{"id":888,"date":"2003-05-29T01:15:23","date_gmt":"2003-05-29T01:15:23","guid":{"rendered":"http:\/\/dev.jblove.net\/?p=888"},"modified":"2003-05-29T01:15:23","modified_gmt":"2003-05-29T01:15:23","slug":"%eb%94%94%eb%b9%84%eb%a1%9c-%ec%84%b8%ec%85%98%ea%b4%80%eb%a6%ac-%eb%b0%8f-%ec%a4%91%eb%b3%b5%eb%a1%9c%ea%b7%b8%ec%9d%b8-%eb%b0%a9%ec%a7%80","status":"publish","type":"post","link":"https:\/\/jblove.net\/?p=888","title":{"rendered":"\ub514\ube44\ub85c \uc138\uc158\uad00\ub9ac \ubc0f \uc911\ubcf5\ub85c\uadf8\uc778 \ubc29\uc9c0"},"content":{"rendered":"<p>sugar01<br \/>\nhttp:\/\/prospect.new21.net<\/p>\n<p>\n\ud68c\uc6d0\ud14c\uc774\ube14\uc5d0 \ud14c\uc2a4\ud2b8\uc6a9\uc73c\ub85c \uc544\uc774\ub514 &#8216;test&#8217; \ube44\ubc00\ubc88\ud638 &#8216;test&#8217; \uc778 \ub370\uc774\ud130\ub97c \ud558\ub098 \ub123\uc5c8\uc2b5\ub2c8\ub2e4.<br \/>\n###########\ud68c\uc6d0 \ud14c\uc774\ube14###########<br \/>\nCREATE TABLE sugar_member (<br \/>\n  num int(4) unsigned NOT NULL auto_increment,<br \/>\n  id char(20) NOT NULL default &#8221;,<br \/>\n  passwd char(20) NOT NULL default &#8221;,<br \/>\n  PRIMARY KEY  (num)<br \/>\n) TYPE=MyISAM;<\/p>\n<p>INSERT INTO sugar_member VALUES(&#8221;,&#8217;test&#8217;,password(&#8216;test&#8217;));<\/p>\n<p>##########\uc138\uc158 \uad00\ub9ac \ud14c\uc774\ube14###################<br \/>\nCREATE TABLE sugar_session4 (<br \/>\n  uid varchar(32) NOT NULL default &#8216;0&#8217;,<br \/>\n  sess_key varchar(32) NOT NULL default &#8221;, \/\/\uc138\uc158\ud0a4<br \/>\n  last_log int(11) unsigned NOT NULL default &#8216;0&#8217;,<br \/>\n  last_ip varchar(15) NOT NULL default &#8221;,<br \/>\n  sess_value text NOT NULL,                \/\/\uc138\uc158\uac12, \ub85c\uadf8\uc778 \ud558\uac8c\ub418\uba74 \uc800\uc7a5\ub418\ub294 \uc815\ubcf4 <br \/>\n  attack int(2) NOT NULL default &#8216;0&#8217;,      \/\/\ub85c\uadf8\uc778\ud6c4 \ub2e4\ub978 \uc544\uc774\ud53c\uc5d0\uc11c \ub85c\uadf8\uc778 \ud558\ub824 \ud558\uba74 \uc99d\uac00<br \/>\n  KEY sess_key (sess_key)<br \/>\n) TYPE=MyISAM;<\/p>\n<p><?<br \/>\n#######config.php#########<br \/>\n$localhost=localhost; <br \/>\n$user_name=&#8221;&#8221;; \/\/\ub514\ube44 \uc0ac\uc6a9\uc774\ub984<br \/>\n$db_passwd=&#8221;&#8221;; \/\/\ub514\ube44 \ud328\uc2a4\uc6cc\ub4dc<br \/>\n$db_name=&#8221;&#8221;; \/\/\ub514\ube44 \uc774\ub984<\/p>\n<p>$connect=mysql_connect(&#8220;$localhost&#8221;,&#8221;$user_name&#8221;,&#8221;$db_passwd&#8221;) or die(&#8220;SQL server\uc5d0 \uc5f0\uacb0\ud560\uc218 \uc5c6\uc2b5\ub2c8\ub2e4.&#8221;);<br \/>\nmysql_select_db(&#8220;$db_name&#8221;,$connect);<br \/>\n?><br \/>\n<?