing));
						while($row = $db -> fetch_array($rs)){
  

							$loop[] = array(
											"j"				=> $j,
											"id"			=> $row[id],
											"get_mode"			=> $row[get_mode],
											"company"			=> $row[company],
											"name"			=> $row[name],
											"section"			=> $row[section],
											"duty"			=> $row[duty],
											"tel"			=> $row[tel],
											"htel"			=> $row[htel],
											"email"			=>  $fun->autolink($row[email]),
											"object"			=> $row[object],
											"person_num"			=> $row[person_num],
											"birth"			=> $row[birth],
											"sex"			=> $row[sex],											
											"addr"			=> $row[addr],
											"job"		=> $row[job],
											"content"	=> $row[content],
											"memo"		=> $row[memo],
											"content"		=> $row[content],
											"zip"			=> $row[zip],
											"result"		=> ($row[result] == 1) ? "미처리" : "<font color=red>완료",
											"wdate"			=> date("y/m/d", strtotime($row[wdate]))		
											);
							$j--;
						}
						$tpl->assign("row", $loop);
					break;


					case "orderread":
							$sql = "select * from ".ORDER." where id = '$id'";
							$rs  = $db -> query($sql);
							$row = $db -> fetch_array($rs);
							$tpl->assign(
											array(
													"j"				=> $j,
													"id"			=> $row[id],
													"get_mode"			=> $row[get_mode],
													"company"			=> $row[company],
													"name"			=> $row[name],
													"section"			=> $row[section],
													"duty"			=> $row[duty],
													"tel"			=> $row[tel],
													"htel"			=> $row[htel],
													"email"			=>  $fun->autolink($row[email]),
													"object"			=> $row[object],
													"person_num"			=> $row[person_num],
													"birth"			=> $row[birth],
													"sex"			=> $row[sex],											
													"addr"			=> $row[addr],
													"job"		=> $row[job],
													"content"	=> $row[content],
													"memo"		=> $row[memo],
													"content"		=> $row[content],
													"zip"			=> $row[zip],
													"result"		=> ($row[result] == 1) ? "미처리" : "<font color=red>완료",
													"wdate"			=> date("y/m/d", strtotime($row[wdate]))			
												)
										);
					break;


					case "send_mail":

						$sql = "select * from ".SITE_SETUP;
						$rs  = $db -> query($sql);
						$site_setup = $db -> fetch_array($rs);

						$r_email = "";

						if($_POST){		//개인이메일									
							
							while(@list($k, $v) = each($_POST[chk])){
								if($v) $r_email .= preg_replace("/\|(.*)/smi", "", $v).',';
							}
							$mode_a = "수신선택";
							
						}else{ //전체이메일
							
							$sql = "select * from ".MEMBER." where mailing='Y' order by id asc";
							$rs  = $db -> query($sql);
							while($row = $db -> fetch_array($rs)){
								if($row){
									$r_email .= $row[email].',';
								}							
							}
							$mode_a = "전체";							
							
						}
						$tpl->assign(
											array(													
													"mode_a"		=> $mode_a,
													"r_email"		=> $r_email,
													"email"			=> $site_setup[site_email],
													"name"			=> $site_setup[saup_ceo],
												)
										);	
						
					break;
				}
			//출력
			$tpl->print_("body");
		break;
	}
?>