<% /********************************************************************************** 프로그램명 : popup_board_write.jsp 프로그램설명 : 집계문서에관한 공지 글 쓰기 작 성 자 : 강 원 중 작 성 일 : 2004. 06.07 최신변경일 : 2005. 05.11 ***********************************************************************************/ %> <%@ page contentType="text/html; charset=UTF-8" import="kr.co.kihyun.beans.user.HttpSSOLogin" import="kr.co.kihyun.lang.MLong" import="kr.co.kihyun.lang.MInteger" import="kr.co.kihyun.text.html.ServletUtil" import="javax.jdo.PersistenceManager" import="javax.jdo.Transaction" import="kr.co.kihyun.beans.entity.util.*" import="kr.co.kihyun.beans.entity.TotDoc"%> <%@ include file="/totsys/common/inc/sec/secure.inc.jsp"%> <% PersistenceManager pm = new MPersistenceManager(PMF.get().getPersistenceManager()); Transaction tx = pm.currentTransaction(); try{ /*********** User HttpSSOLogin check ***********/ if(!HttpSSOLogin.isLogin(request)){ //login 성공후 되돌아올 주소 String connURL="opener.location='/totsys/login/login.jsp';"; out.println(ServletUtil.getJavaScript(connURL)); out.println(ServletUtil.getJavaScript("window.close();")); return; } /********** session내의 userId **********/ String usID = HttpSSOLogin.getLoginID(request); /****** Parameter ******/ Long docID = MLong.parseLong(request.getParameter("docID"),null); String boardGroupID = clearXSS(request.getParameter("boardGroupID"),""); String strPage = clearXSS(request.getParameter("strPage"),""); String findOption = clearXSS(request.getParameter("findOption"),""); String findWord = clearXSS(request.getParameter("findWord"),""); tx.begin(); /****** Doc list data get ******/ TotDoc totDoc = pm.getObjectById(TotDoc.class, docID); String docName = totDoc.getName(); String regID = totDoc.getUser(pm).getId(); tx.rollback(); /****** 본인 유무 처리 ******/ boolean isManager = false; if(usID.equals(regID)){ isManager = true; } session.setAttribute("writeTargetURI", "opener.location='/totsys/total/doc_view.jsp?docID="+docID+"&strPage="+strPage+"&findOption="+findOption+"&findWord="+findWord+"'"); %> 공지사항-삭제

 

 

 

  [<%= docName %> ]
     제      목

     내      용
     파일첨부
  

 

 

 

<% }catch(Exception ex){ //38.오류메세지를 통한 정보 노출(getMessage)_CWE-209 : Update by YOUNGJUN,CHO ex.printStackTrace(); //out.println(ex);//앤개 //out.println("

Can't contact servlet runner



Message : "+ex.getMessage()+""); //out.println(""); //================================================ }finally{ if(tx.isActive()) tx.rollback(); pm.close(); } %>