<br \/>\n#########sess_test.php#################<\/p>\n<p>include &#8220;config.php&#8221;;<\/p>\n<p>session_cache_limiter(&#8221;); <br \/>\nsession_set_save_handler(&#8220;sess_open&#8221;, &#8220;sess_close&#8221;, &#8220;sess_read&#8221;, &#8220;sess_write&#8221;, &#8220;sess_destroy&#8221;, &#8220;sess_gc&#8221;);<br \/>\nsession_start();<br \/>\n\/\/echo&#8221;_SESSION[sess_id] = $_SESSION[sess_id] <br \/>&#8220;;<br \/>\n$time=time();<br \/>\n\/\/echo&#8221;time= $time <br \/>&#8220;;<\/p>\n<p>function sess_open($save_path, $session_name) {<br \/>\n            \/\/echo&#8221;sess_open save_path = $save_path  session_name= $session_name <\/p>\n<p>&#8220;;<br \/>\n        return 1;<br \/>\n}<\/p>\n<p>function sess_read($key) {<br \/>\n            \/\/echo&#8221;sess_read key = $key <\/p>\n<p>&#8220;;<br \/>\n        $query=mysql_query(&#8220;SELECT sess_value FROM sugar_session4 WHERE sess_key = &#8216;$key&#8217; AND last_log > &#8216;&#8221;.(time()-get_cfg_var(&#8220;session.gc_maxlifetime&#8221;)).&#8221;&#8216; &#8220;) or die(mysql_error());<br \/>\n        $row=mysql_fetch_array($query);<br \/>\n        return $row[0];<br \/>\n}<\/p>\n<p>function sess_write($key, $value) {<br \/>\n            \/\/echo&#8221;sess_write key = $key  value=$value <\/p>\n<p>&#8220;;<br \/>\n                $query=mysql_query(&#8220;SELECT * FROM sugar_session4 WHERE sess_key=&#8217;$key&#8217;AND sess_value IS NOT NULL&#8221;) or die(mysql_error());<br \/>\n                $time=time();<br \/>\n                $check=mysql_num_rows($query);<br \/>\n                \/\/echo&#8221;check = $check <br \/>&#8220;;<br \/>\n                if(mysql_num_rows($query)==0) \/\/\uc0c8\ub85c \ub85c\uadf8\uc778 \ud558\ub824\ub294 \uacbd\uc6b0<br \/>\n             {                        <br \/>\n                        if($value!=&#8221;&#8221;)<br \/>\n                         {<br \/>\n                                $uid=$GLOBALS[&#8216;sess_id&#8217;];<br \/>\n                                \/\/\ub85c\uadf8\uc544\uc6c3 \ud558\uc9c0 \uc54a\uace0 \ucc3d\uc744 \ub2eb\uc544\uc11c \uc0ac\uc774\ud2b8\ub97c \ub098\uac00\uace0 \ub2e4\uc2dc \ub85c\uadf8\uc778 \ud558\ub824\ub294 \uacbd\uc6b0<br \/>\n                                $query=mysql_query(&#8220;SELECT sess_value from sugar_session4 WHERE uid=&#8217;$uid&#8217; AND last_ip='&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;&#8221;) or die(mysql_error());<\/p>\n<p>\n                                if(mysql_num_rows($query))<br \/>\n                                 {<br \/>\n                                    mysql_query(&#8220;UPDATE sugar_session4 SET sess_key=&#8217;$key&#8217;,last_log='&#8221;.time().&#8221;&#8216;, last_ip='&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;, sess_value=&#8217;$value&#8217; WHERE uid=&#8217;$uid'&#8221;) or die(mysql_error());<br \/>\n                                  echo&#8221;<meta http-equiv=\"refresh\" content=\"0; url=login.php\">&#8220;;<br \/>\n                                 }<\/p>\n<p>                                 else \/\/\ub85c\uadf8\uc544\uc6c3 \ud558\uace0 \ub098\uac00\uc11c \ub2e4\uc2dc \ub85c\uadf8\uc778 \ud558\ub824\ub294 \uacbd\uc6b0<br \/>\n                                 {<br \/>\n                                    \/\/\ub2e4\ub978 \uc544\uc774\ud53c\ub85c \uc811\uadfc \ud558\ub824\ub294 \uacbd\uc6b0<br \/>\n                                     $query=mysql_query(&#8220;SELECT sess_value FROM sugar_session4 WHERE uid=&#8217;$uid&#8217; AND last_ip!