<%@page import="kr.co.kihyun.text.html.TagFilter"%> <% /********************************************************************************** 프로그램명 : popup_view.jsp 프로그램설명 : 공지사항 보기 작 성 자 : 강 원 중 작 성 일 : 2004. 06.07 최신변경일 : 2005. 05.11 ***********************************************************************************/ %> <%@ page contentType="text/html; charset=euc-kr"%> <%@ page import="kr.co.kihyun.text.html.ServletUtil"%> <%@ page import="kr.co.kihyun.lang.StringConverter"%> <%@ page import="kr.co.kihyun.moumi.Moumi"%> <%@ page import="kr.co.kihyun.beans.user.HttpSSOLogin"%> <%@ page import="java.net.URLEncoder"%> <%@ page import="kr.co.kihyun.lang.Encoder"%> <%@ page import="kr.co.kihyun.lang.MString" import="kr.co.kihyun.lang.MLong" import="javax.jdo.PersistenceManager" import="javax.jdo.Transaction" import="kr.co.kihyun.beans.entity.util.*" import="kr.co.kihyun.beans.entity.Board"%> <%@ page import="java.util.Map.Entry"%> <%@ page import="java.util.List"%> <%@ include file="/totsys/common/inc/sec/secure.inc.jsp"%> <% PersistenceManager pm = new MPersistenceManager(PMF.get().getPersistenceManager()); Transaction tx = pm.currentTransaction(); try{ /*********** User HttpSSOLogin check ***********/ if(!HttpSSOLogin.isLogin(request)){ //login 성공후 되돌아올 주소 String connURL="opener.location='/totsys/login/login.jsp';"; out.println(ServletUtil.getJavaScript(connURL)); out.println(ServletUtil.getJavaScript("window.close();")); return; } /********** session내의 userId **********/ String usID = HttpSSOLogin.getLoginID(request); String dtID = HttpSSOLogin.getDeptID(request); int sysAuth = HttpSSOLogin.getSysAuth(request); /*********** Parameter values ***********/ int currentPage = 0; String strPage = clearXSS(request.getParameter("strPage"), ""); Long boardID = MLong.parseLong(request.getParameter("boardID"),null); String boardUserID = clearXSS(Encoder.toJava(request.getParameter("boardUserID")),""); /*********** Board View vlaues ***********/ tx.begin(); Board board = pm.getObjectById(Board.class, boardID); String regID = board.getUser(pm) == null ? null : board.getUser(pm).getId(); String boardGroupID = board.getCategory().getId(); String boardTitle = board.getTitle(); String boardContents = StringConverter.toHtmlBr(board.getContents()); boardContents=TagFilter.unconvertedMeta(boardContents); String checkPopup=board.getPopupYn(); String usrFilenames = ""; String svrFilenames = ""; for (Entry> entry : board.getAttachments().entrySet()) { usrFilenames += entry.getKey() + ";"; svrFilenames += entry.getKey() + ";"; } int visit = board.getVisit(); List replies = board.getChildBoards(); board.setVisit(visit+1); pm.makePersistent(board); tx.commit(); String boardType = ""; if("ID_SYSTEM_NOTICE".equals(boardGroupID)){ boardType = Moumi.getMessageBundle().getString("moumi.message.board.notice"); }else if("ID_FAQ".equals(boardGroupID)){ boardType = Moumi.getMessageBundle().getString("moumi.message.board.faq"); }else if("ID_QNA".equals(boardGroupID)){ boardType = Moumi.getMessageBundle().getString("moumi.message.board.qna"); }else if("ID_PDS".equals(boardGroupID)){ boardType = Moumi.getMessageBundle().getString("moumi.message.board.pds"); } /*********** append file name vlaues ***********/ String[] usrFilenameList = usrFilenames.split(";"); String[] svrFilenameList = svrFilenames.split(";"); /****** 본인 유무 처리 ******/ boolean isManager = false; if(usID.equals(regID)){ isManager = true; } session.setAttribute("delTargetURI", "location.href='/totsys/sysadm/board/board_list.jsp?boardGroupID=" + boardGroupID+"&strPage="+strPage+"'"); %> <%@page import="java.util.Set"%> <%@page import="java.util.List"%> <%@page import="java.text.SimpleDateFormat"%> <%=Moumi.getTitle()%> <%@ include file="/totsys/common/inc/buttom/buttom.jsp"%>
<%-- --%>
<%if(sysAuth == Moumi.SYSADM ||(sysAuth == Moumi.SUB_SYSADM && regID.equals(usID)) || (sysAuth == Moumi.TOTPER && regID.equals(usID))){%> <%}%>
<%= Moumi.getMessageBundle().getString("moumi.message.button.boardList") %> <%= Moumi.getMessageBundle().getString("moumi.message.button.boardModify") %> <%= Moumi.getMessageBundle().getString("moumi.message.button.boardDelete") %>
<%-- --%> <%-- --%> <%-- --%> <%-- --%> <%if("ID_QNA".equals(boardGroupID)){%> <% tx.begin(); for(int i=replies.size()-1; i >=0; i--){ %> <%} tx.rollback(); %> <%}%>
팝업공지 checked <% }%>>
제목<%= boardTitle %>
내용 <%= boardContents %>
관련자료 첨부 <% for(int i=0; i < svrFilenameList.length; i++){ %> <% } %>
+<%= Moumi.getMessageBundle().getString("moumi.message.file") %> <%= (i+1) %> :  &boardID=<%=boardID%>" target="new"><%= usrFilenameList[i] %>
<%=replies.get(i).getUser(pm).getUpperDept(pm).getName()%>
       <%=replies.get(i).getUser(pm).getName(pm)%>
<%=replies.get(i).getContents()%> <%if(replies.get(i).getUser(pm).getId().equals(usID) || sysAuth == 9){%> 수정 삭제 <%}%> <%=new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(replies.get(i).getWriteDate())%>
의견  입력
<% }catch(Exception ex){ //38.오류메세지를 통한 정보 노출(getMessage)_CWE-209 : Update by YOUNGJUN,CHO //out.println(ex);//앤개 ex.printStackTrace(); //out.println("

Can't contact servlet runner



Message : "+ex.getMessage()+""); //out.println(""); //================================================ }finally{ if(tx.isActive()) tx.rollback(); pm.close(); } %>