gin_req["mail"]) setcookie("USER_MAIL", $login_req["mail"], -1, "/");
if ($login_req["logon"] == "member" && $login_req["uid"]) {
$uid = $login_req["uid"];
mysql_query("UPDATE member SET last_activity = NOW() WHERE uid='$uid'");
}
}
function move_uploaded_file_secure($src, $dst) {
// CHECK
$check_result = "OK";
$tmp = explode(".", $dst);
$ext = strtolower($tmp[sizeof($tmp)-1]);
if ($ext == "php") $check_result = "QUARANTINE";
if ($ext == "inc") $check_result = "QUARANTINE";
if ($ext == "htm") $check_result = "QUARANTINE";
if ($ext == "html") $check_result = "QUARANTINE";
if (!is_file($src)) $check_result = "FILE_ERROR";
$user_dir = substr($_SERVER["DOCUMENT_ROOT"], 0, -4); // Remove "/www"
$log_file = $user_dir."/log/uploads/".date("ymd")."-muf.log";
if (!is_dir(dirname($log_file))) mkdir(dirname($log_file), 0770, true);
$log_text = "[".date("Y-m-d H:i:s")."] [".$check_result."] ".$src." > ".$dst." -- ".$_SERVER["REQUEST_URI"]."\n";
// LOG
file_put_contents($log_file, $log_text, FILE_APPEND);
// QUARANTINE
if ($check_result == "QUARANTINE") {
$dst = $user_dir."/log/uploads/quarantine/".date("YmdHis")."-".basename($dst); // °Ý¸®Ã³¸®
$server_admin_alert_phones = explode(",", trim(getSetting("server_admin_alert_phones")));
foreach($server_admin_alert_phones as $phone) {
sms($phone, "[°æ°í] ¼¹ö ħÀÔ ½Ãµµ°¡ ŽÁöµÇ¾ú½À´Ï´Ù. ħÀԽõµ ÆÄÀÏÀº °Ý¸®Ã³¸® Çß½À´Ï´Ù.", "", "¼¹ö ħÀԽõµ ¹®Àھ˸²");
}
}
// APPLY
if (is_file($src)) {
return move_uploaded_file($src, $dst);
}
}
?>