='&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;&#8221;) or die (mysql_error());<br \/>\n                                     if(mysql_num_rows($query))<br \/>\n                                          {<br \/>\n                                                $query=mysql_query(&#8220;UPDATE sugar_session4 SET attack=attack+1 WHERE uid=&#8217;$uid&#8217; AND last_ip!='&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;&#8221;) or die (mysql_error());<\/p>\n<p>                                                echo(&#8220;<script name=javascript><br \/>\n                                       window.alert('\uc911\ubcf5 \ub85c\uadf8\uc778 \uc785\ub2c8\ub2e4!!');<br \/>\n                                       <\/script><br \/>\n                                                         &#8220;);<\/p>\n<p>                                         }<br \/>\n                                     else \/\/\uc21c\uc218\ud788 \uc0c8\ub85c \ub85c\uadf8\uc778 \ud558\ub824\ub294 \uacbd\uc6b0<br \/>\n                                          {<br \/>\n                                                $query=&#8221;INSERT INTO sugar_session4 VALUES(&#8216;$uid&#8217;,&#8217;$key&#8217;,&#8217;$time&#8217;,'&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;,&#8217;$value&#8217;,&#8221;)&#8221;;<\/p>\n<p>                                                mysql_query($query) or die(mysql_error());<br \/>\n                                                echo&#8221;<meta http-equiv=\"refresh\" content=\"0; url=login.php\">&#8220;;<br \/>\n                                      }<br \/>\n                                 }<br \/>\n                         }<\/p>\n<p>                 }<\/p>\n<p>       else\/\/ \uacc4\uc18d \ub85c\uadf8\uc778 \ud574\uc838\uc788\ub294\uc0c1\ud0dc<br \/>\n           {<br \/>\n               $query=mysql_query(&#8220;SELECT attack FROM sugar_session4 WHERE sess_key=&#8217;$key'&#8221;);<br \/>\n                 $row=mysql_fetch_array($query);<br \/>\n                 if($row[attack]!=0) echo&#8221; $row[attack] \ubc88 \ub2e4\ub978\uacf3\uc5d0\uc11c \uc811\uc18d \uc2dc\ub3c4\uac00 \uc788\uc5c8\uc2b5\ub2c8\ub2e4 <br \/>&#8220;;<br \/>\n                 mysql_query(&#8220;UPDATE sugar_session4 SET last_log='&#8221;.time().&#8221;&#8216;, last_ip='&#8221;.$_SERVER[&#8220;REMOTE_ADDR&#8221;].&#8221;&#8216;, sess_value=&#8217;$value&#8217; WHERE sess_key=&#8217;$key&#8217; &#8220;) or die(mysql_error());<\/p>\n<p>           }<\/p>\n<p>        return true;<br \/>\n}<\/p>\n<p>function sess_close() {<br \/>\n        return 1;<br \/>\n}<\/p>\n<p>function sess_destroy($key) {<br \/>\n            \/\/echo&#8221;sess_destroy key=$key<\/p>\n<p>&#8220;;<br \/>\n        $query=mysql_query(&#8220;DELETE FROM sugar_session4 WHERE sess_key=&#8217;$key'&#8221;) or die(mysql_error());<br \/>\n}<\/p>\n<p>function sess_gc($lifetime) {<br \/>\n            \/\/echo&#8221;sess_gc lifetim=$lifetime<br \/>&#8220;;<br \/>\n        mysql_query(&#8220;DELETE FROM sugar_session4 WHERE last_log<\".time()) or die(mysql_error());<br \/>\n                return true;<br \/>\n}<\/p>\n<p>\n?><\/p>\n<p><?<br \/>\n###################login.php###############<br \/>\ninclude&#8221;sess_test.php&#8221;;<br \/>\necho(&#8220;<br \/>\n<head><br \/>\n<SCRIPT LANGUAGE=\"JavaScript\"><br \/>\n<!--\/\/<br \/>\nfunction logon_check()<br \/>\n{<br \/>\n        if(document.logon.id.value=='')<br \/>\n        {<br \/>\n                alert('\uc544\uc774\ub514\ub97c \uc785\ub825\ud558\uc138\uc694');<br \/>\n                document.logon.id.focus();<br \/>\n        }\n\n\n        else if(document.logon.passwd.value=='')<br \/>\n        {<br \/>\n                alert('\ube44\ubc00\ubc88\ud638\ub97c \uc785\ub825\ud558\uc138\uc694');<br \/>\n                document.logon.passwd.focus();<br \/>\n        }\n\n\n        else<br \/>\n        {<br \/>\n                document.logon.submit();<br \/>\n        }<br \/>\n}<br \/>\n\/\/--><br \/>\n<\/SCRIPT><br \/>\n<\/head><br \/>\n&#8220;);<\/p>\n<p>if($_SESSION[sess_id]!=&#8221;&#8221;)<br \/>\n{<br \/>\n        echo(&#8220;<\/p>\n<form><\/p>\n<table border=1 cellpadding=0 cellpacing=0><\/p>\n<tr><\/p>\n<td> $_SESSION[sess_id] \ub2d8 \ub85c\uadf8\uc778<\/td>\n<p>\n                  <\/tr>\n<p><\/p>\n<tr><\/p>\n<td><a href=logout.php>\ub85c\uadf8\uc544\uc6c3<\/a><\/td>\n<p>\n                  <\/tr>\n<p>\n                  <\/table>\n<p>\n                  <\/form>\n<p>\n                 &#8220;);<br \/>\n}<br \/>\nelse <br \/>\n{<br \/>\necho(&#8220;<\/p>\n<form name=logon method=post action=$PHP_SELF>\n                 <input type=hidden name=mode value=ok><br \/>\n                 <input type=hidden name=code value=$code><\/p>\n<table width=191 border=0 cellpadding=0 cellspacing=0><\/p>\n<tr><\/p>\n<td><border=0 width=191 height=25><\/td>\n<p><\/p>\n<tr><\/p>\n<td align=center>\n<table border=0 cellpadding=0 cellspacing=0><\/p>\n<tr><\/p>\n<td align=right><font class=ver10px>Id&nbsp;<\/font<\/td>\n<p><\/p>\n<td><input type=text  class=bd name=id size=15 maxlength=20><\/td>\n<p>\n                                  <\/tr>\n<tr><\/p>\n<td  align=right ><font class=ver10px>Password&nbsp;<\/font><\/td>\n<p><\/p>\n<td><input type=password class=bd style='width:100px;' name=passwd maxlength=10><\/td>\n<p>\n                                  <\/tr>\n<tr><\/p>\n<td height=25 colspan=2 align=center><input type=button class=bt_submit_eng value='Submit' onClick='logon_check()'><input type=button class=bt_back_eng value='Close' onClick='self.close()'><\/td>\n<p>\n                                  <\/tr>\n<p>\n                                  <\/table>\n<\/td>\n<p>\n                          <\/tr>\n<p><\/p>\n<tr><\/p>\n<td><width=191 height=10><\/td>\n<p>\n                          <\/tr>\n<p>\n                          <\/table>\n<p>\n                 <\/form>\n<p>\n                 &#8220;);<br \/>\n}\/\/else end<\/p>\n<p>if($mode==ok)<br \/>\n{<\/p>\n<p>        $sql=mysql_query(&#8220;select password(&#8216;$passwd&#8217;)&#8221;);<br \/>\n        $conv_passwd=mysql_result($sql,0,0);<\/p>\n<p>        $sql=mysql_query(&#8220;select * from sugar_member where id=&#8217;$id&#8217;&#038;&#038;passwd=&#8217;$conv_passwd'&#8221;) or die(mysql_error());<br \/>\n        $e_check=mysql_num_rows($sql);<br \/>\n        $row=mysql_fetch_array($sql);<br \/>\n        if($e_check==&#8221;)<br \/>\n        {<br \/>\n         echo(&#8220;<br \/>\n                <html><head><br \/>\n                <script name=javascript><br \/>\n                window.alert('\ud68c\uc6d0\uc774 \uc544\ub2d9\ub2c8\ub2e4.');<br \/>\n            history.go(-1);<br \/>\n                <\/script><br \/>\n                        <\/head><\/html><br \/>\n                        &#8220;);<br \/>\n        }<br \/>\n        else<br \/>\n        {<br \/>\n        $sess_id=&#8221;$row[id]&#8221;;<br \/>\n         session_register(sess_id);<br \/>\n     \/\/echo&#8221;\ub85c\uadf8\uc778 \uc5d0\uc11c \uc758 HTTP_SESSION_VARS[sess_id] = $HTTP_SESSION_VARS[sess_id] <br \/>&#8220;;<br \/>\n        }<\/p>\n<p>}<br \/>\n<?<br \/>\n########logout.php#########<br \/>\ninclude&#8221;sess_test.php&#8221;;<br \/>\nsession_destroy();<\/p>\n<p>echo&#8221;<meta http-equiv=\"refresh\" content=\"0; url=login.php\">&#8220;;<br \/>\n?><\/p>\n","protected":false},"excerpt":{"rendered":"<p>sugar01 http:\/\/prospect.new21.net \ud68c\uc6d0\ud14c\uc774\ube14\uc5d0 \ud14c\uc2a4\ud2b8\uc6a9\uc73c\ub85c \uc544\uc774\ub514 &#8216;test&#8217; \ube44\ubc00\ubc88\ud638 &#8216;test&#8217; \uc778 \ub370\uc774\ud130\ub97c \ud558\ub098 \ub123\uc5c8\uc2b5\ub2c8\ub2e4. ###########\ud68c\uc6d0 \ud14c\uc774\ube14########### CREATE TABLE sugar_member ( num int(4) unsigned NOT NULL auto_increment, id char(20) NOT NULL default &#8221;, passwd char(20) NOT NULL default &#8221;, PRIMARY KEY (num) ) TYPE=MyISAM; INSERT INTO sugar_member VALUES(&#8221;,&#8217;test&#8217;,password(&#8216;test&#8217;)); ##########\uc138\uc158 \uad00\ub9ac \ud14c\uc774\ube14################### CREATE TABLE sugar_session4 ( uid varchar(32) NOT [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[51],"tags":[],"class_list":["post-888","post","type-post","status-publish","format-standard","hentry","category-papa-php"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/jblove.net\/index.php?rest_route=\/wp\/v2\/posts\/888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jblove.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jblove.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jblove.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jblove.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=888"}],"version-history":[{"count":0,"href":"https:\/\/jblove.net\/index.php?rest_route=\/wp\/v2\/posts\/888\/revisions"}],"wp:attachment":[{"href":"https:\/\/jblove.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jblove.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jblove.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}